last executing test programs: 13.527998061s ago: executing program 2 (id=4276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fsopen(&(0x7f00000021c0)='vxfs\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d00010103f80f050904000801030101000921ff00010122b00b09058103100002ba07090502032000080eb84abdf5610fb3291ec6ba0f8ada35ffd166e911e4f8"], &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000002140)=ANY=[@ANYBLOB="050f050000fcf7c4f4cbd2340ed2a776f192497a443921ea37d18b8614bd931431a84f08117c1f2385226438f26a7daa24ab3f95e685d330f6049e34bf56e461c4a0bf82c27412a64763ca329442823ad4ff8c26e20fac94062f2090eb0e629e4d31f19b9ee1e1915b45fe2f6bd4e7f0bfcee4a09c7d511f85f567516c76"], 0x1, [{0x0, 0x0}]}) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0x40, 0x95, [{{0x9, 0x4, 0x0, 0x6d, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xd, 0x9, 0xd}}}}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5c, &(0x7f0000002480)=ANY=[@ANYBLOB="050f5c000620100a40e5000000000f0f000f0000000fc00000003fff0030000000f0ff000003100b03100b0b10010c410003060008071c100a0404010000000fae440cf0c0ff000f000000003f00000000ff000a1003020d0005fdc0ff"], 0x3, [{0xbb, &(0x7f0000002300)=@string={0xbb, 0x3, "e1311025b3d1ecc53a299cd41546726d896558c09097883fa49b879b355e46ba0f314fb663a5fdc1009a6f92833d8bed72e7f369eb4ebfad9a6a042913017e1f0717f65317ef9c4ebde4f5160ebc1a86e13651b2b204da6057ca8fb50b600997a0cce90d5c2623dbea31ff8ec41b325dd224cc0d496d374a020f23d946a8b49f509dae0dbdbfdd073013275b8b27bff9a0a97d3addb8a42b9431fcf999150292c4b67b0be780812f5f46e3a40e0543696eef6d0f0f11a2e53f"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x2024}}, {0x11, &(0x7f0000002400)=@string={0x11, 0x3, "c422d81f7246c032ffa16f48315412"}}]}) setrlimit(0x9, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001300)=@broute={'broute\x00', 0x20, 0x6, 0x126, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000ac0], 0x0, 0x0, &(0x7f0000000ac0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x28, 0x886c, 'dvmrp1\x00', 'ipvlan1\x00', 'tunl0\x00', 'bridge_slave_0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x96, [], [], @common=@STANDARD={'\x00', 0x4, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x176) creat(&(0x7f0000000380)='./bus\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x90e0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) io_setup(0x202, &(0x7f0000000480)) r4 = add_key(&(0x7f0000002280)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) memfd_secret(0x0) unshare(0x40000000) 9.668837584s ago: executing program 2 (id=4291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_io_uring_setup(0x413, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x126}, &(0x7f0000000bc0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$kcm(0x2, 0xa, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r5 = accept4$unix(r1, &(0x7f0000004d80)=@abs, 0x0, 0x80000) sendmmsg$unix(r5, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000004ec0)="877c4b11edc921a3bffbdb9728243f68e3c951249637615fa41f206cd461d14e8efdfa3164989bcce9919678556b130231cf438caad5019a733e7223cc04c83bdf431841236ad708955c679666de8a8e1d02315720e438f9c058dc5b64b29b2b21fe34c70ec3eee089b02b62aba6dcb4872b31afce5819a142", 0x79}], 0x1, 0x0, 0x0, 0x40}}], 0x1, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$dir(0xffffff9c, &(0x7f0000009240)='./file0\x00', 0x101, 0x86) statx(r6, 0x0, 0x2500, 0x1, &(0x7f00000092c0)) fsopen(0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) 8.110698232s ago: executing program 2 (id=4294): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000007c0)="39000000140081ae0000dc676f3897daf01e2357f9ffffffffffffff0521018701546fb8ca1b4e8a06a6580e", 0x2c}], 0x1}, 0x4) 7.91265398s ago: executing program 2 (id=4295): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12ac15470223b0000000010902000310020000000000000000"], 0x0) (async) r0 = getpgrp(0xffffffffffffffff) ptrace(0x10, r0) 5.480490608s ago: executing program 1 (id=4309): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xaf) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000203505a8a440000102030109022400010109900d5adae8480997eb3631924109040006020701010209050102080004"], &(0x7f0000000280)={0x0, 0x0, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="050f1a00020a100300060006f7ff070810010c"]}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}], 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 4.290160766s ago: executing program 0 (id=4313): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0xc8, &(0x7f0000000700)="72c310ee3e73920d0dc3052d4ce181d032ecb02f301f57edab0edfadfeaea2dd697482893bd57292506e26d6633bb1b8806cce7544bbf1a5ead965eb492c8a669161dc927bce5be99deb47fd94fcf3112245ebbb4748baabf645ad4c18dbdace305ef2eedda0c9dc19e19da3ab7e7fc1d855f378e47f6618b7fd699daa0b552e1196c028d1431886d6ca137ecf2a6f26e1e5cfe12ab679c541c51252d8ea5edc670b5f37f59441175991adbe6bf68634d165df24576d7eaefc6de1cd5055e8fca8f57f1d815c9eee"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)={0x2, 0xf, 0x6, 0x3, 0x7, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_lifetime={0x4, 0x4, 0x1, 0x3, 0x3, 0x8000000000000000}]}, 0x38}}, 0xc000) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x8400) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, 0x0, 0x78) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffff00, 