last executing test programs: 13m55.36128075s ago: executing program 2 (id=840): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000090a010400000000000000000a0000090900010073797a3100000000080005400000002b080009"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd0", @ANYBLOB=',rootmode=000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13m55.023622331s ago: executing program 2 (id=842): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000101801000000000000000000000000740503ab9c51b122000000000000000000070000040900010073ed"], 0x48}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x500, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000ffffbeda00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 13m54.733265008s ago: executing program 2 (id=843): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = timerfd_create(0x1, 0x80800) syz_clone3(&(0x7f0000000300)={0x42040000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x8}, &(0x7f00000007c0)=""/4096, 0x1000, &(0x7f0000000200)=""/165, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7, {r1}}, 0x58) fcntl$lock(r7, 0x2, &(0x7f0000000380)={0x1, 0x1, 0xc0, 0x9, r8}) 13m53.866457341s ago: executing program 2 (id=848): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x6, 0x4, 0xf0, 0x10, 0x2, 0x2, 0xc}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000000c0)={[{0x3, 0x7, 0x3, 0x2, 0x5, 0x9, 0xff, 0x0, 0x1, 0x4, 0x3, 0x9, 0x9cfc}, {0xfff, 0x6, 0x8, 0x8, 0x7, 0x3, 0x6, 0xd9, 0x18, 0x30, 0x7, 0x7, 0x2}, {0x1, 0x8, 0x7, 0x4, 0x6, 0x6, 0xb4, 0x0, 0x8, 0x3, 0x5, 0x0, 0x10000}], 0x5}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r2, r0, 0x0, 0x558410e9) write(r1, &(0x7f0000000180)="d0d443e06566283ab4eff90dc8ae1b5e272e5261ad4fcb7f86fec0a3dac49e83aabb9923763947d96b016011a937d2ad17f81790c383cf95edf6d3826929f66b8e14a11931561c1ab75d5e2cc3042519b9b85f04c25fde041e4da60a17b8d93c564a9006ce18538efa17954d7b91", 0x6e) 13m53.552433531s ago: executing program 2 (id=851): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) flock(r1, 0x1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7b, 0x2, 0x4, 0x0, 0x40}) syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x104440d, &(0x7f0000000240)=ANY=[@ANYBLOB="796430001f975dca0b6a86e5073183b1a12af4b28caaf2c73ea4cfc7df83b47f6b8d12a9c9f16bd1f2c243841b080000003168d3e230fb6947f8a6f2b216cb2a2598ed5250d5780e8eb3", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',obj_user=]J@@\\&,audit,\x00'], 0x1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000200)=r0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0xe}) 13m53.464798585s ago: executing program 2 (id=852): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x10) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x41982) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0xff8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x45}}) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) r6 = syz_io_uring_setup(0x9ea, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r8 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) (async) r9 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000000)="113433d5401fff3ac6aad74c", 0xc, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r9, r8, r9}, 0x0, 0x0, 0x0) (async, rerun: 64) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)="0ae858cc52c04c06494bbe8cf38c209209df73b0b441e9eb9a8094423595d6eb74b47e0d26ee0f92ac2954637c5eb872a21dd194397a1aabacd9d9f8acb3398670eca85abc113a53a4e19f0fbf43", 0x4e, r9) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) io_uring_enter(r6, 0xdb4, 0x0, 0xb, 0x0, 0x0) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4b}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 13m38.23077967s ago: executing program 32 (id=852): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x10) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x41982) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0xff8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x45}}) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) r6 = syz_io_uring_setup(0x9ea, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r8 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) (async) r9 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000000)="113433d5401fff3ac6aad74c", 0xc, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r9, r8, r9}, 0x0, 0x0, 0x0) (async, rerun: 64) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)="0ae858cc52c04c06494bbe8cf38c209209df73b0b441e9eb9a8094423595d6eb74b47e0d26ee0f92ac2954637c5eb872a21dd194397a1aabacd9d9f8acb3398670eca85abc113a53a4e19f0fbf43", 0x4e, r9) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) io_uring_enter(r6, 0xdb4, 0x0, 0xb, 0x0, 0x0) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4b}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 10.617057322s ago: executing program 1 (id=5813): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x8002, 0x0) read$FUSE(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x50, 0x0, &(0x7f0000000000)=0x600) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendto$unix(r3, &(0x7f0000000440)="88b0352c3bcd442f54bb23c631986a7eb45185750f6619883d7629298bc17718dcf5e89aefad47572eef13d77d89587a75da9cca229d007a3b0cd3545c342c9b9d4d8e4b2df8b164", 0x48, 0x40010, &(0x7f00000005c0)=@file={0x1, './file0/file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x18c801, 0x80) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0xa4}}, 0x0) mkdir(0x0, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000500)="214794478fe7c5ab6b3bc9519e142053aceadbee2de83b34bfcc32d2b35fe8c25d060310e6be585b1f1849172065076e6002cab4a0bf8dbbd60eb3a445c3d8f0f563c2310bfc66b70eaee568b7cdce9ec3e8f48aab41738061371a7ffd2058e56b5a208e3a57b0de4448a026dbfdb5db62b79e7fcdb4ae488d3c652142fb327e2e4966e07993deb41af496b83a077af09ab93ba03fc3a3fc13bb43b147bfdf16bc72", 0xa2}, {&(0x7f0000000300)="b92c000f47ee5e217a980a2151696a6e3bdd38195b9fca810a5b516c308abaa4f4026dd774abdfef02ceacbd6fcd6c5699d586882032d96f78699e705307c0f0b9d0de026ebdadd63efe27534070bca1d55b86599f3ffa8ea121d03af3aea00376a7b0f6bc9fe7b8", 0x68}], 0x2, 0x2, 0x2) ioctl$HIDIOCGRAWPHYS(r8, 0x4004480d, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x5048a3fd, @remote, 0x10001}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000880)="fdd33f64fb9e93c310460bbe537063f270954f0e", 0x14) 8.53696106s ago: executing program 1 (id=5822): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x3) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty=0x60}}}], 0x20}}], 0x1, 0x8000004) 8.126439153s ago: executing program 1 (id=5826): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (rerun: 32) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) (async, rerun: 64) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (rerun: 64) close(r4) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) openat2(r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18) landlock_restrict_self(r5, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) shmctl$IPC_RMID(0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1, @in=@private=0xa010182, 0x4e23, 0x8, 0x4e22, 0x20, 0xa, 0x20, 0x80, 0x3c}, {0x0, 0x5, 0x31, 0x200, 0xb801, 0x2, 0x3, 0x2a}, {0x81, 0x45, 0x3, 0x4}, 0xfffffffe, 0x10, 0x2, 0x0, 0x1, 0x3}, {{@in6=@private0, 0x4d5, 0x2b}, 0x2, @in6=@empty, 0x3505, 0x4, 0x520f297193e84447, 0x2, 0x8d1, 0x73b4, 0x417c5be3}}, 0xe8) 7.872664781s ago: executing program 5 (id=5828): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00039600000096036a81e48ff7763c0dccd8f7b9c83bbce586cc0ee4594d30815429864315567a75717736305967a308c9c2d94f33cb56e3c9fa16480c065b171269c05fdab99abf9497f128b4f7a8bd0852602e6813d38f6928a13114cc597387505806d9d5218039f442da781011153bea77fee79d0485317db009c96abd2b92eccbfd497d68f20b34691e112ef88ce4e191c09977712818a0d8fa7d18303900"], 0x0, 0x0, 0x0}, 0x0) 7.269056377s ago: executing program 1 (id=5831): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x8002, 0x0) read$FUSE(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x50, 0x0, &(0x7f0000000000)=0x600) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendto$unix(r3, &(0x7f0000000440)="88b0352c3bcd442f54bb23c631986a7eb45185750f6619883d7629298bc17718dcf5e89aefad47572eef13d77d89587a75da9cca229d007a3b0cd3545c342c9b9d4d8e4b2df8b164", 0x48, 0x40010, &(0x7f00000005c0)=@file={0x1, './file0/file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x18c801, 0x80) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0xa4}}, 0x0) mkdir(0x0, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000500)="214794478fe7c5ab6b3bc9519e142053aceadbee2de83b34bfcc32d2b35fe8c25d060310e6be585b1f1849172065076e6002cab4a0bf8dbbd60eb3a445c3d8f0f563c2310bfc66b70eaee568b7cdce9ec3e8f48aab41738061371a7ffd2058e56b5a208e3a57b0de4448a026dbfdb5db62b79e7fcdb4ae488d3c652142fb327e2e4966e07993deb41af496b83a077af09ab93ba03fc3a3fc13bb43b147bfdf16bc72", 0xa2}, {&(0x7f0000000300)="b92c000f47ee5e217a980a2151696a6e3bdd38195b9fca810a5b516c308abaa4f4026dd774abdfef02ceacbd6fcd6c5699d586882032d96f78699e705307c0f0b9d0de026ebdadd63efe27534070bca1d55b86599f3ffa8ea121d03af3aea00376a7b0f6bc9fe7b8", 0x68}], 0x2, 0x2, 0x2) ioctl$HIDIOCGRAWPHYS(r8, 0x4004480d, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x5048a3fd, @remote, 0x10001}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000880)="fdd33f64fb9e93c310460bbe537063f270954f0e", 0x14) 7.134338992s ago: executing program 0 (id=5834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000004d00)={0x1, &(0x7f0000002140)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000004d40)={r3, 0x3}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async, rerun: 64) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x10e29d924c95358a) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_usb_connect(0x0, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103", @ANYRES16=r4, @ANYRES16=r0], 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000047c0)=0x0) (rerun: 32) sendmmsg$sock(r7, &(0x7f0000004a80)=[{{&(0x7f0000000180)=@can={0x1d, r10}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)="f2d3d572485f232309d4741dec9a45be0bda4b859c3bb4152922bf2c328495beb8e5836d20f61e1b793ab4fba31dbd61534c631b17a04e83fde2c822b65f460ce116ec3e15c47b5ef47d6961d4ea4f7b4c02e902e7735a103f915f2e946ac44cf9126f5ade4b49c2e96ef30cf3f3c073f30b9f1c", 0x74}, {&(0x7f0000000280)="05fedaa4c66fc6692201f91279b9", 0xe}, {&(0x7f00000002c0)="222d0ed8b42d7d7fdf2d00dbee665aa1576e5270acc6449c75c4450fb72c084a900eaf96c2015dea761eee8725e6aa4b4c1f97787c59bef034253b350fc29cddc9f2daf1ee949b0b0697c0584a55b97ed9071bb9250bae8f7b1ea083395fa36ed191a4308355cd184b74ec0714db1322c514e7cec53961232ee486e575171482347b4cc73110ea4145e5d6c4599c1e0f4fb64d89d7ac815fc28db64094e4549aa289ad0f508d2efc8fb37c277ebe1b6e7fe5346fbeddfdf785b1da3201b8e7c4be4b5f082a4118f29a33188f3030a5fdb0fa91a56d6f80", 0xd7}, {&(0x7f00000003c0)="72b388433cf5dd565ef4dd1a33cf8e3c61e44fbebeb948c084efb5c17c4509b7ae", 0x21}, {&(0x7f0000000400)="4b4fb05f", 0x4}], 0x5}}, {{&(0x7f00000004c0)=@rc={0x1f, @any, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000540)="f1b681989cf4edab43f334798d804480496c7c20dea3a61feb0c830b7c63cf66cabd9339cdcaa27092960cc4dc0f0574c290c5e49106f8b900ac5de2402abb460bf497f6d415795913ae14fc61b0666583820dd4fa9fdf7bf6248c0635390242f85a42645de68e0e4253ca6393d3c8690983c1ab34cd4f9b6f2c2203b913a67c639fef263f3cfaf9a490240c7b744e9111e904862bcfbd6b4e56c6e0ac6307ae294248b4f6cd6b378c12e024e654dab93f2969094faa7b4cdd8251fac9b0cd6062b07bb60bc670a661ef5354afd124", 0xcf}, {&(0x7f0000000640)="b32d8cc503a60eee3d5865189d83917872d8ecb511aa82db6ed937f4fdbb270c7222cf926cd3c54aa08849327882193010e2cae69eeea63d055753e56d87a4", 0x3f}, {&(0x7f0000000680)="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", 0xfd}, {&(0x7f0000000780)="7dfefe", 0x3}, {&(0x7f00000007c0)="e302084d7713f5135cf1b505119278d7f343210f7dd4502ee800565752f850bbf40f8eb66e46911a3bc310e587131174f0f4c222198396ba72c999961d92fb6c90c9382b3c2a4a7cd10f0cc3ad59497bf29636984f4c438e6aa54ef0ded0fbb62da93966a9b356983485f77cec67ac41edd924b6282ed0ac48d3b8d81309300814092a87f2f98c02ee0f10a730100158f6ab534de7138ac4f29133e1c5666530b42f6fb480009373e26e478d7afcc716cbb9d6b164452c4025bf5a86cfa18ce4f850e6d6c160348199dbfaf6ea41c5240b88d8f2f73197", 0xd7}, {&(0x7f00000008c0)="e2ad85ca9a01d3ef3b039defef1bd39e3cd3d7bd4b0964dd3033d66996e40e591523cd4a212678fb1513f6f432271153c9eda4601c732c92d42c66f553a840e8b7b8ac2080b62f585cbf920e4dc306d4b66801d5d3be952c048b719652043c0a557cb94d5db2fc3a273ba433b4a79c3caf3785c3cf00c3e3aea5b2e105507ab6aeebb3411097bfabb5170b64007457859761f1db0652fb239390420372d49f625f613b5c0c5053b090d8820cb7ca942e5fd14a873b923c1976631bed32ff1ac51126fc778a0a0e4a7a5624f95e516f3c5018d0f88892074b72574d84fb4ba0bde91ca3af25c42b7b6d41f24b", 0xec}, {&(0x7f00000009c0)="0519630b7bd355e5c4fcd46e2c586f7dc6b2f7492e3b0fc6f10b68faae4e2f88b33653ee29789437862d443cce6e007cd209f6472325720c4ed86cdc55e22171468d46838e3fb8f9a84012a88867cde50c436622a35e2ad7d0f9f3db562014bb300233fde613c38e2a48226b652cf4326e74e7a22b15cb9bee492df9ec9c5c6ee58bc21b8ecb8e1742cfb9bc518efcaa193bae65a49bb303cc3125b9a7f461422fbcbf7d2c1803dbe1ba32eb5b92e875aedce9594296fb628ad902d6d31dad97af47e7754cd0fc4515d3aa5b18c629942dc57c6446f3cc5b7444b38e666a030e2689bf8046f37da145e3caa26888c9f7bd2c", 0xf2}], 0x7, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0x9f11}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x60}}, {{&(0x7f0000000bc0)=@l2={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c40)="7340c0bc94fcba535a2dc4a63aad44cf42506ec46084f30e39f02be2003db1099507e0cccd5de810733808e07e0173dc0a00a8df032ea7e8c869b3afc2f025724ad2019edd87fe98e8e7b2ca2ee5115b81ff936f414ba5ee347aa8cc211f978fd0aab68408580c3db4448a2c55c6adee789f507407df0e8118c745d7f9981b0c4f344af9e8", 0x85}, {&(0x7f0000000d00)="e3485c37a04d40381f99bd2b17debf2d012c2866164b9829d75ab8ec2c0135d2ffcc376c5078dd10c0636643654a403347b7af0a1af69593b7e4b9bc113d0090ddb229575cee2ea3dddf4e8e1e1e0af01eaad9ced1f31f7e77bc9131fa74328fa043c22e28b4a2268e8b20a27c28b4a8cec001d57368dcfffa490d8fb56a5b9356957c357063ecdad6e37c11d565f443e6627836fd88313f1be30d58e0033319d3656c9924f3885978870dfa2fd8d8bb6658fc05b5ed2ecc4c87c65ad74d5ce2f88e5bbe17bd9f73a1d38538f1cbb1772c1f6de00e6ab4805cfed29c66896fca6040c98138fd7479b142f144ca8ce74cf5aeedca3ffe4e15bc5eac94da", 0xfd}, {&(0x7f0000000e00)="acef973ecad4ee3c210b644c2de54ef4c17273a45a0cb26d2d51073113b909d4f89c1a71940f373485463f43ae488f0161160f07250dc96b0c6b7da1f2caefdce74a83e12fd49d89f5f913757b8f6a1993b894e489474ac08c528e2b787860a0ec8034b3d1a8c73d2b0f6bd918", 0x6d}, {&(0x7f0000000e80)="8ce6", 0x2}], 0x4, &(0x7f0000000f00)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}], 0x30}}, {{&(0x7f0000000f40)=@llc={0x1a, 0x18, 0x6, 0x0, 0x4, 0x7f, @local}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="1a468348ab057f69b4f640e0ff57168327d2aafad8a26d92477dcdc643d8e1953f55cce5a1c838ff4886498aa44962c749c180cff168d812595592b20263c9f9f44059d8ea80e77b780fa1e15f71431be1", 0x51}, {&(0x7f0000002040)="c7b26165bcd8e6cea452bcf58327596b8e96128b443ff8752d09c7f7155a277cdce93507947863dba5685efe3948a0ac1b30dfec5fc964336149a87a2ba71c54a22ee3e099d45cd797583a539cd3733154c06d888346e7961bccc82b6582a0b4f2eb4eab3d9776ccedf817bf0207e1ba99b18a20f51f271a4435528d419cace4af7961abf55c95e895ce71131c1466b37b88753308d4d690b1a2adc2cd8e34aea70453b166d6e9d820ab5d2dad4c28ef6b", 0xb1}], 0x3, &(0x7f0000002140)}}, {{&(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @remote}, 0x3, 0x0, 0x1, 0x2}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002200)="53f48f63004d81220a3a64efee653349b3399fcadbe7f340e80e2fc5f722c6ba3d1410", 0x23}, {&(0x7f0000002240)="e435d8ab601d6d932ee738b2124e1c798fc55a6c71ae0af5979f29e3b53c677779503471a30740598607c57cce915ed31c7ee67697caf03b0d6817c5f9", 0x3d}, {&(0x7f0000002280)="8bdb2068869b801c5110db727411b353ccdc69a02d2ab029cf5c073c57fa54592652ccb5c4de3266040892d927519c59dd6b028f87f47ef1d804a2db82b013e7c6f45dd28177b74b741cfba061bdaac0b0b0f88f8268768844dafba509d6b7adf4aa2f85c7cfae2670b62827085fec5c49cb518048f6b3ff8464e1ded28c19a8260573e4813eb83370c4609b853bd09ca1736b6f6eabbcc27b", 0x99}, {&(0x7f0000002340)="a758e0c0196d74ac835b8fe0b544e9d3d142f05cf76c42dacf04fd0b05c179c104f1e5216a3becee8e997aed63a7b9942a93f3d4e7df0d7b18f365eb60f42a1194a78e7246746722a471f7913f224472457d8529f749419d49b66096eb38092946c8859f2df468665d1242ffdcefc78809151252683da2", 0x77}, {&(0x7f00000023c0)="58580320b52d2f6994dbac386affb3b86ff021458a11044f10ae81a32fb5ebcb72abc9e0adfa38258ae5fa8a86336f735347560b66eb84fddcbb041a978bb562118ba84bb353dbb4597d34e104b8fd0aecbd6fdbf5c86e353c394ea89c1ad3730d459c3da3203fc761f33d0465020b68ebd2269fa8173060ceb6540bb4ec452c3314c858592f0c9958e50255eef3e4a1b490990bec23246a256ef5c715780035c166c98d649531feef3d84e7d8e0c8785aefb0303a3120a12c0b537b0c848d03dd9cf5b9f3bf1661f9f87c5893ce5057b11f1d9e2a39ba4d98174d9e995b21cf6f4fb59217d3d646ca074b02", 0xec}], 0x5}}, {{&(0x7f0000002540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3, 0x3}}, 0x80, &(0x7f00000038c0)=[{&(0x7f00000025c0)="f0377f", 0x3}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f0000003600)="35c32bfd7c7dbff1b90298dababb2a975e40541a663c9cf74454d524fef202423a287dee1f683c13d7131e9ea5ca0a024a22eec79d36b0f2212f2b3fa329a7b522815da2cd62c7349476b3e85626bf9704bd04072496675699d3b698fb0c06691bbf744b4434207af675f6dfb5ad277b6ca35e7870539582c3db9711a9c5e04f07109dc54fc1a4ff8664f4ce5206dfddf7c5ecca4f964d7b641e8661fdaabea6180548276a8db131942e11ca0537c6c2e573da8f273673e00892fcbd2bbd3933acd6e64aca6acc8994638fb650", 0xcd}, {&(0x7f0000003700)="e259c36d6f14612225f1b1c781c34a3c6c84ab57a991589cbe9ede56f5b7d4102fe4354ac3d853c6281a9a581790935634dd5d0bdcbf35f0f61335f3795cd71647b4ab6e594dc1c327255b5720875114536f5f4c2814b66884593e0f1df63eebbce6dc16dadb157aaab453fe0c6fd8360045ce467795792047ac2aa618bde5c54ef6ec8d37a819d21b24db649961e13a7ab22f9c7a2d531d6db1ebbb16561aa1ca077a56f702b2b9f70aee8196dd0261eff8ae4dc05d951f8c3fe814d47a8de81a25d9dce326e704b50e15ff7f0ccaec5973d40db1ebf8e89ff502c8b12ef505e4b62bb447a729b4d489458513db2f7b750405fbad463b1f", 0xf8}, {&(0x7f0000003800)="9f8ab8ae65aff0b83ea35bbbb592745e99183a031e1cfa75ea61f62e896e649c397a143c939435681bbf02f9733678584dc8931354e2f17441a9119a9799af808c8a32ed094c963e7660e92a4f5bc69fde8f8334790102abd36835ca0046ef7c01852f350536fa98d75f440ef8e8828879f19d4a1c13872159808260a4d2518acaac7b426ff9996a75c36674dca51aaee0da1c8a1b8979f4690bf7", 0x9b}], 0x5, &(0x7f0000003940)=[@txtime={{0x18, 0x1, 0x3d, 0xd}}], 0x18}}, {{&(0x7f0000003980)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x2, 0x1, 0x3, {0xa, 0x4e21, 0x9, @mcast1, 0xd}}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003a00)="aa5e7af9a4184292bb568dfdd4b89711c458026fe96822202acb68fa323a579b1fd47c764e43c8fefa693e45646b07b6764cb60800475b421a8743b09ff718fbe309c5c580af7292a7f5c699e439ba5599dc5dd2a871338ea148435d858e56f8c7bc819b781cf1a32a956dac49c46599df32e108e02d72beb3eb7cefebae7c17d2c56f1ae7ca58f0f1f8b6fec4d06ca189e2514169b8e1cc97c7d87d30c5ae7a0049d2e431d34988be6caaa25b40d1774d56a44635f8566befda0d283cb133d2d034e84eb6ccbac1f8300b201d71", 0xce}, {&(0x7f0000003b00)="db1cf5aa8f80a9f0b052f3e0ec04553ba75ecf75d4aec13d2014b50424d7e092522436e1fd919863795d974923417da65606004f587c77a056cd91cd07791e81d9faf526f736af43a711a453ef5a62183faff9729b21192b194cffd8349c4693ce223cd3e462543ee37d12bff15322dc4f29992fe84c11512f87c2bd69e4716eb81776b179971188a9bd78c8d93e9f0bc491a47ad2250817e7cd5639b40acbfcccb72ee1b33bc4d0c534f864f82914", 0xaf}, {&(0x7f0000003bc0)="84649ce3053311849529efcc991148afd1101553c6548e323113016301d6f2fd1043622b1845ef15a111431a906c748a7bf5cc6be2383ef935d4484a1e0d8bcd05305f47b2328fb89cac712a34d57b07518381cd01b17532914f5377104647b27c39b888682c792944912b0818dc5c00de", 0x71}, {&(0x7f0000003c40)="8112c8eac1314794d079fcc8e79d56d936b2125937b3d43ecbf69bbf11f7e92b522b9feded55c647f4ee4e6fd30d4a8fa8f21991bfbdeb4424aa0dd96f2e8925ee30d4ad98a1b8812025531aa6ad249bb10bbd6fbb8eeea1bd9aa4f668438a64c77a499bad0261388ecfe9b1bb8ff30b536716a7923060ea03", 0x79}, {&(0x7f0000003cc0)="7b0c9cf34fd37fe1009190502a9f79430671aab1362d0e0a99636baf9f6141a072cbc0dffd8d77c2238c42ebb0a2d70e308082a8", 0x34}, {&(0x7f0000003d00)="27166ace57fddd33c4a68177f1cd60894c9a30673ce14ced0f0297", 0x1b}, {&(0x7f0000003d40)="78a5ea43f93ae22951ee93ae32a31efa9eae7ea44b2888fdf94495ef1bdc72bff96874f761bcf400f298891c341b851f3005f65a0a3fa50861af4031b29b5e37edbd6b460202bee1271e43fde0f4c2c911bf3a96e8e6a70e00dfe976ddb2ab238337c00a5f2e12f6cf0a4319638df48059450d71abc1407fcc09dc4f44dd4a630e448ab2bd78991373498afca33fbcff2b6954b8de", 0x95}], 0x7, &(0x7f0000003e80)=[@txtime={{0x18, 0x1, 0x3d, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xd1e}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xe2}}], 0x78}}, {{&(0x7f0000003f00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004140)=[{&(0x7f0000003f80)="e4f8c1b516ead4feef19ab21c98bb78e8bef8bdbd05a17d1312d143a7f8d70b35a68ba4ebfa9189430a57993f0efa96d63c26fd83f79a77f08b42ddf854f3a3238ae031cf1b6d3ab405bac9d4f3b234f6dc1c273f74b16a8520c2243a89417c19a45a915a6056fa3c64d2b9987f8c5bdcbf2f0a9cc7f6033cb0f45a6089d24d0127dec2a36fd1d7d9676e6f3408e4c21cc6cf523735d28a7f459ca5ce607131b7c8a07306df8abb35d99b5c80f5dd63e593e82877dd2ebf520f982899f9cb4da1ddbcce82e25bd5e5d2bf906bbf9514913103b3128537d", 0xd7}, {&(0x7f0000004080)="85a0078d1d9b62e2d3b29c30ec132da50b", 