last executing test programs: 52.809061001s ago: executing program 0 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe8d, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0xfc}, 0x1, 0x0, 0x0, 0x2004c010}, 0x84001) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae00e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x42, 0x0) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x40, 0x0, 0x2fc, 0x0, r4}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0xfd, 0x3, 0x4, 0xab, 0x6d, 0xc0, 0x6d, 0x7, 0xfa, 0x10, 0x85, 0xd}}) r9 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0x20}, 0x0, 0xe3d08660d3c94684}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_enter(r9, 0x92, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000006c0)="03552460b90d426d898bfa6cc4d99f98", 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) move_pages(0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000340)=[0x10000], &(0x7f0000000340), 0x0) 52.456483457s ago: executing program 0 (id=129): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e00010026bd7000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="9c4f8bb65c468a99bb481b83a59bf2893d70266bff9a61acdcce6030b11df7ac271552d75498358890e815c1b5a386b0a73fbc9e0a2f12489f1c343fd1767aae72974cec337d477f59082c2e16cd62aad03bf9b1ff57323e142cfc224becc8a9fda370901e5bc5edf67fe2530c6486751def0930ea31"], 0x1c}}, 0x20008010) 49.739083294s ago: executing program 0 (id=134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) 48.330927408s ago: executing program 0 (id=135): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xec\xcf\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x15\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x8d\xf2:\a\xad\xf5\xfa\x91\xed\xa57\x85\xd1\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d', 0x4) unshare(0x28000600) fcntl$addseals(r6, 0x409, 0xe) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x80000004000003f2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0), 0x4100, 0x800) 45.720582045s ago: executing program 0 (id=147): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x800, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x58, 0x3, @fd_index=0x5, 0x9, 0x0, 0x0, 0x3, 0x1}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) io_uring_enter(r2, 0x47f4, 0x0, 0x2000000, 0x0, 0x0) 44.16779679s ago: executing program 0 (id=154): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x4cfb, 0x80, 0x3, 0x135}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x6109, 0x1, 0x0, 0x1a4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_enter(r4, 0x16e, 0x3c1d, 0x8, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000004e40)=""/4098, 0x1002}, {&(0x7f0000000500)=""/243, 0xf3}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000000a00)=""/4087, 0xff7}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = syz_open_dev$vbi(&(0x7f0000000b80), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r8, 0xc0585609, &(0x7f0000000040)={0xffff0001, 0x4, 0x4, 0x1000, 0x80000000, {}, {0x2, 0x8, 0x3, 0xb6, 0x2, 0xf, "e0a67c37"}, 0x0, 0x4, {}, 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000340)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002e00)=""/232, 0xea}], 0x2}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept(r9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000002f00)={0x8, 0x3}) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) 28.954615651s ago: executing program 32 (id=154): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x4cfb, 0x80, 0x3, 0x135}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x6109, 0x1, 0x0, 0x1a4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_enter(r4, 0x16e, 0x3c1d, 0x8, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000004e40)=""/4098, 0x1002}, {&(0x7f0000000500)=""/243, 0xf3}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000000a00)=""/4087, 0xff7}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = syz_open_dev$vbi(&(0x7f0000000b80), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r8, 0xc0585609, &(0x7f0000000040)={0xffff0001, 0x4, 0x4, 0x1000, 0x80000000, {}, {0x2, 0x8, 0x3, 0xb6, 0x2, 0xf, "e0a67c37"}, 0x0, 0x4, {}, 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000340)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002e00)=""/232, 0xea}], 0x2}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept(r9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000002f00)={0x8, 0x3}) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) 13.762214424s ago: executing program 2 (id=226): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00'}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb4a, 0x200000000002, 0xffffffffffffffff, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffffffff, 0x4) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1443, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f00000048c0)={0x2020}, 0x2020) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 13.107382584s ago: executing program 4 (id=230): syz_usb_connect(0x2, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x101) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x28, 0x8000000803, 0x9) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000100001040000000010010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100697036677265000024000280060002000700000008000d0009", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xab24d000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000600)={{0x0, 0x1, 0x7}, 0x1, 0x405}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r2], 0xd0}, 0x807) r8 = syz_open_dev$dri(&(0x7f00000001c0), 0xffffffffffffff60, 0x0) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f00000002c0)={0x3, &(0x7f0000000240)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r8, 0x40086424, &(0x7f0000000340)={r9, 0x3}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) 11.584837221s ago: executing program 2 (id=234): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r4, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000002000f030000000000003404000001ed0a0014040000170000801c400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc0700bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c398ab724577fd742bf44cdd8489086e61aa3cb1d3ab3dac8183102fe6fc8a038e3868a0592811446867969f0fb3f547e83c4ca35aac023f09f15bb0acb3cdc6efd9b0e9df56af7fda01280a384028b35994388"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x0, 0x4, 0x3, 0x0, 0x2, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000101040000000000000000020000001c0018800800014000000000080002400000000008000140000000007dcd96de188cffda1955916785cd"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 9.702852789s ago: executing program 2 (id=238): r0 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2}) r1 = syz_usbip_server_init(0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000100)='\\%)$*:\x00', 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x10000, 0x0, 0x3, 0x1, 0x8004}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="290aeeffffffffffffff0100000008000100", @ANYRES32=r6, @ANYBLOB="24000300"/36], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYRES16=r7, @ANYBLOB="010000000000fcffffff0100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRESOCT=r6, @ANYBLOB], 0x40}}, 0x0) r8 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x12, 0x3a, 0xe, 0xa, 0x7, 0x4, 0x1, 0x8010000, 0xe755a3d832dace16}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) r10 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r11, 0xc0603d0f, &(0x7f0000000040)) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000180)=0x30124, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000040), 0x4) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r12, 0x707, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r12, &(0x7f0000000200)=[{&(0x7f0000000040)="e04235fc19f126fcbea758894eb4", 0xe}, {0x0}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 9.624108913s ago: executing program 5 (id=239): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x6}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x3b1b49da2790951, 0x80, 0x9, 0x7f, 0x18, @local, @private2, 0x7, 0x7800, 0xf13, 0x7}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, &(0x7f0000000200)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x0, 0x2, 0x9, 0xa, 0x0, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000280)='GPL\x00', 0xa, 0xff, &(0x7f00000002c0)=""/255, 0x41100, 0x3, '\x00', r4, @cgroup_sock=0xd, r0, 0x8, &(0x7f0000000480)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xc, 0x8, 0x2ee}, 0x10, r5, r2, 0x3, &(0x7f0000000800)=[r1, r0, r0, r1, r2, r1], &(0x7f0000000840)=[{0x5, 0x4, 0x0, 0xa}, {0x3, 0x5, 0xe, 0xb}, {0x2, 0x5, 0x10, 0x2}], 0x10, 0x1}, 0x94) inotify_init1(0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000940)={@my=0x0, 0x2}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000980)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000009c0)) mq_notify(r2, &(0x7f0000000b00)={0x0, 0x2, 0x0, @thr={&(0x7f0000000a80)="00132d431aad53382eb41f6aff76641ee7458fde5a57bf7889acb019575898dc4e61ef8f9d0ae514ddeb9a08d98cd76c2d96f24545698ef8", &(0x7f0000000ac0)}}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000b40)) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000b80)={0x8000000000000000, 0xffffffffffff45e1, 0xe, 0x5, 0x5, 0x1}) fdatasync(r0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000002680)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002640)={&(0x7f0000000c80)={0x198c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x92, 0xfc, "9345c3a1f1cfe792eceb1cff1d9987f0ce3731fb5cb9bcf03563cc301a4a7a631bbf405ba59d82ae3b34ed56d49431fdb5480e1758fda0f320a64cf19d1d594e4e9f00121b09091cfd4e3d07a84db6761815a0ad455cb1dd2b9ebc89df015e2fdc7ce0d0f5cf442874426770fe20d5600633e75f001b495da5bf21e3052048e03cd563b625d18edf7abd67aa4533"}], @NL80211_ATTR_IE={0x148, 0x2a, [@mic={0x8c, 0x10, {0x490, "374b9bde3144", @short="b70b75cc628362f7"}}, @fast_bss_trans={0x37, 0xa0, {0x8, 0x5, "afd9a75282727a755772ff6644ccffc4", "ba6548f5a67ad273fb3d00c14433754a1dfa5ca63720b01f28c3b38efbaf13c9", "898ab83c13dff2c49723fb43eb70f27efcbc3590238652d79c31e11a39806680", [{0x7f}, {0x3, 0x11, "2345af7b71a38fc2030236472e2fb89df2"}, {0x4, 0xe, "ef4e61ecd7ec5bd362fd160ab65a"}, {0x4, 0xc, "553e6bee2f56c46381e3a353"}, {0x3, 0x19, "6784421ca50859ccbb7c497a68832c63ef0e596c16131f8649"}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x80, 0x29}}, @ht={0x2d, 0x1a, {0x800, 0x0, 0x3, 0x0, {0xfffffffffffffff9, 0xff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x81}}, @ibss={0x6, 0x2, 0x401}, @measure_req={0x26, 0x5d, {0x2, 0x81, 0x2, "6b9718a42aeab0a2ac117936f527398d290fdc0d193a8fecc569338ef25a11a4c49d214795857ff4975d9ec6786e67a77d371cabc02a53cad1ceda10b655792448e193a59dfc1eb14c66b5af9f27c9e073d7f3dffd8ef55fde9c"}}, @mesh_chsw={0x76, 0x6, {0x0, 0x6, 0x27, 0x5}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x21, 0xfa, "71c513b413a6f020fc7b2683e34e42380e69f66cf2e833741a4303c1ab"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_RRK={0xbf, 0xfc, "c248f23b74f8c4c645627fd3be936acc79a3bab4045e693cfe4a47c64231c02027c221b81e7363e20340e9d8e92c2ae1a81cd0322b270f40c8962a5310075b8b2f2208a3c8904b3670d4d5ce4db007b00424c29f163560e67d90dd15d1e00d4ba4bc239eea113b7a289c84aa236b834439ebae15881dc28aa16edbdc087aaad24dc292d3892235ea74b2531870b51868f5bb765023a67741976fb3a4af618ce69901b7fe3941013fbf116551b52b5de73960a72d8a6883884069a3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "f2cd"}, @NL80211_ATTR_FILS_ERP_REALM={0xc0, 0xfa, "216f25fcca4ab1a00cbf26ff8b0002c382f99130393e5e9dcfdc86a9a89fca89b3853232186f3e261b2ceca85547ecd806eba663abf2493a27b3e4fa2c3341c9990ba503bb82152e5e065bfb4298d1236ca968bd36a2c8c7901d8aef44a14f990053fb05c157fb7bb33abc20b037be1389ce1713cdccbb3c79fcc0af34d85843162066c596bc1e6a7cb70ae9178dd23e722058de5446b593589229d8764384fe9f1c48fcc8bd3ef3e034bbc9725e15b5a0559eba78c0e22729cb400c"}, @NL80211_ATTR_FILS_ERP_REALM={0x62, 0xfa, "d59c2bd14fb7b459dacee33019ef7d91a4ab61ca2c2e8ddfb145be7cdaf2db4abd538c76973caec977703628794d3a752dc344987626251160195bde9ae42d41b3ef188a9d5e05506b4059ec55923a588bd0bdf49e7b72db9a36b6e07926"}], @NL80211_ATTR_IE={0x19e, 0x2a, [@ht={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x400, 0x7, 0x0, 0x5, 0x0, 0x1}, 0x300, 0x101, 0x5}}, @peer_mgmt={0x75, 0x18, {0x1, 0x14, @val=0x8001, @val=0x2b, @val="e1bdb6ebda80580410a6f1afcfb05cf0"}}, @supported_rates={0x1, 0x7, [{0x6, 0x1}, {0x36}, {0x24}, {0x3}, {0x24}, {0x16}, {0x1}]}, @fast_bss_trans={0x37, 0x5c, {0x4, 0x1, "a314122b3c0db707ac2bcb9f3033bada", "ea5fc5fdf75ee0b0077e84253cae2e23a3fd4c75c036bc5ec1654d30328f72a1", "a8aaaa0ea339b3af14cc958111784d502ccbbcc6191e6837140d2477947509e0", [{0x2, 0x8, "8f2010b87aad1e6d"}]}}, @supported_rates={0x1, 0x5, [{0xc}, {0xb, 0x1}, {0x9}, {0x6}, {0x1}]}, @measure_req={0x26, 0xa4, {0xde, 0x7, 0x4, "99ace84da3ec63baa65d9687631701ecf26881805cfa7aedea6473967a8cd34d3533640e8e1fc0e70f61196b3399691f58566a8928cda59d4f94575c56af1a042628a639fa8be4f1fced45c6710f656701b3d792770f15a996f212f94781f67c8a55af3aacd450a9f388dd2314ee95614d110014665295185971eaa5adf07cbb5c70e32669d496d2e730101c02890c5e56d244bd1c3a4f56706e65e13cf37ddb40"}}, @link_id={0x65, 0x12, {@initial, @device_b}}, @ibss={0x6, 0x2, 0xe5}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x6, 0x0, {0x4, 0xf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0xfff, 0x4}}, @ht={0x2d, 0x1a, {0x80, 0x1, 0x7, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x7, 0x8}}]}, @NL80211_ATTR_IE={0x159, 0x2a, [@chsw_timing={0x68, 0x4, {0x6, 0x9}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @measure_req={0x26, 0xf5, {0x0, 0x5, 0x9, "566c62bf34185da328a4a8c3d85464dc8241a4728991ffe27b008e235ac6e2083cd01296b50dc4b0ffa2efd45eb4794f9dfe02e3cc0952544ea3953ac7fa422568777f723263aad7337be77bfbb3d65d54aee0088f067c9b0a47d8a254af83c36f7e7db8387f0d82ec4e7825db7e79f395ccdb4b4f4c793bc81f111c804ac8c8ad91d66cc0e17449d82abe268048042fcc159c09f3ca75771596bf676c86fad2fa872559da6283e0554ab2093f19d0dc878921834eea5d4a7e83efdfec4bd1d0dafd972c1772908f081ba4cc374ca52eaa63964817de311a5d154fb38c51637beaff7f32486cc7ae12bdfac9637de7029b4e"}}, @link_id={0x65, 0x12, {@random="47eb9e34369e", @broadcast}}, @cf={0x4, 0x6, {0x5, 0x9, 0x4, 0x5}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x69, 0x1, @device_a, 0x4, 0xfffffffe, 0x10000}}, @ssid={0x0, 0x1c, @random="8d23f30bd5a64d180609f4af8c4eda878636b43f089677dde774e53a"}, @supported_rates={0x1, 0x2, [{0x5, 0x1}, {0xb}]}]}, @NL80211_ATTR_IE={0x1d2, 0x2a, [@preq={0x82, 0x25, {{0x1}, 0x8, 0x1, 0x1, @device_b, 0x7, @void, 0x10, 0x64, 0x1, [{{0x0, 0x0, 0x1}, @broadcast, 0x35be399f}]}}, @gcr_ga={0xbd, 0x6, @device_b}, @random={0x5, 0xcb, "09a4b6caff3d3dbc25dea5784268c83117d41d4dd2c1a110a220f7b41eb704ef353144e8703ec7fc1dfe69b7452838dd7dcb456cac49f215ad65261a3038f9a594fd8bb4c0934fbf9c809a9f062ed56382373266426c885c5d0e218c43b81925582c3fdeddd5bee9fdef4ae68f127c12c1582564175507c2f903d0273ea8ab7dce6f74419fd22907d9d6ad73445ed6caf9a36aabb1b3263783005146f88ba69675f93611ffd18963e1f70669e476cb47114a492fed92c831b7d602f34878e6c977eaf4c9edcbf97fc4d813"}, @random_vendor={0xdd, 0xd0, "071ea369159ffa147e443ad77dde46d6c35d4ba9d0976d6a59ad4c8e76c86c4c03944cc9237dc51d27fd7c2f737e3dc1aa1d35914539141a3d2774bf50a67ea21e2de4f00616797905db37fb25c20b3176c3ed41de2e470a7a3a614678fd22e6d105d13b37b2e6b6dc92dc66d63d40fb3365a32420cf302a47605f6f65330115802eb681d99e1edece438c6087ead8feaf6119634ad8d2fb917701db59d9e8e7c488ef7456bc0ff01bff4da2d737f38d6611418b6dd1df031980f3cd33a525ab47cb514d6b2f481915a60d0d4b185ebe"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xe}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "cee5241559178983ac66a8e52def78"}], @NL80211_ATTR_IE={0x76, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @dsss={0x3, 0x1, 0xa1}, @preq={0x82, 0x51, {{}, 0x8, 0x6, 0x6, @broadcast, 0xfffffffc, @void, 0xb, 0x1, 0x5, [{{0x1, 0x0, 0x1}, @device_b, 0x10000}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{}, @device_a, 0x2}, {{0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0xc72}]}}, @mesh_chsw={0x76, 0x6, {0x7, 0x8, 0x3c, 0xc0}}]}]}, 0x198c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r2, 0x40044103, &(0x7f00000026c0)=0x9) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002a40)={0x8, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002700)=""/191, 0xbf}, {&(0x7f00000027c0)=""/214, 0xd6}, {&(0x7f00000028c0)=""/171, 0xab}, {&(0x7f0000002980)=""/39, 0x27}], &(0x7f0000002a00)=[0x4, 0x5, 0x8000000000000000], 0x4}, 0x20) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, 0xffffffffffffffff, 0x40) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20008096) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000002b80)={r1}, 0x1) ioctl$KDMKTONE(r2, 0x4b30, 0x1a) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x8c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x91}, 0x400c8c0) 9.617729579s ago: executing program 4 (id=240): r0 = socket$kcm(0x2, 0x2, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000c000) 9.506408725s ago: executing program 5 (id=241): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/36, 0x24}, {0x0, 0x45}, {&(0x7f0000000380)=""/75, 0x4b}], 0x3}, 0x0) 9.276447193s ago: executing program 4 (id=242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1d"}]}], {0x14}}, 0x74}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c, r7, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x3c}}, 0x4000) connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 8.50446615s ago: executing program 5 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYBLOB="5f7f"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) unshare(0x24020400) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000080)={0x1, r5}) r6 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) recvmmsg(r7, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x1, 0x40000002, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) r9 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)=ANY=[], 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r10, 0x0, 0x0) 7.922388936s ago: executing program 2 (id=245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x495, &(0x7f0000000100)={0x0, 0x787f, 0x100, 0x3, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_INPUT(r6, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.497832683s ago: executing program 4 (id=247): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fec000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fed000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff5000/0x1000)=nil, 0x1000, &(0x7f0000002d80)='\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x357, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0xa, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2400}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000340)={0x3}, 0x2000, 0x0) 6.386939131s ago: executing program 4 (id=248): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f746865722c616c6c6f775f6f"], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={0x0, r3}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e21, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="290626bd7000fbdbdf251d00000034000180140002007465616d5f736c6176655f3000000000140002006970365f767469300000000000000000080003"], 0x48}, 0x1, 0x0, 0x0, 0x8844}, 0x20040000) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) 6.188432756s ago: executing program 3 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) 6.031789647s ago: executing program 3 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000100001c0"]) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x106, 0x3}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 5.9683222s ago: executing program 2 (id=251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf253d00bcd83c245d000100000008005d000000000008005d0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20040000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="f3660f3101dddd670f0f06a466b9c4090000f20f7c2c0f5f0abaf80c66efbafc0c66b8ffff000066ef8b5ee8f30f1ecc0fc71fd8f68ed80fb56455", 0x3b}], 0x1, 0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000340)={0x0, &(0x7f0000000300)=[&(0x7f0000000240)="2e399161e187ff58f4feaef5c3716659bbab958c722168411a8519d36de2381d6651345a359d47f5bc2b8e5101162072a299652dd6c70fc823d0e4a252799c050ef19b16f6080dcd3cef6604335a773d78cb1aa6232de9986ff3508c3c17606aee2279acfe"]}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xffffffffffffffe6, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0xcba0}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) syz_io_uring_setup(0x3c68, &(0x7f0000000140)={0x0, 0x4930, 0x20, 0x2, 0x9e}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) r9 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ioctl$VIDIOC_LOG_STATUS(r9, 0x5646, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 5.712370744s ago: executing program 3 (id=252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b"], 0x0) 5.364868123s ago: executing program 5 (id=253): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f746865722c616c6c6f775f6f"], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={0x0, r3}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e21, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="290626bd7000fbdbdf251d00000034000180140002007465616d5f736c6176655f3000000000140002006970365f767469300000000000000000080003"], 0x48}, 0x1, 0x0, 0x0, 0x8844}, 0x20040000) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) 4.147869714s ago: executing program 1 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8744}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) poll(&(0x7f0000002100)=[{0xffffffffffffffff, 0x688}], 0x1, 0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x4000000) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x8) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}, 0x4c081) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r8, 0x0, 0x0, 0x0) bind$can_raw(r1, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000300)={&(0x7f0000002140)=ANY=[@ANYBLOB="5c0000000206010400000000000000000000000014000780080011400000000005001500030000000900020073797a31000000000500050002000000050004000000000005000100070000000d000300686173683a6e65740000000053c8b5851da47ec5e18ce03475110a70debd2907000000eb993ce64c2c5efe820bc3df3377b30ff744f53f9b5426c1d6c2821db1cbf77cf75c88860478cf3abb49014d56e300d38b445e6bab4d0960df69785b1239489ee84061cb909a6444abb4dc37cea22520c2a03de8e48e296316a6e0460cf8b624bc96e0f85dd119880519af1d273fc65bc8ba3d82cab4"], 0x5c}}, 0x0) 3.226521484s ago: executing program 4 (id=255): syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x48004}, 0x44) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r3 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 3.112456007s ago: executing program 1 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000440)={0x7, 0x7f, 0x2}, 0x7) write$P9_RLERRORu(r1, &(0x7f0000000640)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x24048025}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 2.978491531s ago: executing program 1 (id=257): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast1, 0x4e24, 0x4, 'wrr\x00', 0x15, 0x7ff, 0x22}, 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000000)='./file0\x00', 0x41) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012009703000000000000000007000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x200400d2}, 0x880) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) (async) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast1, 0x4e24, 0x4, 'wrr\x00', 0x15, 0x7ff, 0x22}, 0x2c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x41) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012009703000000000000000007000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x200400d2}, 0x880) (async) 2.596629365s ago: executing program 3 (id=258): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES32=0x1, @ANYBLOB="0038da6c6c5d7ad74af080db2b00c139bd00800300000000000000000000000000000000a5e83882472778185299ecdbe30360dd78a731631fc2f48146a4bdac2e93d2449c6575421e1f3b812d080c6af45f8574e7bb844af33de4aab521be935f47d3519f34c5ac36b921db485d70fca96da42e296cd07b712d34358706e6e4560037949ce39d2eea46c881277cfaf8a2f716f8ceb0", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="04000000000000000100"/28], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912c, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) bind$unix(r6, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) r7 = accept4$packet(r6, 0x0, &(0x7f0000000100), 0x80800) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180)={'#! ', './file0', [{0x20, '::&-:$-\'(-'}, {0x20, '!$-\\\x9e&['}]}, 0x1e) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) dup(0xffffffffffffffff) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0), &(0x7f00000001c0)) 2.241428853s ago: executing program 5 (id=259): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x495, &(0x7f0000000100)={0x0, 0x787f, 0x100, 0x3, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_INPUT(r6, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.132577058s ago: executing program 1 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) 2.126043542s ago: executing program 3 (id=261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r3, 0x5) accept4(r3, &(0x7f00000002c0)=@x25, 0x0, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto(r4, &(0x7f0000001400)="6923bf7afdad78526d73a67312e8bf8260adb9aefe9ee5cfaaf3b6b15a03a4a20ed5d72ab9511c6ef1d727f39a1209d5fa8754eb", 0xfffffffffffffe64, 0x40011, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x600, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={0x0, 0x0}) 2.055439229s ago: executing program 2 (id=262): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0xe}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0xe}) memfd_create(&(0x7f00000000c0)='@\x00', 0x4) (async) r2 = memfd_create(&(0x7f00000000c0)='@\x00', 0x4) syz_usb_connect$cdc_ecm(0x3, 0x177, &(0x7f0000000140)={{0x12, 0x1, 0x101, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x165, 0x1, 0x1, 0x2, 0x10, 0x5e, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "768089d285"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x9, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x8, 0x40}, @mdlm_detail={0xf8, 0x24, 0x13, 0x3, "bfe784e66750fd6e177dbfb8cdfce68a2ff11f64033ca5d5468f3bee80db277a6e1b6b931d636903648f41e5c811a2bf316e36895b87e3b16045add6c10caf6ce01e4e1223b1f8648403dd735c6664d528a33555b2e6dcf707871aa92ff8068a4dc8e2dc60a964d9b889858588d8fbe92605c905f6459678d92b35a5efd3c4c7ef1c1b3cf72067da352df00b3834b2f3b2bab160bad10c5314db9e2eac98f77252a1de9dbb22802be6864fdf1bc5e158fcbe1beaf643d111f4c2ab44d2f4662cb838a52cc36e6cba9f10ade5e5aab680dde53f6f6ef221891abe5e40a4a05344f93c9b28c2280236de42c6cdf1e5c44e3fd986e9"}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x7, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x40, 0x80, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xa, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xff, 0x5, 0x9, 0x10, 0x4}, 0x3c, &(0x7f0000000300)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x35, 0x80, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0xf6, 0x2, 0x8, 0xff0f, 0x3, [0xff0000, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x0, 0x7, 0xaea, 0x40}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x58, 0x7f, 0xff, 0x1, 0x7}]}, 0x4, [{0xec, &(0x7f00000003c0)=@string={0xec, 0x3, "5cb98bef27a37dc790a9d58d5a1cf051f8558d61f862aefc4ba8dc7340a50f9dbda9c8cc6dde2029c89da07fcdb344c9c9b828ba750cd1f24b19a95c21cbd707e24b531e8caf5e6c9407b68a8d39da5a9c72812fc7c9929927a495139cac9f6cfb87a0ade3242b02168ada10ca5b5f77d80342f5f467f9a0dd0145187ca8f8d8349799d1080363454927c7a40dcaa579a73e31f6af9b11aa03f322672d4d73961da7692aae565f46bbda1600aa712cf67915db34c5c0dd686db2fd8a31d6f29e495fa1bde74e3e11c405ab7dbae3a555de839b96c76ed8e86ca649862df9ba54d7183bdf083c4a8ae91d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180a}}, {0xbc, &(0x7f00000004c0)=@string={0xbc, 0x3, "20cd1b75490595dc9767afe2515b3b77714aa8ff5884a09b1add96702f97116fe81ac394ec9ac090a53d4ec9fd2125d6fe82871f3a0e96f5610be9a25257ffc1faa761fe7f5b572c5b59582e045c7d69a20cafa50857372b19437f8771255842c929425bfa565faa3615fa3d5e58cf15f411895770ad1d5dfff41896817807f5c8c8a26c41b3802b9664d665ec8bd676e73d8570c35c4dbb6c6b9f63c82599fbe456f549b16c7f8dcbe5e696850c1de0f88653e086bd2180c8af"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40b}}]}) close_range(r2, 0xffffffffffffffff, 0x2) 1.954231767s ago: executing program 5 (id=263): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000002c0), 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffffffffffe, 0x10000, 0x3}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000003, 0x80010, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000005c00), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="11072bbd7000fedbdf250a00000008000300", @ANYBLOB], 0x1c}, 0x1, 0xf0ffff, 0x0, 0x4000084}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0x4, 0x1}, 0x3}) 1.900428243s ago: executing program 1 (id=264): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'batadv_slave_1\x00', @random="01320136b1ff"}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 566.154159ms ago: executing program 1 (id=265): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x40000000015, 0x805, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='%\x00'/20, @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000500190084000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0xe, &(0x7f0000000940)=ANY=[@ANYRES64=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="320000000000000018000000000000003309000000000000000000000000000018000000000000000000000000000000320000000000000018000000000000001208000000000000460000000000000020000000000000000000000000000000050000000000000014000000000000801800000000000000fbffffff09000000140000000000000018000000000000000400000007000000460000000000000020000000000000000a00000000000000ff0100000000000032000000000000001800000000000000400101c0000000000a000000000000005a00000000000000c744240000000000c744240200000000c7442406000000000f011424400f060fa374f900460f235d660f38825300430fc79efa000000470f011ab9920900000f32f30f06450fc76906c33200000000000000180000000000000000000000000000001e000000000000002000000000000000fd0a00000000000001000000000000004600000000000000200000000000000004000000000000000000000000000000140000000000000018000000000000000104000008000000460000000000000020000000000000000000000000000000020000000000000014000000000000001800000000000000010000008f0e00001e0000000000000020000000000000000200004000000000c10000000000000032000000000000001800000000000000880a000000000000140000000000000018000000000000001d9300000600000014000000000000001800000000000000810000000600000032000000000000001800000000000000e80a000000000000"], 0x252}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0xc, 0xa, 0x0, 0x4000000000180, 0x9, 0x80000010, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) 0s ago: executing program 3 (id=266): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f746865722c616c6c6f775f6f"], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={0x0, r3}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e21, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290626bd7000fbdbdf251d00000034000180140002007465616d5f736c6176655f3000000000140002006970365f767469300000000000000000080003"], 0x48}, 0x1, 0x0, 0x0, 0x8844}, 0x20040000) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) kernel console output (not intermixed with test programs): cast mode [ 80.442885][ T5891] bridge_slave_1: entered promiscuous mode [ 80.451672][ T5885] team0: Port device team_slave_0 added [ 80.461181][ T5885] team0: Port device team_slave_1 added [ 80.491158][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.549698][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.561542][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.614279][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.625203][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.632684][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.659212][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.716572][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.723565][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.749980][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.790123][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.797473][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.804615][ T5889] bridge_slave_0: entered allmulticast mode [ 80.811892][ T5889] bridge_slave_0: entered promiscuous mode [ 80.820932][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.828784][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.836592][ T5889] bridge_slave_1: entered allmulticast mode [ 80.843513][ T5889] bridge_slave_1: entered promiscuous mode [ 80.852431][ T5890] team0: Port device team_slave_0 added [ 80.890138][ T5891] team0: Port device team_slave_0 added [ 80.905504][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.913362][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.920623][ T5887] bridge_slave_0: entered allmulticast mode [ 80.928412][ T5887] bridge_slave_0: entered promiscuous mode [ 80.937915][ T5890] team0: Port device team_slave_1 added [ 80.944073][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.951636][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.959650][ T5887] bridge_slave_1: entered allmulticast mode [ 80.967384][ T5887] bridge_slave_1: entered promiscuous mode [ 80.987487][ T5891] team0: Port device team_slave_1 added [ 81.034728][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.056811][ T51] Bluetooth: hci1: command tx timeout [ 81.096676][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.120522][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.127948][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.136581][ T51] Bluetooth: hci0: command tx timeout [ 81.154125][ T5879] Bluetooth: hci3: command tx timeout [ 81.163352][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.178578][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.185533][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.211730][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.223742][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.230902][ T51] Bluetooth: hci4: command tx timeout [ 81.230902][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.230924][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.234031][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.237051][ T5879] Bluetooth: hci2: command tx timeout [ 81.266865][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.314402][ T5885] hsr_slave_0: entered promiscuous mode [ 81.321228][ T5885] hsr_slave_1: entered promiscuous mode [ 81.335775][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.343069][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.369900][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.406525][ T5889] team0: Port device team_slave_0 added [ 81.415187][ T5889] team0: Port device team_slave_1 added [ 81.498971][ T5887] team0: Port device team_slave_0 added [ 81.540297][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.547593][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.573663][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.586519][ T5887] team0: Port device team_slave_1 added [ 81.598914][ T5890] hsr_slave_0: entered promiscuous mode [ 81.605108][ T5890] hsr_slave_1: entered promiscuous mode [ 81.611268][ T5890] debugfs: 'hsr0' already exists in 'hsr' [ 81.617191][ T5890] Cannot create hsr debugfs directory [ 81.664818][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.676746][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.709727][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.799681][ T5891] hsr_slave_0: entered promiscuous mode [ 81.808938][ T5891] hsr_slave_1: entered promiscuous mode [ 81.815456][ T5891] debugfs: 'hsr0' already exists in 'hsr' [ 81.824348][ T5891] Cannot create hsr debugfs directory [ 