0xff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000ec0)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r9, 0xb703, 0x0) read$snddsp(r8, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) fcntl$addseals(r2, 0x409, 0x8) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x400c4150, &(0x7f0000000080)={0x0, &(0x7f00000001c0)="209d7009c243625cdf6cd1511b1aaa4db797a310c49c62b89f8065a0d1009f8a954aef7f76a02cc381f3928a644dd269c71d55a4c7d2fab6be3822082992c9ce20378617fa2a232bbb0465208c4fd1f5eb94e291e7dbbc8721c1e9c69eeec5e958aaaef5451aa61f4af31a29b6a3a45de98eacd3bdc90b45a374a6a2beabca45beefd54840644af2de9fb1468fe3bf17172ce976245c3fbb8abb3c36b83719e2561442e6e4ae41c423e1610e280ab39b8d56ce70294db45ee3d33b592d58e221890a81d388de9914f15dd60625caa976849a9206b023c09fc1e250acbbf718b3179a49ffa283b3dec7b975", 0xeb}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9003, 0x0) 4.088121079s ago: executing program 2 (id=4314): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$amidi(0x0, 0x3e0, 0x123c80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) pwritev(r3, 0x0, 0x0, 0x81, 0x7) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40585414, &(0x7f0000000040)={0x6, 0x8, 0x80}) 4.086193013s ago: executing program 0 (id=4315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x40) 3.967474269s ago: executing program 3 (id=4316): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000007c0)="39000000140081ae0000dc676f3897daf01e2357f9ffffffffffffff0521018701546fb8ca1b4e8a06a6580e88370200c54c19", 0x33}], 0x1}, 0x4) 3.918882137s ago: executing program 0 (id=4317): r0 = gettid() socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x1003}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) syz_fuse_handle_req(r7, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x6, {0x5, 0x0, 0x8, 0x1000}}, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0x40806685, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000b40)={0x654, r10, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x5b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf1, 0x5, "1d5e220b81f55233cc809b98989cd4dea3631302b2f1dbc343fd499968628b0b527e9172f25ec5e294c2157031d9695f866c44062d058d4b7401e9fbdacf60c0b520b6c08a98f8fef30c76e8ff3eb3747260b119527289c6fb76341904c62ec2c6136815569fb4353a25ba9230c89230b5eb61472e8d87d63ca17bce26760a8624186bc373711ed0d65ec4ae794ad0512c4478cb2d4b2de82fc43c3a024347f0f698a0d9f26c700e7d85018d4534faf71c16034238a071eb2f53bd3b1eed1aeaa0c8dcd6a164f91e97ff3e38e0571ab51405cd94762d7536193c105e6c6581dfdaaa9ce8091169d904a1db6662"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "58fe41d7a8658f0166a84559c7968864c1e36120954d44c82d265a85abb6f253c2b0491d90349449dc03d2c9980d7f59c33a20eb6714319eb252072225ff84cd21a48b6163b26ecd0799f8f8fc66f4c3d6e83cef698d7ec069beabcdaabbfa70816238c8feeebf33ce44fa575d557b1ce56e7cfc3593e0c48d646389842dc20fecd72f6931836a84e1ffd2f7829a6a0485f63ad11f1c4d14f48467aa661016d3803c3cd1a4356bb3a9ed60ed34ea7e7ee199365f6d30451d787eeed4020b52ad2abe962e9c5ea7df5035ad84ca78c74932816e236f152ed515b9910387adbbb0bc2caed8fc29185d5eabbd99cd132f59"}, @ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x745}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\'*%./-.@\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd8c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2699}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '5!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2ad}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',.:^!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "c3804cc61ba3ca9eeff44979de054a6461c752bd402f4b472013e295f803f8d1129559a2d0cc4d1de46ec4b8acc8d62b08f97545cfc50b9f39522a1794f8a8221d013392c0ea308cbc9b061cb596dc177e8a7a2bd6007ab905ca82ae16e0f119f8bffb09fb75ead9436cc6f43f5ae3bc5442d34ad5695ca54978424b3043d84b627714424599ca246fedd883b7e05ee232b4dea0c2ec0389f82c480d564119c4c85a83d958"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "7a5b0b6a441044a3194afdd242561bcb4b4e7ca7f4d92a9afc10c3831dc000ad028c9e23fbc813db7f76d22e50359cf4b4ce5c5f2e621d0be84a2007aac02ca5b13cf2361bf1b1d8b2e7e30a4d6666642072af0be06239f92cb515b16191777d4d3d5739d3b9ed01f11b30d97fe4989d6d5e93f40195f01aea1d0b752f50d6bec6bac0a4cd3b96078d719b77613b0d5ab83b6a180bff"}, @ETHTOOL_A_BITSET_VALUE={0x100, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x654}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3.862160646s ago: executing program 3 (id=4318): pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=0x0, @ANYRESHEX=r3], 0x20) 3.714908103s ago: executing program 3 (id=4319): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={@empty, @broadcast, 0x1b, 0x8}}) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a"], 0x44}}, 0x4000010) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) (async) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000300)="86", 0x1}, {0x0, 0x63}], 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "24a60c4617ae2f78fd429dfb11b5ee1e"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "80f0f7befbcbfe615aa05eee915a100a"}]}}]}, 0x5c}}, 0x0) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$netlink(r8, &(0x7f0000000200)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc, &(0x7f0000000040)=[{&(0x7f0000000100)={0xc4, 0x20, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xb3, 0x11c, 0x0, 