last executing test programs: 4m30.566013059s ago: executing program 3 (id=4864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000200), 0x0, &(0x7f0000000340)) getgid() sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{0x0, 0xffffffffffffff74}, {&(0x7f0000000000)="402c9b", 0x3}], 0x2, 0x0, 0x0, 0x4040000}, 0x4c000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000002081b00000000000305000320210000000900010073797a30000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000080), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x18, 0x4, 0x20000004) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400f5ff0f00010000000000000000000500000a3c0400000000000000000a0000040900010073797a310000000008000540000000020900020073795a310000000008000a40000000002c0000000b0a010300000000000000000a0000020900010073797a31000000000c0010400000000000000002140000001100010000000000000000000100000a"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m28.533629254s ago: executing program 3 (id=4872): syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="40020000", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="10005a800c000180050006000000000014025a802400018005000700020000000500070002000000050004000200000005000400010000009000"], 0x240}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000022107ef7a4c2fa14b9d120e445887522e29d41780e857dadd6afbf65f30d62bd35be72cb7805b53bec77a0d89be45c43f570f87d00bb5fb63a39e486fce1f1248f7c23658c6af17b56ffc15c2271562d8d3ec4fd2d10ac", @ANYRES16=0x0, @ANYBLOB="010727bd7000fbdbdf255a00000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r7, 0xc0403d11, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00009de000/0x2000)=nil, 0x2000, 0x9) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r10, &(0x7f0000000040), 0x0, 0x0) 4m25.40052828s ago: executing program 3 (id=4885): syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000470200, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000"/196], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.state\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1e) sendfile(r2, r3, 0x0, 0x72) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(r3, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x2, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x6, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1ff}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0xe0, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 4m23.443779633s ago: executing program 3 (id=4893): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r4}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) unlinkat(r6, 0x0, 0x200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r6, &(0x7f0000000a80)="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", &(0x7f0000000140)=""/44}, 0x20) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe800000000000000000000000000008000000000000000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1"], 0x0) 4m23.086994839s ago: executing program 3 (id=4896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r4}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000a80)="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", &(0x7f0000000140)=""/44}, 0x20) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe800000000000000000000000000008000000000000000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1"], 0x0) 4m22.189565441s ago: executing program 3 (id=4897): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x8}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f00000001c0)=0x98) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2000000000000005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x24, 0x1, 0x0, "bb00", 0x38416761}) socket(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001900)=""/92, 0x5c}, {&(0x7f0000001980)=""/184, 0xb8}], 0x2, &(0x7f0000001a80)=""/21, 0x15}, 0x6c42}, {{&(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000001b40)=""/244, 0xf4}], 0x7}, 0xb9}], 0x2, 0x10003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r11 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) syz_emit_ethernet(0x221, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0) ioctl$VIDIOC_S_FREQUENCY(r11, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) splice(r3, &(0x7f0000000040)=0x6, r4, 0x0, 0x7, 0xa) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14090012000000000003000002"], 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x40) 4m6.723287012s ago: executing program 32 (id=4897): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x8}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f00000001c0)=0x98) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2000000000000005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x24, 0x1, 0x0, "bb00", 0x38416761}) socket(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001900)=""/92, 0x5c}, {&(0x7f0000001980)=""/184, 0xb8}], 0x2, &(0x7f0000001a80)=""/21, 0x15}, 0x6c42}, {{&(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000001b40)=""/244, 0xf4}], 0x7}, 0xb9}], 0x2, 0x10003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r11 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) syz_emit_ethernet(0x221, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0) ioctl$VIDIOC_S_FREQUENCY(r11, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) splice(r3, &(0x7f0000000040)=0x6, r4, 0x0, 0x7, 0xa) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14090012000000000003000002"], 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x40) 9.979973517s ago: executing program 5 (id=5806): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x9, "1dc632374ed6a9fed5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(r5, &(0x7f00000000c0)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) 9.629523361s ago: executing program 2 (id=5807): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000005800000000000020d90655ee74e1c6780100000a140000001100010000000000000000000000000a865e391179d61d8157dc168971145dbf34203b63e37317c64d81627ea2c6e9a561b9d8b7dfe06d4318cb5143788ec35c88e815d02ed0331ec64891e198e14dff8c32a91a8998f761de10948b4146ebb47938"], 0x28}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) writev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) 7.959541205s ago: executing program 0 (id=5810): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) 7.739075148s ago: executing program 0 (id=5811): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xfffffffd}]}}]}, 0x44}}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x42008b8, 0x0, 0x1, 0xffffff8c, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @loopback, 0x5b}}, 0x105, 0x6, 0xf06, 0x1, 0xac, 0x9, 0x1}, 0x9c) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000914b2d7a5f518cdd000008000300", @ANYRES32=r8], 0x38}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 7.59442886s ago: executing program 5 (id=5813): syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000013c00028057fd018014000300fe80000000000000000000000000003814000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000001240006800c000380060001004e21000014004400fe880000000000000000000000000001"], 0xb8}}, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r3) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r5, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x897}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6f68}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}}) socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 7.079773974s ago: executing program 2 (id=5814): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unlinkat(r5, &(0x7f00000000c0)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) 7.07774998s ago: executing program 1 (id=5815): r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x9}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x488, [0x200000000480, 0x0, 0x0, 0x2000000006cc, 0x200000000802], 0x0, &(0x7f0000000100), &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x4ee) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x8bb, 0xb5, 0x8, 0x0, 0x8000000000000000, 0x500, 0x3b2, 0x3, 0x5, 0x7, 0x7, 0x7, 0x3, 0x7, 0x200], 0xf000, 0x66000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000003c0)={0x2a6, 0x0, "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"}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xc, 0x2, 0xd, 0x5}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x0, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.202458161s ago: executing program 2 (id=5817): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) 5.182471099s ago: executing program 1 (id=5818): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0xec6a, 0x1, 0x3}, 0x18, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/10, 0xa}], 0x1}, 0x40) landlock_restrict_self(r1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$vbi(&(0x7f00000003c0), 0x2, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x888a1cb99dbf8347, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x13}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xab7, "10d0447080ccde82c744ba838d967c43"}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x28, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffe0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x800, 0x4, 0xc, 0x4002}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$UI_SET_EVBIT(r4, 0x80111500, 0x3) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x3, 0x1000, 0x25, &(0x7f0000000100)="3b7877087f1faddcad3763e241def684381f3542a7e725ff917eb54b5ec601e0b7125bdac4", 0xbe, 0x0, &(0x7f00000001c0)="1caeb172020da56c10d2261fe8ae6b6debf29d2db4d38ecd2012580930445bc513b750d35c6aac16f61c4f9316560f5858f598f5a08c1c8185e44ce84af10cdab44804a00bcf2fc93b023253c5c1709a917e75a2f6f1918775300c02005d9b07c9fd0fe1d165113d25dfb8819d52432e7dfcfa3c1b8b4d2938ced6de9fc44150d8d559f049bb1ecc8d07be876702f0c1be21cd1c0743d772c866be5d419604151cc68551e3bc55821ecc558811285a2f16d3456f2d52e847c4c960021d18"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000390427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="3c45070000000000140012800900010076657468000000006800028008001300", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) r9 = socket$inet6(0xa, 0x80002, 0xffdfffff) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r11 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) getdents64(r10, &(0x7f0000000340)=""/79, 0x4f) getdents(r10, 0x0, 0x3b) 5.126229492s ago: executing program 2 (id=5819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000190001000000000000000000802000000011fe05"], 0x34}}, 0x0) 4.975872284s ago: executing program 2 (id=5820): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x2, 0x6a, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) 4.914180257s ago: executing program 4 (id=5821): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) 4.849544954s ago: executing program 4 (id=5822): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000001701000004000000e5d40000000000001800000000000000170100000300006d7b2f1a000000000012000000000000001701000004000000faffffff00000000180000000000000017010000030000000000000000000000280000000000000017010000020000000f000000dd216e7cfc286e88ce2e6f8cf4a81700000000000000000000000000178100000300004fa4000000000000000000"], 0x130}, 0x0) 4.775943045s ago: executing program 4 (id=5823): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x9, "1dc632374ed6a9fed5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(r5, &(0x7f00000000c0)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) 4.766440954s ago: executing program 5 (id=5824): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x4132, 0xffffffffffffffff, 0x4000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x83fb6b86401a0409}, 0x4000) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0x5, &(0x7f0000000140)={0x2, 0xffffffff}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, 0x0, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaab2303760020034050354004bb0e5f212"], &(0x7f0000000040)={0x0, 0x2, [0x72e, 0x3bb, 0x29f, 0x3f4]}) 4.656011588s ago: executing program 5 (id=5825): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x2, 0x6a, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) 4.368010011s ago: executing program 1 (id=5826): unshare(0x22020400) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 4.246383816s ago: executing program 1 (id=5827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) 4.173833221s ago: executing program 1 (id=5828): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x0, 0x40041) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) r9 = fsopen(&(0x7f0000000100)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000700)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) r11 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r11, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0xe1, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002848946ff4d1d0c009711010203010902cf0003210010010904140f00b80fb7060a240109000902010209240305fb020403021124060400060002000508240505fc489f310524040260052405058109047e0806c4e4130109050d10ff03190e1d09058001ff0306000909050e044000070d0509050c101000020e0d320c26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd2072501808f06000905090110000d02fb0725010301050009050d0008000604080904068100fc5b82d700000000000000"], 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.103199355s ago: executing program 0 (id=5829): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x0) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) 4.05572682s ago: executing program 0 (id=5830): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) unlinkat(r5, &(0x7f00000002c0)='./file0\x00', 0x200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f0000000a80)="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", &(0x7f0000000140)=""/44}, 0x20) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe800000000000000000000000000008000000000000000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1"], 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 3.174518316s ago: executing program 0 (id=5831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000004c0)) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x128, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xfe, 0x8, "d65d3eae0e441bb425bd4b65098bacf567944fa567057bd33ac3429064ad5a0f0ce136baeaf7e8c52746698b1de9b2bc0bb5a7ea79351ad6a4cc35f67558c34ddb490e8cb2359dc88f596c8387c31a55f4ae8de257be71c1cd4aff011be7321e31e732e2c06090f7013dcf4cab2e5236c0e4ae78641c4f40b04145415175f8f083dc2408d529ea190f755b8b4d3ca48b21de380038f4b1f3e3386711044955ea8757133fb65f8edd3e3759fe06e0e6698ab282394961dbffc8cffc3fa40b2335e21f7b471211e0cb2719199b0d4942b4f4890ebf690610e34ce001660f8cde2021cb981ef18bbe613e6c6975a710b7485456dac3220f19a7183e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_DELCHAIN={0x1b8, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xd2, 0xc, "fa998d8096d01f36d3787417f0d997bc05b764c95e170d31a21d3d47c9c8a05d0a950a27ab0123628aa35d85041853d22302b0c1e633b1531f47640efd18c9910ecacd1bc3cab4a63c422a8418842c2f57ffd337b883fa2a2c7a2aca265cce4ca11be3a733bcb3f78f0a0317cc80d936a531f6fb7324276ca998bc0f56e495bab3862c6270e8927ec7083d851e949aa5a3a57d54b7ec033eb087e84efae55780a405b39b1d2d1e1d348522fbd156c13446d0e5d1ec23aa822a4aa20fddfd53e894d419d185f652cd81af6ab7e8d8"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50af0206}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3c599087}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe83b670}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5fe32fbb}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0xec, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x23, 0x6, "6b44a82d681f4cbfde92309043f8c8bf63119db6353f505eab7e80e94f1b9e"}, @NFTA_TABLE_USERDATA={0x90, 0x6, "48da73440100529e601e5d6aa2e34a8978edce23b9f799fa2fc50c709a4012fcded122a82bf4ee290bb4a2a136ade072af0d44761a493b2dcd3f3cbf52097c2a89ce4ba8a845d179d090f106d67a913ac75800e60c8944c9f504b623c9ab1c6ac332c8b160bc38b3c571f6886f0395f0eb5f7ab054077517f2332b6636474123aa65be9c70d9a459ec2298d4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x424}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.567033216s ago: executing program 5 (id=5832): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x10c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003d040aabd55085f37c23101020301090212000107044705ebbc8af49884b5332ac025b8c8f80904d20c003cae830785e02305452737ea69a7ad3383c38ea07818c86ae1bf5f"], &(0x7f0000000f40)={0x0, 0x0, 0x7a, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f7a0004"]}) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r12 = dup(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4010, r12, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r12, 0x0, 0xffffffdb) 2.231244155s ago: executing program 4 (id=5833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009402"]) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x0, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x47, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0xf000, 0xeeee8000, 0x0, 0x7, 0x3, 0x6f, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x9, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x4, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x209}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000003e08"]) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000280)={0x0, 0x34324152, 0x0, @stepwise={0x0, 0x0, 0x3, 0xc, 0x8, 0x4}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e1e, 0x8, @rand_addr=' \x01\x00', 0x6}], 0x1c) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000d00), 0x80001, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r9, 0x5016, 0x0) 2.208820712s ago: executing program 2 (id=5834): syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x3, 0x40}}, 0x18, 0x5, @random=0xa9, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x6f, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0xc0}}}, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x28de, 'syz0\x00', 0x2}, 0x2, 0x30, 0x8, 0xffffffffffffffff, 0x0, 0xff, 'syz1\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x2}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.203556163s ago: executing program 5 (id=5836): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x80000000e) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r4, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x1) fchdir(r5) openat$cgroup_ro(r5, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$char_usb(0xc, 0xb4, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000002c0)=@keyring) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 1.004336002s ago: executing program 1 (id=5837): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r4}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) unlinkat(r6, &(0x7f00000002c0)='./file0\x00', 0x200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r6, &(0x7f0000000a80)="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", &(0x7f0000000140)=""/44}, 0x20) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe80000000000000000000000000000800"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1"], 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 705.906523ms ago: executing program 4 (id=5838): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) sync() (fail_nth: 4) 683.451308ms ago: executing program 0 (id=5839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000002680)=[{0x2, 0xb5, &(0x7f0000001080)="5bf2adbe20bc1a1a9ee1befbff4ccd6ffb92fd747564635990a55c9d104f11df824b2a32c87e12188d13e9ed5ff83d454a17f3aa61f813b27409b36fe3546faedaac186402c462947f2aacb0cfe898ba6be795b3e428cbdc6528322e46731a0f7d0e3dd1193004173f403b027314cc022f997403e4ff876b8efb56d647ee82e0fa05ac13f8a4b79c58c36496dc0b93f3647d64ad49cda9becf07ccd88da8920e5294f7750c3c67799ea15fa77b4312571065617a9c", 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000200)={0x1, @sliced}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xc3, 0x6f, 0x81, 0x40, 0x5fc9, 0x63, 0xb827, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6c, 0x0, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0xb, 0x53, 0xfd, 0x8, [], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0xc0, 0x3, 0xfe}}]}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=5840): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x0) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) kernel console output (not intermixed with test programs): ce 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1362.937496][T19835] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1362.985856][T19835] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1363.013292][T19835] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1363.100385][T19835] usb 3-1: string descriptor 0 read error: -22 [ 1363.107946][T19835] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1363.123989][T19835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.251832][T19835] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1363.442925][T29337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1364.864103][T29348] loop2: detected capacity change from 0 to 1897024 [ 1364.985257][T29351] netlink: 'syz.0.5280': attribute type 9 has an invalid length. [ 1365.700421][T20436] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1365.960420][T20436] usb 2-1: Using ep0 maxpacket: 16 [ 1365.976143][T20436] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.995276][T20436] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1366.012972][T20436] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1366.102321][T20436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.149444][T20436] usb 2-1: config 0 descriptor?? [ 1366.214547][T20436] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1366.263488][T20444] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1366.297518][T29369] loop2: detected capacity change from 0 to 7 [ 1366.345250][T29369] Dev loop2: unable to read RDB block 7 [ 1366.352898][ T10] usb 3-1: USB disconnect, device number 45 [ 1366.420286][T20444] usb 5-1: Using ep0 maxpacket: 8 [ 1366.426858][T20444] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.433901][T29369] loop2: AHDI p1 p2 p3 [ 1366.440996][T20444] usb 5-1: config 0 has no interfaces? [ 1366.450018][T20444] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1366.467043][T29369] loop2: partition table partially beyond EOD, truncated [ 1366.479490][T20444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.485498][T29369] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1366.573654][T20444] usb 5-1: config 0 descriptor?? [ 1366.591899][T29369] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1366.669745][ T5234] Dev loop2: unable to read RDB block 7 [ 1366.699551][ T5234] loop2: AHDI p1 p2 p3 [ 1366.712097][ T5234] loop2: partition table partially beyond EOD, truncated [ 1366.732888][T29372] netlink: 'syz.2.5290': attribute type 13 has an invalid length. [ 1366.741357][ T5234] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1366.748334][ T5234] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1366.813778][T29366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.826723][T29366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.901700][T29366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.911177][T29366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.935575][T19835] usb 5-1: USB disconnect, device number 37 [ 1368.300314][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1368.358776][T29388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.361393][T20436] usb 2-1: USB disconnect, device number 71 [ 1368.434767][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.441245][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.503472][ T10] usb 3-1: config 0 has no interfaces? [ 1368.512383][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1368.558955][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.575398][ T10] usb 3-1: Product: syz [ 1368.582207][ T10] usb 3-1: Manufacturer: syz [ 1368.589023][ T10] usb 3-1: SerialNumber: syz [ 1368.602279][ T10] usb 3-1: config 0 descriptor?? [ 1369.420505][T19050] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1369.682701][T29409] bridge5: left promiscuous mode [ 1369.689007][T29409] bridge5: left allmulticast mode [ 1369.699390][T29409] ip6tnl1: left promiscuous mode [ 1369.714803][T29409] ip6tnl1: left allmulticast mode [ 1369.851620][T29412] syz_tun: entered allmulticast mode [ 1370.384135][T19835] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1370.547099][T20436] usb 3-1: USB disconnect, device number 46 [ 1370.580738][T19835] usb 2-1: Using ep0 maxpacket: 16 [ 1370.599216][T19835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.624565][T19835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.653653][T19835] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1370.665590][T19835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.814661][T19835] usb 2-1: config 0 descriptor?? [ 1370.889154][T29429] fuse: Unknown parameter 'use00000000000000000000' [ 1371.583524][T19835] usbhid 2-1:0.0: can't add hid device: -71 [ 1371.589799][T19835] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1371.599909][T19835] usb 2-1: USB disconnect, device number 72 [ 1372.559746][T29446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5310'. [ 1372.655456][T18314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.687418][T18314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.056394][T29454] netlink: 444 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1373.330521][T20444] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1373.534057][T20444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.545478][T20444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.685912][T20444] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1373.726851][T20444] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1373.746005][T20444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.773869][T20444] usb 3-1: config 0 descriptor?? [ 1373.816100][T29471] fuse: Unknown parameter 'use00000000000000000000' [ 1373.933904][T29475] fuse: Bad value for 'user_id' [ 1373.939019][T29475] fuse: Bad value for 'user_id' [ 1374.148354][T29478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5321'. [ 1374.202077][T20444] plantronics 0003:047F:FFFF.003E: reserved main item tag 0xd [ 1374.237390][T20444] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1374.466438][T20444] usb 3-1: USB disconnect, device number 47 [ 1374.786293][T19050] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1374.966391][T29493] FAULT_INJECTION: forcing a failure. [ 1374.966391][T29493] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.071600][T29493] CPU: 1 UID: 0 PID: 29493 Comm: syz.0.5326 Not tainted syzkaller #0 PREEMPT(full) [ 1375.071631][T29493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1375.071652][T29493] Call Trace: [ 1375.071663][T29493] [ 1375.071671][T29493] dump_stack_lvl+0x189/0x250 [ 1375.071693][T29493] ? __pfx____ratelimit+0x10/0x10 [ 1375.071724][T29493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1375.071750][T29493] ? __pfx__printk+0x10/0x10 [ 1375.071776][T29493] ? kasan_save_track+0x4f/0x80 [ 1375.071803][T29493] ? __pfx___might_resched+0x10/0x10 [ 1375.071818][T29493] ? lock_acquire+0x5f/0x360 [ 1375.071840][T29493] should_fail_ex+0x414/0x560 [ 1375.071868][T29493] should_failslab+0xa8/0x100 [ 1375.071901][T29493] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1375.071930][T29493] ? __alloc_skb+0x112/0x2d0 [ 1375.071961][T29493] __alloc_skb+0x112/0x2d0 [ 1375.071984][T29493] _sctp_make_chunk+0x5e/0x430 [ 1375.072009][T29493] sctp_make_datafrag_empty+0x122/0x230 [ 1375.072042][T29493] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1375.072069][T29493] ? __kasan_kmalloc+0x93/0xb0 [ 1375.072099][T29493] ? sctp_auth_send_cid+0x69/0x250 [ 1375.072123][T29493] sctp_datamsg_from_user+0x729/0xef0 [ 1375.072149][T29493] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 1375.072181][T29493] ? __asan_memcpy+0x40/0x70 [ 1375.072208][T29493] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 1375.072241][T29493] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1375.072270][T29493] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1375.072283][T29493] ? lock_release+0x4b/0x3e0 [ 1375.072304][T29493] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1375.072327][T29493] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1375.072361][T29493] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1375.072394][T29493] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1375.072417][T29493] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1375.072438][T29493] sctp_sendmsg+0x1941/0x2810 [ 1375.072469][T29493] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1375.072504][T29493] ? aa_sk_perm+0x81e/0x950 [ 1375.072536][T29493] ? __pfx_aa_sk_perm+0x10/0x10 [ 1375.072565][T29493] ? sock_rps_record_flow+0x19/0x410 [ 1375.072586][T29493] ? inet_sendmsg+0x2f4/0x370 [ 1375.072603][T29493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1375.072626][T29493] __sock_sendmsg+0x19c/0x270 [ 1375.072662][T29493] __sys_sendto+0x3bd/0x520 [ 1375.072693][T29493] ? __pfx___sys_sendto+0x10/0x10 [ 1375.072720][T29493] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1375.072747][T29493] ? __fget_files+0x3a0/0x420 [ 1375.072781][T29493] ? ksys_write+0x22a/0x250 [ 1375.072810][T29493] ? __pfx_ksys_write+0x10/0x10 [ 1375.072835][T29493] ? rcu_is_watching+0x15/0xb0 [ 1375.072859][T29493] __x64_sys_sendto+0xde/0x100 [ 1375.072886][T29493] do_syscall_64+0xfa/0x3b0 [ 1375.072909][T29493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.072931][T29493] ? clear_bhb_loop+0x60/0xb0 [ 1375.072956][T29493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.072976][T29493] RIP: 0033:0x7fbfc478ebe9 [ 1375.072994][T29493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1375.073013][T29493] RSP: 002b:00007fbfc5684038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1375.073029][T29493] RAX: ffffffffffffffda RBX: 00007fbfc49b5fa0 RCX: 00007fbfc478ebe9 [ 1375.073041][T29493] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 1375.073051][T29493] RBP: 00007fbfc5684090 R08: 0000200000000140 R09: 000000000000001c [ 1375.073061][T29493] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1375.073075][T29493] R13: 00007fbfc49b6038 R14: 00007fbfc49b5fa0 R15: 00007fbfc4adfa28 [ 1375.073101][T29493] [ 1375.430489][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.456855][T19050] usb 2-1: config 0 has no interfaces? [ 1375.493887][T19050] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1375.503323][T19050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.531574][T19050] usb 2-1: Product: syz [ 1375.808115][T19050] usb 2-1: Manufacturer: syz [ 1375.830391][T19050] usb 2-1: SerialNumber: syz [ 1375.861998][T19050] usb 2-1: config 0 descriptor?? [ 1375.930130][T29505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1376.499847][T29512] netlink: 'syz.0.5328': attribute type 9 has an invalid length. [ 1377.345400][T29516] netlink: 'syz.2.5332': attribute type 10 has an invalid length. [ 1377.373401][T29516] bridge0: port 3(dummy0) entered disabled state [ 1377.441419][T29516] dummy0: left allmulticast mode [ 1377.446470][T29516] dummy0: left promiscuous mode [ 1377.478429][ T5951] usb 2-1: USB disconnect, device number 73 [ 1377.530010][T29521] netlink: 'syz.2.5332': attribute type 10 has an invalid length. [ 1377.554927][T29516] bridge0: port 3(dummy0) entered disabled state [ 1377.567838][T29518] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 1377.588729][T29518] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1377.599736][T29516] bond0: Caught tx_queue_len zero misconfig [ 1377.770362][T19050] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1378.133705][T19050] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1378.149025][T19050] usb 6-1: can't read configurations, error -61 [ 1378.300493][T19050] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1378.549366][T19050] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1378.567284][T19050] usb 6-1: can't read configurations, error -61 [ 1378.876360][T19050] usb usb6-port1: attempt power cycle [ 1379.330485][T19050] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1379.364033][T19050] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1379.406344][T19050] usb 6-1: can't read configurations, error -61 [ 1379.588006][T19050] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1379.643896][T19050] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1379.652165][T19050] usb 6-1: can't read configurations, error -61 [ 1379.660883][T19050] usb usb6-port1: unable to enumerate USB device [ 1379.762904][T29555] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5342'. [ 1380.138559][T29571] FAULT_INJECTION: forcing a failure. [ 1380.138559][T29571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.152067][T29571] CPU: 0 UID: 0 PID: 29571 Comm: syz.4.5347 Not tainted syzkaller #0 PREEMPT(full) [ 1380.152093][T29571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1380.152103][T29571] Call Trace: [ 1380.152109][T29571] [ 1380.152116][T29571] dump_stack_lvl+0x189/0x250 [ 1380.152138][T29571] ? __pfx____ratelimit+0x10/0x10 [ 1380.152159][T29571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1380.152177][T29571] ? __pfx__printk+0x10/0x10 [ 1380.152200][T29571] ? rcu_is_watching+0x15/0xb0 [ 1380.152217][T29571] should_fail_ex+0x414/0x560 [ 1380.152240][T29571] _copy_to_user+0x31/0xb0 [ 1380.152257][T29571] simple_read_from_buffer+0xe1/0x170 [ 1380.152281][T29571] proc_fail_nth_read+0x1b3/0x220 [ 1380.152298][T29571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1380.152315][T29571] ? rw_verify_area+0x2a6/0x4d0 [ 1380.152334][T29571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1380.152351][T29571] vfs_read+0x200/0xa30 [ 1380.152368][T29571] ? fdget_pos+0x247/0x320 [ 1380.152382][T29571] ? __pfx___mutex_lock+0x10/0x10 [ 1380.152404][T29571] ? __pfx_vfs_read+0x10/0x10 [ 1380.152425][T29571] ? __fget_files+0x3a0/0x420 [ 1380.152446][T29571] ? __fget_files+0x2a/0x420 [ 1380.152471][T29571] ksys_read+0x145/0x250 [ 1380.152488][T29571] ? __fget_files+0x3a0/0x420 [ 1380.152510][T29571] ? __pfx_ksys_read+0x10/0x10 [ 1380.152534][T29571] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1380.152568][T29571] ? rcu_is_watching+0x15/0xb0 [ 1380.152590][T29571] do_syscall_64+0xfa/0x3b0 [ 1380.152622][T29571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.152645][T29571] ? clear_bhb_loop+0x60/0xb0 [ 1380.152663][T29571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.152678][T29571] RIP: 0033:0x7fcb0778d5fc [ 1380.152691][T29571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1380.152704][T29571] RSP: 002b:00007fcb08667030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1380.152729][T29571] RAX: ffffffffffffffda RBX: 00007fcb079b5fa0 RCX: 00007fcb0778d5fc [ 1380.152745][T29571] RDX: 000000000000000f RSI: 00007fcb086670a0 RDI: 0000000000000004 [ 1380.152758][T29571] RBP: 00007fcb08667090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.152772][T29571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.152785][T29571] R13: 00007fcb079b6038 R14: 00007fcb079b5fa0 R15: 00007fcb07adfa28 [ 1380.152810][T29571] [ 1380.710411][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1380.761315][T29576] : renamed from vlan1 [ 1380.787827][T29577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5350'. [ 1380.875683][T29577] netlink: 'syz.5.5350': attribute type 9 has an invalid length. [ 1380.888610][T29580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5351'. [ 1380.916430][ T10] usb 2-1: config 0 has no interfaces? [ 1380.932980][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1380.945446][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.001099][ T10] usb 2-1: Product: syz [ 1381.008763][ T10] usb 2-1: Manufacturer: syz [ 1381.021464][ T10] usb 2-1: SerialNumber: syz [ 1381.086580][ T10] usb 2-1: config 0 descriptor?? [ 1382.591368][T29616] syz_tun: entered allmulticast mode [ 1383.228243][T19835] usb 2-1: USB disconnect, device number 74 [ 1383.291103][T29634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5365'. [ 1383.330542][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1384.085100][ T10] usb 6-1: config 0 has no interfaces? [ 1384.092571][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1384.107480][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.110540][T19835] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1384.140651][ T10] usb 6-1: Product: syz [ 1384.167630][ T10] usb 6-1: Manufacturer: syz [ 1384.174732][ T10] usb 6-1: SerialNumber: syz [ 1384.193593][ T10] usb 6-1: config 0 descriptor?? [ 1384.300307][T19835] usb 2-1: Using ep0 maxpacket: 32 [ 1384.322217][T19835] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1384.373413][T19835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.384364][T19835] usb 2-1: Product: syz [ 1384.388711][T19835] usb 2-1: Manufacturer: syz [ 1384.394236][T19835] usb 2-1: SerialNumber: syz [ 1384.404600][T19835] usb 2-1: config 0 descriptor?? [ 1384.420383][T29628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.437589][T29628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.768094][T29651] FAULT_INJECTION: forcing a failure. [ 1384.768094][T29651] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.781207][T29651] CPU: 1 UID: 0 PID: 29651 Comm: syz.4.5369 Not tainted syzkaller #0 PREEMPT(full) [ 1384.781237][T29651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1384.781251][T29651] Call Trace: [ 1384.781261][T29651] [ 1384.781271][T29651] dump_stack_lvl+0x189/0x250 [ 1384.781306][T29651] ? __pfx____ratelimit+0x10/0x10 [ 1384.781337][T29651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1384.781364][T29651] ? __pfx__printk+0x10/0x10 [ 1384.781392][T29651] ? read_seqbegin+0x1ac/0x250 [ 1384.781419][T29651] ? __pfx___might_resched+0x10/0x10 [ 1384.781441][T29651] ? lock_acquire+0x5f/0x360 [ 1384.781474][T29651] should_fail_ex+0x414/0x560 [ 1384.781506][T29651] should_failslab+0xa8/0x100 [ 1384.781538][T29651] __kmalloc_noprof+0xcb/0x4f0 [ 1384.781568][T29651] ? tomoyo_encode+0x28b/0x550 [ 1384.781592][T29651] tomoyo_encode+0x28b/0x550 [ 1384.781614][T29651] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1384.781643][T29651] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1384.781673][T29651] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1384.781704][T29651] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1384.781735][T29651] ? rcu_is_watching+0x15/0xb0 [ 1384.781758][T29651] ? trace_sched_exit_tp+0x36/0x110 [ 1384.781809][T29651] ? __schedule+0x17ae/0x4cc0 [ 1384.781850][T29651] ? lock_release+0x4b/0x3e0 [ 1384.781882][T29651] ? rcu_is_watching+0x15/0xb0 [ 1384.781905][T29651] ? __fget_files+0x2a/0x420 [ 1384.781938][T29651] ? __fget_files+0x3a0/0x420 [ 1384.781970][T29651] ? __fget_files+0x2a/0x420 [ 1384.782005][T29651] security_file_ioctl+0xcb/0x2d0 [ 1384.782036][T29651] __se_sys_ioctl+0x47/0x170 [ 1384.782064][T29651] do_syscall_64+0xfa/0x3b0 [ 1384.782095][T29651] ? rcu_is_watching+0x15/0xb0 [ 1384.782116][T29651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.782139][T29651] ? clear_bhb_loop+0x60/0xb0 [ 1384.782163][T29651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.782185][T29651] RIP: 0033:0x7fcb0778ebe9 [ 1384.782204][T29651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.782223][T29651] RSP: 002b:00007fcb08625038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.782247][T29651] RAX: ffffffffffffffda RBX: 00007fcb079b6180 RCX: 00007fcb0778ebe9 [ 1384.782264][T29651] RDX: 0000200000000000 RSI: 0000000000004b40 RDI: 0000000000000006 [ 1384.782280][T29651] RBP: 00007fcb08625090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.782294][T29651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.782308][T29651] R13: 00007fcb079b6218 R14: 00007fcb079b6180 R15: 00007fcb07adfa28 [ 1384.782332][T29651] [ 1384.782377][T29651] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1385.210983][T29653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5370'. [ 1385.563382][T19835] airspy 2-1:0.0: usb_control_msg() failed -110 request 09 [ 1385.570898][T19835] airspy 2-1:0.0: Could not detect board [ 1385.585917][T19835] airspy 2-1:0.0: probe with driver airspy failed with error -110 [ 1385.604095][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1385.620709][T29617] syz_tun: left allmulticast mode [ 1385.800484][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1385.808541][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1385.820139][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1385.863862][T29662] netlink: 'syz.1.5366': attribute type 13 has an invalid length. [ 1385.879519][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1385.945808][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1385.983416][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1386.030725][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1386.038543][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1386.058246][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1386.093379][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1386.093381][T18314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1386.093458][T18314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1386.140453][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1386.162353][T18314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1386.172136][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1386.185103][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1386.199669][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1386.213157][T18314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1386.223760][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1386.391209][T29671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5376'. [ 1386.423910][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1386.446064][ T5964] usb 6-1: USB disconnect, device number 13 [ 1386.530293][T19835] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1386.605164][ T10] usb 3-1: string descriptor 0 read error: -22 [ 1386.611844][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1386.623783][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.637998][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1386.824124][T19835] usb 5-1: config 0 has no interfaces? [ 1386.846455][T19835] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1386.889192][T19835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.907563][T19835] usb 5-1: Product: syz [ 1386.913499][T19835] usb 5-1: Manufacturer: syz [ 1386.918417][T19835] usb 5-1: SerialNumber: syz [ 1386.952167][T19835] usb 5-1: config 0 descriptor?? [ 1387.988245][T29685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1388.241685][T29690] netlink: 87 bytes leftover after parsing attributes in process `syz.5.5381'. [ 1388.670290][ T5951] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1388.952519][T20436] usb 2-1: USB disconnect, device number 75 [ 1389.025408][T19835] usb 3-1: USB disconnect, device number 48 [ 1389.292037][T19835] usb 5-1: USB disconnect, device number 39 [ 1389.309753][T29708] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5385'. [ 1389.340681][T29708] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5385'. [ 1389.402505][T29708] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5385'. [ 1389.575982][T29708] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5385'. [ 1389.641951][T29708] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5385'. [ 1389.652045][T29708] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5385'. [ 1389.665718][T29708] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5385'. [ 1390.624233][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 1390.624284][ T30] audit: type=1326 audit(1755637983.382:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29712 comm="syz.4.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1390.696254][ T30] audit: type=1326 audit(1755637983.432:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29712 comm="syz.4.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1390.742589][ T30] audit: type=1326 audit(1755637983.432:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29712 comm="syz.4.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1390.860354][T20436] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1391.111944][ T30] audit: type=1326 audit(1755637983.432:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29712 comm="syz.4.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1391.210754][ T30] audit: type=1326 audit(1755637983.432:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29712 comm="syz.4.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1391.288833][T20436] usb 3-1: config 0 has no interfaces? [ 1391.451515][ T30] audit: type=1326 audit(1755637983.432:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29712 comm="syz.4.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1391.507391][T20436] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1391.516708][T20436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.593868][T20436] usb 3-1: Product: syz [ 1391.604115][T20436] usb 3-1: Manufacturer: syz [ 1391.616846][T20436] usb 3-1: SerialNumber: syz [ 1391.624767][ T30] audit: type=1326 audit(1755637983.562:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29712 comm="syz.4.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb0772add9 code=0x7ffc0000 [ 1391.700320][T20436] usb 3-1: config 0 descriptor?? [ 1391.714934][ T30] audit: type=1326 audit(1755637983.562:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29712 comm="syz.4.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1391.782213][ T30] audit: type=1326 audit(1755637983.562:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29712 comm="syz.4.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1391.859584][ T30] audit: type=1326 audit(1755637984.332:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29712 comm="syz.4.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1391.960276][ T43] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1391.987206][T29723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.996553][T29723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.194631][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.217693][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.256591][ T43] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1392.305588][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.366558][ T43] usb 2-1: config 0 descriptor?? [ 1392.680410][T19050] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1392.848893][T19050] usb 5-1: config 0 has no interfaces? [ 1392.948572][T19050] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1392.966019][T19050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.004989][T19050] usb 5-1: Product: syz [ 1393.009268][T19050] usb 5-1: Manufacturer: syz [ 1393.039168][T19050] usb 5-1: SerialNumber: syz [ 1393.059371][T19050] usb 5-1: config 0 descriptor?? [ 1393.600381][ C1] hrtimer: interrupt took 256088 ns [ 1394.144263][T19835] usb 3-1: USB disconnect, device number 49 [ 1395.180369][ T5951] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1395.276101][T19835] usb 5-1: USB disconnect, device number 40 [ 1395.298378][T29782] FAULT_INJECTION: forcing a failure. [ 1395.298378][T29782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.299337][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 1395.364559][T29782] CPU: 0 UID: 0 PID: 29782 Comm: syz.4.5402 Not tainted syzkaller #0 PREEMPT(full) [ 1395.364592][T29782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1395.364604][T29782] Call Trace: [ 1395.364611][T29782] [ 1395.364618][T29782] dump_stack_lvl+0x189/0x250 [ 1395.364648][T29782] ? __pfx____ratelimit+0x10/0x10 [ 1395.364681][T29782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1395.364706][T29782] ? __pfx__printk+0x10/0x10 [ 1395.364737][T29782] ? rcu_is_watching+0x15/0xb0 [ 1395.364758][T29782] should_fail_ex+0x414/0x560 [ 1395.364780][T29782] _copy_to_user+0x31/0xb0 [ 1395.364799][T29782] simple_read_from_buffer+0xe1/0x170 [ 1395.364832][T29782] proc_fail_nth_read+0x1b3/0x220 [ 1395.364858][T29782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1395.364881][T29782] ? rw_verify_area+0x2a6/0x4d0 [ 1395.364908][T29782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1395.364924][T29782] vfs_read+0x200/0xa30 [ 1395.364942][T29782] ? do_renameat2+0xa15/0xa80 [ 1395.364967][T29782] ? fdget_pos+0x247/0x320 [ 1395.364989][T29782] ? __pfx___mutex_lock+0x10/0x10 [ 1395.365020][T29782] ? __pfx_vfs_read+0x10/0x10 [ 1395.365049][T29782] ? __fget_files+0x3a0/0x420 [ 1395.365074][T29782] ? __fget_files+0x2a/0x420 [ 1395.365098][T29782] ksys_read+0x145/0x250 [ 1395.365123][T29782] ? __pfx_ksys_read+0x10/0x10 [ 1395.365151][T29782] ? getname_flags+0x1e5/0x540 [ 1395.365171][T29782] ? rcu_is_watching+0x15/0xb0 [ 1395.365193][T29782] do_syscall_64+0xfa/0x3b0 [ 1395.365220][T29782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.365234][T29782] ? clear_bhb_loop+0x60/0xb0 [ 1395.365251][T29782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.365270][T29782] RIP: 0033:0x7fcb0778d5fc [ 1395.365289][T29782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1395.365309][T29782] RSP: 002b:00007fcb08667030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1395.365331][T29782] RAX: ffffffffffffffda RBX: 00007fcb079b5fa0 RCX: 00007fcb0778d5fc [ 1395.365347][T29782] RDX: 000000000000000f RSI: 00007fcb086670a0 RDI: 0000000000000004 [ 1395.365361][T29782] RBP: 00007fcb08667090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.365370][T29782] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1395.365380][T29782] R13: 