81.837771][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.844811][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.876451][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.948850][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.958089][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.984706][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.032895][ T5889] hsr_slave_0: entered promiscuous mode [ 82.039348][ T5889] hsr_slave_1: entered promiscuous mode [ 82.045376][ T5889] debugfs: 'hsr0' already exists in 'hsr' [ 82.051311][ T5889] Cannot create hsr debugfs directory [ 82.140170][ T5887] hsr_slave_0: entered promiscuous mode [ 82.147537][ T5887] hsr_slave_1: entered promiscuous mode [ 82.153760][ T5887] debugfs: 'hsr0' already exists in 'hsr' [ 82.159893][ T5887] Cannot create hsr debugfs directory [ 82.615441][ T5885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.641218][ T5885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.657807][ T5885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.669313][ T5885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.734617][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.754177][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.764012][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.784756][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.877828][ T5890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.890254][ T5890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.916331][ T5890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.928122][ T5890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.033204][ T5887] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.071622][ T5887] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.082737][ T5887] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.094494][ T5887] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.136623][ T5879] Bluetooth: hci1: command tx timeout [ 83.154938][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.216146][ T51] Bluetooth: hci0: command tx timeout [ 83.221364][ T5889] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.221834][ T5879] Bluetooth: hci3: command tx timeout [ 83.245543][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.267222][ T5889] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.278370][ T5889] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.290225][ T5889] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.297643][ T51] Bluetooth: hci4: command tx timeout [ 83.298206][ T5879] Bluetooth: hci2: command tx timeout [ 83.335080][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.363382][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.370696][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.391022][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.434749][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.442405][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.452299][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.459466][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.470756][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.477893][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.512013][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.541250][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.565330][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.572709][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.623748][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.630951][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.760324][ T5891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.787825][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.818805][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.862896][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.875557][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.919053][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.926244][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.954116][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.970274][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.995799][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.002935][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.019746][ T5885] veth0_vlan: entered promiscuous mode [ 84.032782][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.047476][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.054689][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.067711][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.074895][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.121502][ T5885] veth1_vlan: entered promiscuous mode [ 84.181259][ T5891] veth0_vlan: entered promiscuous mode [ 84.221665][ T5891] veth1_vlan: entered promiscuous mode [ 84.265416][ T5890] veth0_vlan: entered promiscuous mode [ 84.295641][ T5890] veth1_vlan: entered promiscuous mode [ 84.313801][ T5885] veth0_macvtap: entered promiscuous mode [ 84.324178][ T5885] veth1_macvtap: entered promiscuous mode [ 84.358395][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.384744][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.420308][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.439327][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.467024][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.481167][ T5891] veth0_macvtap: entered promiscuous mode [ 84.495565][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.510145][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.520095][ T5890] veth0_macvtap: entered promiscuous mode [ 84.542809][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.555016][ T5890] veth1_macvtap: entered promiscuous mode [ 84.569558][ T5891] veth1_macvtap: entered promiscuous mode [ 84.628608][ T5887] veth0_vlan: entered promiscuous mode [ 84.652443][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.660618][ T5889] veth0_vlan: entered promiscuous mode [ 84.690865][ T5887] veth1_vlan: entered promiscuous mode [ 84.699296][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.726918][ T5889] veth1_vlan: entered promiscuous mode [ 84.733764][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.743785][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.756512][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.777116][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.794501][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.829978][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.862965][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.878164][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.889889][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.904281][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.948227][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.958233][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.008441][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.017960][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.025144][ T5889] veth0_macvtap: entered promiscuous mode [ 85.057619][ T5889] veth1_macvtap: entered promiscuous mode [ 85.083010][ T5887] veth0_macvtap: entered promiscuous mode [ 85.119466][ T5887] veth1_macvtap: entered promiscuous mode [ 85.138973][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.148545][ T5885] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.154546][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.203068][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.218889][ T5879] Bluetooth: hci1: command tx timeout [ 85.282879][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.297287][ T5879] Bluetooth: hci3: command tx timeout [ 85.302720][ T5879] Bluetooth: hci0: command tx timeout [ 85.321652][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.330090][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.347525][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.371176][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.384213][ T5879] Bluetooth: hci2: command tx timeout [ 85.386276][ T51] Bluetooth: hci4: command tx timeout [ 85.393561][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.414041][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.423149][ T4612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.432831][ T4612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.470583][ T4612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.481786][ T4612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.512487][ T4612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.516490][ T5959] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.542013][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.553436][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.579605][ T4612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.588479][ T5966] FAULT_INJECTION: forcing a failure. [ 85.588479][ T5966] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.588520][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 85.588539][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.588554][ T5966] Call Trace: [ 85.588561][ T5966] [ 85.588568][ T5966] dump_stack_lvl+0x189/0x250 [ 85.588595][ T5966] ? __pfx____ratelimit+0x10/0x10 [ 85.588618][ T5966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.588636][ T5966] ? __pfx__printk+0x10/0x10 [ 85.588670][ T5966] should_fail_ex+0x414/0x560 [ 85.588701][ T5966] strncpy_from_user+0x36/0x290 [ 85.588726][ T5966] getname_flags+0xf3/0x540 [ 85.588746][ T5966] do_sys_openat2+0xbc/0x1c0 [ 85.588766][ T5966] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.588784][ T5966] ? ksys_write+0x22a/0x250 [ 85.588807][ T5966] ? __pfx_ksys_write+0x10/0x10 [ 85.588828][ T5966] __x64_sys_openat+0x138/0x170 [ 85.588851][ T5966] do_syscall_64+0xfa/0x3b0 [ 85.588870][ T5966] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.588889][ T5966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.588903][ T5966] ? clear_bhb_loop+0x60/0xb0 [ 85.588920][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.588934][ T5966] RIP: 0033:0x7f27fd58ebe9 [ 85.588955][ T5966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.588968][ T5966] RSP: 002b:00007f27fe37a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.588986][ T5966] RAX: ffffffffffffffda RBX: 00007f27fd7b5fa0 RCX: 00007f27fd58ebe9 [ 85.588998][ T5966] RDX: 0000000000000143 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 85.589009][ T5966] RBP: 00007f27fe37a090 R08: 0000000000000000 R09: 0000000000000000 [ 85.589018][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.589027][ T5966] R13: 00007f27fd7b6038 R14: 00007f27fd7b5fa0 R15: 00007f27fd8dfa28 [ 85.589053][ T5966] [ 85.720931][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 85.747817][ T4612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.760661][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.825046][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.835570][ T5959] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 85.845190][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.864481][ T5959] usb 4-1: config 0 descriptor?? [ 85.878676][ T4612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.989438][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.017830][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.102329][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.124520][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.285856][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.311206][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.341779][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.349259][ T5959] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 86.559954][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.577448][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.675125][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.715870][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.756373][ T9] cfg80211: failed to load regulatory.db [ 86.841739][ T5959] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 86.876211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 86.884767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 87.033038][ T5959] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 87.166297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 87.245336][ T5959] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 87.278056][ T5959] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 87.296028][ T51] Bluetooth: hci1: command tx timeout [ 87.377358][ T51] Bluetooth: hci0: command tx timeout [ 87.377440][ T5879] Bluetooth: hci3: command tx timeout [ 87.456676][ T5879] Bluetooth: hci2: command tx timeout [ 87.466294][ T5879] Bluetooth: hci4: command tx timeout [ 87.616633][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.788269][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 87.839645][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.860815][ T9] usb 5-1: config 0 has no interface number 0 [ 87.904550][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 87.921042][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.931924][ T9] usb 5-1: Product: syz [ 87.943386][ T9] usb 5-1: Manufacturer: syz [ 87.958265][ T9] usb 5-1: SerialNumber: syz [ 87.981988][ T9] usb 5-1: config 0 descriptor?? [ 88.039446][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 88.048797][ T9] usb 5-1: selecting invalid altsetting 1 [ 88.054635][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 88.167983][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.310718][ T5958] usb 4-1: USB disconnect, device number 2 [ 88.321577][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.336983][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 88.355512][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.366133][ T43] usb 1-1: config 1 interface 0 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.397055][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 88.408070][ T9] usb 5-1: media controller created [ 88.503000][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 88.533688][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0048, bcdDevice= 0.40 [ 88.546721][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.555186][ T43] usb 1-1: Product: syz [ 88.564789][ T43] usb 1-1: Manufacturer: syz [ 88.570408][ T43] usb 1-1: SerialNumber: syz [ 88.675260][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.836742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.842876][ T43] usbhid 1-1:1.0: can't add hid device: -71 [ 88.855012][ T43] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 88.895430][ T43] usb 1-1: USB disconnect, device number 2 [ 89.041373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.051532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.143809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.242205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 89.546315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.610226][ T6016] capability: warning: `syz.2.14' uses deprecated v2 capabilities in a way that may be insecure [ 89.626403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.721446][ T6018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15'. [ 90.019127][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 90.030385][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 90.380101][ T43] usb 5-1: USB disconnect, device number 2 [ 91.366016][ T5881] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.976553][ T5881] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 91.995013][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.054976][ T5881] usb 5-1: config 0 has no interfaces? [ 92.329549][ T5881] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 92.353079][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.391711][ T5881] usb 5-1: Product: syz [ 92.402193][ T5881] usb 5-1: Manufacturer: syz [ 92.410165][ T6055] netlink: 'syz.3.23': attribute type 27 has an invalid length. [ 92.438495][ T5881] usb 5-1: SerialNumber: syz [ 92.450330][ T5881] usb 5-1: config 0 descriptor?? [ 92.660019][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 92.987372][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.995720][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.178262][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.346850][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 93.437845][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.448176][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.501885][ T9] usb 4-1: config 0 has no interface number 0 [ 93.511531][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.532669][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 93.554559][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.575342][ T9] usb 4-1: Product: syz [ 93.605945][ T9] usb 4-1: Manufacturer: syz [ 93.621335][ T9] usb 4-1: SerialNumber: syz [ 93.669365][ T9] usb 4-1: config 0 descriptor?? [ 93.720302][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 93.841358][ T6072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.900267][ T6073] libceph: resolve '4..' (ret=-3): failed [ 94.393534][ T6078] process 'syz.0.28' launched './file0' with NULL argv: empty string added [ 94.530425][ T6036] : entered promiscuous mode [ 94.638067][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.648720][ T6060] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.682215][ T6060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.705369][ T59] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.720194][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.746516][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.810216][ T59] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.819516][ T9] gspca_spca1528: reg_w err -110 [ 94.836747][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 95.914750][ T6097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.917829][ T6099] Zero length message leads to an empty skb [ 95.990537][ T5881] usb 5-1: USB disconnect, device number 3 [ 96.032424][ T43] usb 4-1: USB disconnect, device number 3 [ 96.470824][ T6119] netlink: 'syz.2.42': attribute type 12 has an invalid length. [ 98.646494][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.782831][ T6153] netlink: 'syz.4.48': attribute type 27 has an invalid length. [ 98.827372][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 98.983896][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.035260][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.042842][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.091567][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.180344][ T5881] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.200369][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.222606][ T5881] usb 3-1: Product: syz [ 99.249666][ T5881] usb 3-1: Manufacturer: syz [ 99.255656][ T5881] usb 3-1: SerialNumber: syz [ 99.325986][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.487511][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 99.517892][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.555943][ T24] usb 5-1: config 0 has no interface number 0 [ 99.593305][ T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 99.627033][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.650807][ T6142] use of bytesused == 0 is deprecated and will be removed in the future, [ 99.667178][ T6142] use the actual size instead. [ 99.674447][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.701242][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.744657][ T24] usb 5-1: Product: syz [ 99.765810][ T24] usb 5-1: Manufacturer: syz [ 99.838543][ T24] usb 5-1: SerialNumber: syz [ 99.867322][ T24] usb 5-1: config 0 descriptor?? [ 99.917872][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 99.980381][ T5881] usb 3-1: cannot find UAC_HEADER [ 100.119661][ T5881] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 100.155112][ T5881] usb 3-1: USB disconnect, device number 2 [ 100.214475][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.442372][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.461584][ T6156] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.486047][ T6156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.507535][ T1316] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.554720][ T1316] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.662390][ T1316] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.687726][ T1316] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.866697][ T24] gspca_spca1528: reg_w err -110 [ 100.886343][ T24] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 101.608209][ T1210] usb 5-1: USB disconnect, device number 4 [ 101.666723][ T5958] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.674434][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.946198][ T5958] usb 1-1: Using ep0 maxpacket: 16 [ 101.961679][ T5958] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 101.973464][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 101.978800][ T5958] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.991660][ T5958] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 102.017375][ T5881] usb 3-1: config 3 has an invalid interface number: 156 but max is 0 [ 102.038006][ T5881] usb 3-1: config 3 has no interface number 0 [ 102.152774][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.162729][ T1210] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.162897][ T5881] usb 3-1: config 3 interface 156 has no altsetting 0 [ 102.199336][ T5958] usb 1-1: config 0 descriptor?? [ 102.226761][ T5881] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=f1.d8 [ 102.246509][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.276945][ T5881] usb 3-1: Product: syz [ 102.281317][ T5881] usb 3-1: Manufacturer: syz [ 102.296103][ T5881] usb 3-1: SerialNumber: syz [ 102.366353][ T1210] usb 5-1: Using ep0 maxpacket: 16 [ 102.373482][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.422970][ T1210] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 102.456176][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.492154][ T1210] usb 5-1: config 0 descriptor?? [ 102.606672][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.756092][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 102.766535][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 102.796156][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 102.815426][ T5958] usbhid 1-1:0.0: can't add hid device: -71 [ 102.821767][ T5958] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 102.829560][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.857841][ T5958] usb 1-1: USB disconnect, device number 3 [ 102.862251][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 102.883097][ T24] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 102.919510][ T24] usb 2-1: Product: syz [ 102.940445][ T24] usb 2-1: Manufacturer: syz [ 102.945532][ T1210] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 102.965207][ T24] usb 2-1: SerialNumber: syz [ 102.981843][ T1210] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 103.010269][ T1210] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 103.020656][ T24] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 103.032761][ T1210] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 103.049985][ T1210] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 103.062797][ T5881] gl620a 3-1:3.156: probe with driver gl620a failed with error -22 [ 103.113914][ T5881] usb 3-1: USB disconnect, device number 3 [ 103.161461][ T5958] usb 5-1: USB disconnect, device number 5 [ 103.621654][ T6207] fuse: Unknown parameter 'mGN‡8o«ad' [ 104.010881][ T6219] fuse: Unknown parameter 'mGN‡8o«ad' [ 104.056701][ T6221] FAULT_INJECTION: forcing a failure. [ 104.056701][ T6221] name failslab, interval 1, probability 0, space 0, times 1 [ 104.097526][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT(full) [ 104.097551][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.097561][ T6221] Call Trace: [ 104.097568][ T6221] [ 104.097576][ T6221] dump_stack_lvl+0x189/0x250 [ 104.097600][ T6221] ? __pfx____ratelimit+0x10/0x10 [ 104.097623][ T6221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.097642][ T6221] ? __pfx__printk+0x10/0x10 [ 104.097664][ T6221] ? __pfx___might_resched+0x10/0x10 [ 104.097680][ T6221] ? fs_reclaim_acquire+0x7d/0x100 [ 104.097707][ T6221] should_fail_ex+0x414/0x560 [ 104.097733][ T6221] should_failslab+0xa8/0x100 [ 104.097764][ T6221] __kmalloc_noprof+0xcb/0x4f0 [ 104.097784][ T6221] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 104.097810][ T6221] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 104.097837][ T6221] genl_family_rcv_msg_doit+0xb8/0x300 [ 104.097863][ T6221] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 104.097890][ T6221] ? apparmor_capable+0x137/0x1b0 [ 104.097912][ T6221] ? bpf_lsm_capable+0x9/0x20 [ 104.097934][ T6221] ? security_capable+0x7e/0x2e0 [ 104.097964][ T6221] genl_rcv_msg+0x60e/0x790 [ 104.097989][ T6221] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.098006][ T6221] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 104.098022][ T6221] ? __pfx_nl80211_set_interface+0x10/0x10 [ 104.098040][ T6221] ? __pfx_nl80211_post_doit+0x10/0x10 [ 104.098059][ T6221] ? __asan_memcpy+0x40/0x70 [ 104.098077][ T6221] ? __pfx_ref_tracker_free+0x10/0x10 [ 104.098106][ T6221] netlink_rcv_skb+0x208/0x470 [ 104.098127][ T6221] ? __lock_acquire+0xab9/0xd20 [ 104.098148][ T6221] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.098168][ T6221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.098207][ T6221] ? down_read+0x1ad/0x2e0 [ 104.098226][ T6221] genl_rcv+0x28/0x40 [ 104.098243][ T6221] netlink_unicast+0x82f/0x9e0 [ 104.098272][ T6221] ? __pfx_netlink_unicast+0x10/0x10 [ 104.098301][ T6221] ? netlink_sendmsg+0x642/0xb30 [ 104.098320][ T6221] ? skb_put+0x11b/0x210 [ 104.098341][ T6221] netlink_sendmsg+0x805/0xb30 [ 104.098373][ T6221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.098399][ T6221] ? aa_sock_msg_perm+0xf1/0x1d0 [ 104.098417][ T6221] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.098434][ T6221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.098457][ T6221] __sock_sendmsg+0x21c/0x270 [ 104.098481][ T6221] ____sys_sendmsg+0x505/0x830 [ 104.098505][ T6221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.098532][ T6221] ? import_iovec+0x74/0xa0 [ 104.098555][ T6221] ___sys_sendmsg+0x21f/0x2a0 [ 104.098576][ T6221] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.098633][ T6221] ? __fget_files+0x2a/0x420 [ 104.098653][ T6221] ? __fget_files+0x3a0/0x420 [ 104.098686][ T6221] __x64_sys_sendmsg+0x19b/0x260 [ 104.098707][ T6221] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.098735][ T6221] ? __pfx_ksys_write+0x10/0x10 [ 104.098753][ T6221] ? rcu_is_watching+0x15/0xb0 [ 104.098775][ T6221] ? do_syscall_64+0xbe/0x3b0 [ 104.098801][ T6221] do_syscall_64+0xfa/0x3b0 [ 104.098821][ T6221] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.098841][ T6221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.098857][ T6221] ? clear_bhb_loop+0x60/0xb0 [ 104.098877][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.098893][ T6221] RIP: 0033:0x7fc5f3f8ebe9 [ 104.098909][ T6221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.098922][ T6221] RSP: 002b:00007fc5f4eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.098940][ T6221] RAX: ffffffffffffffda RBX: 00007fc5f41b5fa0 RCX: 00007fc5f3f8ebe9 [ 104.098952][ T6221] RDX: 000000000000c0c4 RSI: 0000200000000100 RDI: 0000000000000003 [ 104.098963][ T6221] RBP: 00007fc5f4eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 104.098973][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.098983][ T6221] R13: 00007fc5f41b6038 R14: 00007fc5f41b5fa0 R15: 00007fc5f42dfa28 [ 104.099012][ T6221] [ 104.546119][ T5951] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 105.098433][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.110256][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.124472][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64 [ 105.159448][ T5958] usb 2-1: USB disconnect, device number 2 [ 105.209838][ T5951] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 105.221045][ T5958] appletouch 2-1:1.0: input: appletouch disconnected [ 105.294022][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.307006][ T5951] usb 5-1: Product: syz [ 105.313433][ T5951] usb 5-1: Manufacturer: syz [ 105.318334][ T5951] usb 5-1: SerialNumber: syz [ 105.330236][ T5951] usb 5-1: config 0 descriptor?? [ 105.337915][ T6218] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 105.350029][ T5951] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 105.403141][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.411251][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.418691][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.436732][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.444848][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.452230][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.459598][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.466948][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.474247][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.481692][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.489074][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.496411][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.503696][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.510998][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.518278][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.525538][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.533417][ T1210] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.541652][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.549165][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.556335][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.563471][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.570656][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.578036][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.580361][ T5958] usb 5-1: USB disconnect, device number 6 [ 105.585242][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 105.598144][ C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19 [ 105.616670][ T5221] usb 5-1: control msg error: -19 [ 105.765981][ T1210] usb 4-1: Using ep0 maxpacket: 16 [ 105.774453][ T1210] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.797861][ T1210] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.823077][ T1210] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.867193][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.875340][ T1210] usb 4-1: Product: syz [ 105.879949][ T1210] usb 4-1: Manufacturer: syz [ 105.884658][ T1210] usb 4-1: SerialNumber: syz [ 106.496141][ T5963] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.562128][ T1210] usb 4-1: cannot find UAC_HEADER [ 106.762473][ T1210] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.778698][ T5963] usb 2-1: config 0 has no interfaces? [ 107.230340][ T1210] usb 4-1: USB disconnect, device number 4 [ 107.242983][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.288107][ T5963] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 107.413757][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.480829][ T5963] usb 2-1: Product: syz [ 107.500700][ T5963] usb 2-1: Manufacturer: syz [ 107.522892][ T5963] usb 2-1: SerialNumber: syz [ 107.610794][ T5963] usb 2-1: config 0 descriptor?? [ 108.043243][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 108.124078][ T6229] tls_set_device_offload_rx: netdev not found [ 108.186455][ T6230] netlink: 196 bytes leftover after parsing attributes in process `syz.1.68'. [ 108.285024][ T6257] netlink: 36 bytes leftover after parsing attributes in process `syz.4.74'. [ 108.308643][ T6261] GUP no longer grows the stack in syz.3.76 (6261): 200000005000-200000008000 (200000004000) [ 108.321038][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(full) [ 108.321062][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.321072][ T6261] Call Trace: [ 108.321079][ T6261] [ 108.321087][ T6261] dump_stack_lvl+0x189/0x250 [ 108.321114][ T6261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.321134][ T6261] ? __pfx__printk+0x10/0x10 [ 108.321154][ T6261] ? find_vma+0xe7/0x160 [ 108.321184][ T6261] fixup_user_fault+0x661/0x720 [ 108.321208][ T6261] fault_in_user_writeable+0x72/0xe0 [ 108.321228][ T6261] futex_lock_pi+0x773/0xa90 [ 108.321258][ T6261] ? __pfx_futex_lock_pi+0x10/0x10 [ 108.321302][ T6261] ? futex_private_hash_put+0x4b/0x280 [ 108.321321][ T6261] ? __pfx_futex_wake_mark+0x10/0x10 [ 108.321349][ T6261] ? __pfx_futex_wake+0x10/0x10 [ 108.321369][ T6261] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 108.321398][ T6261] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 108.321428][ T6261] do_futex+0x292/0x420 [ 108.321455][ T6261] ? __pfx_do_futex+0x10/0x10 [ 108.321475][ T6261] ? __vm_munmap+0x301/0x3d0 [ 108.321500][ T6261] __se_sys_futex+0x36f/0x400 [ 108.321523][ T6261] ? __pfx___se_sys_futex+0x10/0x10 [ 108.321544][ T6261] ? rcu_is_watching+0x15/0xb0 [ 108.321565][ T6261] ? __x64_sys_futex+0x21/0xf0 [ 108.321586][ T6261] do_syscall_64+0xfa/0x3b0 [ 108.321606][ T6261] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.321627][ T6261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.321644][ T6261] ? clear_bhb_loop+0x60/0xb0 [ 108.321664][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.321681][ T6261] RIP: 0033:0x7fc5f3f8ebe9 [ 108.321697][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.321711][ T6261] RSP: 002b:00007fc5f4eaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.321730][ T6261] RAX: ffffffffffffffda RBX: 00007fc5f41b5fa0 RCX: 00007fc5f3f8ebe9 [ 108.321742][ T6261] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 108.321753][ T6261] RBP: 00007fc5f4011e19 R08: 0000000000000000 R09: 0000000000000000 [ 108.321763][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.321773][ T6261] R13: 00007fc5f41b6038 R14: 00007fc5f41b5fa0 R15: 00007fc5f42dfa28 [ 108.321803][ T6261] [ 108.639251][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.74'. [ 109.911735][ T6286] binder: BINDER_SET_CONTEXT_MGR already set [ 109.918028][ T6286] binder: 6280:6286 ioctl 4018620d 200000000040 returned -16 [ 110.026141][ T5963] usb 2-1: USB disconnect, device number 3 [ 110.170031][ T6290] fuse: Unknown parameter 'mGN‡8o«ad' [ 111.266575][ T5963] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.524025][ T5963] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 111.543161][ T5963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.695236][ T5963] usb 5-1: config 0 has no interfaces? [ 111.755335][ T6308] FAULT_INJECTION: forcing a failure. [ 111.755335][ T6308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.772983][ T6308] CPU: 0 UID: 0 PID: 6308 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 111.773005][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.773014][ T6308] Call Trace: [ 111.773021][ T6308] [ 111.773029][ T6308] dump_stack_lvl+0x189/0x250 [ 111.773053][ T6308] ? __pfx____ratelimit+0x10/0x10 [ 111.773076][ T6308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.773097][ T6308] ? __pfx__printk+0x10/0x10 [ 111.773130][ T6308] should_fail_ex+0x414/0x560 [ 111.773155][ T6308] _copy_to_user+0x31/0xb0 [ 111.773176][ T6308] simple_read_from_buffer+0xe1/0x170 [ 111.773202][ T6308] proc_fail_nth_read+0x1b3/0x220 [ 111.773223][ T6308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.773244][ T6308] ? rw_verify_area+0x2a6/0x4d0 [ 111.773261][ T6308] ? __lock_acquire+0xab9/0xd20 [ 111.773281][ T6308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.773298][ T6308] vfs_read+0x1fd/0xa30 [ 111.773316][ T6308] ? fdget_pos+0x247/0x320 [ 111.773332][ T6308] ? __pfx___mutex_lock+0x10/0x10 [ 111.773354][ T6308] ? __pfx_vfs_read+0x10/0x10 [ 111.773375][ T6308] ? __fget_files+0x2a/0x420 [ 111.773400][ T6308] ? __fget_files+0x3a0/0x420 [ 111.773423][ T6308] ? __fget_files+0x2a/0x420 [ 111.773451][ T6308] ksys_read+0x145/0x250 [ 111.773472][ T6308] ? __pfx_ksys_read+0x10/0x10 [ 111.773488][ T6308] ? rcu_is_watching+0x15/0xb0 [ 111.773510][ T6308] ? do_syscall_64+0xbe/0x3b0 [ 111.773534][ T6308] do_syscall_64+0xfa/0x3b0 [ 111.773554][ T6308] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.773574][ T6308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.773590][ T6308] ? clear_bhb_loop+0x60/0xb0 [ 111.773610][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.773626][ T6308] RIP: 0033:0x7f3eb778d5fc [ 111.773641][ T6308] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.773654][ T6308] RSP: 002b:00007f3eb864b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.773672][ T6308] RAX: ffffffffffffffda RBX: 00007f3eb79b5fa0 RCX: 00007f3eb778d5fc [ 111.773683][ T6308] RDX: 000000000000000f RSI: 00007f3eb864b0a0 RDI: 0000000000000004 [ 111.773693][ T6308] RBP: 00007f3eb864b090 R08: 0000000000000000 R09: 0000200000000240 [ 111.773703][ T6308] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 111.773714][ T6308] R13: 00007f3eb79b6038 R14: 00007f3eb79b5fa0 R15: 00007f3eb7adfa28 [ 111.773743][ T6308] [ 111.835449][ T5963] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 112.033796][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.060050][ T5963] usb 5-1: Product: syz [ 112.065443][ T5963] usb 5-1: Manufacturer: syz [ 112.071720][ T5963] usb 5-1: SerialNumber: syz [ 112.106728][ T5963] usb 5-1: config 0 descriptor?? [ 112.156611][ T1210] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.306845][ T1210] usb 4-1: Using ep0 maxpacket: 8 [ 112.314132][ T1210] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 112.380243][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.414905][ T1210] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.519166][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.757445][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.846033][ T1210] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 112.854044][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.911315][ T1210] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.949383][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.973483][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.014615][ T1210] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 113.025303][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 113.048849][ T1210] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.076517][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.111381][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.141434][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.152408][ T6324] batadv_slave_0: entered promiscuous mode [ 113.173962][ T1210] usb 4-1: string descriptor 0 read error: -22 [ 113.180500][ T1210] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 113.191943][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.261259][ T1210] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 113.671802][ T6331] fuse: Bad value for 'group_id' [ 113.677069][ T6331] fuse: Bad value for 'group_id' [ 113.708453][ T30] audit: type=1326 audit(1756148808.872:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.2.91" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27fd58ebe9 code=0x0 [ 113.795128][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.92'. [ 114.712020][ T5963] usb 5-1: USB disconnect, device number 7 [ 114.885645][ T5951] usb 4-1: USB disconnect, device number 5 [ 117.067051][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.326926][ T24] usb 2-1: config 0 has no interfaces? [ 117.362298][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.473372][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.517509][ T24] usb 2-1: SerialNumber: syz [ 117.542189][ T24] usb 2-1: config 0 descriptor?? [ 117.641442][ T6411] fuse: Unknown parameter 'mGN‡8o«ad' [ 117.899592][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.106'. [ 117.933553][ T5958] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.110738][ T5958] usb 5-1: Using ep0 maxpacket: 8 [ 118.138182][ T5958] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 118.154088][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 118.168037][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.192163][ T5958] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.192613][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.222570][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.261270][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.319035][ T5958] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 118.332022][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 118.375489][ T5958] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.457600][ T6425] netlink: 80 bytes leftover after parsing attributes in process `syz.2.108'. [ 118.497078][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.508317][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.521501][ T5958] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 118.546278][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 118.597008][ T5958] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.624361][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.644201][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.726911][ T5958] usb 5-1: string descriptor 0 read error: -22 [ 118.733192][ T5958] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 118.747197][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.830194][ T5881] usb 2-1: USB disconnect, device number 4 [ 118.883817][ T5958] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 119.920818][ T6440] netlink: 452 bytes leftover after parsing attributes in process `syz.1.112'. [ 120.807021][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 120.871853][ T6449] hsr_slave_0: left promiscuous mode [ 120.896355][ T6449] hsr_slave_1: left promiscuous mode [ 120.912918][ T1210] usb 5-1: USB disconnect, device number 8 [ 121.553570][ T6467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'. [ 121.780284][ T1210] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 121.810484][ T1210] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.597415][ T6477] netlink: 84 bytes leftover after parsing attributes in process `syz.1.119'. [ 123.946044][ T1210] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.101193][ T1210] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.140622][ T1210] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 124.191973][ T1210] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.210494][ T1210] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 124.252144][ T1210] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 124.288650][ T1210] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.302086][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.312321][ T1210] usb 5-1: Product: syz [ 124.325974][ T5963] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.344008][ T1210] usb 5-1: Manufacturer: syz [ 124.382101][ T1210] cdc_wdm 5-1:1.0: skipping garbage [ 124.393077][ T1210] cdc_wdm 5-1:1.0: skipping garbage [ 124.402491][ T1210] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 124.408780][ T1210] cdc_wdm 5-1:1.0: Unknown control protocol [ 124.478827][ T5963] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.497183][ T5963] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.521123][ T5963] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.523793][ T6503] fuse: Unknown parameter 'mGN‡8o«ad' [ 124.541438][ T5881] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.583193][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.591471][ T5963] usb 3-1: Product: syz [ 124.596474][ T5963] usb 3-1: Manufacturer: syz [ 124.597328][ T5951] IPVS: starting estimator thread 0... [ 124.601087][ T5963] usb 3-1: SerialNumber: syz [ 124.702179][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.708997][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.715421][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.722039][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.729547][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.736170][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.742699][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.749303][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.755695][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.755797][ T6504] IPVS: using max 33 ests per chain, 79200 per kthread [ 124.762282][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.762541][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.782196][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.790104][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.796718][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.804470][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.811077][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.818075][ T6506] loop2: detected capacity change from 0 to 7 [ 124.819843][ T6497] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.824536][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.838047][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.845321][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.851929][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.858548][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 124.865580][ T5881] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 124.873184][ T5881] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 124.885525][ T5951] usb 5-1: USB disconnect, device number 9 [ 124.886530][ T6508] netlink: 65536 bytes leftover after parsing attributes in process `syz.0.127'. [ 124.891418][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 124.910243][ T5881] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.922092][ T5881] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.943099][ T5881] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.961039][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.970652][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 124.986959][ T5881] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 125.015201][ T5881] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 125.031708][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.033723][ T5881] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.040932][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.044796][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.059666][ T5881] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.060599][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.070343][ T5881] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 125.101787][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.110976][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.120407][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.129691][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.139097][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.148293][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.159345][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.160004][ T5881] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 125.168586][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.174530][ T6506] ldm_validate_partition_table(): Disk read failed. [ 125.176957][ T5881] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 125.203027][ T5881] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.204352][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.223959][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.232388][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.241614][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.250210][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.250259][ T5881] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.259380][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.280613][ T6506] Dev loop2: unable to read RDB block 0 [ 125.289325][ T6506] loop2: unable to read partition table [ 125.297473][ T6506] loop2: partition table beyond EOD, truncated [ 125.304934][ T6506] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 125.399705][ T5881] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 125.477397][ T5881] usb 2-1: string descriptor 0 read error: -22 [ 125.503338][ T5881] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 125.548177][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.680051][ T5881] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 128.036406][ T5963] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 128.042573][ T5963] cdc_ncm 3-1:1.0: bind() failure [ 128.163235][ T5963] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 128.214327][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.226937][ T5963] cdc_ncm 3-1:1.1: bind() failure [ 128.240521][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.273856][ T5963] usb 3-1: USB disconnect, device number 4 [ 128.479297][ T6530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.497482][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.510259][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.606009][ T5963] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.636140][ T1210] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.726062][ T5951] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.767748][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 128.779774][ T5963] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 128.789931][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 30768, setting to 1024 [ 128.801440][ T5963] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 128.812978][ T1210] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.823175][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.831370][ T5963] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 128.840556][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.848846][ T5963] usb 3-1: Product: syz [ 128.853298][ T5963] usb 3-1: Manufacturer: syz [ 128.857984][ T5963] usb 3-1: SerialNumber: syz [ 128.863519][ T1210] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.873539][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.882720][ T5963] usb 3-1: config 0 descriptor?? [ 128.890199][ T6525] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.894603][ T1210] usb 4-1: Product: syz [ 128.902767][ T5963] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 128.910613][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 128.910639][ T1210] usb 4-1: Manufacturer: syz [ 128.920967][ T5951] usb 5-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 128.923283][ T1210] usb 4-1: SerialNumber: syz [ 128.934134][ T5951] usb 5-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 128.954421][ T5951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.961952][ T1210] usb 4-1: config 0 descriptor?? [ 128.963922][ T5951] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 128.980416][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.988762][ T5951] usb 5-1: Product: syz [ 128.993106][ T5951] usb 5-1: Manufacturer: syz [ 129.000656][ T5951] usb 5-1: SerialNumber: syz [ 129.010141][ T5951] usb 5-1: config 0 descriptor?? [ 129.024418][ T1210] usb 4-1: selecting invalid altsetting 0 [ 129.103816][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.115220][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.185624][ T5963] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 129.217608][ T5963] usb 5-1: USB disconnect, device number 10 [ 129.218587][ T5951] usb 4-1: USB disconnect, device number 6 [ 129.346097][ T1210] usb 3-1: USB disconnect, device number 5 [ 130.146239][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 130.151922][ T5951] usb 2-1: USB disconnect, device number 5 [ 130.156826][ T6545] program syz.3.