0x0, @binary="5d252af57bf9048f7cdc0490d590790adbdecdea99f7c74722db024b35f396bfff4b29f4e0d3493e6703461f0ad275ae428cc9167e9165e24554e060de5b002cd6234d67d6d1f0581f21509b6b8b8981ffa152f0f255d135cd2e6301bbfd80bdd69c5603aa694d81c9517aefe7595c528385237c4572b989cb7adb5aca9ff76a66efc41c2f97173f80aea6b40086b101c5c2a224d56dd0b14983a20ec7f23783fee21104ff6aebd5e9c5df37361e09"}]}, 0xc4}], 0x1, 0x0, 0x0, 0x4080}, 0x801) 3.440807234s ago: executing program 3 (id=4320): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/188, 0xbc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="6fffbecb8d1d6260d8c9972227ea065a9d4c1ed6b14f8b81788f36049079a705a28e80ac4e94b211c1bd36dbd5ab3a763c531cf377bc17d98e4d55252175624ae657e3338cd741f0d07d510d179d0f9c4415456966c317c9861cacd11d81d053d0c3ca0875bc1c393eacee123efe6f86ea6233d8657135361c51719536e8bbf53cdb7cc4201ab6ce79dcc6658698222d1fb6", 0x92}, {&(0x7f0000000400)="5fccf83d62e5e02ed340b95a60f9e979b202bf727a6cfb7ea6d4521b25b92e0742a1391131b56f9869fda611370401b35008d9d1118937351ce7dcd065366aeeee53cea12f3426dcbcda88f6181d696a98b78d716fedeb160e734151978bb6a1b4c5655d527cea33da7636a50b4b41b33b0a8ae1d21eff8f8a92095bcc25c5de33cb460906e2fca4f1d23db54cb03a914137b93b9ba34a6602d4e7b695454af86abff8e5614bd50dd4c5087e3df5a2ada5c1450ae509fd6f7fcc4defc90400168dcd2a140d039f94b6b2e86da05a1b3a3c98f19fed1289d4deb03bdd9dc0ec78df62c1a4adc819b56ff54104b1d470dd140006", 0xf3}, {&(0x7f00000019c0)="a8a8f4ebdb43236593be8706cf4ba2d797429eb4a9e3d6a5cdd11abd8838a5ae670cf57544d1081f38a57f380ea67de5a7fd0c9d82da13940932323a12d639823c918187b38b1d661c5aacbf39f2d3e17e8c438a2ec7fbc75b6b82af8f5d1893c5a7077e884ab5982b7d3ba3dd536ed218de8a118d19aebf653df81f9d8bc88e185802429b7bb14c5431bf343441fb38f26ebb4d3b469cca5143979aae8e2e79aafed2a878457ea92db6108ff2755807bdcd43b72218ba45d9509e6059aaa398a00b3156a28aa0ddff6f755bb7d843f42e851a123c4dae94911e78eda5f4ac302a8a9a114f358c770c6ac6be1181d5f1a2037be453c95d4a0f812bf1237eda889ec5f0e5329521a54b2cf5ee8f54e3aa7d1e0b3ed2332657f16b0077d64c9dafee35523af8be293f0b90e9e443a5e477cce8dd4946079b1094f4c2b877bb949023a56d9387e50eecf97a6769576348cfb8244d76c48f07e28736117b3816b8386716af70a9e4ea82baba387bedf143f9c198e8c0d8e8439e11dd7ffa1557c06a51beb2dd2db2d3dcc6a7de3131ce4138278155a954d380b3ffa43a990545ca336d0e56971da17d07b83f97663bddc3545666d85a9f9063e813c56d9e006263441dcc408508baa471e68d1503beab268ecc7b8267fbadd6e1903b7aff3c89f64283b818246d09727372c5e9bef7acd7a9d51c5dd8c69ce5c6084da280faad242058a4d7639ae90ea842794123d785c9af95728bf964708bc452f1ee3af9755de11afdeb592e9c37276d7e382a8ce4503d44a5e73aa89919447a4829da8331b76e4bab991826e4c888897456835d2483ae45929baf9839b97eca0d7b6ef7dcbff178ad1028bae8f49ba00f3ce0c6dbed507b06cb58547f89b854d578c0b393a0aa05b70e2c91e0077b4491168da1923d67685d5c35b84046dc0ff9e2f1086b517dc9a8090934713a9c0dab63738bd82649c0b199855f1968d8733aef26c3547188fc5de460a554298e654f684bf26f357c22a8dece9eb77909afdfadb28f873a3ee6cfbd1de3adfa2a12506fae4138c1e8b13f06536b0ad3c3b70a5f984d252681a7a7c5d51e4545127d19dd95f552b4e2ed9c5cfa7c552ee8f9e1da9acd7b1d6abbc7c92d84044d8a34c74ca5133c6a8c66350f27a6dc30c845e66cde1f39157bc7dfb63770341025af40063b5b59235971c68fede1842ed709b4667a0238ad22733678cd45b9de05abbffc0bc2db873d0f83ebe35be03fe607a187122c648bdc85ce41c4177dbf95493db9bb65980a6c93e30054332df19c70064a8d483622600dd5f1e41ac62d405776623a55503a0aa2161ecd993c53c1d21e269c8944118e606f214369499b2392abb5dc18074e3220e41dbd49e8f33b6ce44a7da3b2da863bd5860b81729340b18e11df81d0bf61c03c7812f06460f9cf4ce975f30b6b2ff708d624f4e8118b034e719b75107a7ce780026566812d59d8eab7def85997d2af2e2165b420c615750ee59846f409e9e53d2fc4db5ae6dec6aec7892e097fed447f597d301950a38e2fa4638af6e2ea9824b87dd355fb197351c000e880797cfe492a29d6f02d70514bd73effcce74395fe2fdc3dd07d30f699faf58020bca23afadc1a7f9307ad653fcc13f77ca1cf816d08e95d31c239dd73183ded1c0755172cfb2639fcb67a11c78aa8b2cce468f3a885891dd445f74dd3e559171542b2b7b23fd9b58dd7f4d00ffeed7877948d942bc876c2f302eff90a6b696fb8b254ea2f11af9e516437cd8272eb10e01942e4970b3e4cc84ea33a9480194ad24e8909c946ad832a006da533c0754e1a552ce0908d353d5dc084c6f27434f0e79877d9cce1a7ba901093a84036a94e2dd6ba7a8dfdc01c2e2a75f522c174208133f0b8a35a1372d585f92e355c08c1f0f2312d4bd2c58703dd07aeeec7f289b07889915dfad7c21968783251e7b6539d6367185b43a67f05d926522be6a5b91d36a30a5e2bb3e18b5bb2f8423e0d32eaac23d74a2283f6af5b4d93d21deb4c0cf768af37a4791d6d57717ae3ae74961076791ca719ddab67d3c02e78418de05fef589e6b75ca43fbd9f0b749dea8359e525136a3959ab9f574de9557212b5103531a5bd6efdff482884b2cb3c6d1027a254537ea8445dd8fedd43e180fbb2233412617d57c26047908a61a9cced56a85dcf09f2897dfe9d7ebd38ccccf4ab960a8b59b02d4f77fd880532f7ccf8c3c3f1ab95bf78a2a90adcc7c77f2bed95b28b4119000997e32b06fdb0306014245dfe2f32d31b54b77d3cf544618ab50142d1fea39036fc7ad998fe0561f893d02042d600a94c36059f0724163e930df10ea6f12963ac0f7c6451b4e3537c42c9ac3071be03923070ec86a2160c0cb6d17b1d8f1a231c8529c4653ea7d3836a8e22ff68f8d67b478ce1886cbc33be396f40f8c74c246d1f0ced8d8250b06b64159c8a28556ce48b39ac12ccf89b13f5ec8f1418d4c13bd142dc1a3d91e616b19a7f2d3d58764c04c11b6bc65be45f0b3ee0acf3d713211bd41930afe9bc9c0c188069b34ce9d5f99fa49715579fff6e6ebac3794a3df014d6cc1cbbce28bba47c14eed3de0647897ea81c8795e9ae53f45ee9304e96ca6287bf4e499feeadecfb9756a98a89b3ee6468153a96f841f4c159468ecbc73de387578417487068df96a6959ff7bc739ad256e1d55d3cb547a249b7b062ceb3c7df069831b8299937f0ce6a5eaa093fadd25f0bb1071f7ace4adcdb4c0be3b4c96dc93c19957bdc88d5d09e3053c