0x11}, {&(0x7f00000040c0)="fc6f6e09d79eeb22436e95688c3877e5c5af6e101c1736303c1ce6f316b82073b64efc381367633b85850aac8866", 0x2e}, {&(0x7f0000004100)="742830e6f31f5abede4b7ac8c13ce1c6ff83431975ddb3b46bfc464c0cc350daac6571f7eae4db6cf7538896", 0x2c}], 0x4, &(0x7f0000004180)=[@mark={{0x14, 0x1, 0x24, 0x10000}}], 0x18}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000041c0)="4601baebc3b1ae62353eb72b1435c9ce46d0ea7fc7647153d99528ad6a5fe1754104564fc39bffb7962b44702d93545be0d66fd9051cff8defc11d6db3f53b6129ed7a717572ba00a356167b2245a2d86fa70f8f1015c01ff74c496a6aacc50dac2acc52d7", 0x65}, {&(0x7f0000004240)="9ebc98570b2626f0dd93df42bd3ccc1cfe9bc983f54b1a963f08bdb83371315339111d1547872e4c1b89ee342c9b42cc4a8f4fdb1096646516955f41f33f794cf0017817c3c8db75fde43926457b77ed6b5b137a9f2b2b7dc976980ccac246c2100ba2f784b07401414580237488c9d52cb5df5cc3fd93553176b76180664e22f129a35603667501468d4e13dcee0d799e0213918b60720750639fed835d936708f4629a572284702fd1b84977b33c89328f55895c414a034ed4419eda2f1ebf1383adbdde10d9", 0xc7}, {&(0x7f0000004340)="adc4b3850ad7f610d3c479e1c134e12f11a212b4201b7fa594c8ae0fa2d9b16510cade37342df7ef6cbfcd2f68e68103be", 0x31}, {&(0x7f0000004380)="bed6c6fcbbec31b7d85e95a5f0891ec9219b941e1ccc231a6bccf87ab7af543a28f652fcb947196c320ed6ce54de849f6654c69639c409a1518a33229d09b1b6a37239423b0239a94b2d74746b9e9b31c200cac2ed", 0x55}, {&(0x7f0000004400)="4a64159a9814442147601b901871d7cb243138c2c8e220dafe77eb6389186696351509ce621c86575c7b725da1f2896808c8855f7327cf8a3eec0e146d12eb6cf3ad792c53fd81ed0a24afce3f2f777f762b27c419eeeabb71fbcb4379e7a504aaeb20e7fe2d71a89930a88d4e34d4d60a0c3f2f9a40221d49949dc63819b9255ce538b60b5a2a247cf5bcd17dca170178efa5f7cf7574c4a52aa91a0d9ea1fd74e8db6c50d47b8d9a6a6caf1a80f597feaeb76b8386349ba9986beeaa", 0xbd}, {&(0x7f00000044c0)="2d1963ebf5b3241d80b8c7d88e4a6077764ca3", 0x13}, {&(0x7f0000004500)="cc53c818b86f696c3d55ce5bfb5140ca513f9f09aadd125c0aac79c03142b2ad1e72d69bbe82aca5affeb6f85741c642cf8df960bc631af8945ead28f8f4dc5650103d46fbe5130dbcf2626439f67bfb53512e37890978d1a094e2519ff7038eb8c823a60bc239b189eecd1f5ee4a1666648d72eee872b31dac7e2f092b3539979f9da7680c248de5aa3fc3fa2c0d0e4b0307e81066e3bfe981905ec30a10b72b63b7ec6e588e91232672b3b83f7911ba770403bbd411c3c802e26a373", 0xbd}, {&(0x7f00000045c0)="49389d1bf7cf63082a8a09c85245e552d3082cad1e0bb565c0256da4ba93b5c887b816ccf9c23876c23f9a4c83f80a5db6525bbc1b19ac89362588924a11b0a8392ff577c89a9c082c21ab577bb40b6771ec6f47bd4d37177bdf2f7fc10c1c1e02866d97f9179ce08c7293fac4f013dc03dd489c977a6fde5d875d4c9d48cae50cf1298d7fd92f3d12002ba6a2b0a3309179079042b42d2d7aef0039328ed5009abaa6f4cec3cd8272f11f16733c01b5455b3b5ce846c4725bd51b4293ca823d982848a1f1dbf663ee252bf78b2bc797bac159f606983320aa7fd435026aa3f0beafa76ae59086a1", 0xe8}, {&(0x7f00000046c0)="0ebb93bd92ca12b6f023877b737b3a30b19bf61e60a5e55d4e4f2b5408a873dca0d0c7854bd5545d4ce936ffdb87a1", 0x2f}], 0x9}}, {{&(0x7f0000004800)=@nfc_llcp={0x27, r11, 0xffffffffffffffff, 0x3, 0x81, 0x4, "82543365ae930ac148566bdaccb625b2494665b30aa411514f4a2a802b17171962cbebd914f0c80aeb12e098ab9cf0d947139791778a214a6648774877ac75", 0x9}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004880)="aaf1650e238fb5884cce0ff76e6f845991c0ffab216a82484afb8b7259263f3ac450d2e020d82febb2515826e920271bf6f9df95ec747012cd73835a0d52ca918905050cd38ac19c4d24eb678118a8f80755db1aa6f0130ce30e2b7e65f642ece631735d612736771fce06bf22755aedb8c2b25c390461495a8e953d5d85a97c144bd57b5c2ecf8a646e532360", 0x8d}, {&(0x7f0000004940)="cadd0f3215597e84e157f15d50e4008dc60a652c978b746f57412f972b7762eee7ce48445a29747909cfd10d39e19dbb3ba43a9f90b494d5377e48123eb4126ad11d82ac4e903d136c6396359dfe8858c536251730acfe8295829ea0da6751c269e99c7f8a5ad112d7a44371a62d9bd36991cd37cbd7df791decd1e83b351ef705738b02164fb161e0c8831b5edf5cf3a14f0e37c39d49b2c70b07a7915bacadd1bd686fc0ac4bc2e677426c02edfe", 0xaf}], 0x2, &(0x7f0000004a40)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x30}}], 0xa, 0x20000010) 6.98000866s ago: executing program 0 (id=5835): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x7, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x2}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20044454) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfe33, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 6.827782763s ago: executing program 0 (id=5836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd3b07208e06c5307ec2cb2e947000fbdbdf2505000000140001800d000100"], 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) fcntl$dupfd(r4, 0x0, r3) r6 = fsopen(&(0x7f0000000240)='proc\x00', 0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'wrr\x00', 0x9, 0x4, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x1) fchdir(r8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r7, 0x5, 0x1, 0xfffffff0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r11], 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="1d00000026000000", @ANYRES32=r8, @ANYBLOB="bb5a66d124084432b3864f74a8", @ANYRES32=r11, @ANYRES64=r10], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x0, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$tun(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="6f38b17700102100ff010000000000000000000401fc02000000000000000000000000115a6a8f00004e224e2104619078e86de17e000000"], 0x38) 6.387967172s ago: executing program 0 (id=5838): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0xcf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001880)={0x6, 0x1, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001480)=""/210, 0xd2}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000001580)=""/68, 0x44}, {&(0x7f0000001600)=""/112, 0x70}, {&(0x7f0000001680)=""/125, 0x7d}, {&(0x7f0000001700)=""/153, 0x99}], &(0x7f0000001840)=[0x0, 0x1, 0x6, 0x7]}, 0x20) timer_create(0x4, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0xb, 0x0) r2 = syz_usb_connect(0x3, 0x3f, &(0x7f0000001b00)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) preadv(r0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/199, 0xc7}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000180)=""/128, 0x80}, {&(0x7f0000006280)=""/4096, 0x1000}], 0x4, 0x5, 0x80000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="201700001000010700000000000000000a0000000c0002000000003032313100"], 0x20}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r6, 0x40099d}}, 0x48) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) timer_create(0x4, &(0x7f0000000300)={0x0, 0x2f, 0x2, @thr={&(0x7f0000004280)="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", &(0x7f0000000200)="c7d9af1d3e50d1e4b8fd40731a62886db82c0c3f1de7801fcc62102bd926b565244a405a36c3c1e1b4d61c64097feb186339baa6dc83b6d2b9d0482580898e94e72f6c059f0e59fee00d3e64c61cab0e44fd650e8c8c739961fb54df97605e2d9fe4cb04ff4ee8399cca16665fecf3ec4937d601d2bff7241f5a65a1d29b5513aa5fa54049265708bd433ad45c8c73b72a32f73ee9ab7a66c22a016218ff5913183a2d4f769c3993881fbde13dfbbbebcea87151184f577aa17ac7f010483ab6aa46e726ac8164956f87a97cfec479ce59ac1ee7207809f861c27965967d06399cbdd0a19065773f45da7cf038b7d4"}}, &(0x7f0000000340)=0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0xffffffffdf002fff, 0x8) timer_gettime(r7, &(0x7f0000000380)) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0xfffffffffffffec2, &(0x7f0000000000)=[{&(0x7f00000018c0)=""/200, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x2) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000100)=0x2, 0x2fffffe) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480), 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2500, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 6.234639997s ago: executing program 5 (id=5840): unshare(0x20000400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002e00)=[{{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000600)=""/232, 0xe8}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000340)}, {&(0x7f0000000480)=""/40, 0x28}, {&(0x7f00000004c0)=""/35, 0x23}, {&(0x7f0000000700)=""/154, 0x9a}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x8, &(0x7f0000001840)=""/232, 0xe8}, 0xd}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001940)=""/237, 0xed}, {&(0x7f0000001a40)=""/251, 0xfb}], 0x2, &(0x7f0000001b80)=""/136, 0x88}, 0x8}, {{&(0x7f0000001c40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001cc0)=""/117, 0x75}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x2, &(0x7f0000002d80)=""/78, 0x4e}, 0x8609}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x20000000202, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000200), 0x0, 0x80800, 0x0, 0xffffffffffffffff}) keyctl$dh_compute(0x17, &(0x7f0000000380)={r4}, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x20003137, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0x4, &(0x7f0000003180)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000200)="2965ceda6ae2afa67f04889347b31c536174578f44088649b4ee25baf7628645826f317a75f130543b3962ee7f0099eece235c41", 0x34, 0x4, 0x0, 0x3}, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x8, 0xeb5, r7, &(0x7f0000002ec0)="3658b25d66bbf157ca7a70e639adcb", 0xf, 0x1, 0x0, 0x3, r6}, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000002f40)="31ffe8a3df41ea85d003587594b528f09f4c833cac28af626caf5b261f6ce3eb478b2b9a5dd8a3df6a568af4ca13643b94094f1dc6fa1022e8b5513917c88a65c852ee313cdc59919df3a9e557d66c31eee25054bfba20dacc58abda48694dbabb22c955ec52be5c079400419a8dd9760709fd5ef05f5d12f4e5f9dd805f8b1bd0648ca6e8f8e211d65a2899891b6ab390b3429e4af145ed5c0a0b931292", 0x9e, 0x3, 0x0, 0x2, r6}, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x1ff, r1, &(0x7f0000003040)="e978a48292f54c90a0e69b2e699d71b032eeb99b3d2da43672fdecf581df3d84c380b474993a81b7e1c7fb82d00cb01dc0a314b9c04b283b08b8a9871bb192030a098d6bdeeee6c117a4a39c681e56e676090490d0003b43c2e58c20c2aebf7e5226fccb9e17b87c2c69a07cbd4cd8f5f846c5ecc31dc1a01a2490af376863ec1d62f095a179f02d9b3eb81751365037207742fe1591a6e833fa1f35d91294a3115a5e1e5c205d16d32f7235bcb0a6ea71a09ae457faa34322f4d2ed384a469f38d1567eef49b2ea2bcd5dc5b9ecb0308ff104d0aaab75", 0xd7, 0x9, 0x0, 0x1, r6}]) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 6.07386036s ago: executing program 1 (id=5841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x10000001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4111, 0x100f}, {&(0x7f00000001c0)=""/229, 0xe5}], 0x4}, 0x8101}, {{0x0, 0x0, 0x0}, 0x42}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/223, 0xdf}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4087, 0xff7}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000003c0)=""/99, 0x63}, {&(0x7f0000000a00)=""/166, 0xa6}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x4004) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010105, @multicast2}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0xca, 0x0, 0x1000}}}}}}, 0x0) 5.959711314s ago: executing program 1 (id=5842): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x6a, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c77086d578392f81c669f9b0578538b41faa64481c8fe1f043d56f3203ca184bdaf84f9d6f14d361b23c1d6ee71bfe0e705f9a8e61c4ffefc0ada1d224410ec6bdf884ee7ff669789"}, {0x6, 0x1a01, 0x41, &(0x7f0000000040)="9dc9d967aef82987b99baab7c9aa1ca2dd19ea3e7335a5db8c9b2a55c85c2ef42097d97b8450c58276354541c1f7d6cb688b6cc257e647243787436cd578448889"}, {0x7fff, 0x10, 0x2b, &(0x7f0000000140)="cb7fa7b57c4a657d2e86b7c7342cbbe6a1ca5ef62e5b2dbe38f49cfced5da514d56726fd5255c15436e3e4"}], 0x3}) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x80000001, 0x443, 0x8, 0xcb, 0x5, 0x9, 0x6, 0x4, 0x7, 0x0, 0x8000, 0x6, 0x1, 0x8000, 0x7fff, 0x1, 0xfffffff7, 0x9, 0x3, 0x3, 0x28000, 0x3ff, 0x40000000, 0x44f, 0x0, 0x1, 0x1000, 0x6, 0x3, 0x7211, 0xd, 0x2, 0x60dc, 0xd5ff, 0x7, 0x3, 0x5, 0x1, 0x80, 0x7, 0x0, 0xffff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x7d80, 0x1, 0xfffff001, 0x1, 0x8, 0x9, 0x7f, 0x7ff, 0x4, 0x80, 0x7e, 0x425, 0x4a, 0xffff0000, 0x2, 0x1ff, 0x29, 0xedad, 0x0, 0x7, 0x200, 0xfffffffb, 0x0, 0x9, 0x0, 0x100, 0x7, 0x10001, 0x0, 0x0, 0xfbb2, 0x62000000, 0x8, 0x0, 0x8, 0x7f, 0xa, 0x8, 0x3, 0x57d6, 0x7, 0x0, 0x3, 0x6cd, 0x5, 0xfff, 0x8000, 0x9, 0x0, 0x7f, 0xe, 0xa1b4, 0xb, 0x5, 0x3cb2, 0xffffff81, 0x8, 0xbc, 0x58, 0x7, 0x9, 0x8, 0x800, 0xff800000, 0xd3a, 0x7, 0x3ff, 0xffffffff, 0x10000, 0xba22, 0x3, 0x7, 0x6, 0x3, 0xfff, 0x200, 0x0, 0x10, 0x0, 0x76, 0x8, 0x5, 0x3ff, 0x3cc, 0x100, 0x6, 0x833, 0xb, 0x8, 0xb, 0x4, 0x2, 0x86, 0x5, 0x45, 0x7, 0x4, 0x6, 0x1, 0xc, 0x80, 0x1b, 0x3000000, 0x0, 0xfffffffe, 0x2, 0x0, 0x8001, 0xa4, 0x3de0e7f6, 0x80000001, 0xf5e, 0x4, 0x7, 0xc50, 0x3, 0x80000001, 0x1000, 0x6, 0xf7a, 0x9, 0x3, 0x7, 0x80000001, 0x80000001, 0x40, 0xba3, 0x5, 0x9, 0x7, 0xffffffff, 0x0, 0x7, 0x9, 0x2, 0x8be0, 0x3, 0xffff7fff, 0x3, 0x5, 0xe, 0x2f813bed, 0x6, 0x3, 0x8, 0x6c, 0x10000, 0x101, 0x9, 0x7, 0xf, 0x100, 0x6, 0xa, 0x7, 0x0, 0x4, 0x1dee5aac, 0x4, 0x2, 0x0, 0x1000, 0x401, 0x2, 0x3, 0x0, 0x80002, 0x3, 0x4, 0x3033, 0x8, 0x8, 0x2f000, 0xfffffffc, 0x3, 0x8, 0x0, 0x6, 0x8, 0xa, 0x5, 0x2, 0x1, 0x100, 0x65a, 0x6, 0xfffffffe, 0x27, 0x8, 0x8be2, 0xcbe, 0x226ece10, 0xfffffffd, 0xdf, 0x67, 0x8, 0x4, 0x7d4, 0x2615c584, 0x7, 0x55, 0xf74a, 0x2, 0x0, 0x2, 0x0, 0x7, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x3, 0x8, 0x2, 0x80000001}, {0x0, 0x0, 0x3, 0x0, 0x4, 0x40}, 0x8, 0x13, 0x16d5}}]}}]}, 0x45c}}, 0x40010) ioctl$I2C_SMBUS(r2, 0x720, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000003c0)="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", 0x18c, 0x684, &(0x7f000005ffe4)={0xa, 0x4e20, 0x0, @empty, 0x20000000}, 0x1f) syz_usb_connect$cdc_ecm(0x1, 0x61, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x0, 0x90, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "1a07cc"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0x4, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xb1, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0xff, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x4, 0x4, 0xf6, 0x40, 0x8}, 0x75, &(0x7f0000000740)={0x5, 0xf, 0x75, 0x5, [@generic={0x4e, 0x10, 0x3, "3dff33fb07af6e89a4347c9a73ed07d004d6e846bb27b142342600ee76fb449191d1b3782b951c7513809820eeea9734c5265c1ab318e37bfc808e57bc01e1d94806bc0aa2032e04c4f120"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x1, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x9, 0x0, 0x8001}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xed, 0x5, 0x6, 0x72, 0xc}]}, 0x7, [{0xb2, &(0x7f0000000800)=@string={0xb2, 0x3, "a3a6621f7b2471003aaf94fd8937c090d8621468c1b65fe1696d8ae42c46071932e0d465404f1743180d0422dca0c8a745b99c4053dac6af08f56b0414702edf939f69ea8d71bb751cdf647af9b7721318db8c3341e0a1aff18c08700cbaaa2234f974ca968597c922dea4f1c255da1095298d31f9873054efc24cfb46278e50ea7b85d26a2a3cba8f9f23cabedb8e8fafa4dd494db59fd9e60415cdf7dafcfd1ecad0653fd7d6e91bb7ebe4d6324975"}}, {0xe3, &(0x7f00000008c0)=@string={0xe3, 0x3, "4bc55cf5ee81c2833ed6da119db6285248dd711eee30adc398d821ae1381a497884e6eb1e3c18c518772f07d7e2bb19e16ca020ce8e1303af75e6051dbdee00bd263cb95f50542d8000d5a12a23ba68ec2a69fa7dc2948b66788c6a767c069ebdf6a3d4e25739397e98b2002d077ac953846a3c03a0164faecdb7514f8a750bf63ed8304efed1e4a2e3c729cb1ceba5ede061e0069ffbe86dbe4990f7256b54af4290d0a8b8590286e2b9671c6e35c5c03e4a3721288e0dc7492300a2a201813420d0936c9c9a2c17f8e7d00eec7df5b9a16ffb4ebc30ff0148c18fc366cc84d20"}}, {0x40, &(0x7f0000000180)=@string={0x40, 0x3, "fcc1e72964702be1dd7c48bc4e486fa9494a924dea04eecea64d8692fd9a5dec12e4c4a944babef08501d0775a796b02025ba32cc1714663dc846dfbf654"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4ff}}, {0x69, &(0x7f00000009c0)=@string={0x69, 0x3, "61a12b529cb6a7b2ada16f3bfd5cfb9de68ba9d0ac7b8ec2c37d0c241236958ed92f6203018e2d980bd60bd02e1ce38542cc7da2e7032085f6ce4213fc17d918496c5be16e3a8ed1ca9759bf6f8eccee206cc5d8be0f88a71a50b279c12d271e6b2c4f1bc249a4"}}, {0x77, &(0x7f0000000a40)=@string={0x77, 0x3, "70a289d66fad6d1a7c5469bc61be7b873f7191d2d9bcf564bc9f880ec7e8ff04f8852fa512bce44d10fdf7b426e38dc411df9060672a8625173beba6438a27d4379c2e1bba224a1ff41fefd87f1ff420b76621f93a099601b0dfcb8bb433fb423ffd5f23bd1ef7aedb50e0b504f4b582e379b9642c"}}, {0xbc, &(0x7f0000000ac0)=@string={0xbc, 0x3, "4faf67bed53e6e48f0ea0d3224671dc5664929e9f3173df718cd07c1278b957865a98ccaab047ee0d1a83d007b1157b2849f8daa9f8d05cec13b74bc75c488975f64f40cf33984c684eed99f8c57f28351b0d7e2b11c6ee44535ce203e9c9118b0e41ecfeff1277dbb71a198db0dc42fc6e0583c88d63e9a406a05eb6fd1c19f3fc29e79b00454a00e32f0cff8e511c78b7da86fb4764fac481798164c14f6a69d1f23e98423eeffdb7cb143f9448a2f321ff8530901d46f32c4"}}]}) 5.379742731s ago: executing program 3 (id=5844): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r1, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) r6 = gettid() r7 = epoll_create(0x400) r8 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r8, &(0x7f0000000080)={r7, r8}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000040)=0xff, 0x80000000, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_DEV_CREATE(r0, 0x5501) 5.192166953s ago: executing program 3 (id=5845): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3402fa1b", @ANYRES32, @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) 5.190310435s ago: executing program 5 (id=5846): r0 = semget$private(0x0, 0x3, 0x400) semop(0x0, &(0x7f0000000380)=[{0x1, 0xe8, 0x1000}], 0x1) semop(r0, &(0x7f0000000400)=[{0x1, 0x7ff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000440)=[{0x0, 0x5, 0x3000}], 0x1) socket(0x2a, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfb, 0x8001}}]}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0xb}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) eventfd(0x2) 5.077276574s ago: executing program 3 (id=5847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) sendto$inet(r2, &(0x7f0000000740)="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", 0x707, 0x10, 0x0, 0x0) 4.640124625s ago: executing program 4 (id=5849): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) r1 = dup2(r0, r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) read$nci(r1, &(0x7f0000000140)=""/126, 0x7e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/sync_on_suspend', 0x40901, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 4.402716126s ago: executing program 4 (id=5850): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4000}}}}}}, 0x0) 4.323950776s ago: executing program 4 (id=5851): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x8002, 0x0) read$FUSE(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x50, 0x0, &(0x7f0000000000)=0x600) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendto$unix(r3, &(0x7f0000000440)="88b0352c3bcd442f54bb23c631986a7eb45185750f6619883d7629298bc17718dcf5e89aefad47572eef13d77d89587a75da9cca229d007a3b0cd3545c342c9b9d4d8e4b2df8b164", 0x48, 0x40010, &(0x7f00000005c0)=@file={0x1, './file0/file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x18c801, 0x80) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0xa4}}, 0x0) mkdir(0x0, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000500)="214794478fe7c5ab6b3bc9519e142053aceadbee2de83b34bfcc32d2b35fe8c25d060310e6be585b1f1849172065076e6002cab4a0bf8dbbd60eb3a445c3d8f0f563c2310bfc66b70eaee568b7cdce9ec3e8f48aab41738061371a7ffd2058e56b5a208e3a57b0de4448a026dbfdb5db62b79e7fcdb4ae488d3c652142fb327e2e4966e07993deb41af496b83a077af09ab93ba03fc3a3fc13bb43b147bfdf16bc72", 0xa2}, {&(0x7f0000000300)="b92c000f47ee5e217a980a2151696a6e3bdd38195b9fca810a5b516c308abaa4f4026dd774abdfef02ceacbd6fcd6c5699d586882032d96f78699e705307c0f0b9d0de026ebdadd63efe27534070bca1d55b86599f3ffa8ea121d03af3aea00376a7b0f6bc9fe7b8", 0x68}], 0x2, 0x2, 0x2) ioctl$HIDIOCGRAWPHYS(r8, 0x4004480d, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x5048a3fd, @remote, 0x10001}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000880)="fdd33f64fb9e93c310460bbe537063f270954f0e", 0x14) 4.15637549s ago: executing program 3 (id=5852): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r3, 0x0, 0x500) read$rfkill(r3, &(0x7f00000000c0), 0x8) setsockopt$sock_int(r2, 0x1, 0x2e, 0x0, 0x0) shutdown(r2, 0x0) io_setup(0x6, &(0x7f0000000540)) syz_open_procfs(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30bb1aed0a32f12d13000000060a0b04000000000000000002000000040004800900010073797a30000014000000110001000000a6145fa97cddba9d8e1a208300002537bb10ee5315e99603566b19109d9f06bad0630a80c02bacff00fc"], 0x58}}, 0x0) 3.255916873s ago: executing program 0 (id=5853): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x5, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a900020000d9000008000240000000000900010073797a30000000000900020073797a3200000000140005800800014000000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002380)={0x48, 0x0, &(0x7f0000001300)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001380)='r'}) 3.165702608s ago: executing program 5 (id=5854): r0 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x4000)=nil, 0x6000) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000000000/0x2000)=nil, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 3.100620291s ago: executing program 5 (id=5855): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585"], 0x0) r0 = userfaultfd(0x801) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001114fdffffff00000000000008004b001300"], 0x18}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000afc000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x280283) dup3(r3, r2, 0x80000) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00001a7000/0x4000)=nil, 0x4000}, 0x1}) 2.770393861s ago: executing program 3 (id=5856): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000101801000000000000000000000000740503ab9c51b122000000000000000000070000040900010073ed"], 0x48}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x500, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000005", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.769400012s ago: executing program 4 (id=5857): syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x80000000000005, &(0x7f0000000600), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c000280100004800c000100ff010000f9ffffff0600010000000000100003800c000100010000004903000008000500", @ANYRES32=r1, @ANYBLOB="140003"], 0x78}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8000000000010, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0x1}) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r5, r4}, &(0x7f0000001600)=""/97, 0x61, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000006, 0x4000010, 0xffffffffffffffff, 0x7dd8000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0045543, &(0x7f0000000100)=0x10) 2.655924907s ago: executing program 4 (id=5858): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x7d, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x43, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc242f12"}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000003000000000000fe8000000000000000000000000000aa"], 0x0) 2.655275553s ago: executing program 3 (id=5859): syz_usb_connect(0x3, 0x2f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003699a4140210a8ed94525e41d38fcf8021d0001ffff40d409047709010202ff0709050c002000090302020f6b890d455b5143ead11adf20d2a82afce4cacf1fd0a00e3940632d4d545ddb9fdcec0e3244b0d151797a543134b55be080b76ddae8184812f889be1acab8037c65f1371f4eb69febf5f38600000000000000"], &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xfb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xbd, 0x0, 0x10, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x22, {0x9, 0x21, 0xfa9a, 0x0, 0x1, {0x22, 0x851}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x2, 0xc7}}, [{{0x9, 0x5, 0x2, 0x3, 0x600, 0xff, 0x8}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7, 0x8, 0x9, 0x20, 0x2}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xf1, 0xf, 0x80}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x20, 0x11, 0x13, {0x13, 0x24, "c7d77e9b93d2deedf78a1fa23feb4c0d02"}}, &(0x7f0000000240)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "a09e174b1c288fce79277c6f9eb4a37dfc408d6866d382f90d59f56a5beb7f4d657d90ff699814171ee91125f3dc7402ca55bb5344b4003da91f68e52430a245f5d6ae7a3c3328c257ca8103c2449a55e66b91dc3158f3730f648ea6011e93e68d29445c7021025e958217553ad3346db5dea69b11f9c6401e12c4992b74c315a448e442a43973e83a032293c069e790b617178b82c5b79a75a0910727813fd59f32"}}, &(0x7f0000000300)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x5, "c607b270"}, @global=@item_012={0x1, 0x1, 0x4, 'X'}, @global=@item_012={0x2, 0x1, 0x1, "df9a"}, @global=@item_012={0x1, 0x1, 0x8, '.'