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.286757][ T6552] syz.2.138 uses obsolete (PF_INET,SOCK_PACKET) [ 130.380719][ T6554] netlink: 'syz.2.138': attribute type 6 has an invalid length. [ 130.406305][ T6554] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 130.415357][ T6554] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.138'. [ 130.771607][ T6568] fuse: Unknown parameter 'mGN‡8o«ad' [ 130.970260][ T5963] IPVS: starting estimator thread 0... [ 131.083326][ T6569] IPVS: using max 52 ests per chain, 124800 per kthread [ 132.553758][ T6585] FAULT_INJECTION: forcing a failure. [ 132.553758][ T6585] name failslab, interval 1, probability 0, space 0, times 0 [ 132.673883][ T6585] CPU: 1 UID: 0 PID: 6585 Comm: syz.2.146 Not tainted syzkaller #0 PREEMPT(full) [ 132.673908][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.673917][ T6585] Call Trace: [ 132.673925][ T6585] [ 132.673931][ T6585] dump_stack_lvl+0x189/0x250 [ 132.673964][ T6585] ? __pfx____ratelimit+0x10/0x10 [ 132.673991][ T6585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.674010][ T6585] ? __pfx__printk+0x10/0x10 [ 132.674035][ T6585] ? __pfx___might_resched+0x10/0x10 [ 132.674066][ T6585] ? fs_reclaim_acquire+0x7d/0x100 [ 132.674095][ T6585] should_fail_ex+0x414/0x560 [ 132.674122][ T6585] should_failslab+0xa8/0x100 [ 132.674146][ T6585] __kmalloc_noprof+0xcb/0x4f0 [ 132.674167][ T6585] ? tomoyo_encode+0x28b/0x550 [ 132.674188][ T6585] tomoyo_encode+0x28b/0x550 [ 132.674211][ T6585] tomoyo_realpath_from_path+0x58d/0x5d0 [ 132.674239][ T6585] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 132.674259][ T6585] tomoyo_path_number_perm+0x1e8/0x5a0 [ 132.674284][ T6585] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.674323][ T6585] ? __lock_acquire+0xab9/0xd20 [ 132.674367][ T6585] ? __fget_files+0x2a/0x420 [ 132.674392][ T6585] ? __fget_files+0x2a/0x420 [ 132.674413][ T6585] ? __fget_files+0x3a0/0x420 [ 132.674433][ T6585] ? __fget_files+0x2a/0x420 [ 132.674459][ T6585] security_file_ioctl+0xcb/0x2d0 [ 132.674483][ T6585] __se_sys_ioctl+0x47/0x170 [ 132.674506][ T6585] do_syscall_64+0xfa/0x3b0 [ 132.674527][ T6585] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.674547][ T6585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.674563][ T6585] ? clear_bhb_loop+0x60/0xb0 [ 132.674582][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.674598][ T6585] RIP: 0033:0x7f27fd58ebe9 [ 132.674619][ T6585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.674632][ T6585] RSP: 002b:00007f27fe359038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.674651][ T6585] RAX: ffffffffffffffda RBX: 00007f27fd7b6090 RCX: 00007f27fd58ebe9 [ 132.674663][ T6585] RDX: 00002000000003c0 RSI: 00000000c06c4124 RDI: 0000000000000005 [ 132.674675][ T6585] RBP: 00007f27fe359090 R08: 0000000000000000 R09: 0000000000000000 [ 132.674685][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.674695][ T6585] R13: 00007f27fd7b6128 R14: 00007f27fd7b6090 R15: 00007f27fd8dfa28 [ 132.674724][ T6585] [ 132.936087][ T6585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.954523][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.967281][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.377470][ T6594] FAULT_INJECTION: forcing a failure. [ 133.377470][ T6594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.426720][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.3.149 Not tainted syzkaller #0 PREEMPT(full) [ 133.426745][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.426755][ T6594] Call Trace: [ 133.426762][ T6594] [ 133.426770][ T6594] dump_stack_lvl+0x189/0x250 [ 133.426794][ T6594] ? __pfx____ratelimit+0x10/0x10 [ 133.426817][ T6594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.426835][ T6594] ? __pfx__printk+0x10/0x10 [ 133.426873][ T6594] should_fail_ex+0x414/0x560 [ 133.426899][ T6594] _copy_to_user+0x31/0xb0 [ 133.426921][ T6594] simple_read_from_buffer+0xe1/0x170 [ 133.426948][ T6594] proc_fail_nth_read+0x1b3/0x220 [ 133.426970][ T6594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.426991][ T6594] ? rw_verify_area+0x2a6/0x4d0 [ 133.427010][ T6594] ? __lock_acquire+0xab9/0xd20 [ 133.427030][ T6594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.427049][ T6594] vfs_read+0x1fd/0xa30 [ 133.427068][ T6594] ? fdget_pos+0x247/0x320 [ 133.427088][ T6594] ? __pfx___mutex_lock+0x10/0x10 [ 133.427111][ T6594] ? __pfx_vfs_read+0x10/0x10 [ 133.427132][ T6594] ? __fget_files+0x2a/0x420 [ 133.427157][ T6594] ? __fget_files+0x3a0/0x420 [ 133.427178][ T6594] ? __fget_files+0x2a/0x420 [ 133.427208][ T6594] ksys_read+0x145/0x250 [ 133.427230][ T6594] ? __pfx_ksys_read+0x10/0x10 [ 133.427247][ T6594] ? rcu_is_watching+0x15/0xb0 [ 133.427269][ T6594] ? do_syscall_64+0xbe/0x3b0 [ 133.427294][ T6594] do_syscall_64+0xfa/0x3b0 [ 133.427314][ T6594] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.427334][ T6594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.427350][ T6594] ? clear_bhb_loop+0x60/0xb0 [ 133.427378][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.427395][ T6594] RIP: 0033:0x7fc5f3f8d5fc [ 133.427410][ T6594] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.427423][ T6594] RSP: 002b:00007fc5f4eaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.427441][ T6594] RAX: ffffffffffffffda RBX: 00007fc5f41b5fa0 RCX: 00007fc5f3f8d5fc [ 133.427453][ T6594] RDX: 000000000000000f RSI: 00007fc5f4eaf0a0 RDI: 0000000000000006 [ 133.427463][ T6594] RBP: 00007fc5f4eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 133.427474][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.427483][ T6594] R13: 00007fc5f41b6038 R14: 00007fc5f41b5fa0 R15: 00007fc5f42dfa28 [ 133.427513][ T6594] [ 134.280896][ T6613] netlink: 'syz.3.153': attribute type 6 has an invalid length. [ 134.292790][ T6613] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 134.303657][ T6613] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.153'. [ 136.916005][ T5951] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 137.056019][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.103106][ T5951] usb 5-1: config 0 has no interfaces? [ 137.115415][ T5951] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 137.127022][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.241521][ T5951] usb 5-1: Product: syz [ 137.268639][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.277581][ T5951] usb 5-1: Manufacturer: syz [ 137.277602][ T5951] usb 5-1: SerialNumber: syz [ 137.306984][ T5951] usb 5-1: config 0 descriptor?? [ 137.308356][ T24] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 137.364339][ T30] audit: type=1326 audit(1756148832.532:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fd58ebe9 code=0x7ffc0000 [ 137.397549][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.409809][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 137.545290][ T30] audit: type=1326 audit(1756148832.532:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fd58ebe9 code=0x7ffc0000 [ 137.615848][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 137.705625][ T30] audit: type=1326 audit(1756148832.532:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f27fd58ebe9 code=0x7ffc0000 [ 137.732560][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.742305][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.752558][ T24] usb 2-1: Product: syz [ 137.756870][ T24] usb 2-1: Manufacturer: syz [ 137.761879][ T30] audit: type=1326 audit(1756148832.532:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fd58ebe9 code=0x7ffc0000 [ 137.792653][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 137.806771][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 137.821885][ T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 137.840935][ T30] audit: type=1326 audit(1756148832.532:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fd58ebe9 code=0x7ffc0000 [ 137.909070][ T30] audit: type=1326 audit(1756148832.532:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f27fd58ebe9 code=0x7ffc0000 [ 137.936240][ T30] audit: type=1326 audit(1756148832.532:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fd58ebe9 code=0x7ffc0000 [ 138.032290][ T30] audit: type=1326 audit(1756148832.532:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fd58ebe9 code=0x7ffc0000 [ 138.267923][ T6635] tipc: Started in network mode [ 138.273084][ T6635] tipc: Node identity 7f000001, cluster identity 4711 [ 138.293261][ T6635] tipc: New replicast peer: 100.1.1.1 [ 138.415021][ T6635] tipc: Enabled bearer , priority 10 [ 138.573433][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.592462][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.702644][ T30] audit: type=1326 audit(1756148832.532:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f27fd58ebe9 code=0x7ffc0000 [ 138.781540][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.795226][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.853944][ T30] audit: type=1326 audit(1756148832.532:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fd58ebe9 code=0x7ffc0000 [ 139.025973][ T5958] usb 2-1: USB disconnect, device number 6 [ 139.326369][ T5963] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 139.497818][ T5963] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 139.506436][ T5963] usb 3-1: config 0 has no interface number 0 [ 139.533726][ T5963] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.546646][ T24] tipc: Node number set to 2130706433 [ 139.622579][ T5963] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 139.673350][ T5963] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 139.741151][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.796284][ T5963] usb 3-1: config 0 descriptor?? [ 139.818868][ T6649] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 139.875105][ T5963] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input7 [ 139.888531][ T1210] usb 5-1: USB disconnect, device number 11 [ 140.034150][ T5963] usb 3-1: USB disconnect, device number 6 [ 140.141476][ T6662] fuse: Unknown parameter 'mGN‡8o«ad' [ 140.179495][ T5958] IPVS: starting estimator thread 0... [ 140.267271][ T6663] IPVS: using max 51 ests per chain, 122400 per kthread [ 140.320928][ T6664] netlink: 'syz.3.166': attribute type 6 has an invalid length. [ 140.335183][ T6664] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 140.349839][ T6664] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.166'. [ 141.086219][ T1210] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.298916][ T55] null_blk: rq ffff888025cb1800 timed out [ 141.304934][ T55] blk_print_req_error: 10 callbacks suppressed [ 141.304944][ T55] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 141.323050][ T55] null_blk: rq ffff888025cb1980 timed out [ 141.328899][ T55] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 141.339348][ T55] null_blk: rq ffff888025cb1b00 timed out [ 141.348547][ T55] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 141.359143][ T55] null_blk: rq ffff888025cb1c80 timed out [ 141.364859][ T55] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 141.416120][ T1210] usb 3-1: Using ep0 maxpacket: 8 [ 141.501821][ T1210] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 141.614516][ T1210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.683992][ T6682] fuse: Unknown parameter 'mGN‡8o«ad' [ 141.751395][ T1210] usb 3-1: config 0 has no interfaces? [ 141.906570][ T1210] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 142.013607][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.060058][ T1210] usb 3-1: config 0 descriptor?? [ 144.094352][ T1210] usb 3-1: USB disconnect, device number 7 [ 144.317396][ T6701] binder: 6700:6701 ioctl 81f8943c 200000000440 returned -22 [ 144.846276][ T6701] binder: 6700:6701 ioctl 81f8943c 200000000640 returned -22 [ 144.872198][ T6701] binder: 6700:6701 ioctl c0c89425 200000000840 returned -22 [ 144.913312][ T6698] input: syz0 as /devices/virtual/input/input8 [ 145.080690][ T6701] binder: 6700:6701 unknown command 0 [ 145.250775][ T6701] binder: 6700:6701 ioctl c0306201 200000000080 returned -22 [ 146.056030][ T5881] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 146.268509][ T5881] usb 4-1: config 0 has no interfaces? [ 146.327110][ T5881] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 146.339997][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.376231][ T5881] usb 4-1: Product: syz [ 146.403656][ T5881] usb 4-1: Manufacturer: syz [ 146.411155][ T5881] usb 4-1: SerialNumber: syz [ 146.475476][ T5881] usb 4-1: config 0 descriptor?? [ 146.613545][ T6717] netlink: 'syz.2.179': attribute type 16 has an invalid length. [ 146.668183][ T6717] netlink: 'syz.2.179': attribute type 3 has an invalid length. [ 146.859636][ T6717] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.179'. [ 147.429320][ T6730] netlink: 'syz.2.181': attribute type 6 has an invalid length. [ 147.475949][ T6730] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 147.516932][ T6730] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.181'. [ 148.716015][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.846907][ T5951] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.889127][ T5881] usb 4-1: USB disconnect, device number 7 [ 148.933223][ T6743] FAULT_INJECTION: forcing a failure. [ 148.933223][ T6743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.956797][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 148.993465][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 149.016324][ T6743] CPU: 1 UID: 0 PID: 6743 Comm: syz.3.185 Not tainted syzkaller #0 PREEMPT(full) [ 149.016354][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.016363][ T6743] Call Trace: [ 149.016370][ T6743] [ 149.016376][ T6743] dump_stack_lvl+0x189/0x250 [ 149.016400][ T6743] ? __pfx____ratelimit+0x10/0x10 [ 149.016422][ T6743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.016441][ T6743] ? __pfx__printk+0x10/0x10 [ 149.016462][ T6743] ? __might_fault+0xb0/0x130 [ 149.016494][ T6743] should_fail_ex+0x414/0x560 [ 149.016520][ T6743] _copy_from_user+0x2d/0xb0 [ 149.016539][ T6743] __sys_bpf+0x1ed/0x870 [ 149.016561][ T6743] ? __pfx___sys_bpf+0x10/0x10 [ 149.016592][ T6743] ? ksys_write+0x22a/0x250 [ 149.016614][ T6743] ? __pfx_ksys_write+0x10/0x10 [ 149.016642][ T6743] __x64_sys_bpf+0x7c/0x90 [ 149.016661][ T6743] do_syscall_64+0xfa/0x3b0 [ 149.016682][ T6743] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.016702][ T6743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.016718][ T6743] ? clear_bhb_loop+0x60/0xb0 [ 149.016738][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.016754][ T6743] RIP: 0033:0x7fc5f3f8ebe9 [ 149.016768][ T6743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.016781][ T6743] RSP: 002b:00007fc5f4eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.016799][ T6743] RAX: ffffffffffffffda RBX: 00007fc5f41b5fa0 RCX: 00007fc5f3f8ebe9 [ 149.016811][ T6743] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 2000000000000000 [ 149.016822][ T6743] RBP: 00007fc5f4eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 149.016832][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.016842][ T6743] R13: 00007fc5f41b6038 R14: 00007fc5f41b5fa0 R15: 00007fc5f42dfa28 [ 149.016869][ T6743] [ 149.150105][ T5951] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 149.159064][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.256168][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.265305][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.273403][ T24] usb 2-1: Product: syz [ 149.277627][ T24] usb 2-1: Manufacturer: syz [ 149.282212][ T24] usb 2-1: SerialNumber: syz [ 149.288778][ T24] usb 2-1: config 0 descriptor?? [ 149.296279][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 149.305489][ T24] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 149.361881][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.425817][ T6749] FAULT_INJECTION: forcing a failure. [ 149.425817][ T6749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.470659][ T5951] usb 3-1: Product: syz [ 149.491117][ T5951] usb 3-1: Manufacturer: syz [ 149.491162][ T6749] CPU: 1 UID: 0 PID: 6749 Comm: syz.4.189 Not tainted syzkaller #0 PREEMPT(full) [ 149.491184][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.491192][ T6749] Call Trace: [ 149.491199][ T6749] [ 149.491206][ T6749] dump_stack_lvl+0x189/0x250 [ 149.491229][ T6749] ? __pfx____ratelimit+0x10/0x10 [ 149.491253][ T6749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.491271][ T6749] ? __pfx__printk+0x10/0x10 [ 149.491305][ T6749] should_fail_ex+0x414/0x560 [ 149.491330][ T6749] _copy_to_user+0x31/0xb0 [ 149.491350][ T6749] simple_read_from_buffer+0xe1/0x170 [ 149.491376][ T6749] proc_fail_nth_read+0x1b3/0x220 [ 149.491397][ T6749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.491417][ T6749] ? rw_verify_area+0x2a6/0x4d0 [ 149.491436][ T6749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.491455][ T6749] vfs_read+0x1fd/0xa30 [ 149.491482][ T6749] ? __pfx_vfs_read+0x10/0x10 [ 149.491505][ T6749] ? do_sys_openat2+0x154/0x1c0 [ 149.491520][ T6749] ? kmem_cache_free+0x18f/0x400 [ 149.491553][ T6749] ksys_read+0x145/0x250 [ 149.491582][ T6749] ? __pfx_ksys_read+0x10/0x10 [ 149.491599][ T6749] ? rcu_is_watching+0x15/0xb0 [ 149.491620][ T6749] ? do_syscall_64+0xbe/0x3b0 [ 149.491645][ T6749] do_syscall_64+0xfa/0x3b0 [ 149.491665][ T6749] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.491685][ T6749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.491701][ T6749] ? clear_bhb_loop+0x60/0xb0 [ 149.491720][ T6749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.491736][ T6749] RIP: 0033:0x7fd35cd8d5fc [ 149.491751][ T6749] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 149.491764][ T6749] RSP: 002b:00007fd35db55030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.491782][ T6749] RAX: ffffffffffffffda RBX: 00007fd35cfb5fa0 RCX: 00007fd35cd8d5fc [ 149.491794][ T6749] RDX: 000000000000000f RSI: 00007fd35db550a0 RDI: 0000000000000005 [ 149.491804][ T6749] RBP: 00007fd35db55090 R08: 0000000000000000 R09: 0000000000000000 [ 149.491813][ T6749] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 149.491823][ T6749] R13: 00007fd35cfb6038 R14: 00007fd35cfb5fa0 R15: 00007fd35d0dfa28 [ 149.491849][ T6749] [ 149.665626][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.734458][ T5951] usb 3-1: SerialNumber: syz [ 149.849217][ T6755] tipc: Started in network mode [ 149.879881][ T6755] tipc: Node identity ac14140f, cluster identity 4711 [ 149.926275][ T6755] tipc: New replicast peer: 255.255.255.255 [ 149.938866][ T6755] tipc: Enabled bearer , priority 10 [ 150.057841][ T5951] rtl8150 3-1:1.0: couldn't reset the device [ 150.222310][ T5951] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 150.357878][ T5951] usb 3-1: USB disconnect, device number 8 [ 150.401919][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.513567][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.719637][ T5881] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.735491][ T6775] fuse: Unknown parameter 'mGN‡8o«ad' [ 150.782835][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 150.900636][ T5958] IPVS: starting estimator thread 0... [ 150.906304][ T24] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 150.995990][ T24] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 151.006874][ T6776] IPVS: using max 33 ests per chain, 79200 per kthread [ 151.021319][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.033770][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.049373][ T6779] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.065118][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.075043][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.077140][ T1210] tipc: Node number set to 2886997007 [ 151.106078][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.112814][ T24] em28xx 2-1:0.0: No AC97 audio processor [ 151.232550][ T24] usb 2-1: USB disconnect, device number 7 [ 151.243533][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 151.259872][ T24] em28xx 2-1:0.0: Freeing device [ 151.751243][ T6790] program syz.4.