75f65056794e01d8442abf595ab888ed873f77913791b91daaf236335876a5cf05ec50f6a7ff2a51f1ac6f5f906bade482812a3ff6732512c8be7149751418d86e96b3c4890f37ab3c4db7259f5b820c2cdddeba682836496cb987c46483ece48b10bc2515533877dd56a021775e3aa04467a395d33a289f58a72b853efe6e373979bb42e0a0611404b60b4b15684913d0436d1973ccf52c256be8b96b33caee6db284b868c822b10ea50002fb9c826e24c143604e286d463e598ad1f28508145352c70f614bcd4057514659131ef5014fbeb886a5c24cd1a25890b93e54d6fdb615cc2abde6fb0d4072eea7c1f835ea39122d8e94ccbf16733af1c490c0e1f17486c469abe807b1020dddbb7cf41c09ac3da4e9e65aa42162812dc386bac21db1e898680478f4a24d890221a36a0ddf90fcb39511f63562151e463366ab4ce7078990f2a918d3e5dd35d6232166b74aa0c133fa18748c6fe1e42fe61c2fe8eac1a4acf74133eb712c03ae9751d94532b57bde95fd3a5f3f2d1eaf69c4fdb508e9f80164c2a3c4dadeb66f1dc6cc4a81f44ea77ce6babec27f1d5efe1eeaf0add41c5424d5d98b3a1dd95af288a8a5fdff2bf317c26764eb72d02d069d306a1fcebebc8dd1a4a16d3d244536098629e715a1bf89db1e2e58fa9e12954750ff597ae6a8394e1f20e7b7e19d7f4c423d43a4df90c10f56e4e5ec102c631259a0d1291f58aee13e3c4336bf4f862c7c7d54cfacfc3caa206f0d3efc7846147c6fe3425a6213063b2e7075dca6c83e8de7ae592fd901eb1ffa8d35cc96e9c78d0aa0da6e22a45122672c0efacc13e7276a87349e6523b3426f91ae6b92e00627a32c40f118ad481a4cd19aa13e899fa41d70293936e488fa5096646337060ef6a94a1f06718694288b50ec9d7e3fd471e137891437f8d8e7b58c995000e432dea4b918a713318c1d66fb0f3643fe5aa1f71c8ab2d7bd4c0b22f7f3a49dbe75748d300dbc50086bfbde414213f1a565d7d0af87715390c7fa44fa1469a9833577be6261d1e3a0293c32320f06e928fd9064cf9de7ff1c06444b4652a09a09b31731abf62897f98a3208f38bec1227ff95c8c5936d7fa7d64f847b9dc190420b3590d1a797bc5e877761c65e85558b650a7dbea1fae007d5520dd1c80696e51d158a9ec3265996e7e72d3b00247457e1fd7844b208fcb7711039da6600bf5cd4c819de0ef807110bbbf3729f8b260fd42330506ae5daff08ed3bae53c765c54462c1ce58c2a13a5d7c9d9e206685da711bd63947d39c837cca8aa16e32d0e5eb2059e9c11906e110accc93c16f74214be928457b4ca12ba6188c48e03f1d5f2d428bb9c037a918f0387d4ffba23bee97bba743acec514d43ca3a0c5ff17cb6a31bdfbaa888d615338bd423b18486704f80f9b2b0094eca5ae8feb1506d050812ed3d38ecf20cd5f5927e691fad9223b2581531d6e9405961ee1e7bc3b9f3b0576ab596844ffa514c78bcc1a0e2f899c9341ca6726620977cb5d05c65711b9cdc6463f8a54a342f26f639c5b26685e3275a592f7d54e769eccccd194b2c8887b182cea2640bb6ddf5ad54709ab686ebd9511de88b0a34b1317bc9326e17d23b8b430772aaccf8e13b365db18bf98fa4522b101bfe31c38d5a580ad36bb6504d687cbbb1a76a77eda5e3f6999c3b46b70c56a88d87273dba237f3d7bfe534f7a48ee16693694f9ea45f2ea26e91ec8bd044bb3b5f2f61b321341cee1b332a849e54006c74a1e72e676ce1b26a9de315128845269cee081aefde9176d73b168b94ef439115ac43bdae7c0e30ee8936b5fa90a0ac8eac3af59e11789720dbd6b0898408923ed26f2ab54402f608eb55f5987281a3c08d8dfc24b9072d12a49662d1187977d77560649d3aee8df624f9a182c403401e0a4673b73723c8c654d6f39fa59054f58144e719bf5bf58065e54881c7a48620fe4b38d2d7928f1312af992216923c5804768bc29934228b8c3a337450902a96d8ad3cd34480726b822deacbaddc9d44157c8ab7487930af7df0e324ae1c06eb9a321e9fedfbe5d995b971a802535b6858e38497517f1dc062563239e793f804e109301d781a13dee4fe40c20c51a0b77943178afb1dfef48380d1964bb7a4d9ae6a1eeb0016f8a5979c31d72816d1483d4c1915bca7cd9dce7d2b4a27739b55dfcefe1f37409c34d06f399a235c3caff94dca0925e66851449ac03c33f83350f3e7435768f4d8f520b6b027467e3c3c5deee134d20b32355b1b9b6ad0a3a4886c6206132d260384c6857ac066a7820f3ec7a5ccdf2db5c3af7712291108adc39986eb060b9708311f90eacf3d110ccb20a35ff06ea3bc8d429c4c2c63d10952ba0dfe471f9efa799d3607f9ca802a7f4a2b9fac46e0dba8c3e050607130d462829c1b57842a1df378066c0b41983257a70811696534f58141f47706c9e0ec0c0ba406ac43e4a60f4d860ef66a5ebe94d46f2ce3835322c367ef3363730e1183d3b218bd0b9844aa599867696206d22b712d347d2a69a0cc59f31cf731a0ef53bc08fe51098457b2d2c621ba3b9e16f4957e635d3dd9bf2e216c3f7e455ebb5c11bc6efe1614019b8bd929144c906cd548225ea0492b6f66d835c9386c7d1b1a3468debfc658e27d5be6a08abe71c940cc1a0072215e148ccb8c701b6113263e3a2465b735764e919a50009621b3377022b44c3f18f19ff38715396d50d0e19a492cc819079bb66123b56d54a5dba88ec32eab2935ad952f733ec8dc0d0aae24b5bdd2c6d01fa7308fc77005f0d63655b779b5caa389aa73e8c08833afd7c93092efdaf90bf4580830db168da8f638e08297669fd066603249810a5f8684e5973211426163f5beb4e152bad140105237006e7961364c47c2ab4cbd057578f26c6d9fbd226910433675dbab2f5a8d09483740905fd02754ba0904f0095e23a2f80dc58beb6741a8941c622e3bdfe616349f39375a1c0508952c6d7f74dbe17", 0x1000}, {&(0x7f0000001500)="71d5eb741c0f7030a0cf14f4db548665d7e8b5793e6b0fa8720d80e49c7991fba2947b2bd92e4fbf516a3679dc32f7bf43d8b9dadc7932c5a8c349e65142b67661bb523e1e6b0aa373c7feb8d0d3f792a51aa2449d1018ccf204e084a6414e0c931c85f39225ba4fe0f3f738f09dcfc5b7ab1f495d346b7a1e0810eae99cfec927fb161bbbaca14c39fc554bc92e9d3f2e0499cc8819a948d078a5eb258f2fe70ee863edae00d78418ac4efb1042fb2d1bd89424fae829541b32c021472e4c31bb5fd8b444fcfc907580eadb7c099647f0912576ea1853aece26510369914ec3dece4348636924017fb6a680cb877673ab90f3e9a151", 0xf6}, {&(0x7f0000001600)="5a149e179f9e6b7f642f250bf622d83c6d18bae1cfb3873e437c8580e1afa10014e923e91614154ae881faf46b9772c315c76154e6d077307671171ebb4512b635c0212f9d4dbeaf2439faf49536c557ed8d50b4a5c5db61654d09348cef6737fa8fcf697419857da27f306c72ce82d59debfc19b203ef14b532663c5fde825097042a9bd34015212b02833277da6b8380244361ecc8428c198a301af31df4e30f0963646ec06ac1be7d55339b55001d1ad6607411c1199aa1423c3fa534c312d87cf8dd5c9ed85a89d98f9802e4a0547b402486a3a5e88e6697735c82880514b07d666e863894f780516af66d250516a9b6b49172bbc42ddcd4aa4b87", 