}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xe, 0x1, {0x22, 0xa97}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x13, 0x6, "cec4abd7376a"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x1, 0x9d, "a4ffc212947709e73906539057aed7e5ed4a40d7e071b03b8a696da7f96116530d73d7f153ff9014b8118a6b4258040259cc5308536593954a5a6868b359b8bd32b501549b85be45d23362e6f6c627276361b8f509f4b5e646442eb0eb65ff35e6a4d7d20e20dee3d835d4efc60ee1b136d2fe35c611d0053ae6721bf13ea7e3461a7bd390d8977a356eda49ad7c014a6b91cc05c41f5a472d9937d706"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x7}}) 2.629230953s ago: executing program 4 (id=5860): r0 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000140)='shortad', &(0x7f0000000180)='O', 0x1) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xa1, 0x8, 0x8}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x10, 0x2, 0x4, 0x40, 0x6d}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x9, 0xf0f, 0x6, [0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x6, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0x9, 0x57e8}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42a}}]}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000300)=0xffffffffffffffff, 0x4) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f0000000180)=[{0x7, 0x0, 0x0, 0x0}, {0x1, 0x201, 0x0, &(0x7f0000000140)}], 0x2}) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000701020809056abb4d0cbb0960c01ccbb1584d208c010220003009810905820200024d060400"/54], &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x80, 0x3, 0xa, 0x10, 0x8}, 0x26, &(0x7f0000000240)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x10, 0x2, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7, 0xff00, 0x1, [0xffff0f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3, 0x9}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3c01}}]}) 2.276332815s ago: executing program 0 (id=5861): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000040000000380012800b0001006272696467650000280002800c002300076b0000000000000600060037"], 0x58}}, 0x0) shutdown(r3, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000001c0)='V', 0x1}, {&(0x7f0000000180)="c86de5ebcf4e7e82e72c060e4bed23540630aa52e8e6a58b455e51bf075f63e2ff1c95a92bba2e686b7a", 0x2a}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x72766f61355a0b1c) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r9) 0s ago: executing program 5 (id=5862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) sendto$inet(r2, &(0x7f0000000740)="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", 0x707, 0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): 795][T23034] FAULT_INJECTION: forcing a failure. [ 1193.302795][T23034] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.316246][T23034] CPU: 0 UID: 0 PID: 23034 Comm: syz.1.5417 Not tainted syzkaller #0 PREEMPT(full) [ 1193.316272][T23034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1193.316283][T23034] Call Trace: [ 1193.316293][T23034] [ 1193.316301][T23034] dump_stack_lvl+0x189/0x250 [ 1193.316327][T23034] ? __pfx____ratelimit+0x10/0x10 [ 1193.316355][T23034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1193.316374][T23034] ? __pfx__printk+0x10/0x10 [ 1193.316399][T23034] ? __pfx___might_resched+0x10/0x10 [ 1193.316423][T23034] ? fs_reclaim_acquire+0x7d/0x100 [ 1193.316450][T23034] should_fail_ex+0x414/0x560 [ 1193.316483][T23034] should_failslab+0xa8/0x100 [ 1193.316507][T23034] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1193.316527][T23034] ? vm_area_dup+0x2b/0x680 [ 1193.316554][T23034] vm_area_dup+0x2b/0x680 [ 1193.316580][T23034] __split_vma+0x1a9/0xa00 [ 1193.316610][T23034] ? ima_match_policy+0x10b/0x2150 [ 1193.316638][T23034] ? __pfx___split_vma+0x10/0x10 [ 1193.316676][T23034] ? up_write+0x1c4/0x420 [ 1193.316699][T23034] vms_gather_munmap_vmas+0x2e2/0x12e0 [ 1193.316738][T23034] ? mtree_range_walk+0x6a7/0x840 [ 1193.316761][T23034] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1193.316796][T23034] ? mas_find+0xa7d/0xd30 [ 1193.316820][T23034] mmap_region+0x722/0x2110 [ 1193.316864][T23034] ? __pfx_mmap_region+0x10/0x10 [ 1193.316887][T23034] ? is_bpf_text_address+0x26/0x2b0 [ 1193.316915][T23034] ? kernel_text_address+0xa5/0xe0 [ 1193.316937][T23034] ? __kernel_text_address+0xd/0x40 [ 1193.316964][T23034] ? unwind_get_return_address+0x4d/0x90 [ 1193.317055][T23034] ? rcu_is_watching+0x15/0xb0 [ 1193.317081][T23034] ? cap_capable+0x11f/0x460 [ 1193.317110][T23034] ? security_capable+0xbd/0x2e0 [ 1193.317128][T23034] ? shmem_mapping+0xd/0x50 [ 1193.317154][T23034] ? memfd_check_seals_mmap+0x165/0x200 [ 1193.317183][T23034] do_mmap+0xc45/0x10d0 [ 1193.317213][T23034] ? __pfx_do_mmap+0x10/0x10 [ 1193.317228][T23034] ? down_write_killable+0x178/0x230 [ 1193.317251][T23034] ? __pfx_down_write_killable+0x10/0x10 [ 1193.317270][T23034] ? common_file_perm+0x1b5/0x230 [ 1193.317298][T23034] vm_mmap_pgoff+0x2a6/0x4d0 [ 1193.317333][T23034] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1193.317369][T23034] ? hugetlb_file_setup+0x42c/0x630 [ 1193.317395][T23034] ksys_mmap_pgoff+0x587/0x760 [ 1193.317421][T23034] do_syscall_64+0xfa/0xfa0 [ 1193.317438][T23034] ? lockdep_hardirqs_on+0x9c/0x150 [ 1193.317456][T23034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.317475][T23034] ? clear_bhb_loop+0x60/0xb0 [ 1193.317498][T23034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.317514][T23034] RIP: 0033:0x7f7be078eec9 [ 1193.317532][T23034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1193.317547][T23034] RSP: 002b:00007f7be1657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1193.317567][T23034] RAX: ffffffffffffffda RBX: 00007f7be09e5fa0 RCX: 00007f7be078eec9 [ 1193.317580][T23034] RDX: 0000000000000000 RSI: 0000000000000930 RDI: 0000200000c00000 [ 1193.317591][T23034] RBP: 00007f7be1657090 R08: ffffffffffffffff R09: 0000000000000000 [ 1193.317603][T23034] R10: 0000000000043033 R11: 0000000000000246 R12: 0000000000000001 [ 1193.317614][T23034] R13: 00007f7be09e6038 R14: 00007f7be09e5fa0 R15: 00007f7be0b0fa28 [ 1193.317644][T23034] [ 1194.064248][T23048] netlink: 'syz.5.5419': attribute type 1 has an invalid length. [ 1194.238513][T23055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5418'. [ 1194.248411][T23055] bridge0: port 3(batadv0) entered disabled state [ 1194.648807][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1194.791578][T23061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.852162][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1194.871171][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1194.899340][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.919494][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5422'. [ 1194.995322][ T24] usb 1-1: config 0 descriptor?? [ 1195.068825][ T5917] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1195.222979][T23060] binder: 23036:23060 ioctl c00c6211 0 returned -14 [ 1195.256032][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1195.290905][ T5917] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1195.361815][ T5917] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1195.512885][ T5917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1195.551271][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.591112][ T5917] usb 4-1: Product: syz [ 1195.613178][ T5917] usb 4-1: Manufacturer: syz [ 1195.630926][ T5917] usb 4-1: SerialNumber: syz [ 1195.657031][ T5917] hub 4-1:1.0: bad descriptor, ignoring hub [ 1195.698947][ T5917] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1195.919103][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1196.026357][T23055] bridge_slave_1: left allmulticast mode [ 1196.053965][T23055] bridge_slave_1: left promiscuous mode [ 1196.108485][T23055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.116257][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1196.204629][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1196.218843][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1196.260009][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1196.314656][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1196.383822][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.420972][ T9] usb 5-1: Product: syz [ 1196.430669][ T9] usb 5-1: Manufacturer: syz [ 1196.445262][ T9] usb 5-1: SerialNumber: syz [ 1196.471491][ T9] usb 5-1: config 0 descriptor?? [ 1196.492343][T23073] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1196.839212][T23073] netlink: 'syz.4.5424': attribute type 5 has an invalid length. [ 1196.854817][ T5831] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1196.907955][ T5831] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1199.088435][T23048] netlink: 6 bytes leftover after parsing attributes in process `syz.5.5419'. [ 1199.099758][T23048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1199.517911][ T9] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 1199.539665][ T9] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 1199.546213][ T9] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 1199.579799][ T9] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 1199.586280][ T9] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 1199.953194][T23073] ip6erspan0: entered promiscuous mode [ 1200.034996][T23082] bridge0: port 3(macsec0) entered blocking state [ 1200.043630][T23082] bridge0: port 3(macsec0) entered disabled state [ 1200.050404][T23082] macsec0: entered allmulticast mode [ 1200.057653][T23082] macsec0: entered promiscuous mode [ 1200.200364][ T9] usb 5-1: USB disconnect, device number 43 [ 1200.207766][ T9] mcba_usb 5-1:0.0 can0: device disconnected [ 1200.537689][ T5831] usb 1-1: USB disconnect, device number 2 [ 1200.552723][T23099] FAULT_INJECTION: forcing a failure. [ 1200.552723][T23099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.595382][T23099] CPU: 1 UID: 0 PID: 23099 Comm: syz.1.5432 Not tainted syzkaller #0 PREEMPT(full) [ 1200.595445][T23099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1200.595455][T23099] Call Trace: [ 1200.595464][T23099] [ 1200.595473][T23099] dump_stack_lvl+0x189/0x250 [ 1200.595498][T23099] ? __pfx____ratelimit+0x10/0x10 [ 1200.595520][T23099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1200.595535][T23099] ? __pfx__printk+0x10/0x10 [ 1200.595560][T23099] should_fail_ex+0x414/0x560 [ 1200.595590][T23099] _copy_to_user+0x31/0xb0 [ 1200.595614][T23099] simple_read_from_buffer+0xe1/0x170 [ 1200.595639][T23099] proc_fail_nth_read+0x1b3/0x220 [ 1200.595667][T23099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1200.595695][T23099] ? rw_verify_area+0x2a6/0x4d0 [ 1200.595712][T23099] ? __lock_acquire+0xab9/0xd20 [ 1200.595732][T23099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1200.595768][T23099] vfs_read+0x200/0xa30 [ 1200.595786][T23099] ? fdget_pos+0x247/0x320 [ 1200.595811][T23099] ? __pfx___mutex_lock+0x10/0x10 [ 1200.595831][T23099] ? __pfx_vfs_read+0x10/0x10 [ 1200.595848][T23099] ? __fget_files+0x2a/0x420 [ 1200.595873][T23099] ? __fget_files+0x3a0/0x420 [ 1200.595893][T23099] ? __fget_files+0x2a/0x420 [ 1200.595922][T23099] ksys_read+0x145/0x250 [ 1200.595945][T23099] ? __pfx_ksys_read+0x10/0x10 [ 1200.595968][T23099] ? do_syscall_64+0xbe/0xfa0 [ 1200.595989][T23099] do_syscall_64+0xfa/0xfa0 [ 1200.596005][T23099] ? lockdep_hardirqs_on+0x9c/0x150 [ 1200.596023][T23099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.596046][T23099] ? clear_bhb_loop+0x60/0xb0 [ 1200.596067][T23099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.596085][T23099] RIP: 0033:0x7f7be078d8dc [ 1200.596102][T23099] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1200.596118][T23099] RSP: 002b:00007f7be1657030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1200.596135][T23099] RAX: ffffffffffffffda RBX: 00007f7be09e5fa0 RCX: 00007f7be078d8dc [ 1200.596148][T23099] RDX: 000000000000000f RSI: 00007f7be16570a0 RDI: 0000000000000004 [ 1200.596158][T23099] RBP: 00007f7be1657090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.596168][T23099] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 1200.596179][T23099] R13: 00007f7be09e6038 R14: 00007f7be09e5fa0 R15: 00007f7be0b0fa28 [ 1200.596210][T23099] [ 1200.896909][ T5917] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 122 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1200.982429][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1201.163931][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1201.179441][ T9] usb 5-1: config 15 has an invalid interface number: 69 but max is 0 [ 1201.187657][ T9] usb 5-1: config 15 has no interface number 0 [ 1201.246553][ T9] usb 5-1: config 15 interface 69 has no altsetting 0 [ 1201.287435][ T9] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ec.82 [ 1201.328213][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.368843][ T9] usb 5-1: Product: syz [ 1201.373056][ T9] usb 5-1: Manufacturer: à ’ [ 1201.377672][ T9] usb 5-1: SerialNumber: syz [ 1201.459767][ T5917] usb 4-1: USB disconnect, device number 122 [ 1201.490564][ T5917] usblp0: removed [ 1201.556235][T23138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1201.674161][ T9] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1201.721452][ T9] usb 5-1: USB disconnect, device number 44 [ 1202.318957][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1202.456155][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5446'. [ 1202.477375][T23165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5447'. [ 1203.414162][T23189] FAULT_INJECTION: forcing a failure. [ 1203.414162][T23189] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.427190][T23189] CPU: 0 UID: 0 PID: 23189 Comm: syz.1.5453 Not tainted syzkaller #0 PREEMPT(full) [ 1203.427206][T23189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1203.427213][T23189] Call Trace: [ 1203.427221][T23189] [ 1203.427226][T23189] dump_stack_lvl+0x189/0x250 [ 1203.427243][T23189] ? __pfx____ratelimit+0x10/0x10 [ 1203.427259][T23189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1203.427270][T23189] ? __pfx__printk+0x10/0x10 [ 1203.427282][T23189] ? skb_network_protocol+0x4fe/0x760 [ 1203.427297][T23189] should_fail_ex+0x414/0x560 [ 1203.427315][T23189] should_failslab+0xa8/0x100 [ 1203.427336][T23189] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1203.427346][T23189] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 1203.427360][T23189] ? skb_clone+0x212/0x3a0 [ 1203.427372][T23189] skb_clone+0x212/0x3a0 [ 1203.427381][T23189] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 1203.427395][T23189] dev_queue_xmit_nit+0x416/0xcc0 [ 1203.427409][T23189] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 1203.427427][T23189] dev_hard_start_xmit+0x1be/0x830 [ 1203.427446][T23189] __dev_queue_xmit+0x1b8d/0x3b50 [ 1203.427457][T23189] ? kasan_save_track+0x4f/0x80 [ 1203.427466][T23189] ? kasan_save_track+0x3e/0x80 [ 1203.427480][T23189] ? __dev_queue_xmit+0x27b/0x3b50 [ 1203.427498][T23189] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1203.427516][T23189] ? __copy_skb_header+0xa7/0x550 [ 1203.427526][T23189] ? __asan_memcpy+0x40/0x70 [ 1203.427545][T23189] ? skb_clone+0x246/0x3a0 [ 1203.427556][T23189] __netlink_deliver_tap+0x5ad/0x850 [ 1203.427577][T23189] ? netlink_deliver_tap+0x2e/0x1b0 [ 1203.427591][T23189] netlink_deliver_tap+0x19c/0x1b0 [ 1203.427606][T23189] netlink_sendskb+0x68/0x140 [ 1203.427619][T23189] netlink_unicast+0x397/0x9e0 [ 1203.427630][T23189] ? __asan_memcpy+0x40/0x70 [ 1203.427644][T23189] ? __pfx_netlink_unicast+0x10/0x10 [ 1203.427661][T23189] netlink_rcv_skb+0x28c/0x470 [ 1203.427674][T23189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1203.427689][T23189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1203.427707][T23189] ? netlink_deliver_tap+0x2e/0x1b0 [ 1203.427724][T23189] netlink_unicast+0x82f/0x9e0 [ 1203.427740][T23189] ? __pfx_netlink_unicast+0x10/0x10 [ 1203.427753][T23189] ? netlink_sendmsg+0x642/0xb30 [ 1203.427765][T23189] ? skb_put+0x11b/0x210 [ 1203.427780][T23189] netlink_sendmsg+0x805/0xb30 [ 1203.427798][T23189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1203.427813][T23189] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1203.427826][T23189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1203.427838][T23189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1203.427852][T23189] __sock_sendmsg+0x21c/0x270 [ 1203.427865][T23189] ____sys_sendmsg+0x505/0x830 [ 1203.427882][T23189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1203.427901][T23189] ? import_iovec+0x74/0xa0 [ 1203.427916][T23189] ___sys_sendmsg+0x21f/0x2a0 [ 1203.427927][T23189] ? __pfx____sys_sendmsg+0x10/0x10 [ 1203.427954][T23189] ? __fget_files+0x2a/0x420 [ 1203.427966][T23189] ? __fget_files+0x3a0/0x420 [ 1203.427982][T23189] __x64_sys_sendmsg+0x19b/0x260 [ 1203.427993][T23189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1203.428011][T23189] ? do_syscall_64+0xbe/0xfa0 [ 1203.428024][T23189] do_syscall_64+0xfa/0xfa0 [ 1203.428033][T23189] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.428044][T23189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.428069][T23189] ? clear_bhb_loop+0x60/0xb0 [ 1203.428082][T23189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.428092][T23189] RIP: 0033:0x7f7be078eec9 [ 1203.428103][T23189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.428111][T23189] RSP: 002b:00007f7be1657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1203.428123][T23189] RAX: ffffffffffffffda RBX: 00007f7be09e5fa0 RCX: 00007f7be078eec9 [ 1203.428130][T23189] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1203.428137][T23189] RBP: 00007f7be1657090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.428143][T23189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1203.428149][T23189] R13: 00007f7be09e6038 R14: 00007f7be09e5fa0 R15: 00007f7be0b0fa28 [ 1203.428165][T23189] [ 1204.075782][T23196] FAULT_INJECTION: forcing a failure. [ 1204.075782][T23196] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.088785][T23196] CPU: 0 UID: 0 PID: 23196 Comm: syz.5.5456 Not tainted syzkaller #0 PREEMPT(full) [ 