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.298716][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 152.409187][ T6780] chnl_net:caif_netlink_parms(): no params data found [ 152.647060][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 152.663659][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.711462][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 152.726142][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.738605][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 152.756278][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.805527][ T24] usb 4-1: config 0 descriptor?? [ 152.836756][ T5963] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 152.874386][ T6789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 152.918029][ T24] hub 4-1:0.0: USB hub found [ 153.063659][ T5963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.076346][ T5963] usb 5-1: config 0 has no interfaces? [ 153.082603][ T5963] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 153.111645][ T24] hub 4-1:0.0: 2 ports detected [ 153.169955][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.194425][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.202490][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.213876][ T6780] bridge_slave_0: entered allmulticast mode [ 153.229872][ T51] Bluetooth: hci5: command tx timeout [ 153.268333][ T6780] bridge_slave_0: entered promiscuous mode [ 153.284152][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.293147][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.308918][ T6780] bridge_slave_1: entered allmulticast mode [ 153.317984][ T6780] bridge_slave_1: entered promiscuous mode [ 153.365166][ T5963] usb 5-1: config 0 descriptor?? [ 153.470907][ T6780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.503844][ T6780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.690327][ T6780] team0: Port device team_slave_0 added [ 153.715345][ T6780] team0: Port device team_slave_1 added [ 153.837377][ T6780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.858157][ T6780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.898563][ T6780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.913666][ T6780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.929292][ T6780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.962950][ T6780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.057350][ T6780] hsr_slave_0: entered promiscuous mode [ 154.068228][ T6780] hsr_slave_1: entered promiscuous mode [ 154.085962][ T5881] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.122936][ T6789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.133239][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.242014][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 154.249256][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.265031][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.285251][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.296686][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.313484][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.340699][ T5881] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.354764][ T5881] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.362935][ T5881] usb 2-1: Manufacturer: syz [ 154.390518][ T5881] usb 2-1: config 0 descriptor?? [ 154.563223][ T6813] fuse: Unknown parameter 'g¼ÑÍÆi¦™00000000000000000000' [ 154.590539][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'. [ 154.634763][ T6780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.654321][ T6780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.678692][ T6780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.694287][ T6780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.707288][ T5881] rc_core: IR keymap rc-hauppauge not found [ 154.713384][ T5881] Registered IR keymap rc-empty [ 154.718924][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.748691][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.794976][ T5881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 154.876576][ T5881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 154.924993][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.925805][ T6780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.962134][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.969921][ T5963] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 154.970041][ T5963] hub_port_connect: 25 callbacks suppressed [ 154.970053][ T5963] usb 4-1-port2: connect-debounce failed [ 154.970518][ T24] usb 4-1: USB disconnect, device number 8 [ 154.997037][ T5963] hub 4-1:0.0: set hub depth failed [ 155.001466][ T6780] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.166082][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.178879][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.186059][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.186172][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.251316][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.258454][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.296101][ T51] Bluetooth: hci5: command tx timeout [ 155.301797][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.326390][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.348060][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.396533][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.416030][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.446213][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.462713][ T6780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.504934][ T5881] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 155.534475][ T5881] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 155.580930][ T6780] veth0_vlan: entered promiscuous mode [ 155.605321][ T6829] FAULT_INJECTION: forcing a failure. [ 155.605321][ T6829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.615533][ T6780] veth1_vlan: entered promiscuous mode [ 155.632713][ T6829] CPU: 1 UID: 0 PID: 6829 Comm: syz.3.205 Not tainted syzkaller #0 PREEMPT(full) [ 155.632736][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.632745][ T6829] Call Trace: [ 155.632752][ T6829] [ 155.632760][ T6829] dump_stack_lvl+0x189/0x250 [ 155.632785][ T6829] ? __pfx____ratelimit+0x10/0x10 [ 155.632805][ T6829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.632823][ T6829] ? __pfx__printk+0x10/0x10 [ 155.632842][ T6829] ? __might_fault+0xb0/0x130 [ 155.632872][ T6829] should_fail_ex+0x414/0x560 [ 155.632899][ T6829] _copy_to_iter+0x589/0x1790 [ 155.632928][ T6829] ? __pfx__copy_to_iter+0x10/0x10 [ 155.632940][ T6829] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 155.632964][ T6829] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 155.632987][ T6829] __skb_datagram_iter+0xf8/0x990 [ 155.633005][ T6829] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 155.633037][ T6829] skb_copy_datagram_iter+0xc5/0x230 [ 155.633059][ T6829] netlink_recvmsg+0x2ab/0xa30 [ 155.633090][ T6829] ? __pfx_netlink_recvmsg+0x10/0x10 [ 155.633117][ T6829] ? aa_sock_msg_perm+0xf1/0x1d0 [ 155.633135][ T6829] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 155.633152][ T6829] ? security_socket_recvmsg+0x7e/0x2e0 [ 155.633170][ T6829] ? __pfx_netlink_recvmsg+0x10/0x10 [ 155.633188][ T6829] sock_recvmsg+0x22c/0x270 [ 155.633211][ T6829] ____sys_recvmsg+0x1c9/0x460 [ 155.633237][ T6829] ? __pfx_____sys_recvmsg+0x10/0x10 [ 155.633268][ T6829] ? import_iovec+0x74/0xa0 [ 155.633287][ T6829] ___sys_recvmsg+0x1b5/0x510 [ 155.633307][ T6829] ? __pfx____sys_recvmsg+0x10/0x10 [ 155.633345][ T6829] ? __fget_files+0x3a0/0x420 [ 155.633375][ T6829] do_recvmmsg+0x307/0x770 [ 155.633400][ T6829] ? __pfx_do_recvmmsg+0x10/0x10 [ 155.633429][ T6829] ? _copy_from_user+0x94/0xb0 [ 155.633461][ T6829] __x64_sys_recvmmsg+0x1af/0x240 [ 155.633482][ T6829] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 155.633506][ T6829] ? do_syscall_64+0xbe/0x3b0 [ 155.633530][ T6829] do_syscall_64+0xfa/0x3b0 [ 155.633548][ T6829] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.633568][ T6829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.633582][ T6829] ? clear_bhb_loop+0x60/0xb0 [ 155.633601][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.633616][ T6829] RIP: 0033:0x7fc5f3f8ebe9 [ 155.633632][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.633643][ T6829] RSP: 002b:00007fc5f4eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 155.633662][ T6829] RAX: ffffffffffffffda RBX: 00007fc5f41b5fa0 RCX: 00007fc5f3f8ebe9 [ 155.633673][ T6829] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 155.633683][ T6829] RBP: 00007fc5f4eaf090 R08: 0000200000003700 R09: 0000000000000000 [ 155.633692][ T6829] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 155.633701][ T6829] R13: 00007fc5f41b6038 R14: 00007fc5f41b5fa0 R15: 00007fc5f42dfa28 [ 155.633726][ T6829] [ 155.959970][ T6780] veth0_macvtap: entered promiscuous mode [ 155.960126][ T5881] usb 2-1: USB disconnect, device number 8 [ 155.969929][ T6780] veth1_macvtap: entered promiscuous mode [ 156.079081][ T6780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.090105][ T6780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.146981][ T1316] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.155736][ T1316] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.164969][ T1316] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.174190][ T1316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.313265][ T6832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.207'. [ 156.336799][ T24] usb 5-1: USB disconnect, device number 13 [ 156.407961][ T4612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.445438][ T4612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.066999][ T6848] netlink: zone id is out of range [ 157.076071][ T6848] netlink: zone id is out of range [ 157.082322][ T6848] netlink: zone id is out of range [ 157.381944][ T51] Bluetooth: hci5: command tx timeout [ 159.495964][ T51] Bluetooth: hci5: command tx timeout [ 159.550865][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.621885][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.815954][ T5951] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.911384][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.920357][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.349141][ T6900] mmap: syz.5.187 (6900) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.050873][ T6951] FAULT_INJECTION: forcing a failure. [ 164.050873][ T6951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.085965][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.3.224 Not tainted syzkaller #0 PREEMPT(full) [ 164.085988][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.085998][ T6951] Call Trace: [ 164.086006][ T6951] [ 164.086013][ T6951] dump_stack_lvl+0x189/0x250 [ 164.086036][ T6951] ? __pfx____ratelimit+0x10/0x10 [ 164.086057][ T6951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.086076][ T6951] ? __pfx__printk+0x10/0x10 [ 164.086108][ T6951] should_fail_ex+0x414/0x560 [ 164.086134][ T6951] _copy_to_user+0x31/0xb0 [ 164.086156][ T6951] simple_read_from_buffer+0xe1/0x170 [ 164.086183][ T6951] proc_fail_nth_read+0x1b3/0x220 [ 164.086204][ T6951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.086225][ T6951] ? rw_verify_area+0x2a6/0x4d0 [ 164.086243][ T6951] ? __lock_acquire+0xab9/0xd20 [ 164.086271][ T6951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.086291][ T6951] vfs_read+0x1fd/0xa30 [ 164.086309][ T6951] ? fdget_pos+0x247/0x320 [ 164.086326][ T6951] ? __pfx___mutex_lock+0x10/0x10 [ 164.086349][ T6951] ? __pfx_vfs_read+0x10/0x10 [ 164.086370][ T6951] ? __fget_files+0x2a/0x420 [ 164.086396][ T6951] ? __fget_files+0x3a0/0x420 [ 164.086418][ T6951] ? __fget_files+0x2a/0x420 [ 164.086449][ T6951] ksys_read+0x145/0x250 [ 164.086471][ T6951] ? __pfx_ksys_read+0x10/0x10 [ 164.086496][ T6951] ? do_syscall_64+0xbe/0x3b0 [ 164.086522][ T6951] do_syscall_64+0xfa/0x3b0 [ 164.086542][ T6951] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.086563][ T6951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.086580][ T6951] ? clear_bhb_loop+0x60/0xb0 [ 164.086600][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.086615][ T6951] RIP: 0033:0x7fc5f3f8d5fc [ 164.086631][ T6951] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.086644][ T6951] RSP: 002b:00007fc5f4eaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.086662][ T6951] RAX: ffffffffffffffda RBX: 00007fc5f41b5fa0 RCX: 00007fc5f3f8d5fc [ 164.086673][ T6951] RDX: 000000000000000f RSI: 00007fc5f4eaf0a0 RDI: 0000000000000005 [ 164.086684][ T6951] RBP: 00007fc5f4eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 164.086694][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.086704][ T6951] R13: 00007fc5f41b6038 R14: 00007fc5f41b5fa0 R15: 00007fc5f42dfa28 [ 164.086733][ T6951] [ 164.619454][ T6946] ptrace attach of "./syz-executor exec"[6780] was attempted by "./syz-executor exec"[6946] [ 164.631390][ T6946] dns_resolver: Unsupported server list version (0) [ 164.749154][ T6967] binder: BINDER_SET_CONTEXT_MGR already set [ 164.755182][ T6967] binder: 6957:6967 ioctl 4018620d 200000000040 returned -16 [ 165.446146][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 165.677706][ T24] usb 5-1: config 1 has an invalid interface number: 74 but max is 0 [ 165.685813][ T24] usb 5-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 165.725686][ T24] usb 5-1: config 1 has no interface number 0 [ 165.768253][ T24] usb 5-1: config 1 interface 74 has no altsetting 0 [ 165.789830][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=f00f, bcdDevice=34.fb [ 165.800406][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.819842][ T24] usb 5-1: Product: syz [ 165.845387][ T24] usb 5-1: Manufacturer: syz [ 165.864720][ T24] usb 5-1: SerialNumber: syz [ 166.626558][ T6993] netlink: 'syz.5.232': attribute type 4 has an invalid length. [ 167.186568][ T5964] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 167.346009][ T7004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.428082][ T5964] usb 4-1: config 1 has an invalid interface number: 74 but max is 0 [ 167.436684][ T5964] usb 4-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 167.520596][ T5964] usb 4-1: config 1 has no interface number 0 [ 167.544635][ T5964] usb 4-1: config 1 interface 74 has no altsetting 0 [ 167.578851][ T5964] usb 4-1: New USB device found, idVendor=046d, idProduct=f00f, bcdDevice=34.fb [ 167.590086][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.620966][ T5964] usb 4-1: Product: syz [ 167.631959][ T5964] usb 4-1: Manufacturer: syz [ 167.654031][ T5964] usb 4-1: SerialNumber: syz [ 167.896018][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 168.086180][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 168.101350][ T7007] FAULT_INJECTION: forcing a failure. [ 168.101350][ T7007] name failslab, interval 1, probability 0, space 0, times 0 [ 168.114968][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.3.235 Not tainted syzkaller #0 PREEMPT(full) [ 168.114982][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.114988][ T7007] Call Trace: [ 168.114992][ T7007] [ 168.114997][ T7007] dump_stack_lvl+0x189/0x250 [ 168.115013][ T7007] ? __pfx____ratelimit+0x10/0x10 [ 168.115031][ T7007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.115042][ T7007] ? __pfx__printk+0x10/0x10 [ 168.115059][ T7007] ? __pfx___might_resched+0x10/0x10 [ 168.115070][ T7007] should_fail_ex+0x414/0x560 [ 168.115085][ T7007] ? vmemdup_user+0x26/0xd0 [ 168.115096][ T7007] should_failslab+0xa8/0x100 [ 168.115111][ T7007] __kvmalloc_node_noprof+0x161/0x5f0 [ 168.115125][ T7007] ? vmemdup_user+0x26/0xd0 [ 168.115137][ T7007] vmemdup_user+0x26/0xd0 [ 168.115148][ T7007] kvm_vm_ioctl+0xbd0/0xc60 [ 168.115160][ T7007] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 168.115181][ T7007] ? kasan_quarantine_put+0xdd/0x220 [ 168.115199][ T7007] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 168.115215][ T7007] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 168.115229][ T7007] ? do_vfs_ioctl+0xbe8/0x1430 [ 168.115242][ T7007] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 168.115260][ T7007] ? __lock_acquire+0xab9/0xd20 [ 168.115284][ T7007] ? __fget_files+0x2a/0x420 [ 168.115299][ T7007] ? __fget_files+0x2a/0x420 [ 168.115312][ T7007] ? __fget_files+0x3a0/0x420 [ 168.115325][ T7007] ? __fget_files+0x2a/0x420 [ 168.115341][ T7007] ? bpf_lsm_file_ioctl+0x9/0x20 [ 168.115353][ T7007] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 168.115363][ T7007] __se_sys_ioctl+0xf9/0x170 [ 168.115375][ T7007] do_syscall_64+0xfa/0x3b0 [ 168.115389][ T7007] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.115402][ T7007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.115412][ T7007] ? clear_bhb_loop+0x60/0xb0 [ 168.115423][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.115432][ T7007] RIP: 0033:0x7fc5f3f8ebe9 [ 168.115442][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.115449][ T7007] RSP: 002b:00007fc5f4e8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.115461][ T7007] RAX: ffffffffffffffda RBX: 00007fc5f41b6090 RCX: 00007fc5f3f8ebe9 [ 168.115467][ T7007] RDX: 0000200000000280 RSI: 000000004008ae6a RDI: 0000000000000005 [ 168.115473][ T7007] RBP: 00007fc5f4e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 168.115479][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.115484][ T7007] R13: 00007fc5f41b6128 R14: 00007fc5f41b6090 R15: 00007fc5f42dfa28 [ 168.115499][ T7007] [ 168.613948][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 168.625006][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.645630][ T9] usb 2-1: Product: syz [ 168.695302][ T24] usb 5-1: USB disconnect, device number 14 [ 168.740277][ T9] usb 2-1: Manufacturer: syz [ 168.754808][ T9] usb 2-1: SerialNumber: syz [ 168.766344][ T7014] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 168.773132][ T7014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.797070][ T9] usb 2-1: config 0 descriptor?? [ 168.815606][ T7014] vhci_hcd vhci_hcd.0: Device attached [ 168.824644][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 169.046078][ T43] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 169.095981][ T5963] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.233714][ T9] gspca_sonixj: reg_r err -32 [ 169.241370][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 169.256043][ T5963] usb 3-1: Using ep0 maxpacket: 32 [ 169.267527][ T5963] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.279905][ T5963] usb 3-1: config 0 has no interface number 0 [ 169.292366][ T5963] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 169.305159][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.314577][ T5963] usb 3-1: Product: syz [ 169.320226][ T5963] usb 3-1: Manufacturer: syz [ 169.330257][ T5963] usb 3-1: SerialNumber: syz [ 169.339580][ T5963] usb 3-1: config 0 descriptor?? [ 169.352915][ T5963] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 169.366717][ T5963] usb 3-1: selecting invalid altsetting 1 [ 169.372594][ T5963] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 169.389717][ T5963] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 169.407868][ T5963] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 169.417573][ T5963] usb 3-1: media controller created [ 169.452952][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.628832][ T5963] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 169.678864][ T7015] vhci_hcd: connection reset by peer [ 169.679517][ T5963] zl10353_read_register: readreg error (reg=127, ret==-71) [ 169.700996][ T4612] vhci_hcd: stop threads [ 169.706964][ T4612] vhci_hcd: release socket [ 169.720959][ T7014] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 169.736499][ T5963] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 169.744473][ T4612] vhci_hcd: disconnect device [ 169.963208][ T5963] usb 3-1: USB disconnect, device number 9 [ 170.072500][ T5964] usb 4-1: USB disconnect, device number 9 [ 170.116134][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 170.357125][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 170.384590][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 170.398283][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 170.416282][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 170.431294][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 170.444515][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 170.457751][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 170.474862][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 170.503741][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 170.710505][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 170.737566][ T1210] usb 2-1: USB disconnect, device number 10 [ 170.784003][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 170.942718][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 170.965122][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 170.979130][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 171.045113][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 171.093127][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 171.122457][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 171.131877][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.140008][ T9] usb 6-1: Product: syz [ 171.146301][ T9] usb 6-1: Manufacturer: syz [ 171.153886][ T9] usb 6-1: SerialNumber: syz [ 172.293576][ T7062] fuse: Unknown parameter 'mGN‡8o«ad' [ 172.947327][ T9] adutux 6-1:168.0: interrupt endpoints not found [ 173.278820][ T9] usb 6-1: USB disconnect, device number 2 [ 173.368271][ T5951] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 173.427148][ T7081] fuse: Unknown parameter 'mGN‡8o«ad' [ 173.578294][ T5963] IPVS: starting estimator thread 0... [ 173.638216][ T5951] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 173.648350][ T5951] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 173.660573][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.679731][ T7082] IPVS: using max 28 ests per chain, 67200 per kthread [ 173.729512][ T5951] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 173.937974][ T7069] vivid-000: ================= START STATUS ================= [ 173.954878][ T7069] vivid-000: Test Pattern: 75% Colorbar [ 173.962015][ T7069] vivid-000: Fill Percentage of Frame: 100 [ 173.968605][ T7069] vivid-000: Horizontal Movement: No Movement [ 173.975128][ T7069] vivid-000: Vertical Movement: No Movement [ 173.982475][ T7069] vivid-000: OSD Text Mode: All [ 174.019595][ T7069] vivid-000: Show Border: false [ 174.068606][ T7069] vivid-000: Show Square: false [ 174.074269][ T7069] vivid-000: Sensor Flipped Horizontally: false [ 174.085531][ T7069] vivid-000: Sensor Flipped Vertically: false [ 174.095419][ T7069] vivid-000: Insert SAV Code in Image: false [ 174.103821][ T7069] vivid-000: Insert EAV Code in Image: false [ 174.112120][ T7069] vivid-000: Insert Video Guard Band: false [ 174.118187][ T7069] vivid-000: Reduced Framerate: false [ 174.123692][ T7069] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 174.142677][ T7069] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 174.151774][ T7069] vivid-000: Enable Capture Cropping: true [ 174.168934][ T7069] vivid-000: Enable Capture Composing: true [ 174.196171][ T7069] vivid-000: Enable Capture Scaler: true [ 174.212784][ T7069] vivid-000: Timestamp Source: End of Frame [ 174.221442][ T7069] vivid-000: Colorspace: sRGB [ 174.230655][ T7069] vivid-000: Transfer Function: Default [ 174.236663][ T7069] vivid-000: Y'CbCr Encoding: Default [ 174.247922][ T7069] vivid-000: HSV Encoding: Hue 0-179 [ 174.254668][ T7069] vivid-000: Quantization: Default [ 174.263462][ T7069] vivid-000: Apply Alpha To Red Only: false [ 174.272642][ T43] vhci_hcd: vhci_device speed not set [ 174.279751][ T7069] vivid-000: Standard Aspect Ratio: 4x3 [ 174.371273][ T7069] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 174.382213][ T7069] vivid-000: DV Timings: 640x480p59 inactive [ 174.389526][ T7069] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 174.399675][ T7069] vivid-000: Maximum EDID Blocks: 2 [ 174.435980][ T7069] vivid-000: Limited RGB Range (16-235): false [ 174.443084][ T7069] vivid-000: Rx RGB Quantization Range: Automatic [ 174.469457][ T7069] vivid-000: Power Present: 0x00000001 [ 174.475486][ T7069] tpg source WxH: 320x240 (Y'CbCr) [ 174.481249][ T7069] tpg field: 1 [ 174.485537][ T7069] tpg crop: (0,0)/320x240 [ 174.493856][ T7069] tpg compose: (0,0)/320x240 [ 174.499128][ T7069] tpg colorspace: 8 [ 174.544180][ T7069] tpg transfer function: 0/0 [ 174.620943][ T7069] tpg Y'CbCr encoding: 0/0 [ 174.626716][ T7069] tpg quantization: 0/0 [ 174.632271][ T7069] tpg RGB range: 0/2 [ 174.637754][ T7069] vivid-000: ================== END STATUS ================== [ 175.506300][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 175.668699][ T9] usb 4-1: USB disconnect, device number 10 [ 175.747236][ T43] usb 5-1: device descriptor read/64, error -71 [ 176.029944][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 176.366060][ T43] usb 5-1: device descriptor read/64, error -71 [ 176.442897][ T7118] ±ÿ: renamed from batadv_slave_1 (while UP) [ 176.593742][ T43] usb usb5-port1: attempt power cycle [ 176.660677][ T1210] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 177.036009][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 177.043628][ T5963] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 177.066009][ T1210] usb 3-1: Using ep0 maxpacket: 16 [ 177.074792][ T43] usb 5-1: device descriptor read/8, error -71 [ 177.266850][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.281819][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.305978][ T1210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.355416][ T1210] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 177.374742][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.406084][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 177.415480][ T1210] usb 3-1: config 0 descriptor?? [ 177.442528][ T43] usb 5-1: device descriptor read/8, error -71 [ 177.543292][ T5963] usb 6-1: config 0 has no interfaces? [ 177.556329][ T43] usb usb5-port1: unable to enumerate USB device [ 177.627064][ T5963] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 177.636341][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.654835][ T5963] usb 6-1: Product: syz [ 177.659271][ T5963] usb 6-1: Manufacturer: syz [ 177.663969][ T5963] usb 6-1: SerialNumber: syz [ 177.689374][ T5963] usb 6-1: config 0 descriptor?? [ 177.828104][ T7112] random: crng reseeded on system resumption [ 177.867566][ T1210] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 177.959219][ T1210] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 177.971510][ T1210] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 178.127963][ T7131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.198321][ T7131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.394715][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 178.404107][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 178.890297][ T4612] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.916200][ T4612] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.965644][ T4612] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.079412][ T7141] fuse: Unknown parameter 'mGN‡8o«ad' [ 179.130777][ T5963] usb 3-1: USB disconnect, device number 10 [ 179.146918][ T1210] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 179.162471][ T5963] ------------[ cut here ]------------ [ 179.167937][ T5963] workqueue: work disable count underflowed [ 179.173845][ T5963] WARNING: CPU: 1 PID: 5963 at kernel/workqueue.c:4326 enable_work+0x2b1/0x2c0 [ 179.182769][ T5963] Modules linked in: [ 179.186812][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 179.196185][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.206221][ T5963] Workqueue: usb_hub_wq hub_event [ 179.211284][ T5963] RIP: 0010:enable_work+0x2b1/0x2c0 [ 179.216508][ T5963] Code: 41 5e 41 5f 5d e9 8f 15 f2 09 cc e8 59 31 ef 09 e8 f4 35 35 00 c6 05 2f fa 02 0e 01 90 48 c7 c7 00 e3 89 8b e8 80 d4 f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 179.236191][ T5963] RSP: 0018:ffffc9000532f060 EFLAGS: 00010046 [ 179.242251][ T5963] RAX: 87ed21d1c5118b00 RBX: ffff888022282738 RCX: 0000000000100000 [ 179.250209][ T5963] RDX: ffffc900189e2000 RSI: 000000000000c8e5 RDI: 000000000000c8e6 [ 179.258172][ T5963] RBP: ffffc9000532f118 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 179.266142][ T5963] R10: dffffc0000000000 R11: ffffed10170e484b R12: 1ffff92000a65e10 [ 179.274123][ T5963] R13: dffffc0000000000 R14: 0000000000000000 R15: 001fffffffc00001 [ 179.282082][ T5963] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 179.290995][ T5963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.297560][ T5963] CR2: 0000200000048000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 179.305515][ T5963] Call Trace: [ 179.308790][ T5963] [ 179.311708][ T5963] ? __pfx_enable_work+0x10/0x10 [ 179.316635][ T5963] ? __thermal_zone_cdev_unbind+0x485/0x4c0 [ 179.322510][ T5963] ? kasan_quarantine_put+0xdd/0x220 [ 179.327790][ T5963] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.332974][ T5963] __cancel_work_sync+0xf7/0x110 [ 179.338083][ T5963] thermal_zone_device_unregister+0x23e/0x3f0 [ 179.344167][ T5963] power_supply_unregister+0xf9/0x140 [ 179.349526][ T5963] ? __pfx_shield_remove+0x10/0x10 [ 179.354616][ T5963] shield_remove+0x72/0x120 [ 179.359100][ T5963] hid_device_remove+0x228/0x370 [ 179.364023][ T5963] ? __pfx_hid_device_remove+0x10/0x10 [ 179.369461][ T5963] device_release_driver_internal+0x46c/0x800 [ 179.375540][ T5963] bus_remove_device+0x34d/0x410 [ 179.380464][ T5963] device_del+0x511/0x8e0 [ 179.384801][ T5963] ? __pfx_device_del+0x10/0x10 [ 179.389634][ T5963] hid_destroy_device+0x6b/0x1b0 [ 179.394578][ T5963] usbhid_disconnect+0x9f/0xc0 [ 179.399325][ T5963] usb_unbind_interface+0x26b/0x910 [ 179.404509][ T5963] ? __pfx_usb_unbind_interface+0x10/0x10 [ 179.410240][ T5963] device_release_driver_internal+0x4d6/0x800 [ 179.416296][ T5963] bus_remove_device+0x34d/0x410 [ 179.421223][ T5963] device_del+0x511/0x8e0 [ 179.425577][ T5963] ? kfree+0x18e/0x440 [ 179.429638][ T5963] ? __pfx_device_del+0x10/0x10 [ 179.434491][ T5963] ? kobject_put+0x446/0x480 [ 179.439093][ T5963] usb_disable_device+0x3e9/0x8a0 [ 179.444121][ T5963] usb_disconnect+0x330/0x950 [ 179.448783][ T5963] hub_event+0x1cf5/0x4a20 [ 179.453200][ T5963] ? do_raw_spin_lock+0x121/0x290 [ 179.458234][ T5963] ? register_lock_class+0x51/0x320 [ 179.463428][ T5963] ? __pfx_hub_event+0x10/0x10 [ 179.468199][ T5963] ? process_scheduled_works+0x9ef/0x17b0 [ 179.473923][ T5963] ? _raw_spin_unlock_irq+0x23/0x50 [ 179.479117][ T5963] ? process_scheduled_works+0x9ef/0x17b0 [ 179.484824][ T5963] ? process_scheduled_works+0x9ef/0x17b0 [ 179.490528][ T5963] process_scheduled_works+0xae1/0x17b0 [ 179.496076][ T5963] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.502136][ T5963] worker_thread+0x8a0/0xda0 [ 179.506727][ T5963] kthread+0x70e/0x8a0 [ 179.510779][ T5963] ? __pfx_worker_thread+0x10/0x10 [ 179.515878][ T5963] ? __pfx_kthread+0x10/0x10 [ 179.520484][ T5963] ? _raw_spin_unlock_irq+0x23/0x50 [ 179.525686][ T5963] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.530891][ T5963] ? __pfx_kthread+0x10/0x10 [ 179.535464][ T5963] ret_from_fork+0x3f9/0x770 [ 179.540036][ T5963] ? __pfx_ret_from_fork+0x10/0x10 [ 179.545215][ T5963] ? __switch_to_asm+0x39/0x70 [ 179.549962][ T5963] ? __switch_to_asm+0x33/0x70 [ 179.554706][ T5963] ? __pfx_kthread+0x10/0x10 [ 179.559289][ T5963] ret_from_fork_asm+0x1a/0x30 [ 179.564056][ T5963] [ 179.567239][ T5963] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.574530][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 179.583954][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.594009][ T5963] Workqueue: usb_hub_wq hub_event [ 179.599037][ T5963] Call Trace: [ 179.602312][ T5963] [ 179.605225][ T5963] dump_stack_lvl+0x99/0x250 [ 179.609798][ T5963] ? __asan_memcpy+0x40/0x70 [ 179.614367][ T5963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.619546][ T5963] ? __pfx__printk+0x10/0x10 [ 179.624130][ T5963] vpanic+0x281/0x750 [ 179.628091][ T5963] ? __pfx__printk+0x10/0x10 [ 179.632662][ T5963] ? __pfx_vpanic+0x10/0x10 [ 179.637147][ T5963] ? is_bpf_text_address+0x26/0x2b0 [ 179.642352][ T5963] panic+0xb9/0xc0 [ 179.646150][ T5963] ? __pfx_panic+0x10/0x10 [ 179.650580][ T5963] __warn+0x31b/0x4b0 [ 179.654560][ T5963] ? enable_work+0x2b1/0x2c0 [ 179.659149][ T5963] ? enable_work+0x2b1/0x2c0 [ 179.663724][ T5963] report_bug+0x2be/0x4f0 [ 179.668045][ T5963] ? enable_work+0x2b1/0x2c0 [ 179.672637][ T5963] ? enable_work+0x2b1/0x2c0 [ 179.677318][ T5963] ? enable_work+0x2b3/0x2c0 [ 179.681907][ T5963] handle_bug+0x84/0x160 [ 179.686143][ T5963] exc_invalid_op+0x1a/0x50 [ 179.690637][ T5963] asm_exc_invalid_op+0x1a/0x20 [ 179.695478][ T5963] RIP: 0010:enable_work+0x2b1/0x2c0 [ 179.700664][ T5963] Code: 41 5e 41 5f 5d e9 8f 15 f2 09 cc e8 59 31 ef 09 e8 f4 35 35 00 c6 05 2f fa 02 0e 01 90 48 c7 c7 00 e3 89 8b e8 80 d4 f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 179.720268][ T5963] RSP: 0018:ffffc9000532f060 EFLAGS: 00010046 [ 179.726342][ T5963] RAX: 87ed21d1c5118b00 RBX: ffff888022282738 RCX: 0000000000100000 [ 179.734312][ T5963] RDX: ffffc900189e2000 RSI: 000000000000c8e5 RDI: 000000000000c8e6 [ 179.742263][ T5963] RBP: ffffc9000532f118 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 179.750213][ T5963] R10: dffffc0000000000 R11: ffffed10170e484b R12: 1ffff92000a65e10 [ 179.758162][ T5963] R13: dffffc0000000000 R14: 0000000000000000 R15: 001fffffffc00001 [ 179.766130][ T5963] ? __pfx_enable_work+0x10/0x10 [ 179.771057][ T5963] ? __thermal_zone_cdev_unbind+0x485/0x4c0 [ 179.776949][ T5963] ? kasan_quarantine_put+0xdd/0x220 [ 179.782234][ T5963] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.787510][ T5963] __cancel_work_sync+0xf7/0x110 [ 179.792448][ T5963] thermal_zone_device_unregister+0x23e/0x3f0 [ 179.798521][ T5963] power_supply_unregister+0xf9/0x140 [ 179.803886][ T5963] ? __pfx_shield_remove+0x10/0x10 [ 179.808982][ T5963] shield_remove+0x72/0x120 [ 179.813471][ T5963] hid_device_remove+0x228/0x370 [ 179.818394][ T5963] ? __pfx_hid_device_remove+0x10/0x10 [ 179.823853][ T5963] device_release_driver_internal+0x46c/0x800 [ 179.830433][ T5963] bus_remove_device+0x34d/0x410 [ 179.835444][ T5963] device_del+0x511/0x8e0 [ 179.839784][ T5963] ? __pfx_device_del+0x10/0x10 [ 179.844620][ T5963] hid_destroy_device+0x6b/0x1b0 [ 179.849552][ T5963] usbhid_disconnect+0x9f/0xc0 [ 179.854331][ T5963] usb_unbind_interface+0x26b/0x910 [ 179.859515][ T5963] ? __pfx_usb_unbind_interface+0x10/0x10 [ 179.865213][ T5963] device_release_driver_internal+0x4d6/0x800 [ 179.871262][ T5963] bus_remove_device+0x34d/0x410 [ 179.876198][ T5963] device_del+0x511/0x8e0 [ 179.880533][ T5963] ? kfree+0x18e/0x440 [ 179.884640][ T5963] ? __pfx_device_del+0x10/0x10 [ 179.889466][ T5963] ? kobject_put+0x446/0x480 [ 179.894155][ T5963] usb_disable_device+0x3e9/0x8a0 [ 179.899190][ T5963] usb_disconnect+0x330/0x950 [ 179.903856][ T5963] hub_event+0x1cf5/0x4a20 [ 179.908278][ T5963] ? do_raw_spin_lock+0x121/0x290 [ 179.913300][ T5963] ? register_lock_class+0x51/0x320 [ 179.918505][ T5963] ? __pfx_hub_event+0x10/0x10 [ 179.923264][ T5963] ? process_scheduled_works+0x9ef/0x17b0 [ 179.928968][ T5963] ? _raw_spin_unlock_irq+0x23/0x50 [ 179.934153][ T5963] ? process_scheduled_works+0x9ef/0x17b0 [ 179.939853][ T5963] ? process_scheduled_works+0x9ef/0x17b0 [ 179.945548][ T5963] process_scheduled_works+0xae1/0x17b0 [ 179.951089][ T5963] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.957054][ T5963] worker_thread+0x8a0/0xda0 [ 179.961639][ T5963] kthread+0x70e/0x8a0 [ 179.965691][ T5963] ? __pfx_worker_thread+0x10/0x10 [ 179.970778][ T5963] ? __pfx_kthread+0x10/0x10 [ 179.975353][ T5963] ? _raw_spin_unlock_irq+0x23/0x50 [ 179.980535][ T5963] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.985716][ T5963] ? __pfx_kthread+0x10/0x10 [ 179.990290][ T5963] ret_from_fork+0x3f9/0x770 [ 179.994859][ T5963] ? __pfx_ret_from_fork+0x10/0x10 [ 179.999953][ T5963] ? __switch_to_asm+0x39/0x70 [ 180.004696][ T5963] ? __switch_to_asm+0x33/0x70 [ 180.009436][ T5963] ? __pfx_kthread+0x10/0x10 [ 180.014003][ T5963] ret_from_fork_asm+0x1a/0x30 [ 180.018755][ T5963] [ 180.022014][ T5963] Kernel Offset: disabled [ 180.026320][ T5963] Rebooting in 86400 seconds..