0xfd}, {&(0x7f0000001700)="781ff4d93fa98b99c2d04fd4f06632e2115c19c187a5850292c9f3a235aaeea993c4a7e1a7a8ae5965d580b9e73f6954f5bdbab76d8b1e1a48ebf64695fbe67358f70291d5c32936e7eb8ca0608268f6743421857991e13450e58983465b0dbda4aba4f1689b36b14dda6919a4bc90364bee6a23f0d9f06e331bbe9b7c1a419055818875aaaea68390e00c958b1e2fec8611e05d939383edda05dffd653d832fcd6775861863", 0xa6}, {&(0x7f00000018c0)="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", 0xfe}], 0x7}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0x0, 0x1fc}, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.361528643s ago: executing program 4 (id=4321): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x4b) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x2, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x20044000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', &(0x7f0000000300)={[&(0x7f0000000180)='&\x00', &(0x7f00000001c0)='&\x00']}, &(0x7f0000000480)={[&(0x7f0000000380)='gre0\x00']}) mbind(&(0x7f000036f000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0xd, 0x8, 0x6) r7 = io_uring_setup(0x70f8, &(0x7f00000005c0)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x49}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000300)={[0x7, 0xffffffffffffffca, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x8, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)={0x10, 0x34, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}], 0x1}, 0x20040051) 2.445101315s ago: executing program 4 (id=4322): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) shutdown(r1, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1b8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0x104, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0x2, @in=@dev, 0xffffffff}]}]}, 0x1b8}}, 0x0) 2.382023242s ago: executing program 1 (id=4323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x48800) 2.292544964s ago: executing program 1 (id=4324): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) (fail_nth: 7) 1.808922111s ago: executing program 1 (id=4325): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0xa, 0xfffffff7) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x9002, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0xe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x200, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000240)=[0x1], &(0x7f0000000200), &(0x7f00000002c0)}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac"], 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 1.206769092s ago: executing program 2 (id=4326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1f8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0x144, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x2}]}]}, 0x1f8}}, 0x0) r1 = userfaultfd(0x800) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000240)={0x20, 0x16, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 1.053438986s ago: executing program 4 (id=4327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) 995.580929ms ago: executing program 4 (id=4328): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000007c0)="39000000140081ae0000dc676f3897daf01e2357f9ffffffffffffff0521018701546fb8ca1b4e8a06a6580e88370200c54c19", 0x33}], 0x1}, 0x4) 939.064565ms ago: executing program 1 (id=4329): pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=0x0, @ANYRESHEX=r3], 0x20) 933.317433ms ago: executing program 4 (id=4330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 840.781371ms ago: executing program 1 (id=4331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000000580)={{0x2, 0x3, 0x6, 0x9, 0x6, 0x4}, 0x178, [0x0, 0x5, 0x3, 0x80000000, 0x4, 0x0, 0xf0, 0x7, 0xffff, 0x2, 0x9, 0x800, 0x4, 0x5, 0x7, 0xf, 0x4, 0x0, 0x8, 0xe8, 0x71c8, 0x1, 0x100, 0x7, 0x9, 0xffff, 0x100, 0x8001, 0x3, 0x3, 0x0, 0x8, 0x2, 0x28, 0x9, 0x81, 0x5, 0x3, 0x4, 0x35f, 0x51, 0x9, 0xe, 0x6, 0x3, 0x100, 0xffffffe2, 0x4, 0xb9, 0x7fff, 0xfffffffe, 0x40, 0x6, 0x3, 0x100, 0x7fff, 0x9, 0xd, 0x0, 0x9, 0x8, 0x8000, 0x9, 0xaf5, 0x8, 0x3, 0x1, 0x6, 0x3, 0x76ac162d, 0x7, 0xd, 0x101, 0x80, 0x4, 0x9, 0x8d3a, 0x0, 0x6, 0x1, 0x8000, 0x5, 0x9, 0x835, 0x3, 0x8, 0x7, 0x9, 0xf, 0x5, 0x9, 0x8, 0xb1e, 0x3, 0x84c0, 0x8001, 0x9, 0x74f, 0x3, 0x1500, 0x8, 0x7fffffff, 0x5, 0x7, 0x10000000, 0x3, 0x5, 0x1, 0x1, 0x53, 0xd9, 0x93b, 0x5, 0x0, 0x8, 0xfffffffc, 0xffff, 0x9, 0x8, 0x2, 0x6a, 0x4b6, 0xfff, 0x4, 0x8, 0x80000001, 0x80000001, 0x5, 0x6e9, 0x0, 0x6e3, 0x7, 0x2, 0x9, 0xffffff80, 0x4, 0xab7, 0xb60b, 0x1, 0x0, 0x10, 0x3, 0xfffffffe, 0xf, 0xc3, 0x0, 0x8, 0x6, 0x7ff, 0x3, 0x7ff, 0x2, 0x1ff, 0x3, 0x3, 0x7ff, 0x3, 0x401, 0x7, 0xfffffff9, 0x10, 0x133f, 0x9, 0xc7f, 0x10000, 0xaf9e, 0x1b9, 0x3, 0x1, 0x9, 0x8, 0x4, 0x100020, 0xffffffff, 0x4, 0x6, 0x2, 0x3, 0x6, 0x8, 0x3, 0x10001, 0x3, 0x40, 0x3, 0x3, 0x8, 0x1, 0x0, 0x4, 0x9, 0xf2, 0x6, 0xff, 0x5, 0x66, 0x4, 0x401, 0x2, 0x0, 0x2, 0x13f, 0xff, 0x80000000, 0x6, 0x8, 0xfffffff4, 0xff, 0x7fffffff, 0x7f, 0x1, 0x0, 0x7f, 0xd, 0x800, 0x6e5, 0x1, 0x7fffffff, 0x6, 0x10, 0x3, 0x6, 0x7, 0x5400ea26, 0x4, 0x4, 0x1ff, 0x9, 0x0, 0x8, 0x2, 0xf, 0x0, 0x8000, 0x3, 0x1, 0x4c, 0x3, 0x5, 0x84ca, 0x3, 0x5, 0x0, 0xfffffff9, 0x3, 0x2b06, 0xfffffff8, 0xfffffffa, 0x0, 0x3, 0x2, 0xfff, 0x6, 0xffff, 0xfffffffb, 0x100, 0x4, 0x6, 0xe, 0x1, 0x8000, 0x10001, 0x2, 0x6, 0x8, 0x7e8, 0x63c, 0x4, 0x7, 0x53f, 0x3, 0xb, 0x7f, 0x0, 0x40, 0x9, 0x74, 