00007fcb079b6038 R14: 00007fcb079b5fa0 R15: 00007fcb07adfa28 [ 1395.365397][T29782] [ 1395.602622][ C0] vkms_vblank_simulate: vblank timer overrun [ 1395.677970][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1395.756123][ T43] usb 2-1: USB disconnect, device number 76 [ 1396.110609][T27775] Bluetooth: hci3: command 0x0406 tx timeout [ 1397.640441][ T5964] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1398.182189][ T5964] usb 2-1: config 0 has no interfaces? [ 1398.192815][ T5964] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1398.202278][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.297183][ T5964] usb 2-1: Product: syz [ 1398.311085][ T5964] usb 2-1: Manufacturer: syz [ 1398.360450][ T5964] usb 2-1: SerialNumber: syz [ 1398.407706][ T5964] usb 2-1: config 0 descriptor?? [ 1398.442905][T29824] vlan1: entered promiscuous mode [ 1398.506329][T29824] vlan1: entered allmulticast mode [ 1398.568117][T29824] hsr_slave_1: entered allmulticast mode [ 1398.745050][T29812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.757705][T29812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.816009][T29828] loop2: detected capacity change from 0 to 1897024 [ 1398.984180][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1398.984195][ T30] audit: type=1800 audit(1755637991.752:3599): pid=29829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5414" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1399.741633][T29841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1400.498904][ T5951] usb 2-1: USB disconnect, device number 77 [ 1401.230806][ T30] audit: type=1326 audit(1755637993.962:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29845 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1401.309860][ T30] audit: type=1326 audit(1755637993.962:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29845 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1401.354480][T29859] netlink: 'syz.5.5422': attribute type 9 has an invalid length. [ 1401.570463][ T30] audit: type=1326 audit(1755637993.972:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29845 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1401.945892][ T30] audit: type=1326 audit(1755637993.972:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29845 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1402.168436][ T30] audit: type=1326 audit(1755637993.972:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29845 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1402.314509][ T30] audit: type=1326 audit(1755637993.972:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29845 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1402.429216][ T30] audit: type=1326 audit(1755637993.972:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29845 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1402.475105][ T30] audit: type=1326 audit(1755637993.972:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29845 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1402.505923][ T30] audit: type=1326 audit(1755637993.972:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29845 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1403.184170][T29878] __nla_validate_parse: 26 callbacks suppressed [ 1403.184191][T29878] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5426'. [ 1404.601844][ T5951] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1405.155815][ T5951] usb 2-1: config 0 has no interfaces? [ 1405.354525][ T5951] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1405.430305][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.476437][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 1405.476453][ T30] audit: type=1326 audit(1755637998.242:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29908 comm="syz.5.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1405.543366][ T30] audit: type=1326 audit(1755637998.242:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29908 comm="syz.5.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1405.627312][ T5951] usb 2-1: Product: syz [ 1405.657623][ T5951] usb 2-1: Manufacturer: syz [ 1405.750589][ T30] audit: type=1326 audit(1755637998.512:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29908 comm="syz.5.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3630d2add9 code=0x7ffc0000 [ 1405.775057][ T5951] usb 2-1: SerialNumber: syz [ 1405.855171][ T5951] usb 2-1: config 0 descriptor?? [ 1405.882880][ T30] audit: type=1326 audit(1755637998.512:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29908 comm="syz.5.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3630d2add9 code=0x7ffc0000 [ 1406.042019][ T30] audit: type=1326 audit(1755637998.512:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29908 comm="syz.5.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3630d2add9 code=0x7ffc0000 [ 1406.202054][ T30] audit: type=1326 audit(1755637998.512:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29908 comm="syz.5.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3630d2add9 code=0x7ffc0000 [ 1406.248480][ T30] audit: type=1326 audit(1755637998.512:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29908 comm="syz.5.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1406.419121][T29900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.430930][T29900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.517329][T29951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5444'. [ 1407.670736][ T5951] usb 2-1: USB disconnect, device number 78 [ 1408.113871][T19050] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1408.278459][T19050] usb 5-1: Using ep0 maxpacket: 32 [ 1408.287193][T19050] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1408.297124][T19050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.307603][T19050] usb 5-1: config 0 descriptor?? [ 1408.320545][T19050] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1408.349700][ T30] audit: type=1326 audit(1755638001.112:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.1.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1408.412768][ T30] audit: type=1326 audit(1755638001.172:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.1.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1408.546833][T29959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.590706][T29959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.752895][ T30] audit: type=1326 audit(1755638001.202:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.1.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1410.130665][T19050] gspca_nw80x: reg_w err -110 [ 1410.135533][T19050] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 1410.337512][T29995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1410.364679][ T10] usb 5-1: USB disconnect, device number 41 [ 1410.371347][ T5964] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1410.591642][ T5964] usb 3-1: config 0 has no interfaces? [ 1410.650062][ T5964] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1410.664847][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.767204][ T5964] usb 3-1: Product: syz [ 1410.788139][ T5964] usb 3-1: Manufacturer: syz [ 1411.152070][ T5964] usb 3-1: SerialNumber: syz [ 1411.264972][ T5964] usb 3-1: config 0 descriptor?? [ 1411.598109][T29992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.612679][T29992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.784421][T30035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5468'. [ 1412.982295][ T5951] usb 3-1: USB disconnect, device number 50 [ 1413.687882][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1413.687900][ T30] audit: type=1326 audit(1755638006.432:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1413.823882][ T30] audit: type=1326 audit(1755638006.432:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1413.861990][ T30] audit: type=1326 audit(1755638006.432:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1413.896211][ T30] audit: type=1326 audit(1755638006.432:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1413.920684][ T30] audit: type=1326 audit(1755638006.432:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1413.946600][ T30] audit: type=1326 audit(1755638006.432:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1414.030599][ T30] audit: type=1326 audit(1755638006.512:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1414.124738][ T30] audit: type=1326 audit(1755638006.512:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1414.156804][ T30] audit: type=1326 audit(1755638006.562:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1414.315408][ T30] audit: type=1326 audit(1755638006.572:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1416.110470][ T5964] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1418.796426][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1418.796444][ T30] audit: type=1326 audit(1755638011.362:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.5.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3630d8d550 code=0x7ffc0000 [ 1418.858587][ T30] audit: type=1326 audit(1755638011.542:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.5.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1419.090329][ T30] audit: type=1326 audit(1755638011.542:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.5.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1419.236628][ T30] audit: type=1326 audit(1755638011.542:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.5.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1419.320266][ T30] audit: type=1326 audit(1755638011.542:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.5.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1419.403782][ T30] audit: type=1326 audit(1755638011.542:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.5.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1419.478545][ T30] audit: type=1326 audit(1755638011.542:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.5.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1419.541391][T30124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5491'. [ 1419.545401][ T30] audit: type=1326 audit(1755638011.542:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.5.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1419.646011][T30124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5491'. [ 1419.656408][T18313] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1419.679783][T18313] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1419.709041][ T30] audit: type=1326 audit(1755638011.552:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.5.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1419.748207][T18313] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1419.760636][T30131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5494'. [ 1419.774419][T18313] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1419.854497][ T30] audit: type=1326 audit(1755638011.552:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.5.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630d8ebe9 code=0x7ffc0000 [ 1421.093896][T30172] loop2: detected capacity change from 0 to 7 [ 1421.243601][T30172] loop2: [ 1421.246619][T30172] loop2: partition table partially beyond EOD, truncated [ 1421.612484][T30179] netlink: 'syz.4.5504': attribute type 4 has an invalid length. [ 1421.662548][T30181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5505'. [ 1421.978632][T30184] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5507'. [ 1422.530023][T30202] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5513'. [ 1423.072695][T30185] delete_channel: no stack [ 1424.015356][T30229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5518'. [ 1424.180411][ T5964] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 1424.412848][T30245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5520'. [ 1424.467951][ T5964] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1424.476025][ T5964] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1424.996599][ T5964] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1425.221146][ T5951] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1425.353779][ T5964] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1425.403634][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1425.403653][ T30] audit: type=1326 audit(1755638018.142:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30253 comm="syz.1.5524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1425.404291][ T5951] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1425.450337][ T30] audit: type=1326 audit(1755638018.162:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30253 comm="syz.1.5524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1425.766960][ T5964] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1425.946790][ T30] audit: type=1326 audit(1755638018.272:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30253 comm="syz.1.5524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1425.978540][ T5964] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1426.072129][T30266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5525'. [ 1426.096436][T30266] vxlan0: entered promiscuous mode [ 1426.201529][ T1332] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1426.280511][ T1332] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1426.289530][ T5964] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1426.318058][ T1332] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1426.391072][ T5964] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1426.405391][ T1332] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1426.424874][ T5964] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1426.544922][ T5964] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1426.545025][ T5951] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1426.577494][ T5964] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1426.700311][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1426.764700][ T30] audit: type=1326 audit(1755638018.272:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30253 comm="syz.1.5524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1426.800371][ T5964] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1426.822541][ T5964] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1426.843399][ T5951] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1426.852917][ T30] audit: type=1326 audit(1755638018.272:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30253 comm="syz.1.5524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1426.875593][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.927188][T30252] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1426.943256][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.945913][ T30] audit: type=1326 audit(1755638018.272:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30253 comm="syz.1.5524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1427.010630][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.016099][ T5951] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1427.033031][ T5964] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1427.100335][ T10] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1427.127847][ T5964] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1427.148050][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.210820][ T10] usb 3-1: config 0 descriptor?? [ 1427.271685][ T30] audit: type=1326 audit(1755638018.272:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30253 comm="syz.1.5524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1427.330273][ T30] audit: type=1326 audit(1755638018.272:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30253 comm="syz.1.5524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1427.375065][ T30] audit: type=1326 audit(1755638018.272:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30253 comm="syz.1.5524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7c9eb8ebe9 code=0x7ffc0000 [ 1427.486385][T19050] usb 6-1: USB disconnect, device number 16 [ 1427.493831][ T30] audit: type=1326 audit(1755638018.272:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30253 comm="syz.1.5524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c9eb2add9 code=0x7ffc0000 [ 1427.735381][ T10] hid-steam 0003:28DE:1142.003F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1427.874416][ T10] hid-steam 0003:28DE:1142.003F: Steam wireless receiver connected [ 1427.893629][ T10] hid-steam 0003:28DE:1142.0040: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1428.488046][T30280] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5530'. [ 