last executing test programs: 10.931885818s ago: executing program 3 (id=288): socket$nl_route(0x10, 0x3, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rt_sigpending(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc, &(0x7f0000000440)=[{&(0x7f0000000500)={0xf4, 0x41, 0x100, 0x70bd28, 0x25dfdbfd, "", [@generic="cecb0ab9bcb661dfd6b6b7390dcf7a4e05d9d720be233070ef659a793b5182ccaa84ebbfc68ac024d9cd5db242b13c2f818f67a2d77723988c4c94dd2cbba5f76804072c7bb2f44a63697529f12b95e97c1362047b43b4f324d827a4f33198f8bf1557c9bf346c3432fa319424286c34c5df6509d0ec77e2e2e4beb52d923d24c6da9692698e69e150c46f62514d98649fc1bf845a4eb0fe09f15c44ffc9f550e3ad2b30c6ce23b0b8f4563b50b3783685a2f248b8879447cb211c841b038de7df9efe62324263d7b45ed3acacd11b1679e9640a31b539a7d19b8b1d29e467e8fe"]}, 0xf4}, {&(0x7f0000000600)={0x1fc, 0x11, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@generic, @generic="c0094fe600bc477c3a7bdadec74dc0f891a18d9c05f547778c0605948cf768a5a20002671be22b8bbfc4e33c8d2ce4f0dfb180a11e29654e3ca923fda12d634cc4735154a4b7f439b111", @nested={0x10c, 0x2b, 0x0, 0x1, [@nested={0x4, 0xb6}, @typed={0x5, 0xf1, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x3ffe, 0x0, 0x0, @fd=r4}, @typed={0xd9, 0xab, 0x0, 0x0, @binary="6650d403a07e43c89bf59b2d054c916fa9ce120584321cbebaedc7ef589c06f6b2d2dd0626bbe98524b3c0b8604c45af6e8b2ec9b70e09700261411c6c927262719c9d091624f041be1de8fc25e3b8603747071d6a16644191c3e81bc15e61956f8c27be6d66b4a3bd0c680aa978baaa18fecf8d44e3d58dd17b664f197eda01a86e2aa8a9db2c2fd536c7ed3e638bafa76feb4f7f559b917c4c32f294cffb037c44869db10ea03cc7f23132d5dd9318e48b508828e3f824e8a6e6d3a7e015566e8b0b1c97b5a98a3650f2ad8c608e20b4d1ee06be"}, @nested={0x4, 0x12e}, @nested={0x4, 0x114}, @nested={0x4, 0x59}, @typed={0x8, 0xc0, 0x0, 0x0, @pid}, @nested={0x4, 0x18}]}, @nested={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x8c}]}, @typed={0x8, 0x119, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="c5a293934408c4291ad9f418a7e6f170dcf5366aee5e22fe98744b4065b59af8852f40bd9fbf8ba511d0fd29d9c9411721dfba92a107194a4c18ed8de1940fa9fb446b7b79c4bdce2e794ba9447f17948e38da552c5226a4e6", @generic="9d22931ff9ddc5064f3510a615063a7ebda14ff828b226064fec9c9dcbecef3b122f25c90f8843d556f4"]}, 0x1fc}, {&(0x7f0000000940)={0x2d4, 0x19, 0x4, 0x70bd28, 0x25dfdbff, "", [@nested={0x44, 0xe8, 0x0, 0x1, [@nested={0x4, 0x13}, @typed={0x14, 0x117, 0x0, 0x0, @str='hash:ip,port,ip\x00'}, @nested={0x4, 0xe2}, @typed={0xc, 0xa0, 0x0, 0x0, @u64=0x5dde}, @nested={0x4, 0xb5}, @nested={0x4, 0x125}, @nested={0x4, 0xf3}, @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x5}]}, @typed={0x8, 0x101, 0x0, 0x0, @fd=r2}, @nested={0x93, 0x60, 0x0, 0x1, [@generic="4503ef1ebb7c2a6c2bdf41d919efd5f73d1fd13e36607b73c4760cd30f57c5fbc151601e7086b586dd5f2995880676278e68938fbfa9ad0ae90f2dfb8e6b1a2fe07bc43ea3002ee8d740388ecde44ac3208ba9b801f55258840304ab018d041e464f53cb89cc66f52042acd7edc8066a7117f421bc395f8a3c52f7fefb430e7a4fdbf6", @nested={0x4, 0x2e}, @nested={0x4, 0x125}, @nested={0x4, 0x59}]}, @nested={0xb, 0x100, 0x0, 0x1, [@generic='&g-', @nested={0x4, 0x2f}]}, @typed={0xc, 0xb, 0x0, 0x0, @u64=0x6}, @nested={0x1c6, 0x139, 0x0, 0x1, [@generic="6720417a98c7d1138edffc1d61021ade429cdaadaa826103e4cdad8aa538361b7382b32fb08d88be9eed31b5cc1881181050daac557b58346c3c53ae4bf480044f0e7807d538660aa017171cee159b4679c656782662d2969484e72875c003b3d3f57543a6901950eb9a4ef7c040b079ee186c42450ab6fbca2fd5fd95103978369a9605fb54c96f8025c64bd34dc09bfc0f09e3fa83591c", @nested={0x4, 0x48}, @generic="841918fd4e3053b5905516751ed13dccb58f5a11492717aac900b1e6872d745b820b4a4198132b01be7f11679ff89e0e5449808fc42c198737896f150aa7057f553ec089364a07fc5b6460e2bcb6e42b3f92b848ce029624324b82af953bd616f65e247a57f9b9ff1003cbf51a64d0aa0761397e333be138c0e9f6b7133e", @generic="b07d", @generic="3ab115988866f3e40d", @generic="aba4e237571305e86e9da523bd415614c34fae9fcf650718973607c3cede2c60c173e4c3987c07d42de09dbf9bdd85c7b147e387eaa6abfac6014a475321f52b63f36332d23dc330cf356a42d9", @generic="9015ba05cc3bb5e177af97160ac972609c7ed7ebc10c25addf0b83c590c15aadefa5087b677d13e3b9dfc76ce9b68eb115a769696034305594b9764cba150ded1d27f594eb383673b8b2dbd9", @nested={0x4, 0xe1}]}, @generic=' ']}, 0x2d4}, {&(0x7f0000000200)={0x1c, 0x39, 0x300, 0x70bd28, 0x25dfdbff, "", [@typed={0x9, 0xc3, 0x0, 0x0, @str='syz0\x00'}]}, 0x1c}, {&(0x7f00000012c0)={0x15c0, 0x3f, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x8d, 0x7d, 0x0, 0x1, [@nested={0x4, 0x111}, @nested={0x4, 0xc8}, @generic="6d81a8c67be7a2339f80b778825b96af3fefa16f01259b96e616cabb4a6a1d3e88ab7ef46d2d23dcc66e48b479f7e1a9b3c9512418feeabedb41200f179855c658b8cc686950c1bbba3186279feb42307c01b496f4dad7a76b26a562fcebf393f142738d31f12780c7b7ae540b127acfde9caff56029a0e4aa43ac26b891c4cb08"]}, @generic="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", @typed={0xf3, 0x15, 0x0, 0x0, @binary="0026b6105b1d7352c92fdfdde95f416853aa473a5f4ddfc8d427962d12f7921f35d75b1f07120ba015c489ca6e9c12d6f5d177677092b3f44c542aaa41a73d2f1c246ae76ee053680613bc3d624a9f21326be2b81db372d68aa7127506b103345e41f0ae7e49466d20ef5cc47d01798027c29fd36b26cca4b1a4b87a1ea71dd1eb1333a5b5ce8063e0baa77baf233ae06cd68c57b3eaf09a47bb80603576792c745c88c3d64507583d99a0fb90db197739c9c0e2f65ef49b5524d5ac40569b0c475a2d37e732d248f31e4e90f5af1e3f4282da5beb336ee352da01f75a0a68baa58c2c5893935ee79dca06c7c29f07"}, @nested={0x1104, 0x14f, 0x0, 0x1, [@generic="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", @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x40}, @generic="cfa2e6475662689b2e921197d816d69ee91be07614762f696cfa476bf303df10b96909b6f80553793bcf47c01fba7130e410f2b5ad738af409ded62da4ca0b70ee8d358f003473", @generic="5646215845794b03aba2ff900804f7ef36463068ba71970ff299c5cdc0824fe375e4e7889297baa280f6b33dc63c17a67ef793cc3395f2b4b4dfc6b9bef1eb8e26f7b0187ccf9e6221bc3bcccf0d9300327d7d650a9f1dd46b172835c7ae07382f550f8641ecb1b9b7e782c9bfc1c33726f5d081c3b3b827d206d6bddd1c9dc6cb118db533dd658fa8fb93db78fdeb39f4fbd2995aada5d4fd4771dd99bbb16e2bd366a9e58bc5cc8ad0efd59b"]}, @typed={0x8, 0xaa, 0x0, 0x0, @u32=0x5}, @typed={0x9, 0xda, 0x0, 0x0, @str='syz0\x00'}, @nested={0xbb, 0x115, 0x0, 0x1, [@generic="0208cb2791fcd65f0f17aa8699f1d0b73fabd16f45babffd1fad9bbed633315d46fde437b70c19701095a3bac6f9b003a4d5044f9fe74be2f895d662e1f48e2cad81e993d502ca64e50ad089a33d7dcdf2a2098c80f7a387451b522adcff62ec3f3c9af70977e13a47cd1387c3b43609f356ec750c29abe1d14d37e01c78e623bbd51d044e3b8c5da9e9ded9976df187a4e32e7553192facc12b5cdb50caaf3727a1284eab2bd7a0ec2988ce7a874545acd58d0083a287"]}, @generic="5420461f165253e1e4dbc502b98c1a11812b7a7e3bbefe35c3aa316564ce7dc953855227cd08bf72bdb5517f6fefcf80da0b6785d1546bb0febe6a90e92ec97054c65d4bfe4f477a57cef3f5460f98a51a6a04c9d2afc7002ccb0041add6120813b25d0230783fdb3ed4ae712bd9db55", @nested={0xeb, 0x8e, 0x0, 0x1, [@generic="dea13f0ec852eaeb2b66b73a16def38f6ded397fdea90d24955fc23e6fc4ab50fdd368b4f7e7d6a99b0fe0fa3372ce053a0c9b0de373def4e90e82fd80c0107571de9234a3c43e835620e9227c5938176e", @generic="c4e9ce5ed4ae0d52337c94ef1a4793080401793da8fc35d6691221a613e46de78551b71e556514e7427e1fe4bc54020f79f9fa8b9b46bf758d15f6ff0b34ff3ff38268dc521e23ef77dbf78036f224b19fffe69564f4c5e3cae360bb7455beb5043f0a0e4fd17f3380ed78753f71933392323a8ca71148cd9b8535a276e3fc4eb9560547912bc0784207e8f119a9f253bf3f0211448c"]}]}, 0x15c0}, {&(0x7f0000000c40)={0x158, 0x19, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@generic="84fd82f5b9b727d0887c42bf14c511b9eb3bd1480d6837e0b1d94b265b989e7edc55d797c4386b3792a819e1c9a0f753206ac4103fcd6a2a70c22ca11a9c6e9055b42f38d74237479a42d2f508340574ee0e7a5084b3c3726ab8f1a9b0d7b619866478bd8511d5f7a383ca28f4d85daf2d74d0efe3d0d4c48d52155eddf6218a4b336b800939186d50e701a76f6b565f632ddf28ade562ae5786e0a059af4d20c5d659cd5f163843e2150ab80ef48f8c", @generic="c4206dec2ce1325dfafc56d36d160044baf8d8793f08c88d2bb3d09da3e05126e6381c95d96c579b73109b3d44c1740b2b2a1dce3d7bc00f794f0bee439ffb92dcd37de6004cef92910a904f1fe5122b0fb118eaa352d57a48dc3a563a99b2c6f34a801472cfd7c3bd16e3b80700fbd37763786d01b360a14c532799df2cb367e0aa77956e670ae7f51f9e4f697ef94519a39b31400fe9"]}, 0x158}], 0x6, 0x0, 0x0, 0x40004}, 0x4000) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xaf) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000203505a8a440000102030109022400010109900d5adae8480997eb3631924109040006020701010209050102080004"], &(0x7f0000000280)={0x0, 0x0, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="050f1a00020a100300060006f7ff070810010c"]}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 10.224144849s ago: executing program 2 (id=291): openat$sysfs(0xffffffffffffff9c, 0x0, 0xe280, 0x10) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.892202824s ago: executing program 1 (id=294): syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d04b1082a6d0000000409021200"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f000000e280)=[{{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001b00)="3e085a43f06e5e6ee18b3a5369e321bdf647d0a73ebfbb9311ea89c2b82c852be0323edaf59f378b30361abf863282debd7896e383c6f45503fdebdc86a04576faa491e3", 0x44}, {&(0x7f0000001b80)="aa0daa4484cef5528e128b4601534611a99c2e2ce47257304e6f0c8c97b044c37a07f7688d5d0e089525a552a4083e0499e2d246290c4cc1d587d7b872bcb34d0b6663f0", 0x44}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="3d44b21ae6cd9cd1c78d8129085dc3ca1fcfa1b98d24a3a34219c0d815f12ee99cc76860e697972a8e333b245d82cbfd759fbdcfbe777082b26403b48c1c568089c9075398b406b85e02eb31bf86248cb7bb0ef6c761e325d6e011efee20ba8511029140a9de632905ed8593c29905fe63bab2e0b31ebc8062b2a1c44e93a28f5f21126484ddf3a928006ac011dbdcf5f950b72167801dec2d06c3566eb73e1654205e7a88b27c", 0xa7}, {&(0x7f0000000380)="5684df9ff5eb5fd8c588e430fe4032219718ec1e94c4f08e900287c288adf0b37dee1fed787665a8d662a0100ab1d3cfe164", 0x32}, {&(0x7f0000002cc0)="26ca722327b6ca2689d69c27d16032000477eb1c2f0058ad7aee26b8ee009c3a72c2da91e8491ac62d169625bd34fabbcc6b053c1169099f137508e7b57e837d69251d01273149ca3868806360d10df6987e6e3970592660a3ddf3098d1c6f3a041ad2059f4c350ae65a9117d5c9240199bb538918d67702c0cbed658c1bab9bb2cafab599d9e7466647ebb36304069beeb8bd6c7824a7c13187c497ddb1cddaec8491e3566e9db3fa235db5d342d35148cf595ad8c2accfdc612f2d8431557357efc052c722b9bb9cef62cf764aae3eb93636206599db8af4ad481f2f74d87c42451b08729f", 0xe6}], 0x6, &(0x7f0000003040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x80, 0x51}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x2, 0x14, 0xc2}, 0x0, &(0x7f0000000200)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x805}]}]}, 0x48}}, 0x8000) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x49) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x55}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x1b000}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYRES32=r2, @ANYRES16=r10, @ANYBLOB="07000000000000000000050000000500020000000000"], 0x34}}, 0x0) preadv2(r9, &(0x7f0000000340)=[{&(0x7f0000000140)=""/73, 0x49}, {&(0x7f0000000480)=""/254, 0xfe}, {&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x4, 0x5, 0x1, 0x29) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.546177182s ago: executing program 4 (id=299): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@fallback=r0, 0xffffffffffffffff, 0xf, 0x200b, 0xffffffffffffffff, @value}, 0x20) 8.489461737s ago: executing program 2 (id=300): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x194, 0x10, 0x633, 0x70bd2b, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x20}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x40}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd26, 0x80000000}}, @algo_auth_trunc={0x93, 0x14, {{'sha512-arm64\x00'}, 0x238, 0x0, "e863654b40a7ad42118bc1dd69d07e3b05cf0dbc9a9aac6130f0d060cb0c958c133115ff9cbb79de1007f5583249a62fe4273013ec2c49dbf133d4982cca44c3a2d388d9483ca3"}}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendfile(r3, r1, 0x0, 0xb) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xe2.{'}], 0xa, "3390a7cc65a4ea59673aed88b64a927f421cd365b10f3f48c143c5ac6726691f4c6bd2809bcb5cd326bfc32085ffd01372a77744b674ba71a2d9d3b6b1bd84fdfaeeb2280ffb23e482fcec463b5f"}, 0x5d) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) syz_io_uring_submit(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000002700)={0x1, 0x0, {0x1, 0xdd90, 0x3010, 0x0, 0x0, 0x7, 0x0, 0x4}}) 8.303381615s ago: executing program 4 (id=302): unshare(0x2c020400) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={r3, 0x80000000, 0x10000, 0x100000000}) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) r4 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000280)={0x40000004}) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046, 0xff80}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x101800, 0x120) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=""/93, 0xfe28}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x405, 0x3abc4c, 0x2c8240}) 7.724300264s ago: executing program 3 (id=304): unshare(0x8040600) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @empty, 0x80040}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r3, 0x0, &(0x7f0000000640)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000800a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000000000000000000000000000ffffffffffffffff020000000000000000000000000000000000000000040000000a0000000000000000000000804000000000000000000864ce000000000000000000000000000044000500fe8000000000000000000000000000bb000000003c00000000000000ffffffff0000000000000000000000000000000000038100"/180], 0xfc}}, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xe803, [0x8]}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x8000}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f00000002c0)=0x13, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000048d"]) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 7.388079696s ago: executing program 3 (id=305): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100003a370520810705000500010203010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002"], 0x48) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000003c000701fcffffffffdbdf25027c001204"], 0x18}, 0x1, 0x0, 0x0, 0x88c5}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES64=r2], 0x20) 7.301399529s ago: executing program 4 (id=306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000004500)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) futex(0x0, 0x87, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x10000, 0x2, {0x0}, {}, 0x5da, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x1, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) migrate_pages(r4, 0x1, &(0x7f00000002c0)=0x30, &(0x7f0000000180)=0x80000000e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r6 = socket(0x2a, 0x5, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)) 5.863152076s ago: executing program 1 (id=307): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0xfffffc01, 0x2, {{0xc, 0x4, 0x3, 0x5, 0x30, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@noop, @cipso={0x86, 0xe, 0x0, [{0x5, 0x6, "7c96a6ed"}, {0x5, 0x2}]}, @end, @ssrr={0x89, 0xb, 0x2a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="93df0d3f", 0x4}, {&(0x7f0000000300)="99137679b3bdbb8391e51da60a4d1c5fd95b3d0fcaa34530e5c98f4d86c7890a3a74130e68688e1dba7497ca5663e356edbb9b0a089555f467c48584652ac28c73935ce1b0b948cc99ae52733473653d4fca481671a210f6418edc91eb5526261fca8303fd0cf1354699fd15df30afed570f099d2bb0fd632eb5a17c3138c4157ad62b873a", 0x85}, {&(0x7f0000000200)="9b95634218dd93e7a620bfed166da60d86f2d917c494dd07b886ba084aaa41dbfc6ae5029bd52bb57d4c887d0c75c153bf", 0x31}], 0x3, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0x51, [@private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, @multicast1, @multicast1]}, @noop, @noop, @ssrr={0x89, 0xb, 0xb1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0x6, "e66996a3"}, @lsrr={0x83, 0x7, 0xba, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xf6, 0x3, 0x5, [{@local, 0xfff}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x10}, {@rand_addr=0x64010101, 0x3}]}, @timestamp_addr={0x44, 0x34, 0x76, 0x1, 0x7, [{@multicast1, 0x154}, {@multicast1, 0x5b5}, {@multicast1, 0x5}, {@remote, 0x5}, {@loopback, 0x7fff}, {@local, 0x1}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}], 0x150}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)="4618208032ecbcd2b20224c2439b9bafe4a83a275576996cc1ffaeaed09010761652a5829491289f8b4f1cf90d550e7a0cef95bc5fe593f173f636c1016351fd30d358067affce48f95b43c12ad31692bf04e1e0b82d5d7be07b1c9c6e9625c839a811c7535b3f2ca0681e2009b7ba7cc57c7e04c73b82e3c36987173f4bf4cf649b0b13d59a3f1ef26d5499292bd062270f36dc525e095449338e0cf7efc308e422053a509ed8bd2c70f72ef69a44b9cb5fc1c559a88536e1b547e562894344bef0701426fae6c9a1e56ee5c3995f5c1a241f8c9c7bffd3e64ab697a1cda4843b1eb341001775ac60", 0xe9}, {&(0x7f0000000940)="bb75c68b2c2499c6b010911221fb27fbd41855699716cd65dd672b297062aa2a31c807b199fff153a369016c1f8c9933dc7dc06ce30f824fae4057e5e6e6881e6a007c43aafcfc1492c4be77d708e6c2e733d5080c81fd2d22d2a49ef306645b1031a5d53ea3c72cf9c718bdf6", 0x6d}, {&(0x7f0000000540)="a25627daaf414f0a5ec61501ec80810968b4c7aede6eb6db66e8ac1a358a0d0b9f", 0x21}], 0x3, &(0x7f00000009c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @loopback}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xbc, 0x1, 0x6, [{@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}, {@multicast1, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0x8b, 0x3, 0x7, [{@broadcast, 0xe0fc}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x73}, {@broadcast, 0x80000000}, {@multicast2, 0x5}]}, @end, @ssrr={0x89, 0x1f, 0xc0, [@multicast1, @multicast2, @loopback, @multicast1, @remote, @local, @broadcast]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010100, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x100}}, {{&(0x7f0000000ac0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000b00)="db75bea89a74919f41000e84d92643930db974c32da4628b477f20b1d7a14caeeb9fcd1aecee5e23fa18b69acabf1a042ebc3d050b83ea69a480f732d7009a2e5299792ade0084f04b6c8f88386951831a61ade115251074e4e5475435b3b43a63ba644643d7fbed2ae1eed91962489411427e81102cd2754c1d310cd037446c9f18479221864f", 0x87}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="9c52703e40a47a171f3644964ca38c3f20cf33566da3cbb200f00c41989df3a9b27279c6ceb337a52a40d907c576895ed88ea6f2c8bde6e99c4c248687d176f68cbedf268fd17ac6b9274572f56b65a666c022", 0x53}], 0x3, &(0x7f0000001c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x671}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @remote}}}], 0x50}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.667057228s ago: executing program 1 (id=309): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"eb9d8988e81b395b45bd0cba3a8483077474dd3dd0c47bc253e5f8e8b4292aac2796001366e4c71f9f35008b53e42578e610c78571ad7fd714bbf1d6fd513c82063c7b62f80247dae47c5c719fcb141465938af815fb5f2695978afaf02bc89e649ba154d25cd9128fa00c4655085aaa52d42552f2b09df1d9bb0e372396aa8bcb1358797975d0f0609075102a2744764709002ff83c2341d3365f98a022a3adb2984c475f59af4129dbfd9a93d73ebd4e3cb4f1e4ab97495820ac3a2091f1a472e09074da690ef8a1271c19fa97898e3be7b5000d91bbc78a0e2415b557a6ac425159469271188e5adbb631ee32f1c01b8aab308dad8548079f00eb770e058ec6480cb78a47d832ff6f7d23348118d2a8a317c1d0cb05299e4541dd566ca584cbe7508ab24fa6fdd1e5fd301a57f7b01f55543d5289911b1040011acfa9247e9f2b08635fc066b8725bc114c59fdbdd3a35903b19613e3f29ce4457a59c64567f1fea4a17185e7edde0ccc64cf9d0086ef292c318c8a56b28406cdcfd091245a8e0fa721e11aa064b642d9afbcf3dd23c79c466e634e84e0ccf866e8bcc03a6e6ac823fe6056a7aa6aa8622969e263eff3fb74ea46e0bd6a1ce08244e39f59df03e6cdd7fdc2811c4c1719099a56f1c5e07ab0e7d6a07192dcc0d03f6bcbc2323f4606b52950e3ebf54b379a97bb4c0c27db1e0824068a353aa025258f16eec23148997eb0f14ade49c1216cfd2ce324f289ddcf0ff8247984c4567692e9b64c2fbbc1272a3e532122e65f97cec13564ece0b7029c2c34ca9c7a9557d487336d849513afaaaa6c1a0388e72dba891750cebb09747cdadd4228b66ce5972f9c67bc4bd795753bc83fd36897edb29a4d9ca5c5cbb0e92dab163d6c980ef76a5f79f6f05f9a7e0e745a129cbbfc12281f9566f656b1f9de9bec23d3a2bec3852430fb7dcbc692e0fcccb69402639a0e1693a70a5983a462b001131a4774e5e3d8bd9a19389ab7e819a77ae145d2ca8e4477215905e8e1dce02ccd3f8942744313a30b68025844e5a68a9a2dd382a3a32042c232459a776d6e1741eec549b4d2867580fc511393281917f5145952997aebd29d8056d4282586ccd91d633a7c1764012e09d7746fef7246eb56640fef2bdd74b78fbcaa32e6b6f4136431a51229956a8a8149de241511e2760f997886e098fc1847adee880f3ae61a1240581e13758be18a33bde20ffad43a0ae9a4f7144a16993858e445c7c5bc83e13dfeb81ae6fc11be70e0ab490ab976106e3d8e627c44df3ac588239fbf885a2439b69e5a121245fd3c42c86555b198452ffcac7168d789ff3f61da76d389b0fc1e6c39df6608824babcb098c509e0def7f1701e67ab7d6c64ab5150eaaadbe38a11673fee8d286d88ae6f39241966fa6df46464166db4f41d67596d9d67382f1069042ee118b0af630a5e12f07d8cfa4183f2c28b27a6105d69804508235f877693cf1f359ffb95b585496b941c2e3f2170d916ded547beee1ae24e1724f17cb85cfcba15e1cbabe44e60b16c2ac4f4afed9506e25bd35a8897de4ae4a4c929b25289f75b2da34a1b65edfc2dd74b74b8f3d74f1387805cf5933a616798fa890718c9ebd6079c26a5f732298f8e8a2e378fccffd7fc3ecc8b10d1cd013a7340b7842c4b1dff0e9f2ea70329fb9c3013151f43fa5bad0dd5f61a92da5a78e68052ab72c38d915136184a49da2a6b6e248e9d106777c1bde4dfc94f8a4a29dfa95fe7681516061a83650c8b39968bd3a7a34b34e93844fc8ed8a84b59f7e657a025592db7a7252491b18695693a68d178564909e5971b8956479e518a1202af31718fe22f4e65c93a9a08e802e07fd274e5a23cb466a7b48cf344a2176d61ef27d348b40a510e8cc8e372693cb6c1c7cfb4e3972fbe4204f0048bc53793e049b0484b3bbe6d3b6a986bc2c95fdb63f60ebfdbea38b48405a8b85ee84568fb6921a75fb54e9026671ed43b923286d64d60c9060a86c2217f98f049259d99d0c5ce4889b165557fa4536a6d5222eb289a6dd83ff235dbde83897d1627f6d85c3e551997007b5219c5b010d53b92879e19951ba21db665f724d7c45da7c635f3a982047a1ebed638dca4f3e97ee036e18ae68d37cd8fda64fac7dce84587311b2e17420c31d50a5da4d052052ea1b4116aa9a0ef20434420c51887cf2d03a1d578925f19e700451f404413f7371693f2e0a622e1ae49daccd12de5ec59d2acbb635d854ce22a418f143c3a637dc731d45c5d1c38adcb770602a92f3de006a4eef1d838b91178476ff168fa639eb5b420da8a343a0ec6e6144cc802eb08d1833beb6ca18ffa1fd7b019bb2d02c97d62963a8a9180769323d8e45639b68aaa56775306bdc6c020678ecd64e751fb92c85dc474bbde8f94c029d92dea48b837c7b5524dc061374e637e299fef6b1355ce23d0f649f0e61402d375bb444a37a22a812821ade48df3be021ecacff6873654bf21e111d079f5bb140568b5c4b77f1aaa22416ab983eb8fe903286fdf114024622f443686078c8318329aebe5df891a9a91bd5512b3aed59557de62d1a9586e10fa07306f815fc10204200d6282813f729c3f8e8af7c450f55037397125ef5e806306a9ba351a6f3e1dede486bc75ae897581b649ef55f19c97b330c5a61a6f76674722429ea894d1c638074cedb0b863514c19166a5c2baf4ee6d1eaeee85155afd10fdd4361c78b3c0d00d01a37df52be0ed3458bc7a1afa0c8c9a2f3406b1e4607e955f57f626c7ed2efac888e72110e0dc0f79cfdd02bc245f0b3a7939bbdc31229ab99ecd36927e1fdd7b17b5037457856fe3f773b6af24af6d67cbd7978e2f127b86b50153e9b0f13f4942006198d6a6ac335cf7560676fd607e6a3a7b518fa815def5eca1372813f97d6ea9d62b848db37015aa648c8426f26776728332fad5f72c919a6f96d1c3b0a97df4c1892ff814e2e57979da7f7098c42b963ca5929765b1ad2284abd2c1f7ef9570b8c97a513da8f4078130e70f31327708619331571d78d3475b6b41e835dc948f0e809c6610942e4c7d515d9303e6281a3980a742dc85f4528fddc34d22bbd9aa4b4b2351df10884f1dbc877717d984b0b3bafda47801103cda459d006a9a9982f5cf67fc0face3def54d579358e623dae4d9b4248cebd82111cf4c431f8852bcf862a65a124ca709cec2454e4c65514128bc2d6f8cc92624f20c02b008081d334cc7fa0b8e8d9d3dfe2a283600e875c7ecb8e4949f958f6f84f8e52b78e3eae58fa02d85bb8ac52ddf3b262ec52eca50d6d590139c24c042e1c040d8da6c9a2e95055dc91ed65881bc4c43c13c240eb9f6ef9a4cffb44e96c9c055cbbc10b5d63850bc3e2fa46aabb2c732c0c31bf1dba3ad1ce2b1b671259aaaef955d39c420b18d78828248563cacd9417ef2cb63859ebef3936e26803e7ccf5233cb3c0a2f440d898ff258cb03a783415a6f81b1b1a07bb5cef530c78c30ec9adfd2df246d581bc662336d5029f65588995adc3190e97a418c15fa3620eb68cdcc6233f1aa0009ab558b22ae9316003c6af1fe0d7807e583943e48692fcd9fa2525fefe3467d099951c83943312f0e889cef4c1ecf17ad469f5ad683b405eb59230e89df96e8dd94e41e5f62822ba957e065f22d96b1c0c2b83f5a57fbb04d5af399ece3ddd52e5afff783a876e2066fbe30963421acb427c95fd3e7bc6b7d3d731a7e347052cd9636805cab94ad40bdb63a264b3127c7f8d21d25810bd2eadb2c3e31b5c807283ad062d750e5b21ec1e20cc3ac5753ac536faf23e2b5c37e9d021870b0350ecea7187643a00a08ec3ffaf7e6c236c4d694ff41af7b5fbf8a554949f5026a8b2adcf377f94848cd17fbcc0249e796008962d3db16b4bb85483dbe75ef5b301175e052203436b38248fbd1a28a5e2b3ab75c77eb8f853e60e95d5f16cb9858b33b3752b4c69776ec4506ba2bd490a6f17aae1152d8762d86cc0ef32788cf149e8fa9464c3ea588f15d8eb2092254c470acf221cfe680845167fc6778b8af1609681ae4f4e65426ce059b9768eb2e0c89f29de7b91db89a72e4c677c65dd980f9a6bfa656ed01d5e683a33e6b80462139476225cc0fcc309d926c36aa250bdad1454db46cd2536046f909a05b08829cad973bc705231a32a5f2e7ac5e96e2315cb175724607a5af02073fc936272aa724990ba6dcc4ea79da6eb7ec0bbdbd0a878114c493bc4b3e26e24b18553bd0a617981d8ea9e91ed2e3bcbd48f5d67aa913790bf52c31435184d6c73079e964e9ef05194e88b072b372d48cb70dbca99238c4474ed0b6932cc1b233bce0c87d48d478fa3c937c42c8637714e9995041f8b2b7dce17eb2f26c730f5559cf5919b88ee00bbf40726f90e1cf29e0f5fadc64de1bf28d447e8996948dc2fe658620b6fb8cfc592d5e0621b66057eb774c31ab16235456210c5ee7990b71b5b3d51cf13e30361a8cdaa107b13fa6a1c84b172efece3b70753e81e7e9e572d228c7bbcdaba40d8d0eb4de13bda1fca38d3ed667bb0897335aadaa0c3905a1283292c89ef5747ad5462db4011c3f8a4a476aa78d74badf8bf3785997ba9824e21256eed4c2805331fa24c81e28f21e895a0b03e7de52787065faded0f1b59eba1c922dce5576e8ab190ef716c021d8dfa13a1e73b8962d9f9238ba8b9fa2cf84addfe37e78cdb398ee4c0642a716fb8db1e332f873a16c6225ebc51fe05f33273380e64272159bb808336e87b4b0cddb492a992b2e7f423bf37725e1d9dda0dc6b4426172c2a93ee1cc9acea7fe1ece9ba0ddee3e232efb11fc4d4e266cd2a83c017e32315c434b73e9729d5a3a7fe993e72f9bb70d78672493263a2653fe1bfd42d1f97cbf0fffb6705b2e35fe65ceb9ad7ddc525b689027352db9c194939559ebb3b505a58e0404103482ce10f7d67761c13b235b52ad1b25803aa94cf7df5ca8d8bd0d4e6d0ab8bcfb8f72a26cecf071e31c02a1034c0144d850f1732926981dca7a18f0a197da3703d74d3e951ed510ed38a8fcae93eb2bebdf92e0feb0f06dbe1331cb43cfa548ca294ea479ecb325aea7aff8d924745298a3d34f23f40b992995a908130165b44beb8cc9da8390dae2a09cb7e1ac7e95b84f35e7be147b4be04883047cdcaec662aa8b66694ae8914e65edb63696494bff66eacb3aecdb23746a36cec7f832d628d38698ba6b3d4020095eae2a5b36a21039ce50901cdf2582b88ab8c86c6f4a8c345618f10d7aab081edb3ce8e4479e0ac476112d4b261cb8ed952221fb660898491fc7134b091c0565173bebf014caffae12852b5314c930d41e27bcfa7bc536fc4da3b714630e1ac7aaf006755da1da792dcad08f796c2ebdd6427ad3374e25132a103d62f98584462aa164d742b4d7c668a85119480199dd90f0a903f6c76cfca28b84a2279ae6965fdec403072be146d2d1f39b122113fbcfb52cf8c7c1d47a32f437b895bcd7a67ad08f196112a15b07e5b57b4db2b7c7f70a42923d6d0625515375b9281d331bd1e5dd75ff3a6e1ca5b75eb328e6c935f2c8f0c57b0aaf2ad85983160b0e53fca44d95e956ef2726d97acb2da34ca4482bb86aabde6d8b8b85da2e44ae89b8359f7edb88a3e2a9aad23125b8c2bd0c7be0847ac9b1e16db2c395e0c9eb040af710c31d32f7b356bfb6f1704f4d884f37c15b865eda87685ae8926fbf3a4465e7e2968ee18ea1ff5d4f4cbfb55634089687b9f0bce5b9cf10779299893cf64980193fd3a1096507e7a8be", 0x1000}}, 0x1006) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x48, 0xd43, {r6, r7/1000+60000}, {}, {0x3}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "9c2d486d482250e5"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4001) r8 = socket(0x40000000015, 0x5, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r10, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, 0x0) getsockopt(r8, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) r11 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r12, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r13 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r13, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) dup2(r11, r12) 5.608029472s ago: executing program 0 (id=310): openat$sysfs(0xffffffffffffff9c, 0x0, 0xe280, 0x10) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.443950655s ago: executing program 1 (id=311): r0 = landlock_create_ruleset(0x0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x4000000a, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="830004000000000020001280080001007369740014000280050009002900000006000f0003e5"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000300)=0x140) syz_io_uring_setup(0xd8, &(0x7f0000000480)={0x0, 0x3, 0x400, 0x3, 0x4}, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000001c0)={0x83, 0x4, 0x8, 0x3, 0x15, "e20b0020ffffffff"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000080)=""/245) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fffffff, 0x372, 0x0, 0x19, "40b80000000000000000001c00"}) r9 = syz_open_pts(r5, 0x0) r10 = dup3(r9, r5, 0x0) read$FUSE(r10, &(0x7f0000001ac0)={0x2020}, 0x2020) 5.390969168s ago: executing program 3 (id=312): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x200900, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000281ace4d37d3d86dd6001010000481100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200489078030000000200000088c73b21f253636d01dbe5712c1c941e1cdafbbb43f09c70e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"], 0x0) read$FUSE(r2, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x4202, 0x184, 0x2}, 0x18) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x2ac0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x3, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2a90, 0x2, [@TCA_CGROUP_EMATCHES={0x68, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x200, 0x8, 0x774c}, {0x2, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x800, 0x3, 0x8}, {0x81, 0x52d6, 0x7, 0x80}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0x1, 0x5e, 0x6, 0x9}}}]}]}, @TCA_CGROUP_ACT={0x2a24, 0x1, [@m_simple={0x168, 0x1f, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0x7b, 0x0, 0x0, 0x74}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x9, 0x6, 0x2, 0xd}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x4, 0x7, 0x6, 0xfffffff7}}, @TCA_DEF_DATA={0x8, 0x3, '\x90-+\x00'}]}, {0xea, 0x6, "069f81fdc8ab50706c79fa1ef13596122880e78f5af8d95790b1cb1aaa1f5c9cee4dcabeed29075b0df48c4bbbab0303b27b8c43d5cdf6434b5d4b035a6f671e9c9d56d7ad2533fd59f719d99e2a1f1bbfe719a0cde9ba9ada1967a1485b57f8bd86e25c5ffe7efc0d7e3cf9e52b41ad8e7cdc874b77789dd9d5fe8081eabe039f346ad1567efaa7ee955e774d9f72c34f697a6198b821ba1186de1807deca8961291801f1b87967d50ef915a214f0431b0a78995607411fd90c9c6359756c4c011b0eb48a64c1b0f34430354283400768c2a1b6fdeb59ee903065000817fac8660ab5aea695"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x198, 0x4, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x10000000, 0x1, 0x1}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x2, 0x0, 0x10000, 0x4}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x6, 0x8}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x66, 0x2, 0x4, 0x8, 0x5}, 0x58}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x517, 0xe45, 0x4, 0xc, 0x3}, 0x4d}}]}, {0xe0, 0x6, "96c8555b86955d1ae0ccba366f493521f8503d1b38d6077a576d5d781321c438a886354896bc85fae8e821d24d7fb0b5573e3f153815cd18a895a63b4f080b03b5c7169f2081ed9e28bcb6ba40d2067a6e3bbfd49b63adc6a2af349589a762348f650bc4d7e1b117be49bb14685ffc965049a6da9b4130ffedab59fabdaeafbdd6bc86d6b8d488adfdaf00a3114553b209c03b7a4526b38d4d1d04277f700c90f5313f8b957067191c63eae7382ea05117db047b1eb2dde78af6cea876290a608cf7a1962cf2d0445782d9458469e382540dfbc48778e993fd4cdfba"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x138, 0x6, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x40}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x6, 0x20000000, 0x40009, 0x9}}]}, {0xd4, 0x6, "55c370de3024795cf6cff2d45ccbf0399c6bc4c06a163f4b384ef755b7550f33da400d240ab97c0e6df5e6d0f6c2e5f8519526dc86e576a025e893850a84982c15d6d74c230c976c7b57423dd318098d14b2a4a62df91573bb8eb69a8a045b944e12e555312f08a3e5c784d7806ca237682ef791d657e3802e2316faf511688c1a60993e5b1222d08b22325056590386df30f46fa5e4bf6c44523522d9c280ec750f048deca208f90bc5e8231118cc82df10ed21e16b356757a878453016a0d5cc4480ec9a311a94dce0c15aa3ab5635"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x11c, 0xf, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x1, 0x20000000, 0xef6f, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x346, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7, 0x6, 0x6, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9b, 0x4, 0x100, 0x80000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x7, 0xffffffffffffffff, 0x72de6323, 0x400}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x23b2, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x44d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1220, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xae, 0x0, 0x3, 0x6, 0x33a}}]}, {0x47, 0x6, "60f9c29c4f594ac5ddf8ebac2339f51c775223d4b5aad2d6a069b15ea241e066410126c071b50e8944cb3db766f0047c3ed22afd4759be1865a4815b7aa5d67254a427"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x244, 0x10, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x10000000, 0xfffffff7, 0x8}, @multicast2, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0x2, 0x422}, @rand_addr=0x64010100, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x10, 0x0, 0xf, 0x1}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x61b, 0x5, 0x9, 0x3}, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc56, 0x3, 0x10000000, 0x5228cace, 0x6}, @broadcast, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x427, 0x8, 0x10000000, 0x8, 0x6}, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x2, 0x3, 0xfffffff8}, @rand_addr=0x64010102, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x7f, 0x1, 0x1, 0x5}, @broadcast, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x7, 0x5, 0x7ff, 0x10000}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x0, 0x4, 0xa}, @remote, @multicast2, 0x0, 0x1}}]}, {0x8a, 0x6, "168a653a0d41ab4b062e1e0c339bad9b3c7882891357343e29809cb4e2487b9a6a435c264aebacc61c2bced1a2450b4195bbd369c920eaafb3e44db67c4db30da1584bc23e315f17d2f0ac4f09229e17f3ac8d4cfb4443e1de5c88426fe7b6da23c924b2ea9b0a70f6f33a4f1b340629f8129c26423b959be57a425fa62d668a0ed8982af19d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1058, 0x1b, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x134, 0x7, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7ff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x100, 0x7, 0x2, 0x7, 0xe}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x932}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0xd0, 0x6, "23cbe70cc60d0269a9de0a8431ce43ee6cb24d654284aa00254afd1bd08c64fa66e3be41ea55bfa06bd303844746141df4619ef220f9800feaf2d72949751d30e5f59d6eb4857e283ee05260fee8c621b3ce4525940aafacd1893b2d2f8e8bc6aaaa05d7bb538ae087b176985588540c8e1437988d4a62e54002a036aaea91f14c66e6404d7ed69282c19eb41b7925d5f0ad36b681d8a474d7b939875abb68391d773fefa930bbe8e0fecd30a7c4625b16464eb7a6f32ca1f9cbca4358bd7083eb933c8738a21e48155d7fb4"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xfc4, 0x13, 0x0, 0x0, {{0xa}, {0xef0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x3, 0x10001, 0x0, 0x2, 0xde}, 0x92, 0xa, [{0x0, 0x8, 0x1, 0x5, 0x7, 0x777f}, {0x5, 0x2, 0x10000, 0x7, 0x8, 0x4}, {0xc21b, 0x8, 0x5, 0x1, 0x35a0e59b, 0x1}]}, [{0xaa, 0x8, 0x42, 0x0, 0xd57, 0x4}, {0x9, 0xc2, 0x1000, 0x7ead, 0x8, 0x6}, {0x80, 0x7, 0xff, 0x1, 0x7, 0x8001}, {0x4, 0x7f, 0x8, 0x1ff, 0x224a}, {0x40, 0x5, 0x1ff, 0x0, 0x56c, 0xb}, {0x4, 0x1, 0x9, 0xb6, 0x2cc, 0x4}, {0x0, 0x1, 0x4, 0x80000001, 0x4, 0x80000000}, {0x10, 0x0, 0x2, 0x4cd8, 0x9, 0x8000}, {0x0, 0x0, 0xfffffffa, 0x3, 0x8, 0x2}, {0x0, 0x1000, 0x5, 0xd, 0xffe00000, 0x5}, {0xffffff75, 0x7, 0x4, 0x7, 0x9, 0x7}, {0x7, 0xfffffff7, 0x0, 0x5bf, 0x8, 0x321}, {0x2, 0x6, 0x992b, 0x4, 0x8, 0xe45}, {0x3ff, 0x1c1, 0x5f, 0x7, 0x9, 0x653}, {0x8, 0x3, 0x3, 0xfffffffd, 0xfffffffb, 0x3}, {0x9, 0x5, 0x0, 0xb, 0xb, 0x7}, {0xe, 0x40, 0x6, 0xbc1b, 0x8, 0x2f45c870}, {0x4d, 0x4, 0x55, 0x101, 0x7fff, 0x4}, {0xffffffff, 0x10001, 0xfffffff7, 0xb06, 0x6, 0x5}, {0x0, 0xfff, 0xffffffff, 0x8, 0xf2eb, 0x5}, {0x0, 0x6, 0xa3, 0x3, 0x5, 0x8}, {0x8, 0x6, 0x7, 0x6, 0x200, 0x9}, {0x7, 0x81, 0x1400000, 0x947e, 0x4, 0x200}, {0x200, 0x7, 0x9, 0x4, 0x7, 0x7fffffff}, {0x6, 0x2, 0x2, 0xfffffffb, 0x8, 0xe83}, {0x7, 0x7, 0x7, 0x3, 0x6, 0x100}, {0x8, 0x9, 0x401, 0x6, 0x4, 0x1}, {0x4, 0x5, 0x2, 0x8d7d, 0x5}, {0x8, 0x1, 0xffffffff, 0xffffffff, 0x1, 0x2}, {0x2, 0x4, 0x4, 0x7, 0x7, 0x4}, {0x400, 0x9, 0x3, 0x9, 0x5, 0xfffffeff}, {0x3c, 0x6, 0x2d, 0x2, 0xffffffff}, {0x796, 0xa, 0xc1cc, 0x2, 0x6bd, 0xfffffff8}, {0x80000000, 0x4, 0x2bff, 0x6, 0x17e, 0xcd4}, {0xe, 0xffff, 0xa, 0x2, 0x3, 0x8}, {0x0, 0x7c, 0x2, 0x0, 0x3ff, 0x97}, {0x8000, 0x5, 0x4, 0xd9d, 0x9, 0x3}, {0xf40, 0x8, 0x4e79b3dd, 0x2, 0x9}, {0x400, 0x755, 0x400, 0x8, 0x3, 0x2}, {0x2, 0x3fb5, 0x9, 0x1, 0x3, 0x7fff}, {0xe, 0x33b, 0x40, 0x9, 0x2, 0x1}, {0xe, 0x6, 0x18, 0x5, 0x3a9e, 0x7}, {0x7, 0xfffffc01, 0x9, 0x6, 0x81}, {0x4, 0x1, 0x3ff, 0x471, 0x3, 0x3}, {0x6, 0x3, 0x401, 0xb, 0x6, 0x12}, {0x5, 0x6, 0x1, 0x9, 0x401, 0x1000}, {0x1, 0x401, 0x0, 0x9, 0x7ff, 0x18f9be62}, {0x8000, 0x3, 0x0, 0x6, 0x6, 0xfc}, {0xc, 0x549d, 0x5, 0x1870, 0x6, 0x9}, {0x3, 0x8, 0xfb, 0x5, 0x1ff, 0x4}, {0x8, 0x7, 0x3, 0x20000, 0x1000, 0x1f0}, {0x3, 0x6, 0xc, 0x401, 0x0, 0x2}, {0xf2e5903c, 0x9, 0x81, 0x1, 0x5, 0x9}, {0x3, 0x4f, 0x8, 0x3, 0x0, 0x100}, {0x6, 0x1, 0xffffffff, 0x40, 0x7, 0x5}, {0xffff7275, 0x1000, 0xe4, 0x5, 0x9, 0x4}, {0x0, 0xfffff000, 0xfffffffe, 0x2c4, 0x8c, 0x1}, {0x1000, 0x6, 0x9, 0x10000, 0x7, 0x9}, {0xfffffffd, 0x3, 0x8, 0xb, 0x5, 0x3}, {0x7, 0x2cc7, 0x7, 0x4, 0x9, 0xc0000000}, {0x6, 0x3, 0x6d000000, 0xb, 0x7}, {0x7, 0x9, 0xf2, 0xffffffff, 0x0, 0x8}, {0x0, 0x3, 0x9, 0xc, 0x5, 0xff}, {0x4, 0xccd2, 0x96, 0x9, 0x5, 0xffff000}, {0x9c91, 0x9, 0x6, 0xe, 0x9, 0x81}, {0x960a, 0xfffffff8, 0x40, 0x6, 0xfffffdff, 0x9}, {0x8, 0x3, 0x7, 0x9, 0x34, 0x8}, {0x0, 0x3955, 0x73, 0x8, 0x4e52fce8, 0x7}, {0x1, 0x7, 0x8, 0x6, 0x55, 0x8}, {0x5d1e, 0x5, 0x2, 0x0, 0x66b2, 0x400}, {0x4, 0x101, 0x9a, 0x6, 0x89, 0xfff}, {0x10000, 0x0, 0x200, 0x7, 0x9, 0x5}, {0x3, 0x0, 0x7fffffff, 0x2, 0x8001, 0x6c}, {0x4fa, 0xa, 0x7, 0x7, 0x7, 0x2}, {0x4, 0x2, 0x2, 0xce2, 0x1f44}, {0x4, 0xd9d5, 0x80000000, 0x48c2, 0x10000, 0x5}, {0x6, 0x4, 0x9, 0xfff, 0x80000000, 0x5}, {0xb4f37c9b, 0x6, 0x7fffffff, 0xfffff62c, 0x0, 0xf5}, {0x3, 0x6, 0x2, 0x3, 0x56c, 0x7ff}, {0xfffffffd, 0x4, 0x7, 0x7ff, 0xe, 0x4}, {0x9, 0x8001, 0x14, 0x0, 0x4, 0x3}, {0x9, 0x4, 0x1, 0x973d, 0x3, 0x8}, {0x0, 0x4, 0x1, 0x8, 0x6, 0x9}, {0x7, 0x7ff, 0x3, 0xff, 0x3}, {0x800, 0x5, 0x3, 0x5, 0x7fffffff, 0x4}, {0x7, 0x4, 0x8, 0x5, 0xc8, 0x2}, {0x8, 0x1, 0x2, 0x58, 0x0, 0x5}, {0x5, 0xa, 0x101, 0x6, 0x7, 0xc}, {0x8, 0x8000, 0xf, 0xb165, 0xfffffff9, 0xfffffb31}, {0xffffff8e, 0x30, 0x8, 0x0, 0x4, 0x401}, {0x2, 0x1, 0x0, 0x6}, {0x7, 0x6, 0x32, 0x4, 0x8, 0x1000}, {0x10001, 0x5, 0x9, 0x5, 0x101, 0x2}, {0xb, 0xb36, 0x401, 0x4, 0x1, 0xc5}, {0x7, 0xdcdb, 0x10000, 0x4, 0x9, 0x4}, {0x1800, 0x25, 0x401, 0x3, 0x200, 0x7fffffff}, {0xfe3, 0xc609, 0x1, 0x80000000, 0xc25, 0x7}, {0x8, 0x9, 0x7, 0xfffffffb, 0xfffffffd, 0x6}, {0xe1, 0xfffffffa, 0xd, 0x2, 0x4, 0xc14}, {0x2, 0x8, 0x8, 0x5, 0x5, 0xe045}, {0x0, 0x1, 0x7a4, 0xb, 0x4, 0xb}, {0x2, 0x8, 0x146, 0x456, 0x6, 0x200}, {0x4, 0x3ff, 0x1, 0xfffffff8, 0x6, 0x7fffffff}, {0x33c, 0x7, 0x4, 0x5, 0x9, 0xffff}, {0x800, 0x1, 0x5, 0x73e5, 0xf1, 0x3}, {0x4, 0xabf, 0x3, 0x0, 0x6, 0x9}, {0xb, 0x3, 0x1, 0xfff, 0xdaa, 0x7}, {0x4, 0xe8, 0xe653, 0xd5a, 0x7, 0xfffffffd}, {0x8, 0x600000, 0x1ff, 0x2, 0x254d6613, 0x5}, {0x91, 0x8, 0xffff, 0x7f, 0x7, 0x8}, {0x8, 0xffff, 0x5, 0x80000010, 0x6e6, 0x3b92}, {0x7, 0x7fff, 0x5, 0x4, 0x6, 0x8}, {0x10, 0x8, 0x80000001, 0x5, 0x5, 0x1000}, {0x7fffffff, 0x2, 0x7, 0x8, 0x6, 0x8}, {0x10001, 0x7, 0x4, 0x8, 0x28000, 0x838}, {0xfff, 0x1, 0x7, 0x5, 0xfffffff9, 0x1e}, {0x5, 0xff, 0x80000001, 0x4, 0x5ea0, 0x4}, {0x81, 0x5, 0x8143, 0x5, 0xb7d, 0x3ff}, {0x81, 0xcd, 0x7c2f, 0x4c, 0x6, 0x10}, {0x6, 0x394, 0x6, 0x8, 0x8, 0x1}, {0x4, 0xfff, 0x1000, 0x0, 0x9, 0x2}, {0x2, 0x5, 0x5, 0x9, 0x4, 0xfffffff7}, {0x2ad7, 0xa, 0x5, 0x7, 0x2, 0x6}, {0x9, 0xa, 0x80, 0x81, 0x1000, 0x7}, {0x7fffffff, 0x3fdd, 0x6, 0x0, 0x7, 0x5}, {0x6, 0xdffe, 0xd, 0x81, 0x1, 0x9}, {0xfffffffc, 0x81, 0xba4, 0x9, 0x26f, 0x8}, {0xffffffd4, 0xd, 0x7f6, 0x3, 0x1, 0x8001}], [{0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x5}, {0x5}, {0x2}, {0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5, 0x3434abae7e62c856}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {}, {0x3}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0xd71d4c7e7124ed71}, {0x4}, {0x1, 0x1}, {0x4}, {0x7}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x2}, {}, {0x1}, {0x4}, {0x0, 0x1}, {}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0xac, 