0x32f, 0x3, 0x6, 0x6, 0x8, 0x81, 0x9, 0x1, 0x4, 0x3, 0x6f773a3, 0x40, 0x1ff, 0xc, 0xe, 0x7e4a, 0x2, 0x7, 0xc, 0x4, 0x7, 0x348e6d65, 0x80000001, 0xb21d, 0x20000000, 0x8, 0x4, 0x100, 0xfff, 0xffffffac, 0x4b, 0x7f, 0x2, 0x2, 0x0, 0x0, 0xf, 0x75, 0x4b2f, 0x5, 0x6, 0x800, 0x809, 0x2, 0x3, 0x7, 0x2, 0x3, 0x9, 0x2, 0x3, 0x7, 0x3, 0x8d, 0x36, 0x2, 0xfdf, 0x7fffffff, 0xfffffff5, 0x80, 0x6, 0x5, 0xd0, 0x5, 0x2, 0x2, 0x697e, 0x7, 0x4, 0x9, 0x13c4, 0x667c, 0x1, 0xafcf, 0x5, 0x9d1a, 0x6, 0x9, 0x2, 0x4, 0x100, 0x40, 0x6, 0x544b, 0x9, 0x3, 0x7, 0x7, 0x3, 0x8001, 0x200, 0x0, 0x10000, 0x8001, 0x9d000, 0x3, 0x7, 0x2, 0xfffffffc, 0x3, 0x7ff, 0x6, 0x8, 0x100, 0x0, 0x3, 0x6, 0x2, 0x9, 0x0, 0x7fff, 0xc, 0x86, 0x7fffffff, 0x10001, 0xd6d, 0x8, 0x0, 0xc88, 0x38000, 0x800, 0x3ff, 0x3, 0x7b, 0x8, 0xe, 0xffffff80, 0x10000, 0x3, 0x863d, 0x7f, 0x27bf66b8, 0xfffffff9, 0x400, 0x8, 0x74d4, 0x1e, 0x1, 0x9, 0x125f, 0x8565, 0x8, 0x7, 0xffffffff, 0x7fff, 0x6, 0x0, 0x7, 0x8, 0xdb, 0xfffffff8, 0xc8, 0xffffe8f0, 0x7881, 0x7, 0x1, 0x6, 0x9, 0xffff, 0x0, 0x28b, 0x100, 0x1, 0x3, 0x5, 0x0, 0x9, 0x100, 0x43c95309, 0xffe000, 0x9, 0x3, 0x1, 0xbd, 0x1, 0x6, 0x7, 0x3, 0xffffffff, 0x9, 0x9, 0x7, 0x401, 0xb, 0x1, 0x0, 0x7ff, 0x7, 0x0, 0xfffffad2, 0x8, 0x4, 0xffffffff, 0x8, 0x0, 0x80000001, 0x6, 0x4, 0x7f, 0xe, 0x7fff, 0x6, 0x9, 0xb, 0xfff, 0xc, 0x4, 0x9, 0x0, 0xc, 0x0, 0x6, 0x7, 0x3c, 0x9bdd, 0x8, 0x2, 0x4820, 0x9, 0x4, 0x87bc, 0xa, 0x0, 0x7, 0x93b, 0x1, 0x80000001, 0x1, 0x1, 0xe6ca, 0x89d, 0x400, 0x2, 0x4, 0x4, 0xd8, 0x3, 0x6, 0x50, 0xffffffff, 0x3, 0x100, 0x9, 0x8d2d, 0x8, 0x8001, 0x9, 0xfffffffd, 0xffffffff, 0x1, 0x6, 0x5, 0x7, 0x1, 0x7, 0x7f, 0x1, 0x1, 0xff, 0xfffffff7, 0x6, 0x80000000, 0x38c4, 0x1, 0x1da, 0xe, 0x5, 0x3, 0x6, 0xcf5, 0xf5d5, 0x3, 0x3, 0x0, 0xd, 0x80, 0x459b, 0x35, 0x1, 0x5, 0x0, 0x9, 0x6, 0x3ff, 0x5277, 0x9, 0x8, 0x2, 0x9082, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x3, 0x9, 0xffff9afc, 0x2, 0xbc0, 0x0, 0x1000, 0xe, 0x3df, 0x4da, 0xf3, 0x600, 0x4, 0xffffff1c, 0x5b0, 0x1, 0x0, 0x3, 0x9, 0x9, 0xb, 0x6, 0x0, 0xb7, 0x400, 0x2, 0x9, 0x8, 0x808000, 0xc58, 0x0, 0x6, 0x10, 0x9, 0x9, 0x6c1, 0x1, 0x100, 0x8, 0xc, 0x3, 0x5, 0x0, 0x4, 0x81, 0x491, 0x3, 0x6, 0x3, 0x9, 0xd56, 0x3, 0x158, 0x5, 0x5, 0x1ff, 0xfffffb8c, 0x5, 0x2, 0x4, 0x7, 0xc, 0x1004, 0xfd2, 0x6, 0x0, 0x200, 0x9, 0x5, 0x6, 0x7, 0x7, 0x6, 0x2, 0x3, 0xd, 0x5, 0xfffffff8, 0x6, 0x1, 0x4, 0xc, 0x38bc9b51, 0x2, 0xe, 0xaeb, 0x7, 0x8, 0x4, 0xfffffff5, 0xfffffff7, 0x200, 0x0, 0x3, 0x6, 0x5, 0x8ab, 0x0, 0x1, 0x4, 0x8, 0x3, 0x3, 0x6, 0x101, 0x8, 0x1, 0x5, 0x2, 0x8, 0x7, 0x2, 0x3, 0x6, 0xc1e, 0x4, 0x2, 0x17, 0x7, 0x6, 0x3, 0x7fff, 0x8, 0x3, 0xe, 0x3, 0x8, 0x7, 0x9, 0x1, 0xa, 0xeb, 0x9, 0x3, 0xbfca, 0x7, 0x1f8f9d5, 0x3f, 0x6, 0xe, 0x33, 0x0, 0x7, 0x80000001, 0x7fffffff, 0x1, 0x6, 0x8, 0x7f, 0x7, 0x5, 0x7, 0x5, 0x7, 0x7ff, 0x2, 0xb6a, 0x10000, 0x6, 0x89, 0x3, 0xfffff706, 0x7fff, 0x20, 0x0, 0x4, 0x80, 0x8, 0x2, 0x6, 0x8, 0xa17, 0x0, 0x1, 0x36e480, 0x0, 0x3, 0x7, 0x7, 0x3, 0x7, 0x7, 0x6, 0x3, 0xffffffff, 0x6, 0x9, 0x81, 0x7, 0x7fff, 0x5, 0x468b6a76, 0x8, 0x4, 0x1ff, 0x400, 0x1000, 0x200, 0xfffff800, 0x9, 0xa, 0x0, 0x8001, 0x3ff, 0x2, 0x64bd, 0x1000, 0x4, 0x1, 0x0, 0x7, 0xfff, 0x2, 0x962, 0x0, 0x4, 0x3, 0xb, 0x7, 0x10, 0x6, 0x4, 0xf, 0x6, 0x8, 0x5e0, 0xfffffff1, 0xc, 0x0, 0x101, 0x1ff, 0x1, 0x80, 0x6, 0x9, 0x9, 0x3, 0x5, 0xf, 0xffffffff, 0x4, 0x9, 0x9, 0x3, 0x234, 0x66, 0x0, 0x800, 0x1, 0x5, 0x2, 0x1fca6ba, 0x3258, 0x5, 0x5, 0x1, 0x9c, 0x78e, 0x3b, 0x5, 0x4, 0x36f, 0x1, 0x6, 0x7, 0x9c37, 0x5, 0xff, 0x10001, 0x6, 0x50e7, 0x2, 0x800, 0x8, 0xf, 0x6bb1708e, 0x8, 0x3, 0x7, 0x0, 0x3, 0xfffffe00, 0xfffffff7, 0x800, 0xf94, 0x8, 0x8, 0x8e, 0x80000000, 0x3, 0x387, 0x4, 0x2, 0xfff, 0x400, 0x80, 0x8, 0xb, 0xc4, 0x0, 0x8, 0x1, 0x37, 0x9, 0x1, 0x3, 0x2, 0x5, 0x4, 0x7, 0x0, 0x750, 0x3, 0x8, 0x101, 0x7, 0x5, 0xff, 0x200, 0xa5d, 0xb4, 0x6, 0xd, 0x0, 0x6, 0x62, 0x874, 0x400, 0x3, 0x89, 0x7, 0xdf, 0xb, 0x4, 0xff, 0x8, 0x401, 0x4, 0x4, 0x4, 0x7e, 0xcfd3, 0x9, 0x2c00000, 0xf0a, 0x101, 0x4000000, 0x101, 0x9, 0x1, 0x0, 0x7, 0xfffffff3, 0x5, 0x7, 0x7ff, 0x6, 0xffffffff, 0x5, 0xffffff99, 0x3, 0x2, 0x8e85, 0x0, 0x81, 0xc, 0x758, 0x8001, 0x2, 0x76, 0x0, 0x3, 0x7, 0xfff, 0x5, 0x8, 0x7, 0xa460, 0x5ce, 0x7ff, 0x4c1c, 0xe44a, 0xffffffff, 0x3, 0x6, 0x6, 0x9, 0x4, 0x0, 0xeb9, 0xbcec, 0x100, 0x5, 0x7, 0x48000, 0xfffffff8, 0x6, 0xa1, 0x8, 0x8, 0x4, 0x5b, 0xb503, 0x7, 0x4, 0x1, 0x6, 0x8, 0xe9d, 0xffffffff, 0x8423, 0x4, 0x7, 0x400, 0x9, 0x5, 0x0, 0x8, 0x80000000, 0x9, 0x80000000, 0x6089ef11, 0x0, 0x5, 0x7, 0x6, 0xb, 0x7, 0x3, 0x9, 0x8, 0x3, 0x8, 0x2, 0x4, 0x3, 0x5, 0x8, 0x2, 0x10, 0x101, 0x7, 0x6def130f, 0xfe4, 0x0, 0x0, 0x2, 0x2c, 0x800, 0xb66, 0xa92f, 0x5]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) r8 = io_uring_setup(0x3b84, &(0x7f0000000140)={0x0, 0x1ab5, 0x100, 0x3, 0x131}) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000100)=[r7], 0x1) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket(0x1d, 0x2, 0x6) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3, 0x65, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, {[@end]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x0, 0x5}, {"0aa5c33f99d4ca55079f7a082b0692cf76884680c3155d7f4de00c8715305cb832efbc174a6f7301f1874de09ee8f1da69ffc2abdd2d94bfd1"}}}}, 0x73) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000240)={{0x2, 0x4e21, @remote}, {0x306, @random="7a305aef26a7"}, 