1428.536237][ T5964] usb 5-1: string descriptor 0 read error: -71 [ 1428.562275][ T5964] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1428.603484][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.639515][ T5964] usb 5-1: can't set config #168, error -71 [ 1428.649474][ T5964] usb 5-1: USB disconnect, device number 42 [ 1428.734424][T30286] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:255 [ 1429.274539][ T5951] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1429.608609][T30305] netlink: 'syz.1.5535': attribute type 5 has an invalid length. [ 1429.686070][ T5964] usb 3-1: USB disconnect, device number 52 [ 1429.730821][ T5964] hid-steam 0003:28DE:1142.003F: Steam wireless receiver disconnected [ 1429.770377][T30305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5535'. [ 1429.882893][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.889456][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.118641][T30332] FAULT_INJECTION: forcing a failure. [ 1432.118641][T30332] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.136075][T30332] CPU: 1 UID: 0 PID: 30332 Comm: syz.0.5544 Not tainted syzkaller #0 PREEMPT(full) [ 1432.136097][T30332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1432.136109][T30332] Call Trace: [ 1432.136115][T30332] [ 1432.136122][T30332] dump_stack_lvl+0x189/0x250 [ 1432.136145][T30332] ? __pfx____ratelimit+0x10/0x10 [ 1432.136166][T30332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1432.136184][T30332] ? __pfx__printk+0x10/0x10 [ 1432.136205][T30332] ? fs_reclaim_acquire+0x7d/0x100 [ 1432.136228][T30332] ? rcu_is_watching+0x15/0xb0 [ 1432.136243][T30332] ? __pfx___might_resched+0x10/0x10 [ 1432.136257][T30332] ? lock_acquire+0x5f/0x360 [ 1432.136280][T30332] should_fail_ex+0x414/0x560 [ 1432.136301][T30332] should_failslab+0xa8/0x100 [ 1432.136324][T30332] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1432.136345][T30332] ? __alloc_skb+0x112/0x2d0 [ 1432.136369][T30332] __alloc_skb+0x112/0x2d0 [ 1432.136393][T30332] netlink_sendmsg+0x5c6/0xb30 [ 1432.136419][T30332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1432.136450][T30332] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1432.136464][T30332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1432.136480][T30332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1432.136503][T30332] __sock_sendmsg+0x219/0x270 [ 1432.136522][T30332] ____sys_sendmsg+0x505/0x830 [ 1432.136540][T30332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1432.136558][T30332] ? import_iovec+0x74/0xa0 [ 1432.136576][T30332] ___sys_sendmsg+0x21f/0x2a0 [ 1432.136591][T30332] ? __pfx____sys_sendmsg+0x10/0x10 [ 1432.136619][T30332] ? __fget_files+0x2a/0x420 [ 1432.136641][T30332] ? __fget_files+0x3a0/0x420 [ 1432.136667][T30332] __x64_sys_sendmsg+0x19b/0x260 [ 1432.136685][T30332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1432.136704][T30332] ? __pfx_ksys_write+0x10/0x10 [ 1432.136723][T30332] ? rcu_is_watching+0x15/0xb0 [ 1432.136740][T30332] ? rcu_is_watching+0x15/0xb0 [ 1432.136755][T30332] do_syscall_64+0xfa/0x3b0 [ 1432.136776][T30332] ? rcu_is_watching+0x15/0xb0 [ 1432.136790][T30332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.136805][T30332] ? clear_bhb_loop+0x60/0xb0 [ 1432.136826][T30332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.136841][T30332] RIP: 0033:0x7fbfc478ebe9 [ 1432.136855][T30332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1432.136870][T30332] RSP: 002b:00007fbfc5684038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1432.136886][T30332] RAX: ffffffffffffffda RBX: 00007fbfc49b5fa0 RCX: 00007fbfc478ebe9 [ 1432.136898][T30332] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1432.136908][T30332] RBP: 00007fbfc5684090 R08: 0000000000000000 R09: 0000000000000000 [ 1432.136918][T30332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1432.136927][T30332] R13: 00007fbfc49b6038 R14: 00007fbfc49b5fa0 R15: 00007fbfc4adfa28 [ 1432.136944][T30332] [ 1432.540016][T30335] netlink: 4344 bytes leftover after parsing attributes in process `syz.4.5543'. [ 1433.008523][T30347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5545'. [ 1433.180292][ T5964] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 1433.198370][T30356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1433.449082][ T5964] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1433.469068][ T5964] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1433.640444][ T5964] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1433.656206][ T5964] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1433.667984][ T5964] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1433.686688][ T5964] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1433.699749][ T5964] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1433.747125][ T5964] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1433.760402][ T5964] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1433.760876][ T5951] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 1433.810448][ T5964] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1433.872544][ T5964] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1433.883546][ T5964] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1433.904680][ T5964] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1433.940279][ T5964] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1433.974684][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1434.118291][ T5951] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1434.126785][ T5951] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1434.140315][ T5951] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1434.155915][ T5951] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1434.499188][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1434.517599][ T5951] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1434.534831][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.536507][ T5951] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1434.594444][ T5951] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1434.625544][ T5964] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1434.697604][ T10] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 1434.708696][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.735285][ T10] usb 6-1: Product: syz [ 1434.743446][ T5964] usb 3-1: string descriptor 0 read error: -22 [ 1434.749880][ T5964] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1434.775715][ T10] usb 6-1: Manufacturer: syz [ 1434.783119][ T10] usb 6-1: SerialNumber: syz [ 1434.787796][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.813298][ T5951] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1434.813919][ T10] usb 6-1: config 0 descriptor?? [ 1434.915326][ T5964] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1434.992516][ T10] peak_usb 6-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1435.010419][ T5951] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1435.063183][ T10] peak_usb 6-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1435.081745][ T43] usb 3-1: USB disconnect, device number 53 [ 1435.169789][ T5951] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1435.211003][ T10] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 1435.245491][ T5951] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1435.253701][ T5951] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1435.275814][ T5951] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1435.305674][ T5951] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1435.379301][ T5951] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1435.514662][ T5951] usb 5-1: string descriptor 0 read error: -22 [ 1435.559306][ T5951] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1435.650215][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.734171][ T5951] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1436.300719][T20436] usb 5-1: USB disconnect, device number 44 [ 1436.529436][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 1436.529452][ T30] audit: type=1326 audit(1755638029.292:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30390 comm="syz.0.5557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfc478ebe9 code=0x0 [ 1436.697468][ T10] usb 6-1: USB disconnect, device number 17 [ 1437.071377][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 1437.313860][ T30] audit: type=1800 audit(1755638030.072:3987): pid=30392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5556" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1437.549525][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1437.770309][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1437.816007][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.827331][ T10] usb 3-1: config 0 has no interfaces? [ 1437.846629][ T10] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1437.872982][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.931466][ T10] usb 3-1: config 0 descriptor?? [ 1438.526701][T20444] usb 3-1: USB disconnect, device number 54 [ 1439.070349][T20444] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1439.320256][T20444] usb 3-1: Using ep0 maxpacket: 8 [ 1439.328807][T20444] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.343111][T20444] usb 3-1: config 0 has no interfaces? [ 1439.348621][T20444] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1439.364405][T20444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.406233][T20444] usb 3-1: config 0 descriptor?? [ 1439.619780][T30408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.638899][T30408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.970746][T30449] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 1440.265386][T20444] usb 3-1: USB disconnect, device number 55 [ 1440.577955][T30454] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1440.751183][T30456] netlink: 'syz.0.5574': attribute type 5 has an invalid length. [ 1440.769187][T30456] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1440.898455][T30458] FAULT_INJECTION: forcing a failure. [ 1440.898455][T30458] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.920330][T30458] CPU: 0 UID: 0 PID: 30458 Comm: syz.5.5575 Not tainted syzkaller #0 PREEMPT(full) [ 1440.920361][T30458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1440.920376][T30458] Call Trace: [ 1440.920386][T30458] [ 1440.920395][T30458] dump_stack_lvl+0x189/0x250 [ 1440.920427][T30458] ? __pfx____ratelimit+0x10/0x10 [ 1440.920457][T30458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1440.920482][T30458] ? __pfx__printk+0x10/0x10 [ 1440.920514][T30458] ? __pfx___might_resched+0x10/0x10 [ 1440.920535][T30458] ? lock_acquire+0x5f/0x360 [ 1440.920566][T30458] should_fail_ex+0x414/0x560 [ 1440.920597][T30458] should_failslab+0xa8/0x100 [ 1440.920629][T30458] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1440.920665][T30458] ? fuse_get_req+0x7b9/0x10b0 [ 1440.920688][T30458] fuse_get_req+0x7b9/0x10b0 [ 1440.920708][T30458] ? stack_depot_save_flags+0x40/0x860 [ 1440.920742][T30458] ? __pfx_fuse_get_req+0x10/0x10 [ 1440.920761][T30458] ? fuse_lookup_name+0x1b5/0x860 [ 1440.920786][T30458] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1440.920812][T30458] ? do_syscall_64+0xfa/0x3b0 [ 1440.920844][T30458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.920871][T30458] __fuse_simple_request+0x2aa/0x18d0 [ 1440.920898][T30458] ? __pfx___fuse_simple_request+0x10/0x10 [ 1440.920929][T30458] ? __kasan_kmalloc+0x93/0xb0 [ 1440.920962][T30458] fuse_lookup_name+0x34c/0x860 [ 1440.920995][T30458] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1440.921021][T30458] ? fuse_lock_inode+0xd3/0x120 [ 1440.921052][T30458] ? percpu_ref_get_many+0x19/0x140 [ 1440.921090][T30458] fuse_lookup+0x1e9/0x640 [ 1440.921121][T30458] ? __pfx_fuse_lookup+0x10/0x10 [ 1440.921147][T30458] ? do_raw_spin_lock+0x121/0x290 [ 1440.921179][T30458] ? do_raw_spin_unlock+0x122/0x240 [ 1440.921207][T30458] ? _raw_spin_unlock+0x28/0x50 [ 1440.921233][T30458] ? d_alloc+0x144/0x190 [ 1440.921255][T30458] lookup_one_qstr_excl+0x131/0x360 [ 1440.921282][T30458] filename_create+0x224/0x3c0 [ 1440.921316][T30458] ? __pfx_filename_create+0x10/0x10 [ 1440.921348][T30458] do_mkdirat+0xa0/0x590 [ 1440.921376][T30458] ? __pfx_do_mkdirat+0x10/0x10 [ 1440.921401][T30458] ? strncpy_from_user+0x150/0x290 [ 1440.921429][T30458] ? getname_flags+0x1e5/0x540 [ 1440.921451][T30458] __x64_sys_mkdir+0x6c/0x80 [ 1440.921479][T30458] do_syscall_64+0xfa/0x3b0 [ 1440.921510][T30458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.921532][T30458] ? clear_bhb_loop+0x60/0xb0 [ 1440.921556][T30458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.921578][T30458] RIP: 0033:0x7f3630d8ebe9 [ 1440.921598][T30458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.921616][T30458] RSP: 002b:00007f3631c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1440.921647][T30458] RAX: ffffffffffffffda RBX: 00007f3630fb5fa0 RCX: 00007f3630d8ebe9 [ 1440.921664][T30458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1440.921678][T30458] RBP: 00007f3631c73090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.921692][T30458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.921706][T30458] R13: 00007f3630fb6038 R14: 00007f3630fb5fa0 R15: 00007f36310dfa28 [ 1440.921730][T30458] [ 1441.241358][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.253481][T30465] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1441.411374][T30465] 0ªî{X¹¦: renamed from gretap0 [ 1441.544649][T30465] 0ªî{X¹¦: entered allmulticast mode [ 1441.579467][T30465] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1441.749146][T20436] IPVS: starting estimator thread 0... [ 1441.850447][T30476] IPVS: using max 51 ests per chain, 122400 per kthread [ 1442.000948][T20436] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 1442.132987][T30491] fuse: Bad value for 'fd' [ 1442.140312][T20436] usb 3-1: device descriptor read/64, error -71 [ 1442.280391][ T5964] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1442.380552][T20436] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1442.432597][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 1442.522544][T20436] usb 3-1: device descriptor read/64, error -71 [ 1442.534130][T30481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.591376][T30481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.637349][T30497] kvm: kvm [30496]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1442.651011][T20436] usb usb3-port1: attempt power cycle [ 1442.656093][T30497] kvm: kvm [30496]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1442.990685][T20436] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1443.010934][T20436] usb 3-1: device descriptor read/8, error -71 [ 1443.102431][T30511] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 1443.115739][T30511] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1443.223664][ T5964] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1443.245812][ T5964] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1443.262010][T20436] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 1443.263947][ T5964] usb 2-1: can't read configurations, error -71 [ 1443.301142][T20436] usb 3-1: device descriptor read/8, error -71 [ 1443.410671][T20436] usb usb3-port1: unable to enumerate USB device [ 1444.312606][T20444] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1444.600011][T20444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.611443][T20444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.630650][T20444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1444.650425][T20444] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1444.659630][T20444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.794464][T20444] usb 5-1: config 0 descriptor?? [ 1444.892780][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5596'. [ 1444.913150][T30533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5596'. [ 1445.244106][T20444] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1445.691737][T30550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.717424][T30550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.826132][T30552] netlink: 'syz.4.5593': attribute type 4 has an invalid length. [ 1447.280950][T20436] usb 5-1: USB disconnect, device number 45 [ 1447.680260][ T5964] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1447.842222][ T5964] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1447.850095][ T5964] usb 6-1: can't read configurations, error -61 [ 1448.000351][ T5964] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1448.154592][T30581] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1448.175001][ T5964] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1448.182911][ T5964] usb 6-1: can't read configurations, error -61 [ 1448.189757][ T5964] usb usb6-port1: attempt power cycle [ 1448.227018][ T30] audit: type=1326 audit(1755638040.972:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1448.267168][ T30] audit: type=1326 audit(1755638040.972:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1448.300309][ T30] audit: type=1326 audit(1755638040.972:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1448.324071][ T30] audit: type=1326 audit(1755638040.972:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1448.330320][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1448.347468][ T30] audit: type=1326 audit(1755638040.972:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1448.379771][ T30] audit: type=1326 audit(1755638040.972:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1448.403487][ T30] audit: type=1326 audit(1755638040.972:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1448.429625][ T30] audit: type=1326 audit(1755638040.972:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1448.480107][ T30] audit: type=1326 audit(1755638040.972:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1448.540346][ T5964] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1448.568871][ T30] audit: type=1326 audit(1755638040.972:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1448.576979][ T5964] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1448.604992][ T5964] usb 6-1: can't read configurations, error -61 [ 1448.708168][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1448.717805][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.736812][ T10] usb 2-1: config 0 has no interfaces? [ 1448.747356][ T10] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1448.766425][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.784427][ T10] usb 2-1: config 0 descriptor?? [ 1448.870281][ T5964] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1448.904436][ T5964] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1448.916488][ T5964] usb 6-1: can't read configurations, error -61 [ 1448.945292][ T5964] usb usb6-port1: unable to enumerate USB device [ 1449.003938][ T5951] usb 2-1: USB disconnect, device number 81 [ 1449.350430][ T5951] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1449.520260][ T5951] usb 2-1: Using ep0 maxpacket: 8 [ 1449.544285][ T5951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.556299][ T5951] usb 2-1: config 0 has no interfaces? [ 1449.570430][ T5951] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1449.825057][T30607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1449.834985][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.850049][ T5951] usb 2-1: config 0 descriptor?? [ 1450.078189][T30580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.087903][T30580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.206856][T30611] netlink: 'syz.2.5613': attribute type 1 has an invalid length. [ 1450.248543][T30611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1450.292567][T30611] bond3: (slave gretap1): making interface the new active one [ 1450.313986][T30611] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1450.491644][T30615] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1450.532309][T30615] bond3 (unregistering): Released all slaves [ 1450.738889][T20436] usb 2-1: USB disconnect, device number 82 [ 1451.850674][T20436] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1451.890532][ T5964] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1452.000334][T20436] usb 6-1: Using ep0 maxpacket: 16 [ 1452.007345][T20436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.024129][T30648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1452.046207][T20436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.057809][T20436] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1452.059218][ T5964] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1452.070631][T20436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.089550][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.099438][T20436] usb 6-1: config 0 descriptor?? [ 1452.104054][ T5964] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1452.127610][ T5964] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1452.136233][ T5964] usb 3-1: Manufacturer: syz [ 1452.147020][ T5964] usb 3-1: config 0 descriptor?? [ 1452.156966][T30650] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5622'. [ 1452.210408][ T5964] rc_core: IR keymap rc-hauppauge not found [ 1452.216505][ T5964] Registered IR keymap rc-empty [ 1452.225158][ T5964] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1452.237850][ T5964] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input59 [ 1452.354359][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1452.446115][ T5964] usb 3-1: USB disconnect, device number 60 [ 1452.733843][T20436] usbhid 6-1:0.0: can't add hid device: -71 [ 1452.739990][T20436] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1452.769624][T20436] usb 6-1: USB disconnect, device number 22 [ 1453.121307][T30673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1453.235590][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1453.235610][ T30] audit: type=1326 audit(1755638046.002:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30661 comm="syz.2.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a7512add9 code=0x7ffc0000 [ 1453.290696][ T30] audit: type=1326 audit(1755638046.002:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30661 comm="syz.2.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a7512add9 code=0x7ffc0000 [ 1453.403754][ T30] audit: type=1326 audit(1755638046.002:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30661 comm="syz.2.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a7512add9 code=0x7ffc0000 [ 1453.719774][ T30] audit: type=1326 audit(1755638046.042:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30661 comm="syz.2.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a7512add9 code=0x7ffc0000 [ 1453.990324][ T30] audit: type=1326 audit(1755638046.042:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30661 comm="syz.2.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a7512add9 code=0x7ffc0000 [ 1454.117040][ T30] audit: type=1326 audit(1755638046.042:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30661 comm="syz.2.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a7512add9 code=0x7ffc0000 [ 1454.258211][ T30] audit: type=1326 audit(1755638046.042:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30661 comm="syz.2.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7518ebe9 code=0x7ffc0000 [ 1454.400272][ T30] audit: type=1326 audit(1755638046.042:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30661 comm="syz.2.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7518ebe9 code=0x7ffc0000 [ 1454.490666][ T30] audit: type=1326 audit(1755638046.132:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30661 comm="syz.2.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f3a7518ebe9 code=0x7ffc0000 [ 1454.706552][ T30] audit: type=1326 audit(1755638046.132:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30661 comm="syz.2.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7518ebe9 code=0x7ffc0000 [ 1456.460346][T20436] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1456.507169][T30715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1456.623160][T20436] usb 6-1: Using ep0 maxpacket: 16 [ 1456.653907][T20436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.673537][T20436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.687865][T20436] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1456.706296][T20436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.735936][T20436] usb 6-1: config 0 descriptor?? [ 1456.960395][ T5951] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1457.123856][ T5951] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 1457.132881][ T5951] usb 5-1: config 0 has no interface number 0 [ 1457.143598][ T5951] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 1457.153243][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.165427][ T5951] usb 5-1: Product: syz [ 1457.169947][ T5951] usb 5-1: Manufacturer: syz [ 1457.175476][ T5951] usb 5-1: SerialNumber: syz [ 1457.186854][ T5951] usb 5-1: config 0 descriptor?? [ 1457.549929][T20436] usbhid 6-1:0.0: can't add hid device: -71 [ 1457.559769][T20436] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1457.570863][T20436] usb 6-1: USB disconnect, device number 23 [ 1457.584868][T30735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5641'. [ 1457.640246][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1457.688740][ T5951] pl2303 5-1:0.161: required interrupt-in endpoint missing [ 1457.713925][ T5951] usb 5-1: USB disconnect, device number 46 [ 1457.765880][T30741] tipc: Enabling of bearer rejected, failed to enable media [ 1458.164492][T20436] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1458.541019][T20436] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.554755][T20436] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1458.622753][T20436] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1458.633590][T20436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.044062][T19050] usb 3-1: USB disconnect, device number 61 [ 1463.228698][T30822] fuse: Bad value for 'fd' [ 1463.980296][ T43] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1464.222150][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1464.336565][T30852] netlink: 'syz.0.5670': attribute type 2 has an invalid length. [ 1464.365936][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 1464.401779][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 1464.421849][ T5964] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1464.452594][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1464.476395][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.504821][ T43] usb 5-1: config 0 descriptor?? [ 1464.523672][ T43] hub 5-1:0.0: USB hub found [ 1464.608292][ T5964] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1464.668096][T30860] vlan2: entered promiscuous mode [ 1464.687637][T30860] vlan2: entered allmulticast mode [ 1464.701725][T30860] hsr_slave_1: entered allmulticast mode [ 1464.708122][ T5964] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1464.729347][ T5964] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1464.740280][ T43] hub 5-1:0.0: 1 port detected [ 1464.743118][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1464.745777][T20436] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1464.755903][ T5964] usb 3-1: Product: syz [ 1464.767878][ T5964] usb 3-1: Manufacturer: syz [ 1464.776833][ T5964] usb 3-1: SerialNumber: syz [ 1464.793936][ T5964] usb 3-1: config 0 descriptor?? [ 1464.810908][ T5964] usb 3-1: selecting invalid altsetting 0 [ 1464.960616][T20436] usb 6-1: Using ep0 maxpacket: 16 [ 1465.030889][T20436] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1465.045794][T20436] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1465.092357][T20436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.208550][T20436] usb 6-1: config 0 descriptor?? [ 1465.298952][T30874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1465.512056][T30876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.521211][T30876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.541371][ T5951] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1467.371623][ T5951] usb 5-1: USB disconnect, device number 47 [ 1467.528821][ T5964] usb 6-1: USB disconnect, device number 24 [ 1467.596117][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1467.596139][ T30] audit: type=1326 audit(1755638060.362:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.4.5681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1467.654961][ T30] audit: type=1326 audit(1755638060.362:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.4.5681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1468.072879][ T30] audit: type=1326 audit(1755638060.392:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.4.5681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1468.141966][ T10] usb 3-1: USB disconnect, device number 62 [ 1468.230279][ T5964] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 1468.283603][ T30] audit: type=1326 audit(1755638060.392:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.4.5681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1468.311338][ T30] audit: type=1326 audit(1755638060.392:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.4.5681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1468.345873][ T30] audit: type=1326 audit(1755638060.392:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.4.5681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1468.478356][ T5964] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1468.489878][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1468.636068][ T5964] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1468.653819][ T30] audit: type=1326 audit(1755638060.392:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.4.5681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1468.762091][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1468.840292][ T30] audit: type=1326 audit(1755638060.392:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.4.5681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1468.869477][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1468.885750][ T5964] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1468.894508][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1468.907174][ T5964] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1468.919387][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1468.943031][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1469.197377][ T30] audit: type=1326 audit(1755638060.392:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.4.5681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1469.223766][ T30] audit: type=1326 audit(1755638060.392:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30886 comm="syz.4.5681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0778ebe9 code=0x7ffc0000 [ 1469.433536][ T5964] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1469.835161][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1469.864900][ T5964] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1469.954652][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1470.071956][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1470.165350][ T5964] usb 6-1: string descriptor 0 read error: -22 [ 1470.176479][ T5964] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1470.670418][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.862895][ T5964] usb 6-1: can't set config #168, error -71 [ 1470.900595][ T5964] usb 6-1: USB disconnect, device number 25 [ 1472.567511][T30940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5692'. [ 1472.648220][T30942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1472.715193][T30945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5693'. [ 1472.877942][T30949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5696'. [ 1473.410289][ T5964] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1473.572484][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 1473.588014][ T5964] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1473.614989][ T5964] usb 2-1: config 0 has no interface number 0 [ 1473.632631][ T5964] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.681422][ T5964] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.701965][ T5964] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1473.721329][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.808843][ T5964] usb 2-1: config 0 descriptor?? [ 1473.830421][ T43] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1474.870317][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1474.887641][ T43] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1474.897344][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.921242][ T43] usb 6-1: config 0 descriptor?? [ 1474.934206][T30975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5704'. [ 1475.064359][ T5964] uclogic 0003:28BD:0094.0042: pen parameters not found [ 1475.083942][ T5964] uclogic 0003:28BD:0094.0042: interface is invalid, ignoring [ 