1204.088810][T23196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1204.088822][T23196] Call Trace: [ 1204.088830][T23196] [ 1204.088838][T23196] dump_stack_lvl+0x189/0x250 [ 1204.088863][T23196] ? __pfx____ratelimit+0x10/0x10 [ 1204.088888][T23196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1204.088905][T23196] ? __pfx__printk+0x10/0x10 [ 1204.088925][T23196] ? __pfx___might_resched+0x10/0x10 [ 1204.088947][T23196] ? fs_reclaim_acquire+0x7d/0x100 [ 1204.088969][T23196] should_fail_ex+0x414/0x560 [ 1204.088999][T23196] should_failslab+0xa8/0x100 [ 1204.089020][T23196] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 1204.089039][T23196] ? ovs_nla_get_match+0x3b5/0x18c0 [ 1204.089056][T23196] ? __parse_flow_nlattrs+0x3e7/0x5d0 [ 1204.089072][T23196] ? __parse_vlan_from_nlattrs+0x1dc/0x12e0 [ 1204.089098][T23196] kmemdup_noprof+0x2b/0x70 [ 1204.089124][T23196] ovs_nla_get_match+0x3b5/0x18c0 [ 1204.089144][T23196] ? do_syscall_64+0xfa/0xfa0 [ 1204.089161][T23196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.089191][T23196] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 1204.089238][T23196] ? __kasan_kmalloc+0x93/0xb0 [ 1204.089264][T23196] ? __asan_memset+0x22/0x50 [ 1204.089287][T23196] ovs_flow_cmd_new+0x324/0xd80 [ 1204.089342][T23196] ? netlink_deliver_tap+0x19c/0x1b0 [ 1204.089377][T23196] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1204.089448][T23196] ? rcu_is_watching+0x15/0xb0 [ 1204.089477][T23196] ? __nla_parse+0x40/0x60 [ 1204.089501][T23196] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1204.089530][T23196] genl_family_rcv_msg_doit+0x215/0x300 [ 1204.089556][T23196] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1204.089590][T23196] ? bpf_lsm_capable+0x9/0x20 [ 1204.089607][T23196] ? security_capable+0x7e/0x2e0 [ 1204.089632][T23196] genl_rcv_msg+0x60e/0x790 [ 1204.089659][T23196] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1204.089678][T23196] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1204.089698][T23196] ? __asan_memcpy+0x40/0x70 [ 1204.089715][T23196] ? __pfx_ref_tracker_free+0x10/0x10 [ 1204.089741][T23196] netlink_rcv_skb+0x208/0x470 [ 1204.089761][T23196] ? __lock_acquire+0xab9/0xd20 [ 1204.089783][T23196] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1204.089804][T23196] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1204.089846][T23196] ? down_read+0x1ad/0x2e0 [ 1204.089869][T23196] genl_rcv+0x28/0x40 [ 1204.089887][T23196] netlink_unicast+0x82f/0x9e0 [ 1204.089919][T23196] ? __pfx_netlink_unicast+0x10/0x10 [ 1204.089943][T23196] ? netlink_sendmsg+0x642/0xb30 [ 1204.089965][T23196] ? skb_put+0x11b/0x210 [ 1204.089994][T23196] netlink_sendmsg+0x805/0xb30 [ 1204.090027][T23196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1204.090054][T23196] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1204.090097][T23196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1204.090120][T23196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1204.090145][T23196] __sock_sendmsg+0x21c/0x270 [ 1204.090171][T23196] ____sys_sendmsg+0x505/0x830 [ 1204.090203][T23196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1204.090238][T23196] ? import_iovec+0x74/0xa0 [ 1204.090266][T23196] ___sys_sendmsg+0x21f/0x2a0 [ 1204.090287][T23196] ? __pfx____sys_sendmsg+0x10/0x10 [ 1204.090346][T23196] ? __fget_files+0x2a/0x420 [ 1204.090367][T23196] ? __fget_files+0x3a0/0x420 [ 1204.090405][T23196] __x64_sys_sendmsg+0x19b/0x260 [ 1204.090430][T23196] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1204.090458][T23196] ? __pfx_ksys_write+0x10/0x10 [ 1204.090481][T23196] ? do_syscall_64+0xbe/0xfa0 [ 1204.090502][T23196] do_syscall_64+0xfa/0xfa0 [ 1204.090519][T23196] ? lockdep_hardirqs_on+0x9c/0x150 [ 1204.090537][T23196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.090553][T23196] ? clear_bhb_loop+0x60/0xb0 [ 1204.090576][T23196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.090594][T23196] RIP: 0033:0x7ff343b8eec9 [ 1204.090612][T23196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.090627][T23196] RSP: 002b:00007ff3449f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1204.090648][T23196] RAX: ffffffffffffffda RBX: 00007ff343de5fa0 RCX: 00007ff343b8eec9 [ 1204.090661][T23196] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1204.090673][T23196] RBP: 00007ff3449f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.090684][T23196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1204.090695][T23196] R13: 00007ff343de6038 R14: 00007ff343de5fa0 R15: 00007ff343f0fa28 [ 1204.090727][T23196] [ 1204.594629][T23201] netlink: 360 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1204.899033][ T5917] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1205.188783][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 1205.231693][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1205.265346][ T5917] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1205.288939][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.370287][ T5917] usb 6-1: config 0 descriptor?? [ 1205.389764][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1205.518288][T23212] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5455'. [ 1205.584909][ T5917] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1205.620838][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1205.636312][T23238] binder: 23231:23238 ioctl 40046205 0 returned -22 [ 1205.667833][ T9] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 1205.691552][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1205.702336][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1205.717554][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 1205.745514][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1205.786456][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1205.798749][ T9] usb 2-1: Product: syz [ 1205.808678][ T9] usb 2-1: Manufacturer: syz [ 1205.823790][T23223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1205.850077][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1205.898464][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1205.915978][ T9] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1205.940682][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1206.497849][ T9] usb 6-1: USB disconnect, device number 91 [ 1206.568017][T15640] usb 2-1: USB disconnect, device number 4 [ 1206.679036][T23255] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1206.697662][T23254] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5474'. [ 1206.918605][T23262] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1206.931445][T23262] bond1 (unregistering): Released all slaves [ 1206.980307][T23266] syzkaller0: entered promiscuous mode [ 1207.023794][T23266] syzkaller0: entered allmulticast mode [ 1207.073218][T23266] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1207.349090][T15631] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1207.520466][T15631] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1207.539210][T15631] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1207.560939][T15631] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1207.577916][T23285] binder: 23282:23285 ioctl 40046205 0 returned -22 [ 1207.587858][T15631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.659834][T23266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1207.718473][T15631] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1207.766722][T23290] FAULT_INJECTION: forcing a failure. [ 1207.766722][T23290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1207.781269][T23290] CPU: 0 UID: 0 PID: 23290 Comm: syz.3.5486 Not tainted syzkaller #0 PREEMPT(full) [ 1207.781296][T23290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1207.781308][T23290] Call Trace: [ 1207.781316][T23290] [ 1207.781325][T23290] dump_stack_lvl+0x189/0x250 [ 1207.781351][T23290] ? __pfx____ratelimit+0x10/0x10 [ 1207.781378][T23290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1207.781397][T23290] ? __pfx__printk+0x10/0x10 [ 1207.781415][T23290] ? __might_fault+0xb0/0x130 [ 1207.781445][T23290] should_fail_ex+0x414/0x560 [ 1207.781475][T23290] _copy_from_user+0x2d/0xb0 [ 1207.781497][T23290] kstrtouint_from_user+0xc4/0x170 [ 1207.781518][T23290] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1207.781557][T23290] proc_fail_nth_write+0x88/0x200 [ 1207.781584][T23290] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1207.781616][T23290] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1207.781643][T23290] vfs_write+0x27e/0xb30 [ 1207.781679][T23290] ? __pfx_vfs_write+0x10/0x10 [ 1207.781700][T23290] ? __fget_files+0x2a/0x420 [ 1207.781726][T23290] ? __fget_files+0x3a0/0x420 [ 1207.781746][T23290] ? __fget_files+0x2a/0x420 [ 1207.781774][T23290] ksys_write+0x145/0x250 [ 1207.781795][T23290] ? __pfx_ksys_write+0x10/0x10 [ 1207.781818][T23290] ? do_syscall_64+0xbe/0xfa0 [ 1207.781840][T23290] do_syscall_64+0xfa/0xfa0 [ 1207.781856][T23290] ? lockdep_hardirqs_on+0x9c/0x150 [ 1207.781874][T23290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.781892][T23290] ? clear_bhb_loop+0x60/0xb0 [ 1207.781915][T23290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.781933][T23290] RIP: 0033:0x7f4d2bf8d97f [ 1207.781949][T23290] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1207.781972][T23290] RSP: 002b:00007f4d2cd65030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1207.781991][T23290] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d2bf8d97f [ 1207.782004][T23290] RDX: 0000000000000001 RSI: 00007f4d2cd650a0 RDI: 0000000000000006 [ 1207.782015][T23290] RBP: 00007f4d2cd65090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.782026][T23290] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1207.782036][T23290] R13: 00007f4d2c1e6128 R14: 00007f4d2c1e6090 R15: 00007f4d2c30fa28 [ 1207.782066][T23290] [ 1208.385343][ T9] usb 5-1: USB disconnect, device number 45 [ 1208.471665][T23294] bond2: option xmit_hash_policy: invalid value (14) [ 1208.504076][T23294] bond2 (unregistering): Released all slaves [ 1208.749749][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1208.852984][T23313] loop9: detected capacity change from 0 to 7 [ 1208.860873][T23313] Dev loop9: unable to read RDB block 7 [ 1208.866657][T23313] loop9: unable to read partition table [ 1208.873726][T23313] loop9: partition table beyond EOD, truncated [ 1208.880222][T23313] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1208.912997][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1208.955905][ T24] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1208.978150][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.993963][ T24] usb 2-1: Product: syz [ 1208.998797][ T24] usb 2-1: Manufacturer: syz [ 1209.004133][ T24] usb 2-1: SerialNumber: syz [ 1209.024146][ T24] usb 2-1: config 0 descriptor?? [ 1209.031751][ T24] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1209.050475][ T24] usb 2-1: Detected FT232H [ 1209.208811][ T9] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1209.225612][T23318] netem: change failed [ 1209.360734][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1209.369660][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1209.378193][ T9] usb 6-1: config 0 has no interface number 0 [ 1209.384789][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1209.395836][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1209.406280][ T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1209.416274][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.429683][ T9] usb 6-1: config 0 descriptor?? [ 1209.446920][ T9] hso 6-1:0.1: Failed to find BULK IN ep [ 1209.642438][T23328] fuse: Unknown parameter 'permit_directio' [ 1209.754284][T23315] syzkaller0: entered promiscuous mode [ 1209.807845][T23315] syzkaller0: entered allmulticast mode [ 1210.086727][T23343] i2c i2c-0: Invalid block write size 34 [ 1210.143078][T23341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5504'. [ 1210.284064][T23343] binder: 23337:23343 ioctl 40046205 0 returned -22 [ 1210.775971][ T5917] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1210.939325][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 1210.946778][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.957357][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1210.985422][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1210.995604][ T5917] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1211.018092][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1211.054056][ T5917] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1211.063261][ T5917] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1211.071668][ T5917] usb 1-1: Manufacturer: syz [ 1211.100382][ T5917] usb 1-1: config 0 descriptor?? [ 1211.418794][ T5917] rc_core: IR keymap rc-hauppauge not found [ 1211.424856][ T5917] Registered IR keymap rc-empty [ 1211.440067][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.458912][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.480800][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1211.496476][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input84 [ 1211.540418][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1211.547952][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.568978][ T24] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1211.579269][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.586768][ T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1211.605692][ T24] usb 2-1: USB disconnect, device number 5 [ 1211.612243][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.653104][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1211.663448][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.672233][ T24] ftdi_sio 2-1:0.0: device disconnected [ 1211.702883][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.739999][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.758993][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.779608][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.801896][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.846543][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1211.873492][ T5917] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1211.882711][ T5917] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1211.930366][ T5917] usb 1-1: USB disconnect, device number 3 [ 1212.868378][T23366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1214.118262][T15640] usb 6-1: USB disconnect, device number 92 [ 1214.628917][T15657] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1214.636658][ T5917] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1214.654930][T23379] FAULT_INJECTION: forcing a failure. [ 1214.654930][T23379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.668180][T23379] CPU: 0 UID: 0 PID: 23379 Comm: syz.5.5516 Not tainted syzkaller #0 PREEMPT(full) [ 1214.668196][T23379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1214.668203][T23379] Call Trace: [ 1214.668209][T23379] [ 1214.668214][T23379] dump_stack_lvl+0x189/0x250 [ 1214.668231][T23379] ? __pfx____ratelimit+0x10/0x10 [ 1214.668246][T23379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1214.668257][T23379] ? __pfx__printk+0x10/0x10 [ 1214.668267][T23379] ? __might_fault+0xb0/0x130 [ 1214.668283][T23379] should_fail_ex+0x414/0x560 [ 1214.668301][T23379] _copy_from_iter+0x1de/0x1790 [ 1214.668320][T23379] ? __lock_acquire+0xab9/0xd20 [ 1214.668334][T23379] ? __pfx__copy_from_iter+0x10/0x10 [ 1214.668350][T23379] ? page_copy_sane+0x4e/0x280 [ 1214.668362][T23379] copy_page_from_iter+0xdd/0x170 [ 1214.668376][T23379] tun_get_user+0x1d7b/0x3e90 [ 1214.668393][T23379] ? tun_get_user+0x6f6/0x3e90 [ 1214.668409][T23379] ? aa_file_perm+0x44d/0x1550 [ 1214.668421][T23379] ? __pfx_tun_get_user+0x10/0x10 [ 1214.668433][T23379] ? _parse_integer_limit+0x1ae/0x1f0 [ 1214.668448][T23379] ? __lock_acquire+0xab9/0xd20 [ 1214.668462][T23379] ? ref_tracker_alloc+0x318/0x460 [ 1214.668472][T23379] ? __lock_acquire+0xab9/0xd20 [ 1214.668484][T23379] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1214.668497][T23379] ? tun_get+0x1c/0x2f0 [ 1214.668511][T23379] ? tun_get+0x1c/0x2f0 [ 1214.668522][T23379] ? tun_get+0x1c/0x2f0 [ 1214.668535][T23379] tun_chr_write_iter+0x113/0x200 [ 1214.668548][T23379] vfs_write+0x5c9/0xb30 [ 1214.668562][T23379] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1214.668574][T23379] ? __pfx_vfs_write+0x10/0x10 [ 1214.668590][T23379] ? __fget_files+0x2a/0x420 [ 1214.668607][T23379] ksys_write+0x145/0x250 [ 1214.668619][T23379] ? __pfx_ksys_write+0x10/0x10 [ 1214.668631][T23379] ? do_syscall_64+0xbe/0xfa0 [ 1214.668651][T23379] do_syscall_64+0xfa/0xfa0 [ 1214.668660][T23379] ? lockdep_hardirqs_on+0x9c/0x150 [ 1214.668670][T23379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.668687][T23379] ? clear_bhb_loop+0x60/0xb0 [ 1214.668706][T23379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.668721][T23379] RIP: 0033:0x7ff343b8d97f [ 1214.668736][T23379] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1214.668750][T23379] RSP: 002b:00007ff3449f8000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1214.668769][T23379] RAX: ffffffffffffffda RBX: 00007ff343de5fa0 RCX: 00007ff343b8d97f [ 1214.668782][T23379] RDX: 000000000000005e RSI: 00002000000004c0 RDI: 00000000000000c8 [ 1214.668791][T23379] RBP: 00007ff3449f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.668801][T23379] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 1214.668812][T23379] R13: 00007ff343de6038 R14: 00007ff343de5fa0 R15: 00007ff343f0fa28 [ 1214.668840][T23379] [ 1214.798808][T15657] usb 5-1: Using ep0 maxpacket: 16 [ 1214.957579][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.984589][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.003221][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1215.017040][ T5917] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1215.019498][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1215.019516][ T30] audit: type=1400 audit(1760504498.356:3250): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=23380 comm="syz.5.5517" [ 1215.026812][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.068062][T15657] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1215.083695][T15657] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.094592][ T5917] usb 1-1: config 0 descriptor?? [ 1215.107576][T15657] usb 5-1: Product: syz [ 1215.124681][T15657] usb 5-1: Manufacturer: syz [ 1215.124705][T15657] usb 5-1: SerialNumber: syz [ 1215.135453][T15657] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1215.135486][T15657] r8152-cfgselector 5-1: config 0 descriptor?? [ 1215.344060][T15657] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1215.352158][T15657] r8152-cfgselector 5-1: bad CDC descriptors [ 1215.372044][T15657] r8152-cfgselector 5-1: USB disconnect, device number 46 [ 1216.298876][T15657] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1216.490636][T15657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 56, changing to 9 [ 1216.544288][T23417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5525'. [ 1216.560448][T15657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8703, setting to 1024 [ 1216.591061][T23417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5525'. [ 1216.610713][T15657] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1216.662656][T15657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.713610][T15657] usb 2-1: config 0 descriptor?? [ 1216.952996][T15657] ath6kl: Failed to submit usb control message: -71 [ 1216.970100][T15657] ath6kl: unable to send the bmi data to the device: -71 [ 1216.984581][T15657] ath6kl: Unable to send get target info: -71 [ 1217.016485][T15657] ath6kl: Failed to init ath6kl core: -71 [ 1217.044145][T15657] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1217.092792][T15657] usb 2-1: USB disconnect, device number 6 [ 1217.741817][ T5917] usbhid 1-1:0.0: can't add hid device: -71 [ 1217.764366][ T5917] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1217.820310][T15657] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1217.830818][T23432] syzkaller0: entered promiscuous mode [ 1217.836628][T23432] syzkaller0: entered allmulticast mode [ 1217.877938][ T5917] usb 1-1: USB disconnect, device number 4 [ 1217.878350][T23432] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1218.019335][T15657] usb 4-1: Using ep0 maxpacket: 16 [ 1218.035286][T23429] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1218.085204][T15657] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1218.111253][T15657] usb 4-1: no configurations [ 1218.128315][T23442] binder: 23441:23442 ioctl c0306201 0 returned -14 [ 1218.148963][T15657] usb 4-1: can't read configurations, error -22 [ 1218.183826][T15631] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1218.454883][T15631] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1218.510741][T23439] netlink: 'syz.0.5533': attribute type 46 has an invalid length. [ 1218.520349][T15631] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1218.609608][T15631] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1218.630258][T15631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.683196][T23436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1218.742337][T15631] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1219.164062][T15657] usb 