0x32, {0x2, 0x4e21, @private=0xa010100}, 'veth0_to_hsr\x00'}) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f00000001c0)='bridge_slave_1\x00') getpeername$packet(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x91b1697a6afb38a0}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa00}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 832.724044ms ago: executing program 4 (id=4332): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00009701872a6eede805163262be", @ANYRES16=r3, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup3(0xffffffffffffffff, r4, 0x80000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000080)=0x7) r6 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) unlinkat(r7, &(0x7f00000000c0)='./bus\x00', 0x200) r8 = socket(0x11, 0x800000003, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000000040)='devpts\x00', 0x1) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) setxattr$incfs_id(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000240)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000002500)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d0000000000000007"], 0x20}, 0x48800) sendto$packet(r8, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r11, 0x1, 0x4, 0x6, @local}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, r11}, 0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) 609.387324ms ago: executing program 0 (id=4333): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0xc8, &(0x7f0000000700)="72c310ee3e73920d0dc3052d4ce181d032ecb02f301f57edab0edfadfeaea2dd697482893bd57292506e26d6633bb1b8806cce7544bbf1a5ead965eb492c8a669161dc927bce5be99deb47fd94fcf3112245ebbb4748baabf645ad4c18dbdace305ef2eedda0c9dc19e19da3ab7e7fc1d855f378e47f6618b7fd699daa0b552e1196c028d1431886d6ca137ecf2a6f26e1e5cfe12ab679c541c51252d8ea5edc670b5f37f59441175991adbe6bf68634d165df24576d7eaefc6de1cd5055e8fca8f57f1d815c9eee"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)={0x2, 0xf, 0x6, 0x3, 0x7, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_lifetime={0x4, 0x4, 0x1, 0x3, 0x3, 0x8000000000000000}]}, 0x38}}, 0xc000) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x8400) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, 0x0, 0x78) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffff00, 0xff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000ec0)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r9, 0xb703, 0x0) read$snddsp(r8, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006d02"]) fcntl$addseals(r2, 0x409, 0x8) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x400c4150, &(0x7f0000000080)={0x0, &(0x7f00000001c0)="209d7009c243625cdf6cd1511b1aaa4db797a310c49c62b89f8065a0d1009f8a954aef7f76a02cc381f3928a644dd269c71d55a4c7d2fab6be3822082992c9ce20378617fa2a232bbb0465208c4fd1f5eb94e291e7dbbc8721c1e9c69eeec5e958aaaef5451aa61f4af31a29b6a3a45de98eacd3bdc90b45a374a6a2beabca45beefd54840644af2de9fb1468fe3bf17172ce976245c3fbb8abb3c36b83719e2561442e6e4ae41c423e1610e280ab39b8d56ce70294db45ee3d33b592d58e221890a81d388de9914f15dd60625caa976849a9206b023c09fc1e250acbbf718b3179a49ffa283b3dec7b975", 0xeb}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9003, 0x0) 479.651117ms ago: executing program 0 (id=4334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x48800) 407.949041ms ago: executing program 0 (id=4335): unshare(0x28040600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@remote, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x3}}, 0xe8) close(r1) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) bind$inet6(r0, 0x0, 0x0) 116.56949ms ago: executing program 3 (id=4336): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x60}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x400, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb4}}, 0x10) 0s ago: executing program 3 (id=4337): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_usb_disconnect(r0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0xc, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x10, &(0x7f0000000d00)=ANY=[@ANYBLOB="000f9c000000cdfc2dfe8972e6794f33ef30df269c21a3f55c4468191d67f04e623e4a78fd8fa855eff41327a1fa24e7f4ae5e1f2d8e6dfeb12d12c6630f31b070792d65b298ade235915f584b14b1a786de759b905cb5089dae8a7253c257dcb551b73e0eb0c16e409156eca275816d232c8893d80ff1312a4da2149c4d2941f280394bccd57be01c34cf9a65f843"], 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume', 0x42, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000000)={0xd, 0x3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x10001, 0x800}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) ioctl$EVIOCRMFF(r5, 0x550c, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240), 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x3, 0x65, 0x7, r4}) syz_usb_control_io(r0, &(0x7f0000000840)={0x18, &(0x7f0000000780)={0x20, 0x6, 0x79, {0x79, 0xf, "e564ec336a31955949223e43a92baf55737c2e6d06cbcff32483a41a7c38e092935ce6de5bd6578074a44bcfe8bddf8209fe891c63688be4bc764b548a391757ab480020ac168198c2fcd09a804fb9808a73b662b2127df1459801a0d6005875525e8f674086fc9708b527ff675a98e6b3b34799d01375"}}, 0x0, &(0x7f0000000680)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x7, 0x8, "c1a9dfa2", "3f0def89"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0xe, 0x1, 0x2, 0x3, 0x400}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000880)={0x0, 