1475.129122][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1475.157769][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1475.182961][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1475.206290][ T43] usb 6-1: media controller created [ 1475.247064][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1475.476318][T30983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5705'. [ 1475.989689][T30997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1476.378368][ T5951] usb 2-1: USB disconnect, device number 83 [ 1477.016433][ T43] az6027: usb out operation failed. (-71) [ 1477.058063][ T43] az6027: usb out operation failed. (-71) [ 1477.067026][ T43] stb0899_attach: Driver disabled by Kconfig [ 1477.079396][ T43] az6027: no front-end attached [ 1477.079396][ T43] [ 1477.099623][ T43] az6027: usb out operation failed. (-71) [ 1477.124127][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1477.165292][T31018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5714'. [ 1477.190551][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input60 [ 1478.010863][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 1478.017880][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1478.423347][ T43] usb 6-1: USB disconnect, device number 26 [ 1478.783213][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1479.250533][T19050] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1479.807107][T19050] usb 5-1: Using ep0 maxpacket: 8 [ 1479.816049][T19050] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.066663][T19050] usb 5-1: config 0 has no interfaces? [ 1480.148174][T19050] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1480.178581][T19050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.247454][T19050] usb 5-1: config 0 descriptor?? [ 1480.260481][ T43] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1480.420440][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1480.428473][ T43] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1480.443478][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1480.488472][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1480.499121][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1480.509804][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1480.519938][T19050] usb 5-1: USB disconnect, device number 48 [ 1480.523612][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1480.559352][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.803276][ T43] usb 6-1: usb_control_msg returned -32 [ 1480.808936][ T43] usbtmc 6-1:16.0: can't read capabilities [ 1480.850264][T19050] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1481.010271][T19050] usb 5-1: Using ep0 maxpacket: 8 [ 1481.019014][T19050] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.019035][T19050] usb 5-1: config 0 has no interfaces? [ 1481.019055][T19050] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1481.019072][T19050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.020481][T19050] usb 5-1: config 0 descriptor?? [ 1481.163034][T31072] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1481.175169][T31073] netlink: 'syz.2.5727': attribute type 6 has an invalid length. [ 1481.188863][ T43] usb 6-1: USB disconnect, device number 27 [ 1481.215960][T31073] netlink: 'syz.2.5727': attribute type 6 has an invalid length. [ 1481.226969][T31046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.249637][T31046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.280018][T31046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5719'. [ 1481.856169][T19050] usb 5-1: USB disconnect, device number 49 [ 1482.201026][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1482.530263][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1482.674514][ T10] usb 2-1: config 211 has an invalid interface number: 98 but max is 0 [ 1482.688359][ T10] usb 2-1: config 211 has no interface number 0 [ 1482.697595][ T10] usb 2-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 1482.711519][ T10] usb 2-1: config 211 interface 98 has no altsetting 0 [ 1482.759677][ T10] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 1482.769311][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.782359][ T10] usb 2-1: Product: syz [ 1482.791042][ T10] usb 2-1: Manufacturer: syz [ 1482.805877][ T10] usb 2-1: SerialNumber: syz [ 1482.846231][T31093] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1483.682868][T31119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.084903][T31126] loop2: detected capacity change from 0 to 7 [ 1484.110586][T31126] Dev loop2: unable to read RDB block 7 [ 1484.117303][T31126] loop2: unable to read partition table [ 1484.125976][T31126] loop2: partition table beyond EOD, truncated [ 1484.340341][T31126] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1484.783089][T31132] netlink: 'syz.5.5744': attribute type 10 has an invalid length. [ 1484.838304][T31132] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1485.150319][T19050] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1485.180030][T31141] Invalid logical block size (33554432) [ 1485.310824][T19050] usb 5-1: Using ep0 maxpacket: 8 [ 1485.322741][T19050] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.333340][T19050] usb 5-1: config 0 has no interfaces? [ 1485.338940][T19050] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1485.348351][ T5964] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1485.399995][T19050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.510726][ T5964] usb 6-1: Using ep0 maxpacket: 32 [ 1485.615035][ T5964] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 1485.650860][ T5964] usb 6-1: config 0 has no interface number 0 [ 1486.005370][ T10] mct_u232 2-1:211.98: MCT U232 converter detected [ 1486.054988][T31146] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5748'. [ 1486.121734][ T10] mct_u232 ttyUSB0: expected endpoint missing [ 1486.130932][T19050] usb 5-1: config 0 descriptor?? [ 1486.149810][ T10] usb 2-1: USB disconnect, device number 84 [ 1486.556837][ T5964] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1486.571116][T19050] usb 5-1: USB disconnect, device number 50 [ 1486.578210][ T10] mct_u232 2-1:211.98: device disconnected [ 1486.603728][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.647686][ T5964] usb 6-1: Product: syz [ 1486.659845][ T5964] usb 6-1: Manufacturer: syz [ 1486.668925][ T5964] usb 6-1: SerialNumber: syz [ 1486.680720][ T5964] usb 6-1: config 0 descriptor?? [ 1486.696615][ T5964] ftdi_sio 6-1:0.217: FTDI USB Serial Device converter detected [ 1486.723762][ T5964] usb 6-1: Detected SIO [ 1486.733474][ T5964] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1486.911785][T19050] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1487.084756][T19050] usb 5-1: Using ep0 maxpacket: 8 [ 1487.125592][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1487.155256][T19050] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.168729][T19050] usb 5-1: config 0 has no interfaces? [ 1487.174396][T19050] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1487.185485][T19050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.206094][T19050] usb 5-1: config 0 descriptor?? [ 1487.280406][ T10] usb 2-1: device descriptor read/64, error -71 [ 1487.456550][T31134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.467139][T31134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.522213][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1487.547487][T31134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5745'. [ 1487.660277][ T10] usb 2-1: device descriptor read/64, error -71 [ 1487.770841][ T10] usb usb2-port1: attempt power cycle [ 1487.980900][ T43] usb 6-1: USB disconnect, device number 28 [ 1488.013652][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1488.048094][ T43] ftdi_sio 6-1:0.217: device disconnected [ 1488.119475][T31159] tipc: Enabled bearer , priority 0 [ 1488.140089][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1488.169049][T31159] syzkaller0: entered promiscuous mode [ 1488.200269][ T10] usb 2-1: device descriptor read/8, error -71 [ 1488.381931][T19050] usb 5-1: USB disconnect, device number 51 [ 1488.390395][T31159] syzkaller0: entered allmulticast mode [ 1488.460033][T31159] tipc: Resetting bearer [ 1488.472124][T31159] syz_tun: left allmulticast mode [ 1488.500566][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1488.514153][T31158] tipc: Resetting bearer [ 1488.561494][ T10] usb 2-1: device descriptor read/8, error -71 [ 1488.569904][T31158] tipc: Disabling bearer [ 1488.670770][ T10] usb usb2-port1: unable to enumerate USB device [ 1489.082270][T31167] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1489.088939][T31167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1489.100619][T31167] vhci_hcd vhci_hcd.0: Device attached [ 1489.350610][T19835] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1489.774312][T31187] xfrm0: entered promiscuous mode [ 1489.779556][T31187] xfrm0: entered allmulticast mode [ 1489.883535][T31182] syz.2.5758: attempt to access beyond end of device [ 1489.883535][T31182] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1490.900324][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1491.032688][ T10] usb 2-1: device descriptor read/64, error -71 [ 1491.270585][ T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1491.314480][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.324851][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.417680][ T10] usb 2-1: device descriptor read/64, error -71 [ 1491.502088][T31169] vhci_hcd: connection reset by peer [ 1491.512304][T24580] vhci_hcd: stop threads [ 1491.517018][T24580] vhci_hcd: release socket [ 1491.522556][T24580] vhci_hcd: disconnect device [ 1491.532127][ T10] usb usb2-port1: attempt power cycle [ 1492.002757][ T5964] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1492.026676][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1492.071027][ T10] usb 2-1: device descriptor read/8, error -71 [ 1492.191374][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 1492.198274][ T5964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.228835][ T5964] usb 5-1: config 0 has no interfaces? [ 1492.242361][ T5964] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1492.274842][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.320362][ T10] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1492.361003][ T5964] usb 5-1: config 0 descriptor?? [ 1492.400929][ T10] usb 2-1: device descriptor read/8, error -71 [ 1492.564758][ T10] usb usb2-port1: unable to enumerate USB device [ 1492.597402][ T43] usb 5-1: USB disconnect, device number 52 [ 1492.960247][ T43] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1493.139175][T31229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5768'. [ 1493.208596][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1493.216185][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.216215][ T43] usb 5-1: config 0 has no interfaces? [ 1493.216246][ T43] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1493.216273][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.217795][ T43] usb 5-1: config 0 descriptor?? [ 1493.422080][T31215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.440950][T31215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.519662][T31236] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 1493.802522][T31215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5764'. [ 1494.359457][ T5951] usb 5-1: USB disconnect, device number 53 [ 1494.510999][ T43] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1494.590411][T31250] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1494.670521][T19835] vhci_hcd: vhci_device speed not set [ 1494.691230][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1494.697975][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.748765][ T43] usb 2-1: config 0 has no interfaces? [ 1494.756917][ T43] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1494.770919][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.785377][ T43] usb 2-1: config 0 descriptor?? [ 1495.033649][T31242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.082227][T31242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.118862][T31242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.145997][T31242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.163850][ T5951] usb 2-1: USB disconnect, device number 93 [ 1495.641246][T31258] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1496.112887][T31277] fuse: Unknown parameter 'mGN‡8o«ad' [ 1496.411850][T19050] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1496.620581][T19050] usb 6-1: Using ep0 maxpacket: 32 [ 1496.663361][T19050] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 1496.672175][T19050] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.696327][T19050] usb 6-1: config 0 has no interface number 0 [ 1496.950326][T19050] usb 6-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1497.090556][T19050] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1497.102933][T19050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.123856][T19050] usb 6-1: Product: syz [ 1497.128089][T19050] usb 6-1: Manufacturer: syz [ 1497.143655][T19050] usb 6-1: SerialNumber: syz [ 1497.181630][T19050] usb 6-1: config 0 descriptor?? [ 1498.030293][T19835] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1498.181553][T19835] usb 5-1: Using ep0 maxpacket: 8 [ 1498.207100][T19835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.231746][T19835] usb 5-1: config 0 has no interfaces? [ 1498.242875][T19835] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1498.277037][T19835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.315383][T19835] usb 5-1: config 0 descriptor?? [ 1498.625070][ T5964] usb 5-1: USB disconnect, device number 54 [ 1499.070542][ T5964] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1499.231838][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 1499.240440][ T5964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.270432][ T10] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 1499.303241][ T5964] usb 5-1: config 0 has no interfaces? [ 1499.358839][ T5964] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1499.427783][ T10] usb 2-1: device descriptor read/64, error -71 [ 1499.483873][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.511563][T19050] usb 6-1: USB disconnect, device number 29 [ 1499.599624][ T5964] usb 5-1: config 0 descriptor?? [ 1499.619266][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1499.783827][T31312] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 1499.793849][ T10] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 1499.881154][T31286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.966882][ T10] usb 2-1: device descriptor read/64, error -71 [ 1500.041344][T31286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.090671][ T10] usb usb2-port1: attempt power cycle [ 1500.207707][T31286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5783'. [ 1500.460278][ T10] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 1500.481001][ T10] usb 2-1: device descriptor read/8, error -71 [ 1500.730484][ T10] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 1500.765001][ T10] usb 2-1: device descriptor read/8, error -71 [ 1500.890585][ T10] usb usb2-port1: unable to enumerate USB device [ 1500.947219][ T43] usb 5-1: USB disconnect, device number 55 [ 1500.980346][ T5964] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1500.998867][T31321] sctp: [Deprecated]: syz.4.5791 (pid 31321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1500.998867][T31321] Use struct sctp_sack_info instead [ 1501.140488][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 1501.161873][ T5964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.181645][ T5964] usb 3-1: config 0 has no interfaces? [ 1501.187565][ T5964] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1501.201765][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.222844][ T5964] usb 3-1: config 0 descriptor?? [ 1501.439388][T31318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.459294][T31318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.992122][T31318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.028200][T31318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.048698][ T5964] usb 3-1: USB disconnect, device number 63 [ 1503.329448][T31343] loop9: detected capacity change from 0 to 7 [ 1503.339178][T31343] Dev loop9: unable to read RDB block 7 [ 1503.345266][T31343] loop9: unable to read partition table [ 1503.351535][T31343] loop9: partition table beyond