0x6, "8fbc1ac26b7ade810cd99539a65caeb4c9f3fc3a702123f3d9eba6ef105352e20089bddedbae8414d4811c8c588ecd6b19b56fb28a40421eec96d49d74f0c89a5e075372422dac1ccbe076e279d1e54b628ab513df9583e1ad7c6751f7602540745eecf52ad5e2a3220eef727662549d782f4f3a6a474bb57a3f0cd1732927df2f0c1e8ce073038ea5a271443f5008452a620f696c8de3d46952234fd4575bec01b5a40b15a78bac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0xec, 0xd, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffc, 0xcb60, 0x5, 0x2, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xde, 0x10001, 0x6, 0xf1, 0x7}}]}, {0x90, 0x6, "e17cd3da1ccd4943bd171bd7366b153f3daba7abb5dcb3c828a9ed0d2c650a261e03d4bab8b1e71656c5de1082fdc7891770e3e591630e8d17ca1789fedae5111e3800991312279898a484bba1d6fe00e80aef1dd7ae4f4229ac8433c90dbc06da1f5410ddc06af5a48282df8dbdf4eddad0c06af1f43b567213651f62d1a3bb5ec08fcc88c84eec149434c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x4c, 0x12, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0x14, 0x6, "79caa30b605b1551ccf50c7bad8b0588"}, {0xc, 0x7, {0x1, 0x5c99b5a9bcff6df0}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}]}, 0x2ac0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001200030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b0001006272696467650000340002800c00230006000000000000000c00210003000000000000000500250001000000050017000100000008000400030000"], 0x64}}, 0x0) 5.228009823s ago: executing program 2 (id=313): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 5.077477174s ago: executing program 2 (id=314): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = io_uring_setup(0x30d5, &(0x7f00000001c0)) r2 = syz_open_dev$usbmon(&(0x7f0000007040), 0x3, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r3, 0x708, 0x7) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x0, 0xd0, 0x4, &(0x7f0000000080)={0x13, "42cae8b3df20afbcfcdd178c50e5d84526580489979a473f112453b228922bd31c"}}) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x7, 0xf5c1, 0x59455247, 0x5, 0x9f78b373bbb4a735, [{0x1, 0x1000}, {0x200, 0x7}, {0x7, 0x8}, {0x2, 0x80}, {0x3}, {0x2, 0x3}, {0xa0, 0xd}, {0x400, 0xffff}], 0x8, 0x0, 0x1, 0x0, 0x7}}) 4.011065049s ago: executing program 4 (id=315): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2}) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) r1 = syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='attr/exec\x00') r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0xfffffffffffffdbc, 0x10, 0x0, 0xfffffffffffffeac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e04046d0c"], 0x7) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) 3.61198192s ago: executing program 1 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000100003040000000000ea000041010400", @ANYRES32=0x0, @ANYBLOB="000305001001000008001f000700000008002c000e000000140012800b0001006c6f7770616e00000400028008000a00", @ANYRES32, @ANYBLOB="05001000030000000a000200aaaaaaaaaabb000084001a8004001c0004001c00100002800c00018008001500f30f000068000a8014000700fe8000000000000000000000000000aa05000800060000000500080008000000050008000200000005000800ff00000014000700fc0000000000000000000000000000001400070000000000000000000000ffff0000000005000800df000000050027003a00000008001300", @ANYRES32, @ANYBLOB='\b\x00)'], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 3.444955376s ago: executing program 0 (id=317): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b"], 0xc0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfefc) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001600050200000000000000000a00c5b2"], 0x18}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r5) r6 = syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[], 0x0) socket(0x10, 0x2, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000000c0)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="200e4d0000004d07ddbc2e385d03201e89ae7bcef2f30f59191f892c000c7eabe984bfc112c2afc4f79c046a9544ba9e4a6dc1d1111b6e5d2900000000000000000000004cd0f2613a856b408f0cfef96022bdd714cabfbb80e87db837344c1c9409"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000300)={0x0, 0x10, 0xfc, "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"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4f}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r12, @ANYRES64=r11, @ANYBLOB="ed"], 0x20) 3.397026885s ago: executing program 1 (id=318): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r3, 0x3516, 0x0, 0x20, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f0000002fc0)={0x2020}, 0x2020) 3.271620459s ago: executing program 3 (id=319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x200000, @loopback}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) io_setup(0x7, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) socket(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x800, 0x50, 0x2, 0xe}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 2.623856408s ago: executing program 0 (id=320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/crash_elfcorehdr_size', 0x1a3c01, 0x48) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_open_dev$evdev(&(0x7f0000001100), 0x100000000, 0x900) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4c831, 0xffffffffffffffff, 0xd72c000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1e, 0x8010, r4, 0x3b8f4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES8]) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b000104000000090400004fd4695e00090532825b"], 0x0) 1.986725579s ago: executing program 4 (id=321): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ef17856000000000000109022400014000000009040008210300000009210000080122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) (async) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x6, {[@local, @global=@item_4={0x3, 0x1, 0x0, "66f11d29"}]}}, 0x0}, 0x0) 1.700857352s ago: executing program 2 (id=322): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2d, 0x2, 0xd, 0x4, 0x2c, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7, 0x52, 0x1}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000140)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7c}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000001057f8bb37937ec80000000000"], 0x18}, 0x24004800) sendmsg$nl_route_sched(r0, &(0x7f0000002240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x3, 0xffff}, {0xa, 0x1}, {0x9, 0xfff2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) sigaltstack(0x0, &(0x7f00000000c0)={0x0}) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000002280)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x9, 0x0, 0x3}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000060a0b0400000000000000d3e83bdc0002004672040004800900020073797a3200000000140000001100010000000000000000000000000a"], 0x4c}}, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)='7', 0x1, 0x4}]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x6, 0x9}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000002000/0x1000)=nil) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c020000060a0b04000000000000000002000000400204803c0201800a0001006d617463680000002c020280080002400000000115020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c756cdcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f8700000008000100627066000900010073797a30000000000900020073797a32"], 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048814) openat$audio1(0xffffffffffffff9c, &(0x7f00000022c0), 0x3193c0, 0x0) 918.703372ms ago: executing program 3 (id=323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x194, 0x10, 0x633, 0x70bd2b, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x20}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x40}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd26, 0x80000000}}, @algo_auth_trunc={0x93, 0x14, {{'sha512-arm64\x00'}, 0x238, 0x0, "e863654b40a7ad42118bc1dd69d07e3b05cf0dbc9a9aac6130f0d060cb0c958c133115ff9cbb79de1007f5583249a62fe4273013ec2c49dbf133d4982cca44c3a2d388d9483ca3"}}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendfile(r3, r1, 0x0, 0xb) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xe2.{'}], 0xa, "3390a7cc65a4ea59673aed88b64a927f421cd365b10f3f48c143c5ac6726691f4c6bd2809bcb5cd326bfc32085ffd01372a77744b674ba71a2d9d3b6b1bd84fdfaeeb2280ffb23e482fcec463b5f"}, 0x5d) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) syz_io_uring_submit(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000002700)={0x1, 0x0, {0x1, 0xdd90, 0x3010, 0x0, 0x0, 0x7, 0x0, 0x4}}) 739.929078ms ago: executing program 0 (id=324): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 568.576819ms ago: executing program 2 (id=325): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010101, @private=0xa010102, 0x0, 0x2, [@loopback, @rand_addr=0x64010101]}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000018002000ffffffff000000000a600000ff00000600000000a533afb09db48fa8a48dbe78c3de03fba0313c94bc695e5fe6e4e025bc284a5a5556e2e83e82f5844923b2b1554b0de058106063bb74816514dca0979887e3c6eb110367401260a13129511146e576d2f73bb6103751c10b62453f3d74a4bd1756c21e53cec4a5787569a8a160b1ddea66a1"], 0x1c}}, 0x0) 458.828219ms ago: executing program 0 (id=326): mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (fail_nth: 6) 343.92255ms ago: executing program 4 (id=327): openat$sysfs(0xffffffffffffff9c, 0x0, 0xe280, 0x10) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 0 (id=328): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010080000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30001700000900030073797a310000000074000000060a010400000000000000000100000008000b40000000004c000480480001800b00010064796e73657400003800028008000940000000000900010073797a3200000000080004400000000008000340000000000800094000000001080004400000000b0900010073797a30"], 0xe8}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x183) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000480)=[{{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000700)=""/166, 0xa6}], 0x5, &(0x7f00000003c0)=""/172, 0xac}, 0x2}], 0x1, 0x2002, 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x10, 0x0, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): 17] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 107.378663][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.415417][ T5917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 107.431334][ T2343] pvrusb2: Invalid write control endpoint [ 107.447248][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 107.457201][ T5917] usb 2-1: config 1 has no interface number 0 [ 107.457260][ T5917] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 107.457307][ T5917] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 107.457331][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.466577][ T5917] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 107.494783][ T5890] usb 1-1: USB disconnect, device number 4 [ 107.538294][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 107.547119][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 107.558446][ T2343] pvrusb2: Device being rendered inoperable [ 107.559572][ T1210] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.599070][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 107.615570][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 107.665827][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.684436][ T2343] pvrusb2: Attached sub-driver cx25840 [ 107.692809][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 107.693527][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.704850][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 107.769080][ T1210] usb 4-1: Using ep0 maxpacket: 16 [ 107.776372][ T5917] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 107.776857][ T5917] snd_usb_pod 2-1:1.1: invalid control EP [ 107.776875][ T5917] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 107.777290][ T5917] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 107.778003][ T5917] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 107.778439][ T1210] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.778463][ T1210] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.781104][ T1210] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.66 [ 107.781131][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.781151][ T1210] usb 4-1: Product: syz [ 107.781166][ T1210] usb 4-1: Manufacturer: syz [ 107.781180][ T1210] usb 4-1: SerialNumber: syz [ 107.963220][ T9] usb 2-1: USB disconnect, device number 4 [ 108.308185][ T6003] warning: `syz.0.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.396451][ T1210] usb 4-1: unknown interface protocol 0x56, assuming v1 [ 108.415283][ T1210] usb 4-1: cannot find UAC_HEADER [ 108.479467][ T6005] process 'syz.0.31' launched './file2' with NULL argv: empty string added [ 108.571377][ T1210] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.624263][ T1210] usb 4-1: USB disconnect, device number 3 [ 108.687844][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.797049][ T6010] program syz.1.33 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.946624][ T6016] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 109.144974][ T6022] netlink: 17 bytes leftover after parsing attributes in process `syz.0.37'. [ 109.218875][ T1210] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 109.401019][ T1210] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 109.423597][ T1210] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 109.449124][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.461314][ T1210] usb 3-1: config 0 has no interface number 0 [ 109.488128][ T1210] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 109.547181][ T1210] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 4096, setting to 8 [ 109.585078][ T1210] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 109.627098][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 109.688962][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.696067][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 109.727174][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.737145][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.778277][ T9] usb 1-1: config 0 descriptor?? [ 109.905309][ T1210] usb 3-1: config 0 descriptor?? [ 110.342635][ T9] nzxt-smart2 0003:1E71:2011.0001: item fetching failed at offset 2/5 [ 110.363586][ T9] nzxt-smart2 0003:1E71:2011.0001: probe with driver nzxt-smart2 failed with error -22 [ 110.579470][ T5892] usb 1-1: USB disconnect, device number 5 [ 110.623890][ T1210] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input8 [ 110.929319][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.952677][ T1210] usb 3-1: USB disconnect, device number 4 [ 110.958663][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 111.138908][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 111.152998][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 111.163784][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.205664][ T9] usb 2-1: config 0 descriptor?? [ 111.417713][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 111.442368][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.483635][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 111.503214][ T9] usb 2-1: media controller created [ 111.598015][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.262420][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.290158][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.551872][ T9] stb0899_attach: Driver disabled by Kconfig [ 112.580531][ T9] az6027: no front-end attached [ 112.580531][ T9] [ 112.606333][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 112.636528][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 112.685193][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 112.723527][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 112.739958][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.827412][ T921] usb 2-1: USB disconnect, device number 5 [ 112.899267][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 112.921088][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.956022][ T5890] usb 1-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=ce.6f [ 112.968915][ T5891] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 112.982398][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.992674][ T921] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 113.016392][ T5890] usb 1-1: Product: syz [ 113.025327][ T5890] usb 1-1: Manufacturer: syz [ 113.036596][ T5890] usb 1-1: SerialNumber: syz [ 113.046726][ T5890] usb 1-1: config 0 descriptor?? [ 113.056065][ T5890] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 113.149534][ T5891] usb 5-1: no configurations [ 113.158484][ T5891] usb 5-1: can't read configurations, error -22 [ 113.169159][ T5892] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 113.303986][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.312596][ T5891] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 113.316841][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.337102][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.360928][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 113.375738][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.390833][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 113.402152][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.412595][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 113.436379][ T5890] usb 1-1: qt2_attach - failed to power on unit: -71 [ 113.437269][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 113.468508][ T5890] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 113.470094][ T5892] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 113.493355][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 113.502726][ T5892] usb 4-1: Product: syz [ 113.506941][ T5892] usb 4-1: Manufacturer: syz [ 113.529870][ T5890] usb 1-1: USB disconnect, device number 6 [ 113.531094][ T5892] usb 4-1: SerialNumber: syz [ 113.571667][ T5891] usb 5-1: no configurations [ 113.576332][ T5891] usb 5-1: can't read configurations, error -22 [ 113.580149][ T5892] usb 4-1: config 0 descriptor?? [ 113.591839][ T5891] usb usb5-port1: attempt power cycle [ 113.986940][ T5891] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 114.071784][ T5891] usb 5-1: no configurations [ 114.085445][ T5891] usb 5-1: can't read configurations, error -22 [ 114.135487][ T5892] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 114.177415][ T6091] fuse: Invalid rootmode [ 114.222817][ T5892] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 114.240043][ T5891] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 114.296142][ T5891] usb 5-1: no configurations [ 114.308501][ T5891] usb 5-1: can't read configurations, error -22 [ 114.328954][ T921] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 114.349422][ T5891] usb usb5-port1: unable to enumerate USB device [ 114.489494][ T5892] usb 4-1: USB disconnect, device number 4 [ 114.539805][ T921] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 114.569124][ T921] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 114.591629][ T921] usb 2-1: config 0 has no interface number 0 [ 114.598176][ T921] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 114.609604][ T921] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 4096, setting to 8 [ 114.624069][ T921] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 114.643527][ T921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.654047][ T6097] FAULT_INJECTION: forcing a failure. [ 114.654047][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 114.667002][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.3.64 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 114.667034][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.667051][ T6097] Call Trace: [ 114.667058][ T6097] [ 114.667067][ T6097] dump_stack_lvl+0x189/0x250 [ 114.667106][ T6097] ? __pfx____ratelimit+0x10/0x10 [ 114.667128][ T6097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.667154][ T6097] ? __pfx__printk+0x10/0x10 [ 114.667185][ T6097] should_fail_ex+0x414/0x560 [ 114.667211][ T6097] should_failslab+0xa8/0x100 [ 114.667239][ T6097] kmem_cache_alloc_noprof+0x73/0x3c0 [ 114.667265][ T6097] ? skb_clone+0x212/0x3a0 [ 114.667288][ T6097] skb_clone+0x212/0x3a0 [ 114.667311][ T6097] __netlink_deliver_tap+0x404/0x850 [ 114.667349][ T6097] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.667377][ T6097] netlink_deliver_tap+0x19c/0x1b0 [ 114.667405][ T6097] netlink_sendskb+0x68/0x140 [ 114.667433][ T6097] nfnetlink_rcv+0x2290/0x2520 [ 114.667486][ T6097] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 114.667526][ T6097] ? ref_tracker_free+0x63a/0x7d0 [ 114.667582][ T6097] ? __netlink_deliver_tap+0x807/0x850 [ 114.667620][ T6097] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.667650][ T6097] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.667687][ T6097] netlink_unicast+0x758/0x8d0 [ 114.667727][ T6097] netlink_sendmsg+0x805/0xb30 [ 114.667754][ T6097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.667776][ T6097] ? aa_sock_msg_perm+0x94/0x160 [ 114.667805][ T6097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.667830][ T6097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.667850][ T6097] __sock_sendmsg+0x219/0x270 [ 114.667879][ T6097] ____sys_sendmsg+0x505/0x830 [ 114.667906][ T6097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.667937][ T6097] ? import_iovec+0x74/0xa0 [ 114.667962][ T6097] ___sys_sendmsg+0x21f/0x2a0 [ 114.668031][ T6097] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.668090][ T6097] ? __fget_files+0x2a/0x420 [ 114.668121][ T6097] ? __fget_files+0x3a0/0x420 [ 114.668163][ T6097] __x64_sys_sendmsg+0x19b/0x260 [ 114.668186][ T6097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.668218][ T6097] ? __pfx_ksys_write+0x10/0x10 [ 114.668243][ T6097] ? rcu_is_watching+0x15/0xb0 [ 114.668278][ T6097] ? do_syscall_64+0xbe/0x3b0 [ 114.668309][ T6097] do_syscall_64+0xfa/0x3b0 [ 114.668334][ T6097] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.668358][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.668379][ T6097] ? clear_bhb_loop+0x60/0xb0 [ 114.668403][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.668424][ T6097] RIP: 0033:0x7f4ea658e969 [ 114.668451][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.668468][ T6097] RSP: 002b:00007f4ea73d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.668490][ T6097] RAX: ffffffffffffffda RBX: 00007f4ea67b5fa0 RCX: 00007f4ea658e969 [ 114.668505][ T6097] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 114.668518][ T6097] RBP: 00007f4ea73d5090 R08: 0000000000000000 R09: 0000000000000000 [ 114.668530][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.668542][ T6097] R13: 0000000000000000 R14: 00007f4ea67b5fa0 R15: 00007f4ea68dfa28 [ 114.668574][ T6097] [ 114.999037][ T921] usb 2-1: config 0 descriptor?? [ 115.090858][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.278985][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 115.286463][ T5891] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 115.295275][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.305519][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.317898][ T5891] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.327062][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.335473][ T5891] usb 3-1: Product: syz [ 115.339732][ T5891] usb 3-1: Manufacturer: syz [ 115.344396][ T5891] usb 3-1: SerialNumber: syz [ 115.458910][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.561589][ T6095] netlink: 56 bytes leftover after parsing attributes in process `syz.2.63'. [ 115.599007][ T5890] usb 4-1: device descriptor read/64, error -71 [ 115.635939][ T921] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input10 [ 115.769409][ T5888] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 115.780189][ T5891] usb 3-1: 0:2 : does not exist [ 115.813577][ T6109] sch_tbf: burst 19743 is lower than device lo mtu (65550) ! [ 115.828893][ T6109] FAULT_INJECTION: forcing a failure. [ 115.828893][ T6109] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.843055][ T6109] CPU: 1 UID: 0 PID: 6109 Comm: syz.4.68 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 115.843087][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.843099][ T6109] Call Trace: [ 115.843107][ T6109] [ 115.843115][ T6109] dump_stack_lvl+0x189/0x250 [ 115.843159][ T6109] ? __pfx____ratelimit+0x10/0x10 [ 115.843183][ T6109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.843214][ T6109] ? __pfx__printk+0x10/0x10 [ 115.843236][ T6109] ? __might_fault+0xb0/0x130 [ 115.843277][ T6109] should_fail_ex+0x414/0x560 [ 115.843308][ T6109] _copy_from_user+0x2d/0xb0 [ 115.843330][ T6109] ___sys_sendmsg+0x158/0x2a0 [ 115.843353][ T6109] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.843411][ T6109] ? __fget_files+0x2a/0x420 [ 115.843440][ T6109] ? __fget_files+0x3a0/0x420 [ 115.843481][ T6109] __x64_sys_sendmsg+0x19b/0x260 [ 115.843504][ T6109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.843543][ T6109] ? do_syscall_64+0xbe/0x3b0 [ 115.843573][ T6109] do_syscall_64+0xfa/0x3b0 [ 115.843599][ T6109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.843618][ T6109] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.843639][ T6109] ? clear_bhb_loop+0x60/0xb0 [ 115.843663][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.843682][ T6109] RIP: 0033:0x7f3d7ef8e969 [ 115.843700][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.843717][ T6109] RSP: 002b:00007f3d7fed3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.843738][ T6109] RAX: ffffffffffffffda RBX: 00007f3d7f1b5fa0 RCX: 00007f3d7ef8e969 [ 115.843753][ T6109] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 115.843765][ T6109] RBP: 00007f3d7fed3090 R08: 0000000000000000 R09: 0000000000000000 [ 115.843778][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.843789][ T6109] R13: 0000000000000000 R14: 00007f3d7f1b5fa0 R15: 00007f3d7f2dfa28 [ 115.843820][ T6109] [ 116.076113][ T9] usb 2-1: USB disconnect, device number 6 [ 116.076180][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 116.101173][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.190935][ T5888] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 116.199877][ T5888] usb 1-1: config 7 has no interface number 0 [ 116.208730][ T5888] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 116.217943][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.226207][ T5888] usb 1-1: Product: syz [ 116.230401][ T5888] usb 1-1: Manufacturer: syz [ 116.235004][ T5888] usb 1-1: SerialNumber: syz [ 116.258933][ T5890] usb 4-1: device descriptor read/64, error -71 [ 116.370979][ T5890] usb usb4-port1: attempt power cycle [ 116.554723][ T51] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 116.730255][ T6095] tipc: Enabling of bearer rejected, media not registered [ 116.739963][ T5890] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 116.789899][ T5890] usb 4-1: device descriptor read/8, error -71 [ 116.938958][ T5823] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.014556][ T5888] as10x_usb: device has been detected [ 117.020896][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 117.044007][ T5888] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 117.054426][ T5890] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.076544][ T5888] as10x_usb: error during firmware upload part1 [ 117.079080][ T5823] usb 2-1: device descriptor read/64, error -71 [ 117.083964][ T5888] Registered device Elgato EyeTV DTT Deluxe [ 117.101408][ T5890] usb 4-1: device descriptor read/8, error -71 [ 117.239509][ T5890] usb usb4-port1: unable to enumerate USB device [ 117.251933][ T6107] xt_CT: No such helper "snmp" [ 117.268517][ T5890] usb 1-1: USB disconnect, device number 7 [ 117.303910][ T5890] Unregistered device Elgato EyeTV DTT Deluxe [ 117.306513][ T5890] as10x_usb: device has been disconnected [ 117.349050][ T5823] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.382737][ T5891] usb 3-1: USB disconnect, device number 5 [ 117.489134][ T5823] usb 2-1: device descriptor read/64, error -71 [ 117.602879][ T5823] usb usb2-port1: attempt power cycle [ 117.892861][ T5891] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 117.951372][ T5823] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.999711][ T5823] usb 2-1: device descriptor read/8, error -71 [ 118.068833][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 118.076342][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 118.089299][ T5891] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.101457][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 118.113933][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 118.126771][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 118.136625][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 118.147908][ T5891] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.161255][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 118.176269][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 118.238680][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 118.238740][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 118.238887][ T5891] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.238912][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 118.238943][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 118.242693][ T5891] usb 5-1: string descriptor 0 read error: -22 [ 118.242838][ T5891] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 118.242875][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.276701][ T5891] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 118.319491][ T5823] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.348932][ T5823] usb 2-1: device descriptor read/8, error -71 [ 118.432466][ T6139] binder: 6138:6139 ioctl 80089418 200000000140 returned -22 [ 118.453591][ T6139] binder: 6138:6139 ioctl c018aa3f 200000001480 returned -22 [ 118.453808][ T6139] binder: 6138:6139 ioctl c038943b 200000001500 returned -22 [ 118.453995][ T6139] binder: 6138:6139 ioctl c018aa06 200000001540 returned -22 [ 118.459320][ T5823] usb usb2-port1: unable to enumerate USB device [ 119.678963][ T5892] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.877143][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 119.917886][ T5892] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 120.034841][ T5892] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.279099][ T5892] usb 4-1: config 1 has no interface number 1 [ 120.372816][ T5892] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 120.529253][ T5892] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.558864][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.613732][ T5892] usb 4-1: Product: syz [ 120.642594][ T5892] usb 4-1: Manufacturer: syz [ 120.673096][ T9] usb 5-1: USB disconnect, device number 8 [ 120.704288][ T5892] usb 4-1: SerialNumber: syz [ 120.775990][ T6164] FAULT_INJECTION: forcing a failure. [ 120.775990][ T6164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.808984][ T6164] CPU: 0 UID: 0 PID: 6164 Comm: syz.4.86 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 120.809013][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.809025][ T6164] Call Trace: [ 120.809032][ T6164] [ 120.809041][ T6164] dump_stack_lvl+0x189/0x250 [ 120.809077][ T6164] ? __pfx____ratelimit+0x10/0x10 [ 120.809118][ T6164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.809149][ T6164] ? __pfx__printk+0x10/0x10 [ 120.809172][ T6164] ? __might_fault+0xb0/0x130 [ 120.809213][ T6164] should_fail_ex+0x414/0x560 [ 120.809246][ T6164] _copy_from_user+0x2d/0xb0 [ 120.809268][ T6164] ___sys_sendmsg+0x158/0x2a0 [ 120.809293][ T6164] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.809351][ T6164] ? __fget_files+0x2a/0x420 [ 120.809380][ T6164] ? __fget_files+0x3a0/0x420 [ 120.809422][ T6164] __x64_sys_sendmsg+0x19b/0x260 [ 120.809454][ T6164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.809475][ T6164] ? __pfx_ksys_write+0x10/0x10 [ 120.809494][ T6164] ? rcu_is_watching+0x15/0xb0 [ 120.809520][ T6164] ? do_syscall_64+0xbe/0x3b0 [ 120.809540][ T6164] do_syscall_64+0xfa/0x3b0 [ 120.809558][ T6164] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.809575][ T6164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.809589][ T6164] ? clear_bhb_loop+0x60/0xb0 [ 120.809606][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.809620][ T6164] RIP: 0033:0x7f3d7ef8e969 [ 120.809633][ T6164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.809645][ T6164] RSP: 002b:00007f3d7fed3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.809660][ T6164] RAX: ffffffffffffffda RBX: 00007f3d7f1b5fa0 RCX: 00007f3d7ef8e969 [ 120.809671][ T6164] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 120.809680][ T6164] RBP: 00007f3d7fed3090 R08: 0000000000000000 R09: 0000000000000000 [ 120.809688][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.809696][ T6164] R13: 0000000000000000 R14: 00007f3d7f1b5fa0 R15: 00007f3d7f2dfa28 [ 120.809717][ T6164] [ 121.820435][ T5823] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 122.011782][ T5823] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.078242][ T5823] usb 3-1: config 0 has no interface number 0 [ 122.101358][ T5823] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 122.127552][ T5823] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 122.257754][ T5823] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.307621][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.362507][ T5823] usb 3-1: config 0 descriptor?? [ 122.389301][ T6172] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.420333][ T5823] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 122.730819][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 122.749383][ T9] usb 3-1: USB disconnect, device number 6 [ 122.759112][ T1210] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.003805][ T6194] fuse: Invalid rootmode [ 123.032380][ T1210] usb 5-1: config 0 has no interfaces? [ 123.061882][ T1210] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 123.083475][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.161145][ T1210] usb 5-1: Product: syz [ 123.165430][ T1210] usb 5-1: Manufacturer: syz [ 123.217639][ T1210] usb 5-1: SerialNumber: syz [ 123.244537][ T1210] usb 5-1: config 0 descriptor?? [ 123.365881][ T5892] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 123.414891][ T5892] usb 4-1: USB disconnect, device number 9 [ 123.587073][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.597174][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.690150][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.068941][ T1210] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 124.233781][ T1210] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 124.260435][ T1210] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 124.312549][ T1210] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 124.338686][ T1210] usb 3-1: config 1 has no interface number 0 [ 124.357811][ T1210] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.368454][ T1210] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 124.383963][ T1210] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 124.394017][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.417187][ T1210] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 124.488869][ T5890] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.588953][ T5917] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.621192][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.630641][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.644315][ T5890] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 124.649293][ T1210] snd_usb_pod 3-1:1.1: invalid control EP [ 124.661021][ T1210] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 124.668091][ T1210] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 124.677004][ T1210] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 124.687165][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.710358][ T5890] usb 1-1: Product: syz [ 124.718360][ T5890] usb 1-1: Manufacturer: syz [ 124.740296][ T5890] usb 1-1: SerialNumber: syz [ 124.764685][ T5890] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 124.768285][ T5917] usb 2-1: New USB device found, idVendor=20b7, idProduct=0008, bcdDevice= 0.00 [ 124.809799][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.827814][ T5889] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 124.843456][ T5917] usb 2-1: Product: syz [ 124.848173][ T5917] usb 2-1: Manufacturer: syz [ 124.871442][ T1210] usb 3-1: USB disconnect, device number 7 [ 124.895164][ T5917] usb 2-1: SerialNumber: syz [ 124.934922][ T5917] usb 2-1: config 0 descriptor?? [ 125.604024][ T1210] hid-generic 009C:0008:0003.0002: unknown main item tag 0x0 [ 125.631330][ T1210] hid-generic 009C:0008:0003.0002: item fetching failed at offset 4/15 [ 125.663344][ T1210] hid-generic 009C:0008:0003.0002: probe with driver hid-generic failed with error -22 [ 126.049066][ T5889] usb 1-1: Service connection timeout for: 256 [ 126.055541][ T5889] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 126.095360][ T5889] ath9k_htc: Failed to initialize the device [ 126.117118][ T5889] usb 1-1: ath9k_htc: USB layer deinitialized [ 126.316742][ T1210] usb 5-1: USB disconnect, device number 9 [ 126.568351][ T6230] trusted_key: syz.4.107 sent an empty control message without MSG_MORE. [ 126.719364][ T1210] usb 1-1: USB disconnect, device number 8 [ 127.302533][ T1210] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 127.545327][ T1210] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.570970][ T1210] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.584166][ T1210] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 127.596509][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.608214][ T1210] usb 3-1: SerialNumber: syz [ 127.637157][ T1210] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 127.659146][ T5890] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 127.661418][ T1210] usb-storage 3-1:1.0: USB Mass Storage device detected [ 127.685547][ T5889] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.697305][ T1210] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 127.708053][ T1210] scsi host1: usb-storage 3-1:1.0 [ 127.869443][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 127.883171][ T5889] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 127.895584][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.904556][ T5889] usb 1-1: Product: syz [ 127.905168][ T5890] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 127.919216][ T5889] usb 1-1: Manufacturer: syz [ 127.923947][ T5889] usb 1-1: SerialNumber: syz [ 127.928731][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.939873][ T5890] usb 4-1: Product: syz [ 127.945241][ T5890] usb 4-1: Manufacturer: syz [ 127.950858][ T5889] usb 1-1: config 0 descriptor?? [ 127.958319][ T5890] usb 4-1: SerialNumber: syz [ 127.998301][ T5890] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 128.023952][ T5891] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.172551][ T5889] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 128.181762][ T5889] 00 00 00 00 00 80 7a f0 [ 128.190600][ T5889] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 128.347258][ T5889] usb 2-1: USB disconnect, device number 11 [ 128.454142][ T1210] usb 4-1: USB disconnect, device number 10 [ 128.702571][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.788981][ T5890] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 128.835352][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.941015][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.968964][ T5889] usb 1-1: USB disconnect, device number 9 [ 128.996430][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.010313][ T921] usb 3-1: USB disconnect, device number 8 [ 129.114205][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.115434][ T5891] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 129.142662][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.201240][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 129.238160][ T5891] ath9k_htc: Failed to initialize the device [ 129.273351][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.300026][ T5890] usb 5-1: SerialNumber: syz [ 129.320872][ T1210] usb 4-1: ath9k_htc: USB layer deinitialized [ 129.361865][ T5890] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 129.401296][ T5890] usb-storage 5-1:1.0: USB Mass Storage device detected [ 129.493576][ T5890] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 129.563209][ T36] bridge_slave_1: left allmulticast mode [ 129.589765][ T5890] scsi host1: usb-storage 5-1:1.0 [ 129.611841][ T36] bridge_slave_1: left promiscuous mode [ 129.618846][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.845252][ T36] bridge_slave_0: left allmulticast mode [ 129.857175][ T36] bridge_slave_0: left promiscuous mode [ 129.891502][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.368499][ T5888] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.669212][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 130.715459][ T5888] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 130.762208][ T5888] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 130.832191][ T5888] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 130.902416][ T5888] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 130.941581][ T5888] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 131.028647][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.465137][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.483328][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.499278][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.509138][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.517524][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.829266][ T5888] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.845016][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.855372][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.078872][ T5888] usb 4-1: device descriptor read/64, error -71 [ 132.236773][ T1210] usb 5-1: USB disconnect, device number 10 [ 132.364283][ T5888] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.545225][ T5888] usb 4-1: device descriptor read/64, error -71 [ 132.667234][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.704108][ T5888] usb usb4-port1: attempt power cycle [ 132.714476][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.747184][ T36] bond0 (unregistering): Released all slaves [ 132.916177][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.924547][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.198959][ T5888] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.259697][ T5888] usb 4-1: device descriptor read/8, error -71 [ 133.279240][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.287674][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.508955][ T5888] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 133.549737][ T5888] usb 4-1: device descriptor read/8, error -71 [ 133.577964][ T5842] Bluetooth: hci4: command tx timeout [ 133.673316][ T5888] usb usb4-port1: unable to enumerate USB device [ 133.766698][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.821339][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.268356][ T6294] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.281793][ T6294] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.296889][ T6294] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.310875][ T6294] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.511344][ T6314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.809674][ T5889] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.985237][ T5889] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 134.996493][ T5889] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.050146][ T5889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.107205][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.140909][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.185267][ T5889] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 135.312642][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.358758][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.408548][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.648960][ T5842] Bluetooth: hci4: command tx timeout [ 135.693541][ T6272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.715133][ T1210] usb 3-1: USB disconnect, device number 9 [ 135.737322][ T6314] vlan2: entered promiscuous mode [ 135.979395][ T36] hsr_slave_0: left promiscuous mode [ 136.018747][ T36] hsr_slave_1: left promiscuous mode [ 136.030463][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.038298][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.100709][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.117232][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.285981][ T36] veth1_macvtap: left promiscuous mode [ 136.308686][ T36] veth0_macvtap: left promiscuous mode [ 136.327755][ T36] veth1_vlan: left promiscuous mode [ 136.347308][ T36] veth0_vlan: left promiscuous mode [ 136.680493][ T1210] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.840179][ T1210] usb 3-1: Using ep0 maxpacket: 32 [ 136.891692][ T1210] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 136.901685][ T1210] usb 3-1: config 0 has no interface number 1 [ 136.927312][ T1210] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 136.937122][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.951793][ T1210] usb 3-1: Product: syz [ 136.960478][ T1210] usb 3-1: Manufacturer: syz [ 136.967394][ T1210] usb 3-1: SerialNumber: syz [ 136.988201][ T1210] usb 3-1: config 0 descriptor?? [ 137.219938][ T1210] snd-usb-6fire 3-1:0.111: unable to receive device firmware state. [ 137.273164][ T1210] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 137.367035][ T1210] usb 3-1: USB disconnect, device number 10 [ 137.731804][ T5842] Bluetooth: hci4: command tx timeout [ 137.803744][ T24] usb 1-1: USB disconnect, device number 10 [ 138.336019][ T5842] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 138.494793][ T36] team0 (unregistering): Port device team_slave_1 removed [ 138.567952][ T36] team0 (unregistering): Port device team_slave_0 removed [ 139.113661][ T6373] xt_recent: Unsupported userspace flags (000000de) [ 139.190610][ T6344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.129'. [ 139.200722][ T6344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.129'. [ 139.390266][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 139.708380][ T6287] chnl_net:caif_netlink_parms(): no params data found [ 139.789079][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 139.809491][ T5842] Bluetooth: hci4: command tx timeout [ 139.907008][ T6388] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 139.925947][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.141'. [ 139.958934][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 139.984067][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 140.028497][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.058090][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.063571][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.087348][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.104620][ T6287] bridge_slave_0: entered allmulticast mode [ 140.128684][ T6287] bridge_slave_0: entered promiscuous mode [ 140.134620][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.134654][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.145896][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 140.145955][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.145984][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.146011][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.146038][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.150304][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 140.304052][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.335418][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.358853][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.376996][ T6287] bridge_slave_1: entered allmulticast mode [ 140.413053][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.435673][ T6287] bridge_slave_1: entered promiscuous mode [ 140.460020][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.494372][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.534978][ T24] usb 3-1: string descriptor 0 read error: -22 [ 140.541846][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 140.578916][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.689331][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 140.773393][ T6287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.775704][ T6287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.872706][ T6381] FAULT_INJECTION: forcing a failure. [ 140.872706][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 140.889745][ T6287] team0: Port device team_slave_0 added [ 140.896177][ T6381] CPU: 1 UID: 0 PID: 6381 Comm: syz.2.139 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 140.896201][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.896211][ T6381] Call Trace: [ 140.896218][ T6381] [ 140.896224][ T6381] dump_stack_lvl+0x189/0x250 [ 140.896256][ T6381] ? __pfx____ratelimit+0x10/0x10 [ 140.896277][ T6381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.896303][ T6381] ? __pfx__printk+0x10/0x10 [ 140.896326][ T6381] ? __pfx___might_resched+0x10/0x10 [ 140.896350][ T6381] ? fs_reclaim_acquire+0x7d/0x100 [ 140.896371][ T6381] should_fail_ex+0x414/0x560 [ 140.896397][ T6381] should_failslab+0xa8/0x100 [ 140.896424][ T6381] __kmalloc_cache_noprof+0x70/0x3d0 [ 140.896448][ T6381] ? dummy_urb_enqueue+0x7c/0x780 [ 140.896468][ T6381] dummy_urb_enqueue+0x7c/0x780 [ 140.896490][ T6381] usb_hcd_submit_urb+0x325/0x1aa0 [ 140.896519][ T6381] adu_read+0xc61/0x1cf0 [ 140.896558][ T6381] ? __pfx_adu_read+0x10/0x10 [ 140.896575][ T6381] ? __pfx_default_wake_function+0x10/0x10 [ 140.896599][ T6381] ? bpf_lsm_file_permission+0x9/0x20 [ 140.896620][ T6381] ? security_file_permission+0x75/0x290 [ 140.896639][ T6381] ? rw_verify_area+0x258/0x650 [ 140.896660][ T6381] ? __pfx_adu_read+0x10/0x10 [ 140.896678][ T6381] vfs_read+0x200/0x980 [ 140.896706][ T6381] ? __pfx_vfs_read+0x10/0x10 [ 140.896730][ T6381] ? __fget_files+0x2a/0x420 [ 140.896758][ T6381] ? __fget_files+0x2a/0x420 [ 140.896783][ T6381] ? __fget_files+0x3a0/0x420 [ 140.896825][ T6381] ? __fget_files+0x2a/0x420 [ 140.896858][ T6381] ksys_read+0x145/0x250 [ 140.896882][ T6381] ? __pfx_ksys_read+0x10/0x10 [ 140.896902][ T6381] ? rcu_is_watching+0x15/0xb0 [ 140.896932][ T6381] ? do_syscall_64+0xbe/0x3b0 [ 140.896957][ T6381] do_syscall_64+0xfa/0x3b0 [ 140.896983][ T6381] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.897003][ T6381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.897021][ T6381] ? clear_bhb_loop+0x60/0xb0 [ 140.897041][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.897058][ T6381] RIP: 0033:0x7fcfdd18e969 [ 140.897073][ T6381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.897087][ T6381] RSP: 002b:00007fcfde027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.897105][ T6381] RAX: ffffffffffffffda RBX: 00007fcfdd3b5fa0 RCX: 00007fcfdd18e969 [ 140.897118][ T6381] RDX: 00000000000000ef RSI: 0000200000000280 RDI: 0000000000000004 [ 140.897128][ T6381] RBP: 00007fcfde027090 R08: 0000000000000000 R09: 0000000000000000 [ 140.897138][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.897148][ T6381] R13: 0000000000000000 R14: 00007fcfdd3b5fa0 R15: 00007fcfdd4dfa28 [ 140.897173][ T6381] [ 141.205135][ T6287] team0: Port device team_slave_1 added [ 141.346379][ T5823] usb 3-1: USB disconnect, device number 11 [ 141.588422][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.626367][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.654112][ T6287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.740958][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.748063][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.878941][ T6287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.182107][ T6287] hsr_slave_0: entered promiscuous mode [ 142.198689][ T6287] hsr_slave_1: entered promiscuous mode [ 142.238519][ T6287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.249207][ T6287] Cannot create hsr debugfs directory [ 143.268979][ T6452] netlink: 'syz.2.155': attribute type 2 has an invalid length. [ 143.333080][ T6452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.155'. [ 143.409935][ T6453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.155'. [ 143.808988][ T6463] FAULT_INJECTION: forcing a failure. [ 143.808988][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 143.899020][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.3.157 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 143.899052][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.899065][ T6463] Call Trace: [ 143.899074][ T6463] [ 143.899083][ T6463] dump_stack_lvl+0x189/0x250 [ 143.899121][ T6463] ? __pfx____ratelimit+0x10/0x10 [ 143.899145][ T6463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.899177][ T6463] ? __pfx__printk+0x10/0x10 [ 143.899217][ T6463] should_fail_ex+0x414/0x560 [ 143.899251][ T6463] should_failslab+0xa8/0x100 [ 143.899285][ T6463] kmem_cache_alloc_noprof+0x73/0x3c0 [ 143.899315][ T6463] ? skb_clone+0x212/0x3a0 [ 143.899342][ T6463] skb_clone+0x212/0x3a0 [ 143.899369][ T6463] __netlink_deliver_tap+0x404/0x850 [ 143.899429][ T6463] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.899464][ T6463] netlink_deliver_tap+0x19c/0x1b0 [ 143.899499][ T6463] netlink_sendskb+0x68/0x140 [ 143.899530][ T6463] rtnl_stats_get+0x521/0x6c0 [ 143.899569][ T6463] ? __pfx_rtnl_stats_get+0x10/0x10 [ 143.899613][ T6463] ? __pfx_rtnl_stats_get+0x10/0x10 [ 143.899643][ T6463] rtnetlink_rcv_msg+0x779/0xb70 [ 143.899677][ T6463] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 143.899717][ T6463] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.899744][ T6463] ? ref_tracker_free+0x63a/0x7d0 [ 143.899769][ T6463] ? __copy_skb_header+0xa7/0x550 [ 143.899793][ T6463] ? __pfx_ref_tracker_free+0x10/0x10 [ 143.899820][ T6463] ? __skb_clone+0x63/0x7a0 [ 143.899849][ T6463] netlink_rcv_skb+0x205/0x470 [ 143.899882][ T6463] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.899913][ T6463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.899960][ T6463] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.899990][ T6463] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.900029][ T6463] netlink_unicast+0x758/0x8d0 [ 143.900070][ T6463] netlink_sendmsg+0x805/0xb30 [ 143.900100][ T6463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.900123][ T6463] ? aa_sock_msg_perm+0x94/0x160 [ 143.900150][ T6463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.900175][ T6463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.900195][ T6463] __sock_sendmsg+0x219/0x270 [ 143.900225][ T6463] sock_write_iter+0x258/0x330 [ 143.900252][ T6463] ? __pfx_sock_write_iter+0x10/0x10 [ 143.900288][ T6463] ? bpf_lsm_file_permission+0x9/0x20 [ 143.900314][ T6463] ? security_file_permission+0x75/0x290 [ 143.900345][ T6463] vfs_write+0x54b/0xa90 [ 143.900378][ T6463] ? __pfx_sock_write_iter+0x10/0x10 [ 143.900402][ T6463] ? __pfx_vfs_write+0x10/0x10 [ 143.900445][ T6463] ? __fget_files+0x2a/0x420 [ 143.900486][ T6463] ksys_write+0x145/0x250 [ 143.900516][ T6463] ? __pfx_ksys_write+0x10/0x10 [ 143.900540][ T6463] ? rcu_is_watching+0x15/0xb0 [ 143.900574][ T6463] ? do_syscall_64+0xbe/0x3b0 [ 143.900603][ T6463] do_syscall_64+0xfa/0x3b0 [ 143.900627][ T6463] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.900651][ T6463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.900670][ T6463] ? clear_bhb_loop+0x60/0xb0 [ 143.900695][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.900715][ T6463] RIP: 0033:0x7f4ea658e969 [ 143.900733][ T6463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.900749][ T6463] RSP: 002b:00007f4ea73d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.900771][ T6463] RAX: ffffffffffffffda RBX: 00007f4ea67b5fa0 RCX: 00007f4ea658e969 [ 143.900786][ T6463] RDX: 000000000000001c RSI: 0000200000000340 RDI: 0000000000000003 [ 143.900799][ T6463] RBP: 00007f4ea73d5090 R08: 0000000000000000 R09: 0000000000000000 [ 143.900811][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.900823][ T6463] R13: 0000000000000000 R14: 00007f4ea67b5fa0 R15: 00007f4ea68dfa28 [ 143.900854][ T6463] [ 144.675739][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 145.098441][ T6287] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.134196][ T6287] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.177864][ T6287] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.190785][ T1210] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 145.215155][ T6287] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.298169][ T6494] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 145.367506][ T1210] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 145.396395][ T1210] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 145.422204][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.428909][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 145.428942][ T1210] usb 1-1: config 1 has no interface number 0 [ 145.428988][ T1210] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 145.429014][ T1210] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.429036][ T1210] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 145.429081][ T1210] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 145.546629][ T6287] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.598900][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.633721][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.640957][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.674002][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.681251][ T772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.705448][ T1210] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 145.874667][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.928938][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.968301][ T1210] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 145.976320][ T1210] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 145.996372][ T1210] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 146.145932][ T6287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.188277][ T24] usb 1-1: USB disconnect, device number 11 [ 146.341179][ T6520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.486219][ T6287] veth0_vlan: entered promiscuous mode [ 146.801964][ T6287] veth1_vlan: entered promiscuous mode [ 147.179242][ T6287] veth0_macvtap: entered promiscuous mode [ 147.247518][ T6287] veth1_macvtap: entered promiscuous mode [ 147.373172][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 147.433023][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.577613][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.599390][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 147.626781][ T24] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 147.657258][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.712035][ T6287] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.713716][ T24] usb 1-1: Product: syz [ 147.745670][ T6287] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.750594][ T24] usb 1-1: Manufacturer: syz [ 147.775724][ T24] usb 1-1: SerialNumber: syz [ 147.808706][ T24] usb 1-1: config 0 descriptor?? [ 147.830384][ T6287] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.868250][ T24] gm12u320 1-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 147.906155][ T6287] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.932640][ T24] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 148.125092][ T24] usb-storage 1-1:0.0: USB Mass Storage device detected [ 148.377427][ T24] usb-storage 1-1:0.0: device ignored [ 148.520862][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.705025][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.771277][ T24] usb 1-1: USB disconnect, device number 12 [ 148.931741][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.098159][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.317096][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 149.581699][ T1210] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 149.700774][ T6563] overlayfs: missing 'lowerdir' [ 149.709167][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 149.770358][ T1210] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 149.782269][ T1210] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 149.843380][ T1210] usb 5-1: config 0 has no interface number 0 [ 149.880366][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 149.891061][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.929695][ T24] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 149.950355][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.956833][ T1210] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 149.993249][ T1210] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 4096, setting to 8 [ 149.994405][ T24] usb 3-1: Product: syz [ 150.019328][ T24] usb 3-1: Manufacturer: syz [ 150.028561][ T24] usb 3-1: SerialNumber: syz [ 150.057241][ T1210] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 150.070129][ T24] usb 3-1: config 0 descriptor?? [ 150.127587][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.202261][ T1210] usb 5-1: config 0 descriptor?? [ 150.304577][ T24] usb 3-1: USB disconnect, device number 12 [ 150.859724][ T1210] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input12 [ 151.097926][ T5889] usb 5-1: USB disconnect, device number 11 [ 151.097925][ C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 152.134485][ T5889] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 152.488900][ T5889] usb 4-1: config 0 has no interfaces? [ 152.556715][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 152.567668][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.588874][ T5889] usb 4-1: Product: syz [ 152.605478][ T5889] usb 4-1: Manufacturer: syz [ 152.734020][ T5889] usb 4-1: SerialNumber: syz [ 152.741651][ T5889] usb 4-1: config 0 descriptor?? [ 153.016274][ T5888] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.056121][ T6628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.196001][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.291635][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.312168][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 153.325553][ T5888] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 153.335164][ T5889] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 153.371204][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.433662][ T5888] usb 1-1: config 0 descriptor?? [ 153.677775][ T5889] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 153.733256][ T5889] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.791573][ T5889] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.021576][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.052584][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 154.077276][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 154.279961][ T6643] FAULT_INJECTION: forcing a failure. [ 154.279961][ T6643] name failslab, interval 1, probability 0, space 0, times 0 [ 154.317785][ T5888] usb 1-1: USB disconnect, device number 13 [ 154.324808][ T5889] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.348996][ T6643] CPU: 0 UID: 0 PID: 6643 Comm: syz.2.196 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 154.349020][ T6643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.349029][ T6643] Call Trace: [ 154.349035][ T6643] [ 154.349042][ T6643] dump_stack_lvl+0x189/0x250 [ 154.349079][ T6643] ? __pfx____ratelimit+0x10/0x10 [ 154.349106][ T6643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.349140][ T6643] ? __pfx__printk+0x10/0x10 [ 154.349169][ T6643] ? __pfx___might_resched+0x10/0x10 [ 154.349190][ T6643] ? fs_reclaim_acquire+0x7d/0x100 [ 154.349208][ T6643] should_fail_ex+0x414/0x560 [ 154.349232][ T6643] should_failslab+0xa8/0x100 [ 154.349255][ T6643] __kmalloc_cache_noprof+0x70/0x3d0 [ 154.349277][ T6643] ? io_ring_ctx_alloc+0x53/0xae0 [ 154.349295][ T6643] io_ring_ctx_alloc+0x53/0xae0 [ 154.349310][ T6643] ? io_uring_fill_params+0x3f9/0x7e0 [ 154.349332][ T6643] io_uring_create+0x130/0xb60 [ 154.349353][ T6643] __se_sys_io_uring_setup+0x264/0x270 [ 154.349371][ T6643] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 154.349403][ T6643] ? do_syscall_64+0xbe/0x3b0 [ 154.349425][ T6643] do_syscall_64+0xfa/0x3b0 [ 154.349442][ T6643] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.349460][ T6643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.349474][ T6643] ? clear_bhb_loop+0x60/0xb0 [ 154.349492][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.349506][ T6643] RIP: 0033:0x7fcfdd18e969 [ 154.349526][ T6643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.349538][ T6643] RSP: 002b:00007fcfde026fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 154.349553][ T6643] RAX: ffffffffffffffda RBX: 00007fcfdd3b5fa0 RCX: 00007fcfdd18e969 [ 154.349564][ T6643] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 000000000000009e [ 154.349573][ T6643] RBP: 0000200000000640 R08: 0000000000000000 R09: 0000000000000000 [ 154.349582][ T6643] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 154.349591][ T6643] R13: 0000000000000000 R14: 000000000000009e R15: 0000000000000000 [ 154.349611][ T6643] [ 154.751095][ T5886] usb 4-1: USB disconnect, device number 15 [ 154.791860][ T6628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.802086][ T6628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.866743][ T6628] vlan2: entered promiscuous mode [ 154.871975][ T6628] bond0: entered promiscuous mode [ 154.877052][ T6628] bond_slave_0: entered promiscuous mode [ 154.883796][ T6628] bond_slave_1: entered promiscuous mode [ 154.971328][ T5889] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 155.104452][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.339355][ T5888] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 155.542099][ T5888] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 155.558314][ T5888] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 155.571835][ T5888] usb 4-1: config 0 has no interface number 0 [ 155.578550][ T5888] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 155.589464][ T5888] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 4096, setting to 8 [ 155.678070][ T5888] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 155.717308][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.747688][ T5888] usb 4-1: config 0 descriptor?? [ 155.788937][ T5889] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 155.976990][ T5889] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 155.986764][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.004700][ T5889] usb 1-1: Product: syz [ 156.021192][ T5889] usb 1-1: Manufacturer: syz [ 156.034515][ T5889] usb 1-1: SerialNumber: syz [ 156.300076][ T5889] usb 1-1: config 0 descriptor?? [ 156.469343][ T6309] usb 2-1: USB disconnect, device number 12 [ 156.477874][ T5888] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input13 [ 156.511738][ T5889] ch341 1-1:0.0: ch341-uart converter detected [ 156.636091][ T5823] usb 4-1: USB disconnect, device number 16 [ 156.636169][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 157.266633][ T6309] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 157.478840][ T6309] usb 5-1: Using ep0 maxpacket: 16 [ 157.495715][ T6309] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 157.529370][ T6309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.547344][ T6309] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.558857][ T6309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.567325][ T6309] usb 5-1: Product: syz [ 157.572167][ T5889] usb 1-1: failed to receive control message: -110 [ 157.578741][ T6309] usb 5-1: Manufacturer: syz [ 157.588087][ T5889] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 157.600812][ T6309] usb 5-1: SerialNumber: syz [ 157.606635][ T5823] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 157.737090][ T6689] FAULT_INJECTION: forcing a failure. [ 157.737090][ T6689] name failslab, interval 1, probability 0, space 0, times 0 [ 157.738955][ T30] audit: type=1326 audit(1748510751.814:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 157.755198][ T6689] CPU: 0 UID: 0 PID: 6689 Comm: syz.2.206 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 157.755244][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.755258][ T6689] Call Trace: [ 157.755267][ T6689] [ 157.755277][ T6689] dump_stack_lvl+0x189/0x250 [ 157.755320][ T6689] ? __pfx____ratelimit+0x10/0x10 [ 157.755348][ T6689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.755382][ T6689] ? __pfx__printk+0x10/0x10 [ 157.755409][ T6689] ? __pfx_snprintf+0x10/0x10 [ 157.755437][ T6689] should_fail_ex+0x414/0x560 [ 157.755470][ T6689] should_failslab+0xa8/0x100 [ 157.755506][ T6689] __kmalloc_noprof+0xcb/0x4f0 [ 157.755539][ T6689] ? aa_label_asxprint+0x70/0x130 [ 157.755566][ T6689] aa_label_asxprint+0x70/0x130 [ 157.755592][ T6689] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 157.755626][ T6689] security_lsmprop_to_secctx+0x96/0x2c0 [ 157.755666][ T6689] audit_log_task_context+0xff/0x240 [ 157.755692][ T6689] ? __pfx_audit_log_task_context+0x10/0x10 [ 157.755715][ T6689] ? __pfx_audit_log_format+0x10/0x10 [ 157.755751][ T6689] ? audit_log_start+0x6bf/0x870 [ 157.755796][ T6689] audit_log_task+0x190/0x3c0 [ 157.755832][ T6689] ? __pfx_audit_log_task+0x10/0x10 [ 157.755867][ T6689] ? __pfx_migrate_enable+0x10/0x10 [ 157.755894][ T6689] audit_seccomp+0x86/0x190 [ 157.755932][ T6689] __seccomp_filter+0x9aa/0x1a40 [ 157.755977][ T6689] ? __pfx___seccomp_filter+0x10/0x10 [ 157.756007][ T6689] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 157.756036][ T6689] ? __pfx_vfs_write+0x10/0x10 [ 157.756068][ T6689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.756100][ T6689] ? __fget_files+0x3a0/0x420 [ 157.756167][ T6689] ? __secure_computing+0xe2/0x2a0 [ 157.756199][ T6689] syscall_trace_enter+0xaa/0x160 [ 157.756233][ T6689] do_syscall_64+0xd3/0x3b0 [ 157.756258][ T6689] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.756281][ T6689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.756302][ T6689] ? clear_bhb_loop+0x60/0xb0 [ 157.756327][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.756347][ T6689] RIP: 0033:0x7fcfdd18e969 [ 157.756365][ T6689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.756382][ T6689] RSP: 002b:00007fcfde027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.756405][ T6689] RAX: ffffffffffffffda RBX: 00007fcfdd3b5fa0 RCX: 00007fcfdd18e969 [ 157.756420][ T6689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 157.756431][ T6689] RBP: 00007fcfde027090 R08: 0000000000000000 R09: 0000000000000000 [ 157.756444][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.756456][ T6689] R13: 0000000000000000 R14: 00007fcfdd3b5fa0 R15: 00007fcfdd4dfa28 [ 157.756484][ T6689] [ 157.756614][ T6689] audit: error in audit_log_task_context [ 157.787379][ T30] audit: type=1326 audit(1748510751.814:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 157.818880][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 157.862987][ T30] audit: type=1326 audit(1748510751.814:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfdd18d2d0 code=0x7ffc0000 [ 158.119118][ T6309] usb 5-1: 0:2 : does not exist [ 158.195688][ T6309] usb 5-1: USB disconnect, device number 12 [ 158.207149][ T5823] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 158.216625][ T5823] usb 4-1: config 0 has no interface number 1 [ 158.229798][ T30] audit: type=1326 audit(1748510751.814:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 158.258619][ T30] audit: type=1326 audit(1748510751.814:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfdd18d2d0 code=0x7ffc0000 [ 158.263656][ T5823] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 158.284980][ T30] audit: type=1326 audit(1748510751.814:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcfdd18d41f code=0x7ffc0000 [ 158.300315][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.345345][ T30] audit: type=1326 audit(1748510751.814:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6688 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 158.365989][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.379104][ T5823] usb 4-1: config 0 descriptor?? [ 158.385565][ T30] audit: type=1326 audit(1748510751.934:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcfdd18d37c code=0x7ffc0000 [ 158.424274][ T30] audit: type=1326 audit(1748510751.934:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcfdd18d41f code=0x7ffc0000 [ 158.590180][ T5823] qcserial 4-1:0.2: Qualcomm USB modem converter detected [ 158.613573][ T5889] usb 1-1: USB disconnect, device number 14 [ 158.631648][ T5889] ch341 1-1:0.0: device disconnected [ 158.800689][ T5886] usb 4-1: USB disconnect, device number 17 [ 158.808214][ T5886] qcserial 4-1:0.2: device disconnected [ 158.954118][ T6710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.999620][ T5823] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 159.160917][ T5823] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 159.170785][ T5823] usb 5-1: config 0 has no interface number 0 [ 159.179117][ T5823] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.190797][ T5823] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 159.201707][ T5823] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 159.213697][ T5823] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 159.224908][ T5823] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 159.264094][ T5823] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.278431][ T5823] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 159.290386][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.325057][ T5823] usb 5-1: config 0 descriptor?? [ 159.331373][ T6702] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.362436][ T6702] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.416232][ T5823] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 159.479659][ T1210] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 159.643403][ T1210] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.29 [ 159.657757][ T6702] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 159.673363][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.695849][ T1210] usb 3-1: Product: syz [ 159.713604][ T5823] usb 5-1: USB disconnect, device number 13 [ 159.739724][ T1210] usb 3-1: Manufacturer: syz [ 159.744980][ T5823] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 159.764581][ T1210] usb 3-1: SerialNumber: syz [ 159.794769][ T1210] usb 3-1: config 0 descriptor?? [ 160.226949][ T1210] usb 3-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 160.495269][ T1210] usb 3-1: failed to fetch extended address, random address set [ 160.503791][ T6748] FAULT_INJECTION: forcing a failure. [ 160.503791][ T6748] name failslab, interval 1, probability 0, space 0, times 0 [ 160.563263][ T6748] CPU: 1 UID: 0 PID: 6748 Comm: syz.1.217 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 160.563291][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.563302][ T6748] Call Trace: [ 160.563309][ T6748] [ 160.563317][ T6748] dump_stack_lvl+0x189/0x250 [ 160.563350][ T6748] ? __pfx____ratelimit+0x10/0x10 [ 160.563373][ T6748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.563404][ T6748] ? __pfx__printk+0x10/0x10 [ 160.563432][ T6748] ? __pfx___might_resched+0x10/0x10 [ 160.563462][ T6748] ? fs_reclaim_acquire+0x7d/0x100 [ 160.563488][ T6748] should_fail_ex+0x414/0x560 [ 160.563520][ T6748] should_failslab+0xa8/0x100 [ 160.563553][ T6748] __kmalloc_cache_noprof+0x70/0x3d0 [ 160.563583][ T6748] ? snd_mixer_oss_put_volume1_sw+0xf1/0x3c0 [ 160.563613][ T6748] snd_mixer_oss_put_volume1_sw+0xf1/0x3c0 [ 160.563645][ T6748] snd_mixer_oss_put_volume1+0x5f0/0x8b0 [ 160.563677][ T6748] snd_mixer_oss_ioctl1+0x6d9/0x18b0 [ 160.563707][ T6748] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 160.563752][ T6748] ? __fget_files+0x2a/0x420 [ 160.563786][ T6748] ? __fget_files+0x2a/0x420 [ 160.563816][ T6748] ? __fget_files+0x3a0/0x420 [ 160.563846][ T6748] ? __fget_files+0x2a/0x420 [ 160.563879][ T6748] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 160.563899][ T6748] snd_mixer_oss_ioctl+0x45/0x60 [ 160.563919][ T6748] __se_sys_ioctl+0xf9/0x170 [ 160.563963][ T6748] do_syscall_64+0xfa/0x3b0 [ 160.563986][ T6748] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.564007][ T6748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.564023][ T6748] ? clear_bhb_loop+0x60/0xb0 [ 160.564044][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.564060][ T6748] RIP: 0033:0x7f666858e969 [ 160.564077][ T6748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.564091][ T6748] RSP: 002b:00007f66694b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.564109][ T6748] RAX: ffffffffffffffda RBX: 00007f66687b5fa0 RCX: 00007f666858e969 [ 160.564122][ T6748] RDX: 0000200000000040 RSI: 0000000040086603 RDI: 0000000000000003 [ 160.564133][ T6748] RBP: 00007f66694b7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.564143][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.564153][ T6748] R13: 0000000000000000 R14: 00007f66687b5fa0 R15: 00007f66688dfa28 [ 160.564179][ T6748] [ 160.923033][ T1210] usb 3-1: USB disconnect, device number 13 [ 161.158880][ T5889] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 161.341161][ T5889] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 161.356459][ T5889] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 161.398833][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 161.421019][ T5889] usb 5-1: config 1 has no interface number 0 [ 161.454635][ T5889] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 161.466902][ T5823] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 161.487420][ T5889] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 161.526987][ T5889] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 161.554319][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.611896][ T5889] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 161.639464][ T5823] usb 1-1: device descriptor read/64, error -71 [ 161.790812][ T6309] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 161.889058][ T5823] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 161.973433][ T6309] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.988336][ T6309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.001272][ T6309] usb 4-1: Product: syz [ 162.005637][ T6309] usb 4-1: Manufacturer: syz [ 162.012974][ T6309] usb 4-1: SerialNumber: syz [ 162.030091][ T6309] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.046174][ T5823] usb 1-1: device descriptor read/64, error -71 [ 162.057013][ T5888] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.174536][ T5823] usb usb1-port1: attempt power cycle [ 162.183250][ T5889] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 162.428690][ T1210] usb 5-1: USB disconnect, device number 14 [ 162.437460][ T1210] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 162.549502][ T5823] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 162.589725][ T5823] usb 1-1: device descriptor read/8, error -71 [ 162.726400][ T6799] FAULT_INJECTION: forcing a failure. [ 162.726400][ T6799] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 162.749030][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.1.227 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 162.749062][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.749075][ T6799] Call Trace: [ 162.749084][ T6799] [ 162.749093][ T6799] dump_stack_lvl+0x189/0x250 [ 162.749131][ T6799] ? __pfx____ratelimit+0x10/0x10 [ 162.749156][ T6799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.749188][ T6799] ? __pfx__printk+0x10/0x10 [ 162.749213][ T6799] ? fs_reclaim_acquire+0x7d/0x100 [ 162.749244][ T6799] should_fail_ex+0x414/0x560 [ 162.749277][ T6799] prepare_alloc_pages+0x213/0x610 [ 162.749307][ T6799] __alloc_frozen_pages_noprof+0x123/0x370 [ 162.749332][ T6799] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 162.749358][ T6799] ? __pfx_process_measurement+0x10/0x10 [ 162.749386][ T6799] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 162.749417][ T6799] ? policy_nodemask+0x27c/0x720 [ 162.749451][ T6799] alloc_pages_mpol+0x232/0x4a0 [ 162.749487][ T6799] alloc_pages_noprof+0xa9/0x190 [ 162.749521][ T6799] __pud_alloc+0x3a/0x260 [ 162.749555][ T6799] __handle_mm_fault+0x354b/0x55e0 [ 162.749587][ T6799] ? mt_find+0x15c/0x5f0 [ 162.749615][ T6799] ? mt_find+0x46f/0x5f0 [ 162.749645][ T6799] ? __pfx___handle_mm_fault+0x10/0x10 [ 162.749693][ T6799] ? find_vma+0xe7/0x160 [ 162.749721][ T6799] ? __pfx_find_vma+0x10/0x10 [ 162.749753][ T6799] handle_mm_fault+0x40a/0x8e0 [ 162.749790][ T6799] do_user_addr_fault+0x764/0x1390 [ 162.749840][ T6799] exc_page_fault+0x76/0xf0 [ 162.749869][ T6799] asm_exc_page_fault+0x26/0x30 [ 162.749888][ T6799] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 162.749921][ T6799] Code: c4 10 e9 84 f7 03 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d f7 03 00 66 2e [ 162.749937][ T6799] RSP: 0018:ffffc90004ecfbf8 EFLAGS: 00050202 [ 162.749956][ T6799] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 162.749969][ T6799] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90004ecfcc0 [ 162.749983][ T6799] RBP: ffffc90004ecfd90 R08: 0000000000000003 R09: 0000000000000004 [ 162.749995][ T6799] R10: dffffc0000000000 R11: fffff520009d9f98 R12: dffffc0000000000 [ 162.750010][ T6799] R13: dffffc0000000000 R14: ffffc90004ecfcc0 R15: 0000200000000000 [ 162.750045][ T6799] _copy_from_user+0x7a/0xb0 [ 162.750069][ T6799] mptcp_setsockopt+0x17c7/0x3460 [ 162.750102][ T6799] ? vfs_write+0x8d8/0xa90 [ 162.750133][ T6799] ? aa_sk_perm+0x81e/0x950 [ 162.750156][ T6799] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 162.750191][ T6799] ? __pfx_aa_sk_perm+0x10/0x10 [ 162.750212][ T6799] ? __lock_acquire+0xab9/0xd20 [ 162.750244][ T6799] ? aa_sock_opt_perm+0x74/0x110 [ 162.750270][ T6799] ? sock_common_setsockopt+0x36/0xc0 [ 162.750298][ T6799] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 162.750329][ T6799] do_sock_setsockopt+0x25a/0x3e0 [ 162.750364][ T6799] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 162.750402][ T6799] ? __fget_files+0x2a/0x420 [ 162.750441][ T6799] __x64_sys_setsockopt+0x18b/0x220 [ 162.750480][ T6799] do_syscall_64+0xfa/0x3b0 [ 162.750507][ T6799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.750526][ T6799] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.750547][ T6799] ? clear_bhb_loop+0x60/0xb0 [ 162.750572][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.750592][ T6799] RIP: 0033:0x7f666858e969 [ 162.750610][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.750625][ T6799] RSP: 002b:00007f66694b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 162.750644][ T6799] RAX: ffffffffffffffda RBX: 00007f66687b5fa0 RCX: 00007f666858e969 [ 162.750658][ T6799] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000003 [ 162.750669][ T6799] RBP: 00007f66694b7090 R08: 0000000000000004 R09: 0000000000000000 [ 162.750677][ T6799] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.750686][ T6799] R13: 0000000000000000 R14: 00007f66687b5fa0 R15: 00007f66688dfa28 [ 162.750708][ T6799] [ 163.343157][ T5888] usb 4-1: Service connection timeout for: 256 [ 163.388391][ T5888] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 163.389952][ T5823] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 163.419798][ T5823] usb 1-1: device descriptor read/8, error -71 [ 163.532964][ T5823] usb usb1-port1: unable to enumerate USB device [ 163.548308][ T5888] ath9k_htc: Failed to initialize the device [ 163.646541][ T5888] usb 4-1: ath9k_htc: USB layer deinitialized [ 163.736805][ T6818] fuse: Bad value for 'fd' [ 163.756009][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 164.066379][ T5889] usb 4-1: USB disconnect, device number 18 [ 164.461374][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.232'. [ 164.562246][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 165.358264][ T6847] FAULT_INJECTION: forcing a failure. [ 165.358264][ T6847] name failslab, interval 1, probability 0, space 0, times 0 [ 165.408182][ T6847] CPU: 0 UID: 0 PID: 6847 Comm: syz.3.236 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 165.408214][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.408226][ T6847] Call Trace: [ 165.408233][ T6847] [ 165.408241][ T6847] dump_stack_lvl+0x189/0x250 [ 165.408277][ T6847] ? __pfx____ratelimit+0x10/0x10 [ 165.408301][ T6847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.408329][ T6847] ? __pfx__printk+0x10/0x10 [ 165.408353][ T6847] ? ref_tracker_alloc+0x318/0x460 [ 165.408381][ T6847] should_fail_ex+0x414/0x560 [ 165.408411][ T6847] should_failslab+0xa8/0x100 [ 165.408441][ T6847] kmem_cache_alloc_noprof+0x73/0x3c0 [ 165.408467][ T6847] ? skb_clone+0x212/0x3a0 [ 165.408491][ T6847] skb_clone+0x212/0x3a0 [ 165.408515][ T6847] __netlink_deliver_tap+0x404/0x850 [ 165.408555][ T6847] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.408585][ T6847] netlink_deliver_tap+0x19c/0x1b0 [ 165.408616][ T6847] netlink_unicast+0x72f/0x8d0 [ 165.408654][ T6847] netlink_sendmsg+0x805/0xb30 [ 165.408681][ T6847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.408702][ T6847] ? aa_sock_msg_perm+0x94/0x160 [ 165.408729][ T6847] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.408751][ T6847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.408776][ T6847] __sock_sendmsg+0x219/0x270 [ 165.408803][ T6847] ____sys_sendmsg+0x505/0x830 [ 165.408827][ T6847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.408855][ T6847] ? import_iovec+0x74/0xa0 [ 165.408876][ T6847] ___sys_sendmsg+0x21f/0x2a0 [ 165.408895][ T6847] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.408949][ T6847] ? __fget_files+0x2a/0x420 [ 165.408971][ T6847] ? __fget_files+0x3a0/0x420 [ 165.408998][ T6847] __x64_sys_sendmsg+0x19b/0x260 [ 165.409014][ T6847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.409034][ T6847] ? __pfx_ksys_write+0x10/0x10 [ 165.409050][ T6847] ? rcu_is_watching+0x15/0xb0 [ 165.409074][ T6847] ? do_syscall_64+0xbe/0x3b0 [ 165.409094][ T6847] do_syscall_64+0xfa/0x3b0 [ 165.409110][ T6847] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.409126][ T6847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.409140][ T6847] ? clear_bhb_loop+0x60/0xb0 [ 165.409156][ T6847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.409169][ T6847] RIP: 0033:0x7f4ea658e969 [ 165.409181][ T6847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.409193][ T6847] RSP: 002b:00007f4ea73d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.409209][ T6847] RAX: ffffffffffffffda RBX: 00007f4ea67b5fa0 RCX: 00007f4ea658e969 [ 165.409219][ T6847] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 165.409227][ T6847] RBP: 00007f4ea73d5090 R08: 0000000000000000 R09: 0000000000000000 [ 165.409236][ T6847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.409244][ T6847] R13: 0000000000000000 R14: 00007f4ea67b5fa0 R15: 00007f4ea68dfa28 [ 165.409264][ T6847] [ 165.844051][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 165.978932][ T5823] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 166.151122][ T5823] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 166.189509][ T5823] usb 1-1: config 0 has no interface number 0 [ 166.221476][ T5823] usb 1-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.264404][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 166.265491][ T30] audit: type=1326 audit(1748510760.344:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 166.271044][ T5823] usb 1-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.313134][ T30] audit: type=1326 audit(1748510760.344:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 166.335273][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.408620][ T5823] usb 1-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 166.409817][ T30] audit: type=1326 audit(1748510760.344:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcfdd12ab39 code=0x7ffc0000 [ 166.447678][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.467885][ T5823] usb 1-1: Product: syz [ 166.478693][ T5823] usb 1-1: Manufacturer: syz [ 166.524210][ T5823] usb 1-1: SerialNumber: syz [ 166.525138][ T30] audit: type=1326 audit(1748510760.344:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 166.542995][ T5823] usb 1-1: config 0 descriptor?? [ 166.551118][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.604507][ T5823] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.623883][ T30] audit: type=1326 audit(1748510760.344:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 166.658504][ T30] audit: type=1326 audit(1748510760.344:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 166.700794][ T6867] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.721944][ T6847] team0 (unregistering): Port device team_slave_0 removed [ 166.734992][ T5823] snd-usb-audio 1-1:0.216: probe with driver snd-usb-audio failed with error -2 [ 166.761620][ T30] audit: type=1326 audit(1748510760.344:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 166.789059][ T30] audit: type=1326 audit(1748510760.344:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcfdd12ab39 code=0x7ffc0000 [ 166.827334][ T6847] team0 (unregistering): Port device team_slave_1 removed [ 166.847766][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.850771][ T43] usb 1-1: USB disconnect, device number 19 [ 166.883863][ T30] audit: type=1326 audit(1748510760.344:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7ffc0000 [ 166.911076][ T30] audit: type=1326 audit(1748510760.344:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcfdd12ab39 code=0x7ffc0000 [ 167.049070][ T5886] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 167.220741][ T6884] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.286531][ T5886] usb 2-1: config 0 has no interfaces? [ 167.297221][ T5886] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 167.307892][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.329027][ T5886] usb 2-1: Product: syz [ 167.333252][ T5886] usb 2-1: Manufacturer: syz [ 167.337880][ T5886] usb 2-1: SerialNumber: syz [ 167.355610][ T5886] usb 2-1: config 0 descriptor?? [ 167.603639][ T6870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.636888][ T6870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.765159][ T5823] usb 2-1: USB disconnect, device number 13 [ 168.547912][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.249'. [ 169.749296][ T5886] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 169.864130][ T6949] loop8: detected capacity change from 0 to 1 [ 169.888601][ T6949] Dev loop8: unable to read RDB block 1 [ 169.916398][ T6949] loop8: unable to read partition table [ 169.929115][ T6949] loop8: partition table beyond EOD, truncated [ 169.931197][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.976158][ T6949] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 169.990960][ T5886] usb 3-1: config 0 has no interfaces? [ 170.027617][ T5886] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 170.043985][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.097150][ T5886] usb 3-1: Product: syz [ 170.114223][ T5886] usb 3-1: Manufacturer: syz [ 170.133964][ T5886] usb 3-1: SerialNumber: syz [ 170.171170][ T5886] usb 3-1: config 0 descriptor?? [ 170.188910][ T5889] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 170.348886][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 170.360579][ T5889] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 170.370750][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.394837][ T5886] usb 3-1: USB disconnect, device number 14 [ 170.402844][ T5889] usb 2-1: config 0 descriptor?? [ 170.612487][ T5889] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 170.633066][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.660109][ T6309] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 170.672132][ T5889] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 170.684293][ T5889] usb 2-1: media controller created [ 170.715311][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.862505][ T6309] usb 4-1: config 0 has no interfaces? [ 170.878512][ T6309] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 170.888415][ T6309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.898561][ T6309] usb 4-1: Product: syz [ 170.903646][ T6309] usb 4-1: Manufacturer: syz [ 170.908411][ T6309] usb 4-1: SerialNumber: syz [ 170.920537][ T6309] usb 4-1: config 0 descriptor?? [ 171.273874][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.658499][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.670700][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.694465][ T5886] usb 4-1: USB disconnect, device number 19 [ 171.735467][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.978830][ T5889] stb0899_attach: Driver disabled by Kconfig [ 171.984955][ T5889] az6027: no front-end attached [ 171.984955][ T5889] [ 172.003948][ T5889] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 172.021916][ T5889] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 172.060962][ T5889] dvb-usb: schedule remote query interval to 400 msecs. [ 172.082221][ T5889] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 172.223967][ T5886] usb 2-1: USB disconnect, device number 14 [ 172.368409][ T6974] netlink: 'syz.3.264': attribute type 12 has an invalid length. [ 172.373436][ T5886] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 172.415629][ T6974] netlink: 'syz.3.264': attribute type 29 has an invalid length. [ 172.439189][ T6974] netlink: 'syz.3.264': attribute type 2 has an invalid length. [ 172.447135][ T6974] netlink: 128 bytes leftover after parsing attributes in process `syz.3.264'. [ 172.471675][ T6978] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 172.492710][ T6975] bond_slave_1: entered promiscuous mode [ 172.501857][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 172.595101][ T6972] fuse: Invalid rootmode [ 172.640394][ T6975] bond0: (slave bond_slave_1): Releasing backup interface [ 172.678109][ T6975] bond_slave_1 (unregistering): left promiscuous mode [ 173.079358][ T6993] netlink: 76 bytes leftover after parsing attributes in process `syz.1.271'. [ 173.516424][ T7001] FAULT_INJECTION: forcing a failure. [ 173.516424][ T7001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.529764][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.4.274 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 173.529788][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.529797][ T7001] Call Trace: [ 173.529802][ T7001] [ 173.529808][ T7001] dump_stack_lvl+0x189/0x250 [ 173.529834][ T7001] ? __pfx____ratelimit+0x10/0x10 [ 173.529850][ T7001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.529872][ T7001] ? __pfx__printk+0x10/0x10 [ 173.529895][ T7001] should_fail_ex+0x414/0x560 [ 173.529916][ T7001] _copy_to_user+0x31/0xb0 [ 173.529949][ T7001] put_user_ifreq+0x6b/0xd0 [ 173.529965][ T7001] sock_do_ioctl+0x25b/0x300 [ 173.529985][ T7001] ? __pfx_sock_do_ioctl+0x10/0x10 [ 173.530001][ T7001] ? __lock_acquire+0xab9/0xd20 [ 173.530031][ T7001] sock_ioctl+0x576/0x790 [ 173.530049][ T7001] ? __pfx_sock_ioctl+0x10/0x10 [ 173.530066][ T7001] ? __fget_files+0x2a/0x420 [ 173.530087][ T7001] ? __fget_files+0x3a0/0x420 [ 173.530108][ T7001] ? __fget_files+0x2a/0x420 [ 173.530138][ T7001] ? bpf_lsm_file_ioctl+0x9/0x20 [ 173.530158][ T7001] ? __pfx_sock_ioctl+0x10/0x10 [ 173.530175][ T7001] __se_sys_ioctl+0xf9/0x170 [ 173.530194][ T7001] do_syscall_64+0xfa/0x3b0 [ 173.530212][ T7001] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.530229][ T7001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.530244][ T7001] ? clear_bhb_loop+0x60/0xb0 [ 173.530262][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.530276][ T7001] RIP: 0033:0x7f3d7ef8e969 [ 173.530288][ T7001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.530302][ T7001] RSP: 002b:00007f3d7fed3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.530317][ T7001] RAX: ffffffffffffffda RBX: 00007f3d7f1b5fa0 RCX: 00007f3d7ef8e969 [ 173.530328][ T7001] RDX: 0000200000001440 RSI: 0000000000008946 RDI: 0000000000000003 [ 173.530338][ T7001] RBP: 00007f3d7fed3090 R08: 0000000000000000 R09: 0000000000000000 [ 173.530346][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.530355][ T7001] R13: 0000000000000000 R14: 00007f3d7f1b5fa0 R15: 00007f3d7f2dfa28 [ 173.530376][ T7001] [ 173.761400][ T5893] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 173.789438][ T7002] Cannot find add_set index 0 as target [ 174.025408][ T7004] FAULT_INJECTION: forcing a failure. [ 174.025408][ T7004] name failslab, interval 1, probability 0, space 0, times 0 [ 174.144271][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.1.276 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 174.144303][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.144316][ T7004] Call Trace: [ 174.144325][ T7004] [ 174.144334][ T7004] dump_stack_lvl+0x189/0x250 [ 174.144374][ T7004] ? __pfx____ratelimit+0x10/0x10 [ 174.144401][ T7004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.144434][ T7004] ? __pfx__printk+0x10/0x10 [ 174.144463][ T7004] ? __pfx___might_resched+0x10/0x10 [ 174.144493][ T7004] ? fs_reclaim_acquire+0x7d/0x100 [ 174.144520][ T7004] should_fail_ex+0x414/0x560 [ 174.144554][ T7004] should_failslab+0xa8/0x100 [ 174.144588][ T7004] __kmalloc_cache_noprof+0x70/0x3d0 [ 174.144619][ T7004] ? rtnl_newlink+0xed/0x1c70 [ 174.144647][ T7004] ? kasan_save_free_info+0x46/0x50 [ 174.144673][ T7004] rtnl_newlink+0xed/0x1c70 [ 174.144702][ T7004] ? netlink_sendmsg+0x805/0xb30 [ 174.144720][ T7004] ? __sock_sendmsg+0x219/0x270 [ 174.144744][ T7004] ? ____sys_sendmsg+0x505/0x830 [ 174.144761][ T7004] ? ___sys_sendmsg+0x21f/0x2a0 [ 174.144788][ T7004] ? __x64_sys_sendmsg+0x19b/0x260 [ 174.144806][ T7004] ? do_syscall_64+0xfa/0x3b0 [ 174.144833][ T7004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.144863][ T7004] ? __pfx_rtnl_newlink+0x10/0x10 [ 174.144916][ T7004] ? kasan_quarantine_put+0xdd/0x220 [ 174.144942][ T7004] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.144974][ T7004] ? nlmon_xmit+0xb0/0x100 [ 174.145007][ T7004] ? kmem_cache_free+0x18f/0x400 [ 174.145045][ T7004] ? __local_bh_enable_ip+0x12d/0x1c0 [ 174.145076][ T7004] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.145103][ T7004] ? __local_bh_enable_ip+0x12d/0x1c0 [ 174.145146][ T7004] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 174.145180][ T7004] ? __dev_queue_xmit+0x27e/0x3a70 [ 174.145216][ T7004] ? __lock_acquire+0xab9/0xd20 [ 174.145268][ T7004] ? __pfx_rtnl_newlink+0x10/0x10 [ 174.145297][ T7004] rtnetlink_rcv_msg+0x7cf/0xb70 [ 174.145330][ T7004] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 174.145359][ T7004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 174.145386][ T7004] ? ref_tracker_free+0x63a/0x7d0 [ 174.145414][ T7004] ? __copy_skb_header+0xa7/0x550 [ 174.145437][ T7004] ? __pfx_ref_tracker_free+0x10/0x10 [ 174.145464][ T7004] ? __skb_clone+0x63/0x7a0 [ 174.145493][ T7004] netlink_rcv_skb+0x205/0x470 [ 174.145526][ T7004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 174.145558][ T7004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.145603][ T7004] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.145634][ T7004] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.145671][ T7004] netlink_unicast+0x758/0x8d0 [ 174.145712][ T7004] netlink_sendmsg+0x805/0xb30 [ 174.145741][ T7004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.145764][ T7004] ? aa_sock_msg_perm+0x94/0x160 [ 174.145801][ T7004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.145827][ T7004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.145847][ T7004] __sock_sendmsg+0x219/0x270 [ 174.145877][ T7004] ____sys_sendmsg+0x505/0x830 [ 174.145903][ T7004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.145934][ T7004] ? import_iovec+0x74/0xa0 [ 174.145960][ T7004] ___sys_sendmsg+0x21f/0x2a0 [ 174.145983][ T7004] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.146041][ T7004] ? __fget_files+0x2a/0x420 [ 174.146071][ T7004] ? __fget_files+0x3a0/0x420 [ 174.146113][ T7004] __x64_sys_sendmsg+0x19b/0x260 [ 174.146137][ T7004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.146169][ T7004] ? __pfx_ksys_write+0x10/0x10 [ 174.146192][ T7004] ? rcu_is_watching+0x15/0xb0 [ 174.146229][ T7004] ? do_syscall_64+0xbe/0x3b0 [ 174.146259][ T7004] do_syscall_64+0xfa/0x3b0 [ 174.146284][ T7004] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.146307][ T7004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.146326][ T7004] ? clear_bhb_loop+0x60/0xb0 [ 174.146349][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.146369][ T7004] RIP: 0033:0x7f666858e969 [ 174.146388][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.146405][ T7004] RSP: 002b:00007f66694b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.146427][ T7004] RAX: ffffffffffffffda RBX: 00007f66687b5fa0 RCX: 00007f666858e969 [ 174.146442][ T7004] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 174.146455][ T7004] RBP: 00007f66694b7090 R08: 0000000000000000 R09: 0000000000000000 [ 174.146467][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.146478][ T7004] R13: 0000000000000000 R14: 00007f66687b5fa0 R15: 00007f66688dfa28 [ 174.146509][ T7004] [ 174.638446][ T5893] usb 4-1: config 0 has no interfaces? [ 174.671542][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 174.680899][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.718700][ T5893] usb 4-1: Product: syz [ 174.736117][ T5893] usb 4-1: Manufacturer: syz [ 174.763181][ T5893] usb 4-1: SerialNumber: syz [ 174.815301][ T5893] usb 4-1: config 0 descriptor?? [ 175.176517][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.200047][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.241717][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.278856][ T5889] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 175.299932][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.460776][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.506964][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.531753][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.568292][ T5889] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 175.591631][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.620845][ T5889] usb 5-1: config 0 descriptor?? [ 176.093348][ T5889] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 176.118117][ T5889] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 176.145041][ T5889] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 176.158374][ T5889] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 176.166198][ T5889] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 176.173635][ T5889] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 176.186423][ T5889] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 176.272470][ T5889] lenovo 0003:17EF:60B5.0003: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.4-1/input0 [ 176.322046][ T5889] usb 5-1: USB disconnect, device number 15 [ 176.459766][ T7033] fido_id[7033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 176.558906][ T5893] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 176.574052][ T5823] usb 4-1: USB disconnect, device number 20 [ 176.720738][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.741125][ T5893] usb 1-1: config 0 has no interfaces? [ 176.750259][ T5893] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 176.829344][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.967537][ T5893] usb 1-1: Product: syz [ 176.988853][ T5893] usb 1-1: Manufacturer: syz [ 177.011793][ T5893] usb 1-1: SerialNumber: syz [ 177.046497][ T5893] usb 1-1: config 0 descriptor?? [ 177.094043][ T5823] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 177.277813][ T5893] usb 1-1: USB disconnect, device number 20 [ 177.398267][ T5823] usb 4-1: not running at top speed; connect to a high speed hub [ 177.436616][ T5823] usb 4-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 177.511598][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 177.518892][ T5823] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 177.609267][ T5823] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 177.698984][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.719104][ T6309] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 177.737429][ T5823] usb 4-1: Product: syz [ 177.751575][ T5823] usb 4-1: Manufacturer: syz [ 177.761913][ T7051] No such timeout policy "syz1" [ 177.776319][ T5823] usb 4-1: SerialNumber: syz [ 177.889192][ T6309] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 177.905148][ T6309] usb 3-1: config 0 has no interface number 0 [ 177.928365][ T6309] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.977161][ T6309] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 178.018393][ T6309] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 178.062671][ T6309] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 178.138137][ T6309] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 178.150941][ T7051] sctp: [Deprecated]: syz.4.292 (pid 7051) Use of int in maxseg socket option. [ 178.150941][ T7051] Use struct sctp_assoc_value instead [ 178.184754][ T6309] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.219026][ T6309] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 178.229810][ T6309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.246990][ T6309] usb 3-1: config 0 descriptor?? [ 178.255490][ T7047] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 178.263727][ T7047] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 178.294425][ T6309] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 178.478460][ T6309] usb 3-1: USB disconnect, device number 15 [ 178.502253][ T6309] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 179.548881][ T5893] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 179.813618][ T5823] usb 4-1: USB disconnect, device number 21 [ 179.855009][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 179.929319][ T6309] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 180.091379][ T6309] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 180.120156][ T6309] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 180.144802][ T6309] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.166354][ T6309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.204560][ T6309] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.322374][ T6309] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 180.588873][ T5823] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 181.089707][ T6309] usb 1-1: USB disconnect, device number 21 [ 181.105472][ T7082] delete_channel: no stack [ 181.210544][ T5823] usb 4-1: config 0 has no interfaces? [ 181.218565][ T5823] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 181.227954][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.236125][ T5823] usb 4-1: Product: syz [ 181.240992][ T5823] usb 4-1: Manufacturer: syz [ 181.245897][ T5823] usb 4-1: SerialNumber: syz [ 181.255583][ T5823] usb 4-1: config 0 descriptor?? [ 181.298873][ T5917] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 181.460873][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.475159][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.483117][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.485753][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 181.495184][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.511325][ T5917] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 181.521189][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.535359][ T7094] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 181.547142][ T5917] hub 5-1:1.0: bad descriptor, ignoring hub [ 181.554369][ T5917] hub 5-1:1.0: probe with driver hub failed with error -5 [ 181.564238][ T5917] cdc_wdm 5-1:1.0: skipping garbage [ 181.573269][ T5917] cdc_wdm 5-1:1.0: skipping garbage [ 181.582825][ T5886] usb 4-1: USB disconnect, device number 22 [ 181.595925][ T5917] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 181.602782][ T5917] cdc_wdm 5-1:1.0: Unknown control protocol [ 182.224641][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.282614][ T5893] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 182.307106][ T7094] "syz.4.306" (7094) uses obsolete ecb(arc4) skcipher [ 182.314319][ T5893] usb 3-1: can't read configurations, error -71 [ 182.399046][ T6309] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 182.415263][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 182.415289][ T30] audit: type=1326 audit(1748510776.494:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666858e969 code=0x7ffc0000 [ 182.459299][ T30] audit: type=1326 audit(1748510776.524:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f666858e969 code=0x7ffc0000 [ 182.485230][ T30] audit: type=1326 audit(1748510776.524:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666858e969 code=0x7ffc0000 [ 182.530877][ T30] audit: type=1326 audit(1748510776.524:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666858e969 code=0x7ffc0000 [ 182.553492][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.625879][ T6309] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.635168][ T6309] usb 1-1: config 0 has no interface number 0 [ 182.674382][ T6309] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.694336][ T6309] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 182.705495][ T30] audit: type=1326 audit(1748510776.524:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f666858e969 code=0x7ffc0000 [ 182.876626][ T6309] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 182.892241][ T6309] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 182.906946][ T6309] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 182.918873][ T6309] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.939010][ T6309] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.950635][ T6309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.961672][ T5893] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 183.018824][ T6309] usb 1-1: config 0 descriptor?? [ 183.025544][ T7104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.033345][ T7104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.066165][ T6309] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 183.318409][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 183.372295][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.379105][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.386077][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.392705][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.399167][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.405777][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.416239][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.422894][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.431515][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.438176][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.448131][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.454842][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.466749][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.473402][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.480631][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.481372][ T5886] usb 5-1: USB disconnect, device number 16 [ 183.487264][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.487287][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 183.510501][ T5917] usb 1-1: USB disconnect, device number 22 [ 183.538189][ T5917] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 183.612347][ T5893] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 183.632864][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.716993][ T5893] usb 3-1: config 0 descriptor?? [ 184.100170][ T5893] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 184.176549][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.228114][ T5893] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 184.262646][ T5893] usb 3-1: media controller created [ 184.344536][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.624745][ T30] audit: type=1326 audit(1748510779.704:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdd18e969 code=0x7fc00000 [ 185.826093][ T5893] az6027: usb out operation failed. (-71) [ 185.854547][ T5893] az6027: usb out operation failed. (-71) [ 185.869436][ T5893] stb0899_attach: Driver disabled by Kconfig [ 185.885753][ T5893] az6027: no front-end attached [ 185.885753][ T5893] [ 185.938717][ T5893] az6027: usb out operation failed. (-71) [ 185.939044][ T5917] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 185.955765][ T5893] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 185.975902][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 186.048259][ T5893] dvb-usb: schedule remote query interval to 400 msecs. [ 186.088026][ T5893] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 186.109332][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 186.121213][ T5917] usb 5-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 186.136331][ T7148] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 186.202288][ T5917] usb 5-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.214151][ T5893] usb 3-1: USB disconnect, device number 17 [ 186.276242][ T5917] usb 5-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.321429][ T5917] usb 5-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 186.411596][ T5917] usb 5-1: config 64 interface 0 has no altsetting 0 [ 186.428345][ T5893] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 186.457148][ T5917] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 186.517513][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.138957][ T5917] usbhid 5-1:64.0: can't add hid device: -71 [ 187.171254][ T5917] usbhid 5-1:64.0: probe with driver usbhid failed with error -71 [ 187.230256][ T5893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 187.231281][ T7164] FAULT_INJECTION: forcing a failure. [ 187.231281][ T7164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.265393][ T5917] usb 5-1: USB disconnect, device number 17 [ 187.302455][ T7164] CPU: 1 UID: 0 PID: 7164 Comm: syz.0.326 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 187.302481][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.302493][ T7164] Call Trace: [ 187.302499][ T7164] [ 187.302506][ T7164] dump_stack_lvl+0x189/0x250 [ 187.302542][ T7164] ? __pfx____ratelimit+0x10/0x10 [ 187.302560][ T7164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.302593][ T7164] ? __pfx__printk+0x10/0x10 [ 187.302617][ T7164] should_fail_ex+0x414/0x560 [ 187.302640][ T7164] strncpy_from_user+0x36/0x290 [ 187.302660][ T7164] getname_flags+0xf3/0x540 [ 187.302677][ T7164] user_path_at+0x24/0x60 [ 187.302694][ T7164] __se_sys_mount+0x2d3/0x410 [ 187.302721][ T7164] ? __pfx___se_sys_mount+0x10/0x10 [ 187.302741][ T7164] ? rcu_is_watching+0x15/0xb0 [ 187.302766][ T7164] ? do_syscall_64+0xbe/0x3b0 [ 187.302783][ T7164] ? __x64_sys_mount+0x20/0xc0 [ 187.302817][ T7164] do_syscall_64+0xfa/0x3b0 [ 187.302833][ T7164] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.302849][ T7164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.302863][ T7164] ? clear_bhb_loop+0x60/0xb0 [ 187.302880][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.302893][ T7164] RIP: 0033:0x7fbd4c58e969 [ 187.302907][ T7164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.302920][ T7164] RSP: 002b:00007fbd4d32f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.302937][ T7164] RAX: ffffffffffffffda RBX: 00007fbd4c7b5fa0 RCX: 00007fbd4c58e969 [ 187.302947][ T7164] RDX: 0000200000002100 RSI: 0000200000000000 RDI: 0000000000000000 [ 187.302956][ T7164] RBP: 00007fbd4d32f090 R08: 0000200000002140 R09: 0000000000000000 [ 187.302965][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.302973][ T7164] R13: 0000000000000000 R14: 00007fbd4c7b5fa0 R15: 00007fbd4c8dfa28 [ 187.302993][ T7164] [ 187.582200][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 187.842222][ T7170] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 187.854147][ T7170] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 187.862555][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.0.328 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 187.874115][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.884174][ T7170] RIP: 0010:do_move_mount+0x27d/0xb10 [ 187.889757][ T7170] Code: e8 c8 c8 81 ff 41 be ea ff ff ff 49 bd 00 00 00 00 00 fc ff df 48 8b 6c 24 18 4c 8b 7c 24 08 48 8d 5d 48 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 34 e6 e4 ff 48 8b 1b 31 ff 48 89 [ 187.903505][ T7167] No such timeout policy "syz1" [ 187.909362][ T7170] RSP: 0018:ffffc90003a8fd30 EFLAGS: 00010206 [ 187.909386][ T7170] RAX: 0000000000000006 RBX: 0000000000000032 RCX: 0000000000080000 [ 187.909399][ T7170] RDX: ffffc9000d39d000 RSI: 00000000000000f4 RDI: 00000000000000f5 [ 187.909415][ T7170] RBP: ffffffffffffffea R08: 0000000000000000 R09: ffffffff823ca219 [ 187.909430][ T7170] R10: dffffc0000000000 R11: ffffed1029180047 R12: ffff88801dabd7d0 [ 187.909447][ T7170] R13: dffffc0000000000 R14: 00000000ffffffea R15: ffff88801dabcb80 [ 187.960153][ T7170] FS: 00007fbd4d30e6c0(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 187.969099][ T7170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.975694][ T7170] CR2: 00007fbd4d30df98 CR3: 0000000030090000 CR4: 00000000003526f0 [ 187.983696][ T7170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.991678][ T7170] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.999689][ T7170] Call Trace: [ 188.002983][ T7170] [ 188.005955][ T7170] __se_sys_move_mount+0x413/0x590 [ 188.011095][ T7170] ? __pfx___se_sys_move_mount+0x10/0x10 [ 188.016757][ T7170] ? do_syscall_64+0xbe/0x3b0 [ 188.021481][ T7170] ? __x64_sys_move_mount+0x20/0xc0 [ 188.026706][ T7170] do_syscall_64+0xfa/0x3b0 [ 188.031223][ T7170] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.036434][ T7170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.042498][ T7170] ? clear_bhb_loop+0x60/0xb0 [ 188.047180][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.053072][ T7170] RIP: 0033:0x7fbd4c58e969 [ 188.057481][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.077113][ T7170] RSP: 002b:00007fbd4d30e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 188.085542][ T7170] RAX: ffffffffffffffda RBX: 00007fbd4c7b6080 RCX: 00007fbd4c58e969 [ 188.093521][ T7170] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: 0000000000000005 [ 188.101506][ T7170] RBP: 00007fbd4c610ab1 R08: 0000000000000226 R09: 0000000000000000 [ 188.109505][ T7170] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 188.117489][ T7170] R13: 0000000000000001 R14: 00007fbd4c7b6080 R15: 00007fbd4c8dfa28 [ 188.125476][ T7170] [ 188.128493][ T7170] Modules linked in: [ 188.133091][ T7170] ---[ end trace 0000000000000000 ]--- [ 188.143890][ T5917] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 188.210274][ T7170] RIP: 0010:do_move_mount+0x27d/0xb10 [ 188.215887][ T7170] Code: e8 c8 c8 81 ff 41 be ea ff ff ff 49 bd 00 00 00 00 00 fc ff df 48 8b 6c 24 18 4c 8b 7c 24 08 48 8d 5d 48 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 34 e6 e4 ff 48 8b 1b 31 ff 48 89 [ 188.237094][ T7170] RSP: 0018:ffffc90003a8fd30 EFLAGS: 00010206 [ 188.243987][ T7170] RAX: 0000000000000006 RBX: 0000000000000032 RCX: 0000000000080000 [ 188.254624][ T7170] RDX: ffffc9000d39d000 RSI: 00000000000000f4 RDI: 00000000000000f5 [ 188.262895][ T7170] RBP: ffffffffffffffea R08: 0000000000000000 R09: ffffffff823ca219 [ 188.274580][ T7170] R10: dffffc0000000000 R11: ffffed1029180047 R12: ffff88801dabd7d0 [ 188.284293][ T7170] R13: dffffc0000000000 R14: 00000000ffffffea R15: ffff88801dabcb80 [ 188.293990][ T7170] FS: 00007fbd4d30e6c0(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 188.303296][ T7167] sctp: [Deprecated]: syz.2.325 (pid 7167) Use of int in maxseg socket option. [ 188.303296][ T7167] Use struct sctp_assoc_value instead [ 188.310453][ T5917] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 188.327017][ T7170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.335466][ T7170] CR2: 000000110c389386 CR3: 0000000030090000 CR4: 00000000003526f0 [ 188.343831][ T7170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.352070][ T5917] usb 5-1: config 0 has no interface number 0 [ 188.355050][ T7170] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.370923][ T7170] Kernel panic - not syncing: Fatal exception [ 188.377366][ T7170] Kernel Offset: disabled [ 188.381697][ T7170] Rebooting in 86400 seconds..