2-1: USB disconnect, device number 7 [ 1219.350412][T23468] netlink: 'syz.5.5542': attribute type 4 has an invalid length. [ 1219.412167][T23469] netlink: 'syz.5.5542': attribute type 4 has an invalid length. [ 1220.014330][T23485] binder: 23484:23485 ioctl c0306201 0 returned -14 [ 1220.052395][T23477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.065685][T23477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.168869][T15640] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1220.318944][T15640] usb 1-1: device descriptor read/64, error -71 [ 1220.319223][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1220.499894][ T9] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1220.509461][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1220.524428][ T24] usb 2-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 1220.553704][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1220.572017][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1220.578845][T15640] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1220.591640][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1220.602687][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.612999][ T24] usb 2-1: Product: syz [ 1220.618486][ T24] usb 2-1: Manufacturer: syz [ 1220.623702][ T24] usb 2-1: SerialNumber: syz [ 1220.625215][T23494] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1220.678845][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1220.686243][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1220.696338][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1220.707982][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1220.721670][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1220.731049][T15640] usb 1-1: device descriptor read/64, error -71 [ 1220.737453][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.745706][ T9] usb 6-1: Product: syz [ 1220.750044][ T9] usb 6-1: Manufacturer: syz [ 1220.754752][ T9] usb 6-1: SerialNumber: syz [ 1220.765074][ T9] usb 6-1: config 0 descriptor?? [ 1220.775670][T23490] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1220.806114][ T9] mceusb 6-1:0.0: mceusb_dev_probe: device setup failed! [ 1220.818493][ T9] mceusb 6-1:0.0: probe with driver mceusb failed with error -12 [ 1220.839855][T15640] usb usb1-port1: attempt power cycle [ 1220.875061][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1220.892018][ T24] cdc_ncm 2-1:1.0: bind() failure [ 1221.018548][ T24] usb 2-1: USB disconnect, device number 8 [ 1221.107346][T15631] usb 6-1: USB disconnect, device number 93 [ 1221.188874][T15640] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1221.220204][T15640] usb 1-1: device descriptor read/8, error -71 [ 1221.514228][T15640] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1221.621331][T15640] usb 1-1: device descriptor read/8, error -71 [ 1221.754932][T15640] usb usb1-port1: unable to enumerate USB device [ 1221.988797][ T9] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 1222.153364][ T9] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.163815][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1222.227992][T23524] netlink: 'syz.3.5561': attribute type 4 has an invalid length. [ 1222.237390][ T9] usb 6-1: New USB device found, idVendor=0465, idProduct=c71b, bcdDevice= 0.00 [ 1222.270003][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.290890][T23525] netlink: 'syz.3.5561': attribute type 4 has an invalid length. [ 1222.323650][ T9] usb 6-1: config 0 descriptor?? [ 1222.515927][ T9] usbhid 6-1:0.0: can't add hid device: -22 [ 1222.535354][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 1223.047243][T23533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.057329][ T30] audit: type=1326 audit(1760504506.386:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23529 comm="syz.4.5562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f074b18eec9 code=0x0 [ 1223.101692][T23533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.147107][T23536] binder: 23535:23536 ioctl c0306201 0 returned -14 [ 1223.239311][ T9] usb 6-1: USB disconnect, device number 94 [ 1223.369157][T15657] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1223.528782][T15657] usb 1-1: device descriptor read/64, error -71 [ 1223.808782][T15657] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1223.948878][T15657] usb 1-1: device descriptor read/64, error -71 [ 1223.957946][ T30] audit: type=1326 audit(1760504507.286:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.4.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b18eec9 code=0x7ffc0000 [ 1224.069457][T15657] usb usb1-port1: attempt power cycle [ 1224.087309][ T30] audit: type=1326 audit(1760504507.316:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.4.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b18eec9 code=0x7ffc0000 [ 1224.149225][ T30] audit: type=1326 audit(1760504507.326:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.4.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f074b18eec9 code=0x7ffc0000 [ 1224.208851][ T30] audit: type=1326 audit(1760504507.326:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.4.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b18eec9 code=0x7ffc0000 [ 1224.234837][ T30] audit: type=1326 audit(1760504507.326:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.4.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b18eec9 code=0x7ffc0000 [ 1224.333024][ T30] audit: type=1326 audit(1760504507.326:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.4.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b18eec9 code=0x7ffc0000 [ 1224.363759][ T30] audit: type=1326 audit(1760504507.326:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.4.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b18eec9 code=0x7ffc0000 [ 1224.386452][ T30] audit: type=1326 audit(1760504507.326:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.4.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f074b18eec9 code=0x7ffc0000 [ 1224.451942][ T30] audit: type=1326 audit(1760504507.326:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.4.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b18eec9 code=0x7ffc0000 [ 1224.559918][T15657] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1224.589520][T15657] usb 1-1: device descriptor read/8, error -71 [ 1224.828856][T15657] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1224.851403][T23567] netem: change failed [ 1224.931028][T23560] binder: 23557:23560 ioctl 40046205 0 returned -22 [ 1224.959771][T15657] usb 1-1: device descriptor read/8, error -71 [ 1225.089379][T15657] usb usb1-port1: unable to enumerate USB device [ 1226.167748][T23595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1227.048917][T15640] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1227.058875][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1227.138867][ T5831] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1227.208802][T15640] usb 4-1: device descriptor read/64, error -71 [ 1227.240669][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1227.260260][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1227.268506][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.329168][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1227.339683][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1227.369418][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1227.379505][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1227.406533][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.424671][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1227.462789][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1227.472270][ T5831] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1227.483048][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.491177][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.506255][ T5831] usb 6-1: config 0 descriptor?? [ 1227.512903][T23608] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1227.572980][T23618] batadv_slave_1: entered promiscuous mode [ 1227.614387][T23618] fuse: Unknown parameter '§"@Ãv¶WRü®Äf¯óäÏár‰J-Æá¶îÆñåF™Q™Sã1à9´ŠH½¬(Ùâ¶ÕT»³;ÿ0£Vò)éª_L*âãÛľw‹‰ÆtÑ.ø6€ˆÏKâB°Èúncò`_‚˜ïcÒJ´ZÌ$ÜâX@©ú@ô#;T µ/¡½EÌ;ÏLùÃ)¾|Öß|€}sȬ±‰Ór£4;0x000000000000002b' [ 1227.674922][T23618] batadv_slave_1: left promiscuous mode [ 1227.741945][ T9] usb 5-1: usb_control_msg returned -32 [ 1227.768113][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1227.979889][ T5831] aureal 0003:0755:2626.0043: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 1227.991179][ T5831] aureal 0003:0755:2626.0043: unknown main item tag 0x6 [ 1227.998579][ T5831] aureal 0003:0755:2626.0043: report_id 29495 is invalid [ 1228.006005][T15640] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 1228.013871][ T5831] aureal 0003:0755:2626.0043: item 0 2 1 8 parsing failed [ 1228.022571][ T5831] aureal 0003:0755:2626.0043: probe with driver aureal failed with error -22 [ 1228.182471][T15657] usb 6-1: USB disconnect, device number 95 [ 1228.183910][T15640] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 1228.199040][T15640] usb 4-1: config 0 has no interface number 0 [ 1228.207364][T15640] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1228.219105][T15640] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.232264][T15640] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 1228.242915][T15640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.259366][T15640] usb 4-1: config 0 descriptor?? [ 1228.534871][T23634] FAULT_INJECTION: forcing a failure. [ 1228.534871][T23634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.550060][T23634] CPU: 1 UID: 0 PID: 23634 Comm: syz.0.5595 Not tainted syzkaller #0 PREEMPT(full) [ 1228.550087][T23634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1228.550098][T23634] Call Trace: [ 1228.550107][T23634] [ 1228.550116][T23634] dump_stack_lvl+0x189/0x250 [ 1228.550141][T23634] ? __pfx____ratelimit+0x10/0x10 [ 1228.550166][T23634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1228.550182][T23634] ? __pfx__printk+0x10/0x10 [ 1228.550212][T23634] should_fail_ex+0x414/0x560 [ 1228.550243][T23634] _copy_from_user+0x2d/0xb0 [ 1228.550266][T23634] __copy_msghdr+0x3c5/0x5b0 [ 1228.550298][T23634] ___sys_sendmsg+0x1a5/0x2a0 [ 1228.550318][T23634] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.550369][T23634] ? __fget_files+0x2a/0x420 [ 1228.550390][T23634] ? __fget_files+0x3a0/0x420 [ 1228.550421][T23634] __sys_sendmmsg+0x227/0x430 [ 1228.550444][T23634] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1228.550470][T23634] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1228.550507][T23634] ? ksys_write+0x22a/0x250 [ 1228.550529][T23634] ? __pfx_ksys_write+0x10/0x10 [ 1228.550553][T23634] __x64_sys_sendmmsg+0xa0/0xc0 [ 1228.550573][T23634] do_syscall_64+0xfa/0xfa0 [ 1228.550591][T23634] ? lockdep_hardirqs_on+0x9c/0x150 [ 1228.550609][T23634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.550626][T23634] ? clear_bhb_loop+0x60/0xb0 [ 1228.550648][T23634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.550665][T23634] RIP: 0033:0x7fb7d678eec9 [ 1228.550690][T23634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.550703][T23634] RSP: 002b:00007fb7d7662038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1228.550723][T23634] RAX: ffffffffffffffda RBX: 00007fb7d69e5fa0 RCX: 00007fb7d678eec9 [ 1228.550735][T23634] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000003 [ 1228.550750][T23634] RBP: 00007fb7d7662090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.550760][T23634] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.550770][T23634] R13: 00007fb7d69e6038 R14: 00007fb7d69e5fa0 R15: 00007fb7d6b0fa28 [ 1228.550796][T23634] [ 1229.040970][T23636] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1229.132767][T15640] usbhid 4-1:0.32: can't add hid device: -71 [ 1229.140629][T15640] usbhid 4-1:0.32: probe with driver usbhid failed with error -71 [ 1229.196701][T15640] usb 4-1: USB disconnect, device number 126 [ 1229.555049][T23672] fuse: Unknown parameter 'fåúw;j:ü1„¬šÏ!Á¿d' [ 1229.846401][T23674] xt_hashlimit: max too large, truncated to 1048576 [ 1229.870019][T23674] xt_bpf: check failed: parse error [ 1230.267348][T15640] usb 5-1: USB disconnect, device number 47 [ 1231.008857][T15640] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1231.028833][ T5831] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1231.118357][ T6480] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.159625][ T6480] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.168395][ T6480] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.197730][T15640] usb 5-1: Using ep0 maxpacket: 16 [ 1231.205735][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.249364][T15640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.249416][T15640] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1231.249435][T15640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.251220][T15640] usb 5-1: config 0 descriptor?? [ 1231.283501][ T6480] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.283601][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.283647][ T5831] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1231.283694][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.291441][ T5831] usb 4-1: config 0 descriptor?? [ 1231.662256][T15640] kye 0003:0458:0087.0044: unknown main item tag 0x0 [ 1231.678894][T15640] kye 0003:0458:0087.0044: unknown main item tag 0x0 [ 1231.692287][T15640] kye 0003:0458:0087.0044: unknown main item tag 0x0 [ 1231.711861][ T5831] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1231.731735][T15640] kye 0003:0458:0087.0044: unknown main item tag 0x0 [ 1231.760144][ T5831] cp2112 0003:10C4:EA90.0045: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1231.771631][T15640] kye 0003:0458:0087.0044: unknown main item tag 0x0 [ 1231.778372][T15640] kye 0003:0458:0087.0044: unknown main item tag 0x0 [ 1231.817915][T15640] kye 0003:0458:0087.0044: unknown main item tag 0x0 [ 1231.892706][T15640] kye 0003:0458:0087.0044: unknown main item tag 0x0 [ 1231.910060][ T5831] cp2112 0003:10C4:EA90.0045: Part Number: 0x82 Device Version: 0xFE [ 1231.939947][T15640] kye 0003:0458:0087.0044: hidraw1: USB HID v0.09 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 1232.053206][T23709] binder: 23698:23709 ioctl 40046205 0 returned -22 [ 1232.134191][T15640] usb 5-1: USB disconnect, device number 48 [ 1232.811016][T23722] cp2112 0003:10C4:EA90.0045: Error starting transaction: -38 [ 1232.942125][T23723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5617'. [ 1232.957029][ T5831] usb 4-1: reset high-speed USB device number 127 using dummy_hcd [ 1234.036255][T23729] binder: BINDER_SET_CONTEXT_MGR already set [ 1234.056418][T23729] binder: 23728:23729 ioctl 4018620d 200000004a80 returned -16 [ 1234.306886][T23737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5622'. [ 1234.650037][T23745] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5624'. [ 1234.785692][T23750] FAULT_INJECTION: forcing a failure. [ 1234.785692][T23750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1234.830666][T23750] CPU: 1 UID: 0 PID: 23750 Comm: syz.3.5625 Not tainted syzkaller #0 PREEMPT(full) [ 1234.830693][T23750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1234.830704][T23750] Call Trace: [ 1234.830711][T23750] [ 1234.830719][T23750] dump_stack_lvl+0x189/0x250 [ 1234.830744][T23750] ? __pfx____ratelimit+0x10/0x10 [ 1234.830770][T23750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1234.830788][T23750] ? __pfx__printk+0x10/0x10 [ 1234.830807][T23750] ? __might_fault+0xb0/0x130 [ 1234.830833][T23750] should_fail_ex+0x414/0x560 [ 1234.830863][T23750] _copy_from_iter+0x1de/0x1790 [ 1234.830887][T23750] ? __lock_acquire+0xab9/0xd20 [ 1234.830911][T23750] ? __pfx__copy_from_iter+0x10/0x10 [ 1234.830933][T23750] ? raw_sendmsg+0x626/0x18b0 [ 1234.830953][T23750] raw_sendmsg+0xfd1/0x18b0 [ 1234.830980][T23750] ? __pfx_raw_sendmsg+0x10/0x10 [ 1234.831010][T23750] ? aa_sk_perm+0x81e/0x950 [ 1234.831028][T23750] ? __pfx_aa_sk_perm+0x10/0x10 [ 1234.831041][T23750] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 1234.831060][T23750] ? sock_rps_record_flow+0x19/0x410 [ 1234.831081][T23750] ? inet_sendmsg+0x2f4/0x370 [ 1234.831098][T23750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1234.831119][T23750] __sock_sendmsg+0x19c/0x270 [ 1234.831139][T23750] ____sys_sendmsg+0x52d/0x830 [ 1234.831165][T23750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1234.831192][T23750] ? import_iovec+0x74/0xa0 [ 1234.831213][T23750] ___sys_sendmsg+0x21f/0x2a0 [ 1234.831228][T23750] ? __pfx____sys_sendmsg+0x10/0x10 [ 1234.831268][T23750] ? __fget_files+0x2a/0x420 [ 1234.831285][T23750] ? __fget_files+0x3a0/0x420 [ 1234.831309][T23750] __sys_sendmmsg+0x227/0x430 [ 1234.831327][T23750] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1234.831347][T23750] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1234.831375][T23750] ? ksys_write+0x22a/0x250 [ 1234.831392][T23750] ? __pfx_ksys_write+0x10/0x10 [ 1234.831411][T23750] __x64_sys_sendmmsg+0xa0/0xc0 [ 1234.831426][T23750] do_syscall_64+0xfa/0xfa0 [ 1234.831439][T23750] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.831453][T23750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.831467][T23750] ? clear_bhb_loop+0x60/0xb0 [ 1234.831484][T23750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.831505][T23750] RIP: 0033:0x7f4d2bf8eec9 [ 1234.831519][T23750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.831531][T23750] RSP: 002b:00007f4d2cd86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1234.831548][T23750] RAX: ffffffffffffffda RBX: 00007f4d2c1e5fa0 RCX: 00007f4d2bf8eec9 [ 1234.831559][T23750] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000003 [ 1234.831567][T23750] RBP: 00007f4d2cd86090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.831576][T23750] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.831585][T23750] R13: 00007f4d2c1e6038 R14: 00007f4d2c1e5fa0 R15: 00007f4d2c30fa28 [ 1234.831608][T23750] [ 1235.136992][T15640] usb 4-1: USB disconnect, device number 127 [ 1235.780763][T23769] binder: BINDER_SET_CONTEXT_MGR already set [ 1235.787501][T23769] binder: 23768:23769 ioctl 4018620d 200000004a80 returned -16 [ 1236.428813][T15640] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1236.599499][T15640] usb 6-1: Using ep0 maxpacket: 8 [ 1236.619692][T15640] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1236.640661][T15640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.664408][T15640] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1236.682072][T15640] pvrusb2: ********** [ 1236.693301][T15640] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1236.706623][T15640] pvrusb2: Important functionality might not be entirely working. [ 1236.716211][T15640] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1236.727792][T15640] pvrusb2: ********** [ 1236.891198][ T2344] pvrusb2: Invalid write control endpoint [ 1236.980805][ T5831] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 1237.064646][T23805] netlink: 'syz.1.5643': attribute type 4 has an invalid length. [ 1237.105472][ T2344] pvrusb2: Invalid write control endpoint [ 1237.137628][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1237.151019][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1237.160694][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1237.168435][ T5831] usb 1-1: config 0 has no interface number 0 [ 1237.191001][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1237.204157][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1237.219000][ T2344] pvrusb2: Device being rendered inoperable [ 1237.232774][T23788] pvrusb2: Attempted to execute control transfer when device not ok [ 1237.232772][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1237.257704][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1237.266800][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1237.274711][ T5831] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1237.274739][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.277442][ T5831] usb 1-1: config 0 descriptor?? [ 1237.301483][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1237.314147][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1237.327724][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1237.345063][T23801] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1237.358145][ T5831] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1237.571945][T23801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5642'. [ 1237.581154][ T5831] usb 1-1: USB disconnect, device number 13 [ 1238.204691][T23825] all: renamed from lo (while UP) [ 1238.289275][ T5831] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1238.463051][ T5831] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1238.471584][ T5831] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1238.483035][ T5831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1238.493699][ T5831] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1238.503349][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1238.513324][ T5831] usb 2-1: Product: syz [ 1238.517675][ T5831] usb 2-1: Manufacturer: syz [ 1238.530327][ T5831] usb 2-1: SerialNumber: syz [ 1238.533685][T15657] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1238.540715][ T5831] usb 2-1: config 0 descriptor?? [ 1238.553451][ T5831] hub 2-1:0.0: bad descriptor, ignoring hub [ 1238.565448][ T5831] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1238.575729][ T5831] usb 2-1: selecting invalid altsetting 0 [ 1238.719729][T15657] usb 1-1: Using ep0 maxpacket: 32 [ 1238.737098][T15657] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.758375][T15657] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1238.781365][T15657] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1238.793956][T15657] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1238.811273][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.817566][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.837865][T15657] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1238.847797][T15657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.878184][T15657] usb 1-1: Product: syz [ 1238.897359][T15657] usb 1-1: Manufacturer: syz [ 1238.903041][T15657] usb 1-1: SerialNumber: syz [ 1238.928120][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1238.938922][T15657] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input85 [ 1239.112086][T23823] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 1239.138749][T15657] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1239.154007][T15657] (id 0x00) [ 1239.186916][ T24] usb 6-1: USB disconnect, device number 96 [ 1239.268784][T15657] rc_core: IR keymap rc-imon-pad not found [ 1239.279775][T23823] usb 2-1: device firmware changed [ 1239.299249][T15657] Registered IR keymap rc-empty [ 1239.304223][T15657] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1239.304916][T15640] usb 2-1: USB disconnect, device number 9 [ 1239.358380][T15657] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1239.411001][T15657] imon:send_packet: packet tx failed (-71) [ 1239.442962][T15657] imon 1-1:155.0: remote input dev register failed [ 1239.457993][T15657] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 1239.518727][T23850] FAULT_INJECTION: forcing a failure. [ 1239.518727][T23850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.549218][T15657] imon 1-1:155.0: unable to initialize intf0, err 0 [ 1239.549452][T23851] netlink: 'syz.4.5656': attribute type 4 has an invalid length. [ 1239.555856][T15657] imon:imon_probe: failed to initialize context! [ 1239.555877][T15657] imon 1-1:155.0: unable to register, err -19 [ 1239.586806][T15657] usb 1-1: USB disconnect, device number 14 [ 1239.608909][T15640] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1239.616588][T23850] CPU: 0 UID: 0 PID: 23850 Comm: syz.5.5654 Not tainted syzkaller #0 PREEMPT(full) [ 1239.616613][T23850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1239.616624][T23850] Call Trace: [ 1239.616633][T23850] [ 1239.616641][T23850] dump_stack_lvl+0x189/0x250 [ 1239.616667][T23850] ? __pfx____ratelimit+0x10/0x10 [ 1239.616693][T23850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1239.616712][T23850] ? __pfx__printk+0x10/0x10 [ 1239.616743][T23850] should_fail_ex+0x414/0x560 [ 1239.616775][T23850] _copy_to_user+0x31/0xb0 [ 1239.616801][T23850] simple_read_from_buffer+0xe1/0x170 [ 1239.616828][T23850] proc_fail_nth_read+0x1b3/0x220 [ 1239.616857][T23850] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.616887][T23850] ? rw_verify_area+0x2a6/0x4d0 [ 1239.616905][T23850] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.616933][T23850] vfs_read+0x200/0xa30 [ 1239.616952][T23850] ? fdget_pos+0x247/0x320 [ 1239.616977][T23850] ? __pfx___mutex_lock+0x10/0x10 [ 1239.616997][T23850] ? __pfx_vfs_read+0x10/0x10 [ 1239.617017][T23850] ? __fget_files+0x2a/0x420 [ 1239.617048][T23850] ? __fget_files+0x3a0/0x420 [ 1239.617068][T23850] ? __fget_files+0x2a/0x420 [ 1239.617098][T23850] ksys_read+0x145/0x250 [ 1239.617120][T23850] ? __pfx_ksys_read+0x10/0x10 [ 1239.617143][T23850] ? do_syscall_64+0xbe/0xfa0 [ 1239.617165][T23850] do_syscall_64+0xfa/0xfa0 [ 1239.617182][T23850] ? lockdep_hardirqs_on+0x9c/0x150 [ 1239.617201][T23850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.617219][T23850] ? clear_bhb_loop+0x60/0xb0 [ 1239.617242][T23850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.617268][T23850] RIP: 0033:0x7ff343b8d8dc [ 1239.617286][T23850] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1239.617301][T23850] RSP: 002b:00007ff3449b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1239.617322][T23850] RAX: ffffffffffffffda RBX: 00007ff343de6180 RCX: 00007ff343b8d8dc [ 1239.617336][T23850] RDX: 000000000000000f RSI: 00007ff3449b60a0 RDI: 0000000000000006 [ 1239.617348][T23850] RBP: 00007ff3449b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.617360][T23850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.617370][T23850] R13: 00007ff343de6218 R14: 00007ff343de6180 R15: 00007ff343f0fa28 [ 1239.617399][T23850] [ 1240.188192][T15640] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1240.215116][T15640] usb 2-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1240.248415][T15640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.264986][T15640] usb 2-1: Product: syz [ 1240.269787][T15640] usb 2-1: Manufacturer: syz [ 1240.274556][T15640] usb 2-1: SerialNumber: syz [ 1240.321010][T23865] binder: BINDER_SET_CONTEXT_MGR already set [ 1240.368239][T23865] binder: 23863:23865 ioctl 4018620d 200000004a80 returned -16 [ 1240.396873][T23869] binder: 23863:23869 ioctl c0306201 0 returned -14 [ 1240.550828][T15640] usbhid 2-1:1.0: can't add hid device: -71 [ 1240.573212][T15640] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1240.617294][T15640] usb 2-1: USB disconnect, device number 10 [ 1240.628059][T23877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5665'. [ 1240.900543][ T5831] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1241.159394][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1241.171598][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1241.207567][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1241.227426][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1241.288159][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1241.324243][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.332545][T15640] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1241.410062][ T5831] usb 5-1: config 0 descriptor?? [ 1241.520748][T15640] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1241.538871][T15640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.602461][T15640] usb 6-1: config 0 descriptor?? [ 1241.688903][T15657] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1241.814072][T15640] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1241.858831][T15657] usb 1-1: Using ep0 maxpacket: 32 [ 1241.859222][ T5831] plantronics 0003:047F:FFFF.0046: ignoring exceeding usage max [ 1241.866644][T15657] usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 1241.892639][T15640] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1241.913620][ T5831] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1241.931701][T15640] [drm] Initialized udl on minor 2 [ 1241.953922][T15657] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1241.966883][T15640] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1242.007150][T15640] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1242.047633][T15657] usb 1-1: config 1 has no interface number 1 [ 1242.088434][ T5831] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1242.114271][T15657] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 47, changing to 7 [ 1242.171131][T15657] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1242.173244][T15640] usb 6-1: USB disconnect, device number 97 [ 1242.186475][ T5831] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1242.188747][T15657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.227051][ T5831] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1242.294102][T15657] usb 1-1: Product: syz [ 1242.320663][T15657] usb 1-1: Manufacturer: syz [ 1242.325416][T15657] usb 1-1: SerialNumber: syz [ 1242.584683][T15657] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1242.593749][T15657] usb 1-1: 2:1 : format type 6 is not supported yet [ 1242.660282][T15657] usb 1-1: USB disconnect, device number 15 [ 1242.698281][T21080] udevd[21080]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1242.760026][ T24] usb 5-1: USB disconnect, device number 49 [ 1242.802066][T23912] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5672'. [ 1242.955415][T23914] binder: 23913:23914 ioctl c0306201 0 returned -14 [ 1242.969239][T15631] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1243.162143][T15631] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1243.176017][T15631] usb 4-1: config 25 has an invalid interface number: 105 but max is 0 [ 1243.192679][T15631] usb 4-1: config 25 has no interface number 0 [ 1243.208667][T15631] usb 4-1: config 25 interface 105 has no altsetting 0 [ 1243.219553][T15631] usb 4-1: New USB device found, idVendor=1f4d, idProduct=a115, bcdDevice=c5.ca [ 1243.229022][T15631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.237460][T15631] usb 4-1: Product: syz [ 1243.243043][T15631] usb 4-1: Manufacturer: syz [ 1243.250132][T15631] usb 4-1: SerialNumber: syz [ 1243.548657][T15631] usb 4-1: USB disconnect, device number 2 [ 1244.190166][T23945] binder: 23943:23945 ioctl c0306201 0 returned -14 [ 1244.461471][T23962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5687'. [ 1246.535923][T23984] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5698'. [ 1246.693704][T23987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5699'. [ 1246.736654][T15640] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1246.772122][T23987] vlan0: entered promiscuous mode [ 1246.778641][T23987] macvtap0: entered promiscuous mode [ 1246.801036][T23990] loop9: detected capacity change from 0 to 7 [ 1246.812853][T23990] Dev loop9: unable to read RDB block 7 [ 1246.818481][T23990] loop9: unable to read partition table [ 1246.871644][T23990] loop9: partition table beyond EOD, truncated [ 1246.900078][T23990] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1246.923896][T15640] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1246.950080][T15640] usb 6-1: config 81 has an invalid interface number: 13 but max is 0 [ 1246.958292][T15640] usb 6-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.015775][T15640] usb 6-1: config 81 has no interface number 0 [ 1247.025828][T15640] usb 6-1: config 81 interface 13 has no altsetting 0 [ 1247.049654][T15640] usb 6-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 1247.063328][T15640] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.072545][T15640] usb 6-1: Product: syz [ 1247.077002][T15640] usb 6-1: Manufacturer: syz [ 1247.086634][T24000] FAULT_INJECTION: forcing a failure. [ 1247.086634][T24000] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.102974][T15640] usb 6-1: SerialNumber: syz [ 1247.109742][T24000] CPU: 0 UID: 0 PID: 24000 Comm: syz.0.5703 Not tainted syzkaller #0 PREEMPT(full) [ 1247.109767][T24000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1247.109779][T24000] Call Trace: [ 1247.109786][T24000] [ 1247.109793][T24000] dump_stack_lvl+0x189/0x250 [ 1247.109828][T24000] ? __pfx____ratelimit+0x10/0x10 [ 1247.109861][T24000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1247.109880][T24000] ? __pfx__printk+0x10/0x10 [ 1247.109903][T24000] ? __pfx___might_resched+0x10/0x10 [ 1247.109931][T24000] should_fail_ex+0x414/0x560 [ 1247.109962][T24000] should_failslab+0xa8/0x100 [ 1247.109987][T24000] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1247.110008][T24000] ? __alloc_skb+0x112/0x2d0 [ 1247.110037][T24000] __alloc_skb+0x112/0x2d0 [ 1247.110063][T24000] netlink_ack+0x146/0xa50 [ 1247.110085][T24000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1247.110106][T24000] ? ref_tracker_free+0x63a/0x7d0 [ 1247.110126][T24000] ? __asan_memcpy+0x40/0x70 [ 1247.110143][T24000] ? __pfx_ref_tracker_free+0x10/0x10 [ 1247.110169][T24000] netlink_rcv_skb+0x28c/0x470 [ 1247.110195][T24000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1247.110225][T24000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1247.110258][T24000] ? netlink_deliver_tap+0x2e/0x1b0 [ 1247.110295][T24000] netlink_unicast+0x82f/0x9e0 [ 1247.110326][T24000] ? __pfx_netlink_unicast+0x10/0x10 [ 1247.110347][T24000] ? netlink_sendmsg+0x642/0xb30 [ 1247.110369][T24000] ? skb_put+0x11b/0x210 [ 1247.110394][T24000] netlink_sendmsg+0x805/0xb30 [ 1247.110425][T24000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.110461][T24000] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1247.110484][T24000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1247.110507][T24000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.110532][T24000] __sock_sendmsg+0x21c/0x270 [ 1247.110556][T24000] ____sys_sendmsg+0x505/0x830 [ 1247.110587][T24000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.110621][T24000] ? import_iovec+0x74/0xa0 [ 1247.110652][T24000] ___sys_sendmsg+0x21f/0x2a0 [ 1247.110673][T24000] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.110720][T24000] ? __fget_files+0x2a/0x420 [ 1247.110743][T24000] ? __fget_files+0x3a0/0x420 [ 1247.110769][T24000] __x64_sys_sendmsg+0x19b/0x260 [ 1247.110793][T24000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1247.110818][T24000] ? __pfx_ksys_write+0x10/0x10 [ 1247.110849][T24000] ? do_syscall_64+0xbe/0xfa0 [ 1247.110868][T24000] do_syscall_64+0xfa/0xfa0 [ 1247.110885][T24000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.110901][T24000] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1247.110918][T24000] ? clear_bhb_loop+0x60/0xb0 [ 1247.110940][T24000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.110958][T24000] RIP: 0033:0x7fb7d678eec9 [ 1247.110977][T24000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1247.110993][T24000] RSP: 002b:00007fb7d7662038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.111013][T24000] RAX: ffffffffffffffda RBX: 00007fb7d69e5fa0 RCX: 00007fb7d678eec9 [ 1247.111027][T24000] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1247.111040][T24000] RBP: 00007fb7d7662090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.111052][T24000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.111063][T24000] R13: 00007fb7d69e6038 R14: 00007fb7d69e5fa0 R15: 00007fb7d6b0fa28 [ 1247.111091][T24000] [ 1247.465187][T24002] erspan0: entered allmulticast mode [ 1247.673630][T15640] qmi_wwan 6-1:81.13: bogus CDC Union: master=0, slave=1 [ 1247.686958][T15640] qmi_wwan 6-1:81.13: probe with driver qmi_wwan failed with error -22 [ 1247.699363][T15640] usb 6-1: USB disconnect, device number 98 [ 1247.940678][T24014] fuse: Invalid uid '0x0000000000000005' [ 1248.001132][T24015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5706'. [ 1248.451281][T24025] netlink: 'syz.0.5708': attribute type 5 has an invalid length. [ 1248.788803][ T5831] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1249.158489][T24032] @: renamed from syz_tun (while UP) [ 1249.389708][ T5831] usb 1-1: config 0 has no interfaces? [ 1249.464055][ T5831] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1249.491632][ T5831] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1249.516960][ T5831] usb 1-1: Manufacturer: syz [ 1249.550659][ T5831] usb 1-1: config 0 descriptor?? [ 1250.519241][T15631] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1250.936925][T15631] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1250.964733][T15631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.012043][T15631] usb 5-1: Product: syz [ 1251.077036][T15631] usb 5-1: Manufacturer: syz [ 1251.178570][T15631] usb 5-1: SerialNumber: syz [ 1251.209448][T15631] usb 5-1: config 0 descriptor?? [ 1251.330972][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1251.330989][ T30] audit: type=1326 audit(1760504534.666:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24052 comm="syz.5.5716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff343b8eec9 code=0x0 [ 1251.443167][T15631] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1251.527087][ T24] usb 1-1: USB disconnect, device number 16 [ 1251.537141][T15631] usb 5-1: USB disconnect, device number 50 [ 1251.615334][T24047] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5713'. [ 1251.859040][T24066] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5719'. [ 1252.063059][ T30] audit: type=1326 audit(1760504535.396:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24078 comm="syz.4.5723" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f074b18eec9 code=0x0 [ 1252.117176][T24083] FAULT_INJECTION: forcing a failure. [ 1252.117176][T24083] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.158575][T24083] CPU: 0 UID: 0 PID: 24083 Comm: syz.4.5723 Not tainted syzkaller #0 PREEMPT(full) [ 1252.158599][T24083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1252.158613][T24083] Call Trace: [ 1252.158621][T24083] [ 1252.158630][T24083] dump_stack_lvl+0x189/0x250 [ 1252.158654][T24083] ? __pfx____ratelimit+0x10/0x10 [ 1252.158678][T24083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1252.158696][T24083] ? __pfx__printk+0x10/0x10 [ 1252.158717][T24083] ? __lock_acquire+0xab9/0xd20 [ 1252.158743][T24083] should_fail_ex+0x414/0x560 [ 1252.158773][T24083] should_failslab+0xa8/0x100 [ 1252.158794][T24083] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1252.158812][T24083] ? skb_clone+0x212/0x3a0 [ 1252.158832][T24083] skb_clone+0x212/0x3a0 [ 1252.158849][T24083] __netlink_deliver_tap+0x404/0x850 [ 1252.158884][T24083] ? netlink_deliver_tap+0x2e/0x1b0 [ 1252.158906][T24083] netlink_deliver_tap+0x19c/0x1b0 [ 1252.158930][T24083] netlink_unicast+0x7fa/0x9e0 [ 1252.158957][T24083] ? __pfx_netlink_unicast+0x10/0x10 [ 1252.158978][T24083] ? netlink_sendmsg+0x642/0xb30 [ 1252.159000][T24083] ? skb_put+0x11b/0x210 [ 1252.159024][T24083] netlink_sendmsg+0x805/0xb30 [ 1252.159056][T24083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.159084][T24083] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1252.159103][T24083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1252.159122][T24083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.159147][T24083] __sock_sendmsg+0x21c/0x270 [ 1252.159171][T24083] sock_sendmsg+0x158/0x230 [ 1252.159191][T24083] ? __pfx_sock_sendmsg+0x10/0x10 [ 1252.159222][T24083] ? __asan_memset+0x22/0x50 [ 1252.159238][T24083] ? iov_iter_bvec+0xb8/0x180 [ 1252.159259][T24083] splice_to_socket+0x8f5/0xf00 [ 1252.159304][T24083] ? __pfx_splice_to_socket+0x10/0x10 [ 1252.159362][T24083] ? register_lock_class+0x51/0x320 [ 1252.159390][T24083] ? __pfx_splice_to_socket+0x10/0x10 [ 1252.159411][T24083] direct_splice_actor+0x101/0x160 [ 1252.159445][T24083] splice_direct_to_actor+0x5a8/0xcc0 [ 1252.159481][T24083] ? __pfx_direct_splice_actor+0x10/0x10 [ 1252.159503][T24083] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1252.159532][T24083] do_splice_direct+0x181/0x270 [ 1252.159556][T24083] ? __pfx_do_splice_direct+0x10/0x10 [ 1252.159575][T24083] ? common_file_perm+0x1b5/0x230 [ 1252.159595][T24083] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1252.159617][T24083] ? bpf_lsm_file_permission+0x9/0x20 [ 1252.159640][T24083] ? security_file_permission+0x75/0x290 [ 1252.159668][T24083] ? rw_verify_area+0x255/0x4d0 [ 1252.159692][T24083] do_sendfile+0x4da/0x7e0 [ 1252.159716][T24083] ? __pfx_vfs_write+0x10/0x10 [ 1252.159741][T24083] ? __pfx_do_sendfile+0x10/0x10 [ 1252.159764][T24083] ? __fget_files+0x3a0/0x420 [ 1252.159797][T24083] __se_sys_sendfile64+0x13e/0x190 [ 1252.159824][T24083] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1252.159850][T24083] ? do_syscall_64+0xbe/0xfa0 [ 1252.159873][T24083] do_syscall_64+0xfa/0xfa0 [ 1252.159889][T24083] ? lockdep_hardirqs_on+0x9c/0x150 [ 1252.159908][T24083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.159926][T24083] ? clear_bhb_loop+0x60/0xb0 [ 1252.159948][T24083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.159966][T24083] RIP: 0033:0x7f074b18eec9 [ 1252.159983][T24083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.159999][T24083] RSP: 002b:00007f07493d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1252.160018][T24083] RAX: ffffffffffffffda RBX: 00007f074b3e6090 RCX: 00007f074b18eec9 [ 1252.160031][T24083] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 1252.160042][T24083] RBP: 00007f07493d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.160053][T24083] R10: 0000000000000401 R11: 0000000000000246 R12: 0000000000000001 [ 1252.160064][T24083] R13: 00007f074b3e6128 R14: 00007f074b3e6090 R15: 00007f074b50fa28 [ 1252.160096][T24083] [ 1252.709220][T24088] netlink: 'syz.3.5725': attribute type 21 has an invalid length. [ 1252.717113][T24088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5725'. [ 1252.789663][T24089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5722'. [ 