EOD, truncated [ 1503.372854][T31343] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 1504.519655][T31361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1504.990531][T31363] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1506.820285][T19835] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1506.980307][T19835] usb 2-1: Using ep0 maxpacket: 8 [ 1506.991552][T19835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.006292][T19835] usb 2-1: config 0 has no interfaces? [ 1507.032376][T19835] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1507.095181][T19835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.109968][T19835] usb 2-1: config 0 descriptor?? [ 1507.315689][T31391] netlink: 'syz.0.5810': attribute type 15 has an invalid length. [ 1507.324909][T31386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.335247][T31386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.364665][T31386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.373365][T31391] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5810'. [ 1507.399328][T31386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.430772][T19835] usb 2-1: USB disconnect, device number 98 [ 1508.177752][T31405] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5813'. [ 1508.500832][T19050] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1508.691305][T19050] usb 6-1: config index 0 descriptor too short (expected 8192, got 77) [ 1508.704761][T19050] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.744911][T19050] usb 6-1: config 0 has no interfaces? [ 1508.842641][T19050] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1508.864317][T19050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.884038][T19050] usb 6-1: Product: syz [ 1508.893903][T19050] usb 6-1: Manufacturer: syz [ 1508.905258][T19050] usb 6-1: SerialNumber: syz [ 1508.939284][T19050] usb 6-1: config 0 descriptor?? [ 1509.584189][T31419] hub 1-0:1.0: USB hub found [ 1509.599836][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5811'. [ 1509.632991][T31419] hub 1-0:1.0: 1 port detected [ 1509.881836][T19050] usb 6-1: USB disconnect, device number 30 [ 1510.169338][T31423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5818'. [ 1510.172081][T31426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5819'. [ 1510.349956][T31431] netlink: 'syz.4.5821': attribute type 15 has an invalid length. [ 1510.359375][T31431] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5821'. [ 1510.500593][T19835] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1510.710532][T19835] usb 3-1: Using ep0 maxpacket: 8 [ 1510.717832][T19835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.728833][T19835] usb 3-1: config 0 has no interfaces? [ 1510.734633][T19835] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1510.744653][T19835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.768623][T19835] usb 3-1: config 0 descriptor?? [ 1511.020380][T19050] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1511.022079][T19835] usb 3-1: USB disconnect, device number 64 [ 1511.204240][T19050] usb 6-1: Using ep0 maxpacket: 8 [ 1511.211365][T19050] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.236091][T19050] usb 6-1: config 0 has no interfaces? [ 1511.243106][T19050] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1511.252484][T19050] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.385838][T19050] usb 6-1: config 0 descriptor?? [ 1511.390447][T19835] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1511.740560][T19835] usb 3-1: Using ep0 maxpacket: 8 [ 1511.748061][T31445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.748579][T19835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.780635][T19835] usb 3-1: config 0 has no interfaces? [ 1511.806368][T19835] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1511.817067][T19835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.819543][T31445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.848015][T19835] usb 3-1: config 0 descriptor?? [ 1511.862255][T31445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.897791][T31445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.922859][T19835] usb 6-1: USB disconnect, device number 31 [ 1512.083595][T31429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.100102][T31429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.873127][T19050] usb 3-1: USB disconnect, device number 65 [ 1513.162818][T31477] kvm: user requested TSC rate below hardware speed [ 1513.310414][T29078] schedule_timeout: wrong timeout value fffffffffffffffb [ 1513.324739][T31479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1513.350396][T29078] CPU: 1 UID: 0 PID: 29078 Comm: vivid-003-vid-o Not tainted syzkaller #0 PREEMPT(full) [ 1513.350427][T29078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1513.350441][T29078] Call Trace: [ 1513.350449][T29078] [ 1513.350459][T29078] dump_stack_lvl+0x189/0x250 [ 1513.350492][T29078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1513.350517][T29078] ? __pfx__printk+0x10/0x10 [ 1513.350552][T29078] schedule_timeout+0x1e1/0x270 [ 1513.350577][T29078] ? __pfx_schedule_timeout+0x10/0x10 [ 1513.350604][T29078] ? prepare_to_wait_event+0x437/0x480 [ 1513.350636][T29078] vivid_thread_vid_out+0x139f/0x1c90 [ 1513.350678][T29078] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 1513.350708][T29078] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1513.350733][T29078] ? __kthread_parkme+0x7b/0x200 [ 1513.350755][T29078] ? __kthread_parkme+0x1a1/0x200 [ 1513.350781][T29078] kthread+0x70e/0x8a0 [ 1513.350807][T29078] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 1513.350833][T29078] ? __pfx_kthread+0x10/0x10 [ 1513.350859][T29078] ? rcu_is_watching+0x15/0xb0 [ 1513.350880][T29078] ? __pfx_kthread+0x10/0x10 [ 1513.350906][T29078] ret_from_fork+0x3f9/0x770 [ 1513.350928][T29078] ? __pfx_ret_from_fork+0x10/0x10 [ 1513.350952][T29078] ? __switch_to_asm+0x39/0x70 [ 1513.350979][T29078] ? __switch_to_asm+0x33/0x70 [ 1513.351006][T29078] ? __pfx_kthread+0x10/0x10 [ 1513.351032][T29078] ret_from_fork_asm+0x1a/0x30 [ 1513.351067][T29078] [ 1513.509631][T31477] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1677391066 (6709564264 ns) > initial count (4324526900 ns). Using initial count to start timer. [ 1514.557252][ T5868] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1514.569190][ T5868] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1514.578033][ T5868] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1514.590052][ T5868] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1514.598555][ T5868] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1515.228265][T31490] chnl_net:caif_netlink_parms(): no params data found [ 1515.342380][T31496] page: refcount:515 mapcount:0 mapping:ffff88807ac3e590 index:0x0 pfn:0x70200 [ 1515.351564][T31496] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 1515.362115][T31496] aops:hugetlbfs_aops ino:21ee3 dentry name(?):"anon_hugepage" [ 1515.369707][T31496] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 1515.377880][T31496] page_type: f4(hugetlb) [ 1515.382167][T31496] raw: 00fff00000000041 ffffc9000b247e10 ffffc9000b247e10 ffff88807ac3e590 [ 1515.390815][T31496] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 1515.399399][T31496] head: 00fff00000000041 ffffc9000b247e10 ffffc9000b247e10 ffff88807ac3e590 [ 1515.408067][T31496] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 1515.416747][T31496] head: 00fff00000000009 ffffea0001c08001 0000000000000000 0000000000000000 [ 1515.425439][T31496] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 1515.434204][T31496] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1515.441499][T31496] page_owner tracks the page as allocated [ 1515.447226][T31496] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 31459, tgid 31454 (syz.0.5830), ts 1511662204837, free_ts 1511103104802 [ 1515.468774][T31496] post_alloc_hook+0x240/0x2a0 [ 1515.473564][T31496] get_page_from_freelist+0x21e4/0x22c0 [ 1515.479171][T31496] __alloc_frozen_pages_noprof+0x181/0x370 [ 1515.484992][T31496] alloc_buddy_hugetlb_folio+0xdf/0x1c0 [ 1515.490559][T31496] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 1515.496544][T31496] alloc_surplus_hugetlb_folio+0x103/0x430 [ 1515.502380][T31496] alloc_hugetlb_folio+0xb1a/0x16a0 [ 1515.507608][T31496] hugetlb_fault+0x1dc2/0x2970 [ 1515.512395][T31496] handle_mm_fault+0x740/0x8e0 [ 1515.517277][T31496] __get_user_pages+0x1699/0x2ce0 [ 1515.522317][T31496] populate_vma_page_range+0x29f/0x3a0 [ 1515.527799][T31496] __mm_populate+0x24c/0x380 [ 1515.532407][T31496] vm_mmap_pgoff+0x387/0x4d0 [ 1515.537009][T31496] ksys_mmap_pgoff+0x587/0x760 [ 1515.541776][T31496] do_syscall_64+0xfa/0x3b0 [ 1515.546389][T31496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.552290][T31496] page last free pid 31403 tgid 31392 stack trace: [ 1515.558789][T31496] free_unref_folios+0xdbd/0x1520 [ 1515.563829][T31496] folios_put_refs+0x559/0x640 [ 1515.568593][T31496] shmem_undo_range+0x49e/0x14b0 [ 1515.573531][T31496] shmem_evict_inode+0x272/0xa70 [ 1515.578491][T31496] evict+0x504/0x9c0 [ 1515.582391][T31496] __dentry_kill+0x209/0x660 [ 1515.586984][T31496] dput+0x19f/0x2b0 [ 1515.590799][T31496] __fput+0x68e/0xa70 [ 1515.594782][T31496] task_work_run+0x1d4/0x260 [ 1515.599403][T31496] do_exit+0x6b5/0x2300 [ 1515.603576][T31496] do_group_exit+0x21c/0x2d0 [ 1515.608193][T31496] get_signal+0x1286/0x1340 [ 1515.612706][T31496] arch_do_signal_or_restart+0x9a/0x750 [ 1515.618303][T31496] exit_to_user_mode_loop+0x75/0x110 [ 1515.623614][T31496] do_syscall_64+0x2bd/0x3b0 [ 1515.628261][T31496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.634324][T31496] ------------[ cut here ]------------ [ 1515.639865][T31496] kernel BUG at mm/filemap.c:154! [ 1515.644927][T31496] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1515.651180][T31496] CPU: 0 UID: 0 PID: 31496 Comm: syz.1.5837 Not tainted syzkaller #0 PREEMPT(full) [ 1515.660550][T31496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1515.670608][T31496] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 1515.676866][T31496] Code: a6 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 e3 f6 31 ff 90 0f 0b e8 fb a5 c9 ff 48 89 df 48 c7 c6 40 3a 94 8b e8 cc f6 31 ff 90 <0f> 0b e8 e4 a5 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 b5 f6 31 ff [ 1515.696487][T31496] RSP: 0018:ffffc9000423ee20 EFLAGS: 00010046 [ 1515.702573][T31496] RAX: 8bed961ef19cb300 RBX: ffffea0001c08000 RCX: 8bed961ef19cb300 [ 1515.710563][T31496] RDX: ffffc90022771000 RSI: ffffffff8be33660 RDI: ffff888030fd1e00 [ 1515.718563][T31496] RBP: 0000000000000001 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 1515.726542][T31496] R10: dffffc0000000000 R11: ffffed10170c484b R12: 0000000000000040 [ 1515.734526][T31496] R13: 1ffffd4000381000 R14: 1ffffd4000381001 R15: ffffea0001c08008 [ 1515.742503][T31496] FS: 00007f7c9f9e86c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1515.751436][T31496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1515.758019][T31496] CR2: 00007f7c9f985d58 CR3: 000000003a410000 CR4: 00000000003526f0 [ 1515.766031][T31496] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1515.774009][T31496] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1515.782009][T31496] Call Trace: [ 1515.785293][T31496] [ 1515.788230][T31496] __filemap_remove_folio+0xc3/0x500 [ 1515.793565][T31496] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1515.798981][T31496] ? __pfx___filemap_remove_folio+0x10/0x10 [ 1515.804994][T31496] ? _raw_spin_lock_irq+0xae/0xf0 [ 1515.810040][T31496] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1515.815612][T31496] filemap_remove_folio+0xe6/0x1f0 [ 1515.820773][T31496] remove_inode_hugepages+0x594/0x1100 [ 1515.826255][T31496] ? rcu_is_watching+0x15/0xb0 [ 1515.831029][T31496] ? folio_try_get+0x1c/0x340 [ 1515.835716][T31496] ? rcu_is_watching+0x15/0xb0 [ 1515.840502][T31496] ? filemap_get_entry+0xad/0x2f0 [ 1515.845539][T31496] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 1515.851459][T31496] ? lock_release+0x4b/0x3e0 [ 1515.856072][T31496] ? folio_unlock+0x101/0x160 [ 1515.860789][T31496] ? up_write+0x1c4/0x420 [ 1515.865141][T31496] hugetlbfs_fallocate+0xbc7/0x1100 [ 1515.870377][T31496] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 1515.876038][T31496] ? trace_sched_exit_tp+0x36/0x110 [ 1515.881372][T31496] ? __schedule+0x17ae/0x4cc0 [ 1515.886088][T31496] ? preempt_count_add+0x91/0x1a0 [ 1515.891161][T31496] vfs_fallocate+0x669/0x7e0 [ 1515.895770][T31496] ? __pfx_vfs_fallocate+0x10/0x10 [ 1515.900982][T31496] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1515.907579][T31496] ? css_rstat_updated+0x23a/0x4f0 [ 1515.912699][T31496] madvise_vma_behavior+0x3254/0x3af0 [ 1515.918264][T31496] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1515.924006][T31496] ? __pfx___switch_to+0x10/0x10 [ 1515.928962][T31496] ? sched_clock_cpu+0x74/0x430 [ 1515.933834][T31496] ? finish_task_switch+0x18b/0x950 [ 1515.939045][T31496] ? rcu_is_watching+0x15/0xb0 [ 1515.943831][T31496] ? rcu_is_watching+0x15/0xb0 [ 1515.948606][T31496] ? finish_task_switch+0x266/0x950 [ 1515.953906][T31496] ? rcu_is_watching+0x15/0xb0 [ 1515.958693][T31496] ? trace_sched_exit_tp+0x36/0x110 [ 1515.963906][T31496] ? __schedule+0x17ae/0x4cc0 [ 1515.968599][T31496] ? mtree_range_walk+0x6a7/0x840 [ 1515.973670][T31496] ? mas_prev_slot+0xb31/0xbb0 [ 1515.978455][T31496] ? find_vma_prev+0xfc/0x170 [ 1515.983143][T31496] ? __pfx_find_vma_prev+0x10/0x10 [ 1515.988272][T31496] ? preempt_schedule_irq+0xde/0x150 [ 1515.993575][T31496] madvise_walk_vmas+0x51c/0xa30 [ 1515.998533][T31496] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1516.004006][T31496] ? blk_start_plug+0x6f/0x1b0 [ 1516.008833][T31496] madvise_do_behavior+0x38e/0x550 [ 1516.013975][T31496] ? madvise_lock+0x14c/0x2d0 [ 1516.018694][T31496] ? rcu_is_watching+0x15/0xb0 [ 1516.023466][T31496] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1516.029135][T31496] ? down_read+0x1ad/0x2e0 [ 1516.033600][T31496] do_madvise+0x1bc/0x270 [ 1516.037955][T31496] ? __pfx_do_madvise+0x10/0x10 [ 1516.042840][T31496] __x64_sys_madvise+0xa7/0xc0 [ 1516.047625][T31496] do_syscall_64+0xfa/0x3b0 [ 1516.052154][T31496] ? rcu_is_watching+0x15/0xb0 [ 1516.056934][T31496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.063035][T31496] ? clear_bhb_loop+0x60/0xb0 [ 1516.067732][T31496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.073635][T31496] RIP: 0033:0x7f7c9eb8ebe9 [ 1516.078081][T31496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.097828][T31496] RSP: 002b:00007f7c9f9e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1516.106359][T31496] RAX: ffffffffffffffda RBX: 00007f7c9edb6180 RCX: 00007f7c9eb8ebe9 [ 1516.114380][T31496] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 1516.122382][T31496] RBP: 00007f7c9ec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1516.130383][T31496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1516.138376][T31496] R13: 00007f7c9edb6218 R14: 00007f7c9edb6180 R15: 00007f7c9eedfa28 [ 1516.146386][T31496] [ 1516.149436][T31496] Modules linked in: [ 1516.153356][T31496] ---[ end trace 0000000000000000 ]--- [ 1516.158817][T31496] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 1516.165079][T31496] Code: a6 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 e3 f6 31 ff 90 0f 0b e8 fb a5 c9 ff 48 89 df 48 c7 c6 40 3a 94 8b e8 cc f6 31 ff 90 <0f> 0b e8 e4 a5 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 b5 f6 31 ff [ 1516.184700][T31496] RSP: 0018:ffffc9000423ee20 EFLAGS: 00010046 [ 1516.190781][T31496] RAX: 8bed961ef19cb300 RBX: ffffea0001c08000 RCX: 8bed961ef19cb300 [ 1516.198768][T31496] RDX: ffffc90022771000 RSI: ffffffff8be33660 RDI: ffff888030fd1e00 [ 1516.206749][T31496] RBP: 0000000000000001 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 1516.214731][T31496] R10: dffffc0000000000 R11: ffffed10170c484b R12: 0000000000000040 [ 1516.222721][T31496] R13: 1ffffd4000381000 R14: 1ffffd4000381001 R15: ffffea0001c08008 [ 1516.230710][T31496] FS: 00007f7c9f9e86c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1516.239743][T31496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1516.246338][T31496] CR2: 00007f7c9f985d58 CR3: 000000003a410000 CR4: 00000000003526f0 [ 1516.254341][T31496] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1516.262323][T31496] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1516.270303][T31496] Kernel panic - not syncing: Fatal exception [ 1516.276686][T31496] Kernel Offset: disabled [ 1516.281013][T31496] Rebooting in 86400 seconds..