1254.126681][T24122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5734'. [ 1254.539724][T24134] fuse: Unknown parameter 'mGN‡8o«ad' [ 1254.618520][T15640] IPVS: starting estimator thread 0... [ 1254.624306][ T5831] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1254.739019][T24135] IPVS: using max 49 ests per chain, 117600 per kthread [ 1254.831321][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 1254.920544][ T5831] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1254.928781][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1254.962139][ T5831] usb 4-1: config 0 has no interface number 0 [ 1254.991622][ T5831] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.017580][ T5831] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.032038][ T5831] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1255.043320][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.061214][ T5831] usb 4-1: config 0 descriptor?? [ 1255.176421][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1255.264664][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.297163][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.379700][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.396020][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.422737][ T24] usb 2-1: Product: syz [ 1255.432906][ T24] usb 2-1: Manufacturer: syz [ 1255.452053][ T24] usb 2-1: SerialNumber: syz [ 1255.691873][T24137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.704611][T24137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.905273][ T5831] usbhid 4-1:0.1: can't add hid device: -71 [ 1255.911757][ T5831] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1255.963135][T24144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5741'. [ 1256.100765][ T5831] usb 4-1: USB disconnect, device number 3 [ 1256.154580][T24147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5742'. [ 1256.177814][T24148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1256.177854][T24147] netlink: del zone limit has 4 unknown bytes [ 1256.280146][T24137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.307529][T24137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.324027][ T24] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1256.330413][ T24] cdc_ncm 2-1:1.0: bind() failure [ 1256.471656][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1256.545797][ T24] cdc_ncm 2-1:1.1: bind() failure [ 1256.772554][T24164] FAULT_INJECTION: forcing a failure. [ 1256.772554][T24164] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.811823][T24164] CPU: 0 UID: 0 PID: 24164 Comm: syz.3.5749 Not tainted syzkaller #0 PREEMPT(full) [ 1256.811858][T24164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1256.811869][T24164] Call Trace: [ 1256.811878][T24164] [ 1256.811887][T24164] dump_stack_lvl+0x189/0x250 [ 1256.811912][T24164] ? __pfx____ratelimit+0x10/0x10 [ 1256.811939][T24164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.811959][T24164] ? __pfx__printk+0x10/0x10 [ 1256.811985][T24164] ? __pfx___might_resched+0x10/0x10 [ 1256.812008][T24164] ? fs_reclaim_acquire+0x7d/0x100 [ 1256.812035][T24164] should_fail_ex+0x414/0x560 [ 1256.812068][T24164] should_failslab+0xa8/0x100 [ 1256.812092][T24164] __kmalloc_noprof+0xcb/0x7f0 [ 1256.812111][T24164] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1256.812133][T24164] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1256.812162][T24164] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1256.812191][T24164] genl_family_rcv_msg_doit+0xb8/0x300 [ 1256.812218][T24164] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1256.812246][T24164] ? apparmor_capable+0x137/0x1b0 [ 1256.812272][T24164] ? bpf_lsm_capable+0x9/0x20 [ 1256.812289][T24164] ? security_capable+0x7e/0x2e0 [ 1256.812315][T24164] genl_rcv_msg+0x60e/0x790 [ 1256.812341][T24164] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1256.812363][T24164] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1256.812386][T24164] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 1256.812402][T24164] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1256.812428][T24164] ? __asan_memcpy+0x40/0x70 [ 1256.812445][T24164] ? __pfx_ref_tracker_free+0x10/0x10 [ 1256.812473][T24164] netlink_rcv_skb+0x208/0x470 [ 1256.812501][T24164] ? __lock_acquire+0xab9/0xd20 [ 1256.812524][T24164] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1256.812545][T24164] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1256.812588][T24164] ? down_read+0x1ad/0x2e0 [ 1256.812611][T24164] genl_rcv+0x28/0x40 [ 1256.812629][T24164] netlink_unicast+0x82f/0x9e0 [ 1256.812661][T24164] ? __pfx_netlink_unicast+0x10/0x10 [ 1256.812681][T24164] ? netlink_sendmsg+0x642/0xb30 [ 1256.812704][T24164] ? skb_put+0x11b/0x210 [ 1256.812733][T24164] netlink_sendmsg+0x805/0xb30 [ 1256.812768][T24164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1256.812796][T24164] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1256.812820][T24164] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1256.812849][T24164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1256.812876][T24164] __sock_sendmsg+0x21c/0x270 [ 1256.812902][T24164] ____sys_sendmsg+0x505/0x830 [ 1256.812938][T24164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1256.812974][T24164] ? import_iovec+0x74/0xa0 [ 1256.813002][T24164] ___sys_sendmsg+0x21f/0x2a0 [ 1256.813023][T24164] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.813079][T24164] ? __fget_files+0x2a/0x420 [ 1256.813099][T24164] ? __fget_files+0x3a0/0x420 [ 1256.813132][T24164] __x64_sys_sendmsg+0x19b/0x260 [ 1256.813153][T24164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1256.813182][T24164] ? __pfx_ksys_write+0x10/0x10 [ 1256.813206][T24164] ? do_syscall_64+0xbe/0xfa0 [ 1256.813228][T24164] do_syscall_64+0xfa/0xfa0 [ 1256.813245][T24164] ? lockdep_hardirqs_on+0x9c/0x150 [ 1256.813262][T24164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.813280][T24164] ? clear_bhb_loop+0x60/0xb0 [ 1256.813303][T24164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.813322][T24164] RIP: 0033:0x7f4d2bf8eec9 [ 1256.813339][T24164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.813355][T24164] RSP: 002b:00007f4d2cd86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.813376][T24164] RAX: ffffffffffffffda RBX: 00007f4d2c1e5fa0 RCX: 00007f4d2bf8eec9 [ 1256.813390][T24164] RDX: 000000000000c004 RSI: 0000200000002bc0 RDI: 0000000000000004 [ 1256.813402][T24164] RBP: 00007f4d2cd86090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.813415][T24164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.813430][T24164] R13: 00007f4d2c1e6038 R14: 00007f4d2c1e5fa0 R15: 00007f4d2c30fa28 [ 1256.813463][T24164] [ 1257.381692][ T30] audit: type=1326 audit(1760504540.706:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.3.5751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d2bf8eec9 code=0x0 [ 1257.433248][T24171] FAULT_INJECTION: forcing a failure. [ 1257.433248][T24171] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.450194][T24171] CPU: 0 UID: 0 PID: 24171 Comm: syz.3.5751 Not tainted syzkaller #0 PREEMPT(full) [ 1257.450220][T24171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1257.450231][T24171] Call Trace: [ 1257.450239][T24171] [ 1257.450248][T24171] dump_stack_lvl+0x189/0x250 [ 1257.450270][T24171] ? __pfx____ratelimit+0x10/0x10 [ 1257.450295][T24171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1257.450313][T24171] ? __pfx__printk+0x10/0x10 [ 1257.450338][T24171] ? __pfx___might_resched+0x10/0x10 [ 1257.450366][T24171] should_fail_ex+0x414/0x560 [ 1257.450398][T24171] should_failslab+0xa8/0x100 [ 1257.450421][T24171] __kmalloc_noprof+0xcb/0x7f0 [ 1257.450439][T24171] ? copy_splice_read+0x143/0xa50 [ 1257.450464][T24171] copy_splice_read+0x143/0xa50 [ 1257.450493][T24171] ? __pfx_copy_splice_read+0x10/0x10 [ 1257.450514][T24171] ? register_lock_class+0x51/0x320 [ 1257.450542][T24171] ? file_end_write+0xd8/0x250 [ 1257.450562][T24171] ? direct_splice_actor+0x10c/0x160 [ 1257.450584][T24171] ? __pfx_copy_splice_read+0x10/0x10 [ 1257.450601][T24171] splice_direct_to_actor+0x4a9/0xcc0 [ 1257.450639][T24171] ? __pfx_direct_splice_actor+0x10/0x10 [ 1257.450659][T24171] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1257.450689][T24171] do_splice_direct+0x181/0x270 [ 1257.450711][T24171] ? __pfx_do_splice_direct+0x10/0x10 [ 1257.450729][T24171] ? common_file_perm+0x1b5/0x230 [ 1257.450749][T24171] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1257.450772][T24171] ? bpf_lsm_file_permission+0x9/0x20 [ 1257.450793][T24171] ? security_file_permission+0x75/0x290 [ 1257.450817][T24171] ? rw_verify_area+0x255/0x4d0 [ 1257.450837][T24171] do_sendfile+0x4da/0x7e0 [ 1257.450861][T24171] ? __pfx_vfs_write+0x10/0x10 [ 1257.450884][T24171] ? __pfx_do_sendfile+0x10/0x10 [ 1257.450905][T24171] ? __fget_files+0x3a0/0x420 [ 1257.450936][T24171] __se_sys_sendfile64+0x13e/0x190 [ 1257.450961][T24171] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1257.450988][T24171] ? do_syscall_64+0xbe/0xfa0 [ 1257.451009][T24171] do_syscall_64+0xfa/0xfa0 [ 1257.451026][T24171] ? lockdep_hardirqs_on+0x9c/0x150 [ 1257.451043][T24171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.451060][T24171] ? clear_bhb_loop+0x60/0xb0 [ 1257.451090][T24171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.451108][T24171] RIP: 0033:0x7f4d2bf8eec9 [ 1257.451125][T24171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.451140][T24171] RSP: 002b:00007f4d2cd65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1257.451160][T24171] RAX: ffffffffffffffda RBX: 00007f4d2c1e6090 RCX: 00007f4d2bf8eec9 [ 1257.451174][T24171] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 1257.451186][T24171] RBP: 00007f4d2cd65090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.451197][T24171] R10: 0000000000000401 R11: 0000000000000246 R12: 0000000000000001 [ 1257.451208][T24171] R13: 00007f4d2c1e6128 R14: 00007f4d2c1e6090 R15: 00007f4d2c30fa28 [ 1257.451235][T24171] [ 1257.780411][ T24] usb 2-1: USB disconnect, device number 11 [ 1258.129329][T15631] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1258.281138][T15631] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1258.292539][T15631] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1258.302625][T15631] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 1258.327758][T15631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.348333][ T5831] hid_parser_main: 139 callbacks suppressed [ 1258.348348][ T5831] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 1258.405596][ T5831] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1258.547397][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1258.635587][T24173] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1258.652211][T15631] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1258.793137][T24188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5757'. [ 1258.810704][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1258.833071][ T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1258.893009][ T24] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 1258.907332][ T24] usb 2-1: config 220 has no interface number 2 [ 1258.997642][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1259.010915][T15631] usb 5-1: USB disconnect, device number 51 [ 1259.044293][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1259.049128][ T5831] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 1259.056540][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1259.114930][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1259.170867][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1259.180192][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.188196][ T24] usb 2-1: Product: syz [ 1259.193519][ T24] usb 2-1: Manufacturer: syz [ 1259.198229][ T24] usb 2-1: SerialNumber: syz [ 1259.233552][ T5831] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.249321][ T5831] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1259.270210][ T5831] usb 6-1: New USB device found, idVendor=1d76, idProduct=0101, bcdDevice= 0.00 [ 1259.313332][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1259.346025][ T5831] usb 6-1: SerialNumber: syz [ 1259.420042][ T5831] usb 6-1: invalid UAC_HEADER (v1) [ 1259.503705][ T5831] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1259.584240][ T5831] usb 6-1: USB disconnect, device number 99 [ 1259.622825][T22574] udevd[22574]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1259.778202][T24205] syzkaller0: entered promiscuous mode [ 1259.785594][T24205] syzkaller0: entered allmulticast mode [ 1259.794008][T24204] tipc: Enabled bearer , priority 0 [ 1259.829957][T24205] tipc: Resetting bearer [ 1259.924807][T24203] tipc: Resetting bearer [ 1259.951224][T24203] tipc: Disabling bearer [ 1259.963101][T24211] sctp: [Deprecated]: syz.0.5765 (pid 24211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1259.963101][T24211] Use struct sctp_sack_info instead [ 1261.119026][ T5831] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1261.187111][ T24] usb 2-1: selecting invalid altsetting 0 [ 1261.234538][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1261.249626][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 1261.265206][ T24] usb 2-1: selecting invalid altsetting 0 [ 1261.298794][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 1261.298809][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1261.322964][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1261.346329][ T5831] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.356088][ T24] usb 2-1: USB disconnect, device number 12 [ 1261.388935][ T5831] usb 1-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1261.398554][T24237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5771'. [ 1261.449939][ T5831] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1261.488606][ T5831] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1261.509511][ T5831] usb 1-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1261.548886][ T5831] usb 1-1: config 8 interface 0 has no altsetting 0 [ 1261.557993][ T5831] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1261.567621][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.575760][ T5831] usb 1-1: Product: syz [ 1261.580258][ T5831] usb 1-1: Manufacturer: syz [ 1261.584898][ T5831] usb 1-1: SerialNumber: syz [ 1261.746316][T15640] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 1261.755483][T15640] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1262.010463][ T5831] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1262.030712][ T5831] usb 1-1: selecting invalid altsetting 0 [ 1262.091774][ T5831] snd-usb-audio 1-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 1262.112380][ T5831] usb 1-1: USB disconnect, device number 17 [ 1262.175520][T21319] udevd[21319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1264.048839][T15631] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1264.188833][T15631] usb 4-1: device descriptor read/64, error -71 [ 1264.398943][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1264.400707][T24297] FAULT_INJECTION: forcing a failure. [ 1264.400707][T24297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.448848][T15631] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1264.514970][T24297] CPU: 1 UID: 0 PID: 24297 Comm: syz.4.5787 Not tainted syzkaller #0 PREEMPT(full) [ 1264.514996][T24297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1264.515008][T24297] Call Trace: [ 1264.515017][T24297] [ 1264.515027][T24297] dump_stack_lvl+0x189/0x250 [ 1264.515052][T24297] ? __pfx____ratelimit+0x10/0x10 [ 1264.515080][T24297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1264.515100][T24297] ? __pfx__printk+0x10/0x10 [ 1264.515120][T24297] ? __might_fault+0xb0/0x130 [ 1264.515152][T24297] should_fail_ex+0x414/0x560 [ 1264.515185][T24297] _copy_from_user+0x2d/0xb0 [ 1264.515210][T24297] kstrtouint_from_user+0xc4/0x170 [ 1264.515234][T24297] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1264.515272][T24297] proc_fail_nth_write+0x88/0x200 [ 1264.515299][T24297] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1264.515330][T24297] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1264.515359][T24297] vfs_write+0x27e/0xb30 [ 1264.515389][T24297] ? __pfx_vfs_write+0x10/0x10 [ 1264.515411][T24297] ? __fget_files+0x2a/0x420 [ 1264.515437][T24297] ? __fget_files+0x3a0/0x420 [ 1264.515458][T24297] ? __fget_files+0x2a/0x420 [ 1264.515489][T24297] ksys_write+0x145/0x250 [ 1264.515513][T24297] ? __pfx_ksys_write+0x10/0x10 [ 1264.515537][T24297] ? do_syscall_64+0xbe/0xfa0 [ 1264.515560][T24297] do_syscall_64+0xfa/0xfa0 [ 1264.515578][T24297] ? lockdep_hardirqs_on+0x9c/0x150 [ 1264.515596][T24297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.515614][T24297] ? clear_bhb_loop+0x60/0xb0 [ 1264.515637][T24297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.515654][T24297] RIP: 0033:0x7f074b18d97f [ 1264.515671][T24297] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1264.515693][T24297] RSP: 002b:00007f07493f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1264.515715][T24297] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f074b18d97f [ 1264.515729][T24297] RDX: 0000000000000001 RSI: 00007f07493f60a0 RDI: 0000000000000004 [ 1264.515740][T24297] RBP: 00007f07493f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.515752][T24297] R10: 0000000000040000 R11: 0000000000000293 R12: 0000000000000001 [ 1264.515765][T24297] R13: 00007f074b3e6038 R14: 00007f074b3e5fa0 R15: 00007f074b50fa28 [ 1264.515797][T24297] [ 1264.918758][T15631] usb 4-1: device descriptor read/64, error -71 [ 1265.089106][T15631] usb usb4-port1: attempt power cycle [ 1265.455441][T24311] sctp: [Deprecated]: syz.4.5791 (pid 24311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1265.455441][T24311] Use struct sctp_sack_info instead [ 1265.490985][T15631] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1265.532229][T15631] usb 4-1: device descriptor read/8, error -71 [ 1265.715254][ T24] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1265.731844][T24316] xt_CT: No such helper "snmp" [ 1265.751833][ T24] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1265.788816][T15631] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1265.802821][T24313] netlink: 'syz.0.5792': attribute type 4 has an invalid length. [ 1265.839419][T15631] usb 4-1: device descriptor read/8, error -71 [ 1265.959211][T15631] usb usb4-port1: unable to enumerate USB device [ 1268.064030][T24373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5806'. [ 1268.107894][T24373] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5806'. [ 1268.328767][T15631] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1268.463483][T15870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1268.491741][T15631] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.503601][T15631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1268.527298][T15631] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1268.551155][T15870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1268.560064][T15870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1268.567776][T15870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1268.575367][T15870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1268.588104][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1268.599127][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1268.606538][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1268.617419][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1268.625124][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1268.651918][T15631] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1268.670314][T15631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.685531][T15631] usb 6-1: config 0 descriptor?? [ 1269.043220][T15631] ath6kl: Failed to submit usb control message: -71 [ 1269.073510][T15631] ath6kl: unable to send the bmi data to the device: -71 [ 1269.108060][T15631] ath6kl: Unable to send get target info: -71 [ 1269.168512][T15631] ath6kl: Failed to init ath6kl core: -71 [ 1269.179813][T15631] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1269.214843][T24380] chnl_net:caif_netlink_parms(): no params data found [ 1269.231029][T24389] fuse: Bad value for 'user_id' [ 1269.236001][T24389] fuse: Bad value for 'user_id' [ 1269.237123][T15631] usb 6-1: USB disconnect, device number 100 [ 1269.437487][T24380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.445097][T24380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.454213][T24380] bridge_slave_0: entered allmulticast mode [ 1269.462591][T24380] bridge_slave_0: entered promiscuous mode [ 1269.474353][T24380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.483258][T24380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.493088][T24380] bridge_slave_1: entered allmulticast mode [ 1269.501681][T24380] bridge_slave_1: entered promiscuous mode [ 1269.529075][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1269.546864][ T24] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1269.569566][ T24] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1269.625705][T24380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.642591][T24380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.700782][T24380] team0: Port device team_slave_0 added [ 1269.717951][T24380] team0: Port device team_slave_1 added [ 1269.747447][T24380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.754506][T24380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.810611][T24380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.889082][T24407] dvmrp0: entered allmulticast mode [ 1269.909297][T24380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.931709][T24380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.972824][T24380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1270.025781][T24380] hsr_slave_0: entered promiscuous mode [ 1270.034513][T24380] hsr_slave_1: entered promiscuous mode [ 1270.044021][T24380] debugfs: 'hsr0' already exists in 'hsr' [ 1270.050551][T24380] Cannot create hsr debugfs directory [ 1270.196308][T24380] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.243878][T24380] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1270.407203][T24380] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.418035][T24380] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1270.660710][T24380] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.671350][T24380] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1270.745737][T24380] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.756605][T24380] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1270.798922][T15870] Bluetooth: hci2: command tx timeout [ 1270.984039][T24380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1271.012688][T24380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1271.043194][T24380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1271.054384][T24380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1271.175249][T24380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.195821][T24380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.206663][T24441] binder: 24431:24441 ioctl 40046205 0 returned -22 [ 1271.224551][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.231739][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.284407][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.291547][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.543402][T24443] loop9: detected capacity change from 0 to 7 [ 1271.566319][T24443] Dev loop9: unable to read RDB block 7 [ 1271.577473][T24380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.618369][T24443] loop9: unable to read partition table [ 1271.651315][T24380] veth0_vlan: entered promiscuous mode [ 1271.669677][T24443] loop9: partition table beyond EOD, truncated [ 1271.677191][T24380] veth1_vlan: entered promiscuous mode [ 1271.695917][T24443] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1271.869539][T24448] vivid-006: disconnect [ 1271.872041][T24380] veth0_macvtap: entered promiscuous mode [ 1271.915987][T24380] veth1_macvtap: entered promiscuous mode [ 1271.946464][T24380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.965248][T24380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.992483][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.025802][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.060675][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.080778][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.315981][T16096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.344941][T16096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.425546][ T6480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.447037][ T6480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.469884][T15631] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1272.602099][T24447] vivid-006: reconnect [ 1272.660935][T15631] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 1272.679802][T15631] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.698246][T15631] usb 6-1: config 0 has no interface number 0 [ 1272.705688][T15631] usb 6-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1272.724794][T15631] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1272.734548][T24461] syzkaller0: entered promiscuous mode [ 1272.743131][T24461] syzkaller0: entered allmulticast mode [ 1272.771200][T15631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.796505][T15631] usb 6-1: Product: syz [ 1272.801471][T15631] usb 6-1: Manufacturer: syz [ 1272.806229][T15631] usb 6-1: SerialNumber: syz [ 1272.811692][T24461] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1272.822754][T15631] usb 6-1: config 0 descriptor?? [ 1272.888899][T15870] Bluetooth: hci2: command tx timeout [ 1272.910633][T24478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5834'. [ 1272.923958][T15640] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 1272.924912][T24478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5834'. [ 1272.939215][T15640] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1273.047750][T24483] bond0: entered promiscuous mode [ 1273.053322][T24483] bond_slave_0: entered promiscuous mode [ 1273.059649][T24483] bond_slave_1: entered promiscuous mode [ 1273.065548][T24483] bond1: entered promiscuous mode [ 1273.073026][T24483] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1273.081794][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1273.252097][T15631] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1273.259852][T15631] usb 6-1: MIDIStreaming interface descriptor not found [ 1273.269076][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1273.290654][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1273.303327][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1273.333632][T15631] usb 6-1: USB disconnect, device number 101 [ 1273.341833][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.437838][T24377] udevd[24377]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.440761][T24461] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1273.477259][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1273.948982][T24498] netlink: 'syz.5.5840': attribute type 4 has an invalid length. [ 1273.957482][T24498] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.5840'. [ 1273.963549][T15633] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1274.118832][T15633] usb 4-1: Using ep0 maxpacket: 32 [ 1274.126753][T15633] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 1274.136120][T15633] usb 4-1: config 0 has no interface number 0 [ 1274.143114][T15633] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1274.155558][T15633] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1274.165709][T15633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.173843][T15633] usb 4-1: Product: syz [ 1274.178021][T15633] usb 4-1: Manufacturer: syz [ 1274.182772][T15633] usb 4-1: SerialNumber: syz [ 1274.191020][T15633] usb 4-1: config 0 descriptor?? [ 1274.196901][T24495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1274.258814][T15640] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1274.407005][T24495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.415631][T15640] usb 2-1: Using ep0 maxpacket: 32 [ 1274.416378][T24495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.423436][T15640] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1274.440045][T15640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.441094][T24495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1274.453471][T15640] usb 2-1: config 0 descriptor?? [ 1274.494527][T15633] net1080 4-1:0.183: probe with driver net1080 failed with error -71 [ 1274.507659][ T9] usb 5-1: USB disconnect, device number 52 [ 1274.524473][T15633] usb 4-1: USB disconnect, device number 8 [ 1274.665388][T15640] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1274.676226][T15640] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1274.697580][T24511] input: syz1 as /devices/virtual/input/input87 [ 1274.704680][T15640] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1274.711420][T24511] input: failed to attach handler leds to device input87, error: -6 [ 1274.735746][T15640] usb 2-1: media controller created [ 1274.775676][T15640] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1274.912582][T15640] DVB: Unable to find symbol dib7000p_attach() [ 1274.921614][T15640] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1274.960013][T15870] Bluetooth: hci2: command tx timeout [ 1275.010239][T15640] rc_core: IR keymap rc-dib0700-rc5 not found [ 1275.017530][T15640] Registered IR keymap rc-empty [ 1275.026490][T15640] dvb-usb: could not initialize remote control. [ 1275.035498][T15640] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1275.142296][T24528] netlink: 'syz.4.5848': attribute type 12 has an invalid length. [ 1275.151459][T24528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5848'. [ 1275.202405][T24526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.224063][T24526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.269457][T24526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.279253][T24526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.185919][T15631] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 1276.288512][T15631] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1277.038841][T15870] Bluetooth: hci2: command tx timeout [ 1277.086374][T24556] binder: 24551:24556 ioctl 40046205 0 returned -22 [ 1277.199023][T15631] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1277.369386][T15631] usb 6-1: Using ep0 maxpacket: 32 [ 1277.387856][T15631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1277.402149][T15631] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1277.417832][T15631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.426782][T15631] usb 6-1: Product: syz [ 1277.431316][T15631] usb 6-1: Manufacturer: syz [ 1277.435979][T15631] usb 6-1: SerialNumber: syz [ 1277.445411][T15631] usb 6-1: config 0 descriptor?? [ 1277.456706][T15631] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input89 [ 1277.474885][T15631] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1277.489841][T15631] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1277.609254][T15657] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1277.648867][T15640] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1277.666620][T24557] input: syz0 as /devices/virtual/input/input90 [ 1277.683981][T24557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.693732][T24557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.762932][T15657] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1277.770755][T15657] usb 4-1: too many configurations: 252, using maximum allowed: 8 [ 1277.781868][T15657] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 248 [ 1277.790713][T15657] usb 4-1: can't read configurations, error -22 [ 1277.799481][T15640] usb 5-1: Using ep0 maxpacket: 16 [ 1277.809476][T15640] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1277.819860][T15640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.827959][T15640] usb 5-1: Product: syz [ 1277.832707][T15640] usb 5-1: Manufacturer: syz [ 1277.837402][T15640] usb 5-1: SerialNumber: syz [ 1277.848348][T15640] usb 5-1: config 0 descriptor?? [ 1277.919047][T15657] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1278.048504][T24572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5861'. [ 1278.092771][T15657] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1278.109031][T15657] usb 4-1: too many configurations: 252, using maximum allowed: 8 [ 1278.125609][T24572] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 1278.155265][T15657] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 248 [ 1278.173399][T15657] usb 4-1: can't read configurations, error -22 [ 1278.183352][T24572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.193356][T15657] usb usb4-port1: attempt power cycle [ 1278.261631][T15640] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1278.285881][T15640] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1278.296495][T15640] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1278.306054][T15640] usb 5-1: media controller created [ 1278.356505][T15640] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1278.517654][T24574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.526927][T24574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.548959][T15657] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1278.582919][T15657] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1278.600829][T15657] usb 4-1: too many configurations: 252, using maximum allowed: 8 [ 1278.621410][T15657] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 248 [ 1278.630485][T15657] usb 4-1: can't read configurations, error -22 [ 1278.789415][T15657] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1278.817978][T15657] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1278.825859][T15657] usb 4-1: too many configurations: 252, using maximum allowed: 8 [ 1278.834924][T15657] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 248 [ 1278.843718][T15657] usb 4-1: can't read configurations, error -22 [ 1278.850569][T15657] usb usb4-port1: unable to enumerate USB device [ 1278.910591][T15640] zl10353_read_register: readreg error (reg=127, ret==0) [ 1278.917898][T15640] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1278.926080][T15640] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1279.957959][T15657] usb 6-1: USB disconnect, device number 102 [ 1280.089069][T24567] ------------[ cut here ]------------ [ 1280.094636][T24567] usb 2-1: BOGUS control dir, pipe 80000d80 doesn't match bRequestType c0 [ 1280.104197][T24567] WARNING: CPU: 0 PID: 24567 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 1280.114115][T24567] Modules linked in: [ 1280.116383][T15631] usb 2-1: USB disconnect, device number 13 [ 1280.118510][T24567] CPU: 0 UID: 0 PID: 24567 Comm: syz.4.5860 Not tainted syzkaller #0 PREEMPT(full) [ 1280.134120][T24567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1280.144520][T24567] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 1280.150460][T24567] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 1280.170765][T24567] RSP: 0018:ffffc90010f37820 EFLAGS: 00010246 [ 1280.176863][T24567] RAX: bffe524e323aed00 RBX: ffff888028b8a800 RCX: 0000000000080000 [ 1280.185326][T24567] RDX: ffffc9001baa5000 RSI: 000000000000502c RDI: 000000000000502d [ 1280.193555][T24567] RBP: 1ffff1100602f1ec R08: 0000000000000003 R09: 0000000000000004 [ 1280.201722][T24567] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff888079866100 [ 1280.209916][T24567] R13: ffff888030178f60 R14: 0000000080000d80 R15: ffff8880202b4840 [ 1280.217911][T24567] FS: 00007f3f261e06c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 1280.226901][T24567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1280.233559][T24567] CR2: 00007ff3449d7d58 CR3: 00000000560b6000 CR4: 00000000003526f0 [ 1280.242151][T24567] Call Trace: [ 1280.245451][T24567] [ 1280.248389][T24567] usb_start_wait_urb+0x114/0x4c0 [ 1280.253517][T24567] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1280.259133][T24567] usb_control_msg+0x232/0x3e0 [ 1280.263917][T24567] dib0700_i2c_xfer+0xba7/0xf70 [ 1280.268894][T24567] ? __lock_acquire+0xab9/0xd20 [ 1280.274082][T24567] __i2c_transfer+0x874/0x2170 [ 1280.279319][T24567] ? i2c_transfer+0x120/0x3a0 [ 1280.284125][T24567] ? __pfx___i2c_transfer+0x10/0x10 [ 1280.289434][T24567] ? rt_mutex_lock_nested+0x172/0x1e0 [ 1280.294832][T24567] ? i2c_transfer+0x120/0x3a0 [ 1280.299584][T24567] i2c_transfer+0x25b/0x3a0 [ 1280.304114][T24567] ? __pfx_i2c_transfer+0x10/0x10 [ 1280.309241][T24567] ? _copy_from_user+0x94/0xb0 [ 1280.314041][T24567] i2cdev_ioctl_rdwr+0x460/0x740 [ 1280.319153][T24567] i2cdev_ioctl+0x64b/0x7f0 [ 1280.323685][T24567] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1280.328858][T24567] ? __fget_files+0x3a0/0x420 [ 1280.333552][T24567] ? __fget_files+0x2a/0x420 [ 1280.338140][T24567] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1280.343182][T24567] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1280.348225][T24567] __se_sys_ioctl+0xfc/0x170 [ 1280.352901][T24567] do_syscall_64+0xfa/0xfa0 [ 1280.357418][T24567] ? lockdep_hardirqs_on+0x9c/0x150 [ 1280.362699][T24567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.368883][T24567] ? clear_bhb_loop+0x60/0xb0 [ 1280.374028][T24567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.380364][T24567] RIP: 0033:0x7f3f2538eec9 [ 1280.384815][T24567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.404698][T24567] RSP: 002b:00007f3f261e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.413193][T24567] RAX: ffffffffffffffda RBX: 00007f3f255e5fa0 RCX: 00007f3f2538eec9 [ 1280.421264][T24567] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000006 [ 1280.429323][T24567] RBP: 00007f3f25411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1280.437315][T24567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.445372][T24567] R13: 00007f3f255e6038 R14: 00007f3f255e5fa0 R15: 00007f3f2570fa28 [ 1280.453445][T24567] [ 1280.456487][T24567] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1280.463768][T24567] CPU: 0 UID: 0 PID: 24567 Comm: syz.4.5860 Not tainted syzkaller #0 PREEMPT(full) [ 1280.473223][T24567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1280.483271][T24567] Call Trace: [ 1280.486544][T24567] [ 1280.489467][T24567] dump_stack_lvl+0x99/0x250 [ 1280.494052][T24567] ? __asan_memcpy+0x40/0x70 [ 1280.498631][T24567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1280.503819][T24567] ? __pfx__printk+0x10/0x10 [ 1280.508413][T24567] vpanic+0x237/0x6d0 [ 1280.512394][T24567] ? __pfx_vpanic+0x10/0x10 [ 1280.516897][T24567] panic+0xb9/0xc0 [ 1280.520618][T24567] ? __pfx_panic+0x10/0x10 [ 1280.525049][T24567] __warn+0x31b/0x4b0 [ 1280.529031][T24567] ? usb_submit_urb+0x114d/0x18b0 [ 1280.534047][T24567] ? usb_submit_urb+0x114d/0x18b0 [ 1280.539060][T24567] report_bug+0x2be/0x4f0 [ 1280.543378][T24567] ? usb_submit_urb+0x114d/0x18b0 [ 1280.548395][T24567] ? usb_submit_urb+0x114d/0x18b0 [ 1280.553413][T24567] ? usb_submit_urb+0x114f/0x18b0 [ 1280.558430][T24567] handle_bug+0x84/0x160 [ 1280.562666][T24567] exc_invalid_op+0x1a/0x50 [ 1280.567164][T24567] asm_exc_invalid_op+0x1a/0x20 [ 1280.572004][T24567] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 1280.577633][T24567] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 1280.597231][T24567] RSP: 0018:ffffc90010f37820 EFLAGS: 00010246 [ 1280.603296][T24567] RAX: bffe524e323aed00 RBX: ffff888028b8a800 RCX: 0000000000080000 [ 1280.611262][T24567] RDX: ffffc9001baa5000 RSI: 000000000000502c RDI: 000000000000502d [ 1280.619311][T24567] RBP: 1ffff1100602f1ec R08: 0000000000000003 R09: 0000000000000004 [ 1280.627278][T24567] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff888079866100 [ 1280.635242][T24567] R13: ffff888030178f60 R14: 0000000080000d80 R15: ffff8880202b4840 [ 1280.643321][T24567] usb_start_wait_urb+0x114/0x4c0 [ 1280.648356][T24567] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1280.653909][T24567] usb_control_msg+0x232/0x3e0 [ 1280.658676][T24567] dib0700_i2c_xfer+0xba7/0xf70 [ 1280.663539][T24567] ? __lock_acquire+0xab9/0xd20 [ 1280.668389][T24567] __i2c_transfer+0x874/0x2170 [ 1280.673147][T24567] ? i2c_transfer+0x120/0x3a0 [ 1280.677823][T24567] ? __pfx___i2c_transfer+0x10/0x10 [ 1280.683014][T24567] ? rt_mutex_lock_nested+0x172/0x1e0 [ 1280.688380][T24567] ? i2c_transfer+0x120/0x3a0 [ 1280.693054][T24567] i2c_transfer+0x25b/0x3a0 [ 1280.697639][T24567] ? __pfx_i2c_transfer+0x10/0x10 [ 1280.702831][T24567] ? _copy_from_user+0x94/0xb0 [ 1280.707595][T24567] i2cdev_ioctl_rdwr+0x460/0x740 [ 1280.712542][T24567] i2cdev_ioctl+0x64b/0x7f0 [ 1280.717044][T24567] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1280.722065][T24567] ? __fget_files+0x3a0/0x420 [ 1280.726736][T24567] ? __fget_files+0x2a/0x420 [ 1280.731321][T24567] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1280.736258][T24567] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1280.741276][T24567] __se_sys_ioctl+0xfc/0x170 [ 1280.745856][T24567] do_syscall_64+0xfa/0xfa0 [ 1280.750347][T24567] ? lockdep_hardirqs_on+0x9c/0x150 [ 1280.755537][T24567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.761593][T24567] ? clear_bhb_loop+0x60/0xb0 [ 1280.766268][T24567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.772149][T24567] RIP: 0033:0x7f3f2538eec9 [ 1280.776561][T24567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.796160][T24567] RSP: 002b:00007f3f261e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.804565][T24567] RAX: ffffffffffffffda RBX: 00007f3f255e5fa0 RCX: 00007f3f2538eec9 [ 1280.812534][T24567] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000006 [ 1280.820497][T24567] RBP: 00007f3f25411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1280.828456][T24567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.836416][T24567] R13: 00007f3f255e6038 R14: 00007f3f255e5fa0 R15: 00007f3f2570fa28 [ 1280.844390][T24567] [ 1280.847666][T24567] Kernel Offset: disabled [ 1280.852067][T24567] Rebooting in 86400 seconds..