0x10}, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0xfeff}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, 'l$'}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @random="36c63be84bcc"}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "887a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1}, &(0x7f0000000c00)={0x40, 0x1e, 0x1}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0xe}}) io_setup(0x23, &(0x7f0000000140)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e40)={0x5, 0x0, [{0x0, 0x0, 0x0}, {0xdddd0000, 0x8e, &(0x7f0000000580)=""/142}, {0xffff1000, 0x1000, &(0x7f0000004200)=""/4096}, {0x4000, 0x88, &(0x7f0000000b40)=""/136}, {0xf000, 0x12, &(0x7f00000009c0)=""/18}]}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000640)={0x1, 0x0, [{0x10000, 0x2e, &(0x7f0000000180)=""/46}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) kernel console output (not intermixed with test programs): descriptor?? [ 1262.321525][ T5894] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1262.575367][ T9] usb 3-1: USB disconnect, device number 88 [ 1262.752365][ T1208] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1262.932690][ T1208] usb 4-1: Using ep0 maxpacket: 16 [ 1262.942025][ T1208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.000444][ T1208] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1263.013232][ T1208] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1263.023136][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.073483][ T1208] usb 4-1: config 0 descriptor?? [ 1263.514850][T19683] syzkaller1: entered promiscuous mode [ 1263.521778][T19683] syzkaller1: entered allmulticast mode [ 1263.642042][T19687] netlink: 'syz.0.3964': attribute type 5 has an invalid length. [ 1263.650674][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3964'. [ 1263.947068][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1264.152369][ T1208] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1264.324628][ T1208] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1264.344041][ T1208] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1264.363175][ T1208] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1264.373674][ T5880] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1264.390851][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1264.406486][ T1208] usb 1-1: Product: syz [ 1264.411082][ T1208] usb 1-1: Manufacturer: syz [ 1264.446322][ T1208] usb 1-1: SerialNumber: syz [ 1264.465854][ T1208] usb 1-1: config 0 descriptor?? [ 1264.497121][ T1208] usb 1-1: selecting invalid altsetting 0 [ 1264.532450][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 1264.551577][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1264.575102][ T5880] usb 5-1: config 12 has an invalid interface number: 184 but max is 0 [ 1264.599426][ T5880] usb 5-1: config 12 has no interface number 0 [ 1264.616661][ T5880] usb 5-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1264.672389][ T5880] usb 5-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 1264.697595][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.737583][ T49] usb 1-1: USB disconnect, device number 103 [ 1264.744789][ T5880] usb 5-1: Product: syz [ 1264.755088][ T5880] usb 5-1: Manufacturer: syz [ 1264.766164][ T5880] usb 5-1: SerialNumber: syz [ 1265.138800][T19700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.149368][T19700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.184891][ T5880] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1265.216726][ T5880] usb 5-1: USB disconnect, device number 90 [ 1265.276216][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1265.374128][ T49] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 1265.408598][ T5894] usb 4-1: USB disconnect, device number 55 [ 1265.543452][ T49] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1265.551867][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.565312][ T49] usb 3-1: config 0 has no interface number 0 [ 1265.588528][ T49] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1265.601174][ T49] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.610893][T19715] syzkaller1: entered promiscuous mode [ 1265.614614][ T49] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1265.620366][T19715] syzkaller1: entered allmulticast mode [ 1265.629095][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.632706][ T49] usb 3-1: config 0 descriptor?? [ 1265.651710][ T49] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1265.877947][ T49] usb 3-1: USB disconnect, device number 89 [ 1265.884749][T19718] netlink: 'syz.0.3976': attribute type 5 has an invalid length. [ 1265.893095][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1266.039165][T19721] FAULT_INJECTION: forcing a failure. [ 1266.039165][T19721] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.052474][ T5894] IPVS: starting estimator thread 0... [ 1266.063657][T19721] CPU: 1 UID: 0 PID: 19721 Comm: syz.0.3978 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1266.063688][T19721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1266.063703][T19721] Call Trace: [ 1266.063713][T19721] [ 1266.063723][T19721] dump_stack_lvl+0x189/0x250 [ 1266.063764][T19721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1266.063796][T19721] ? __pfx__printk+0x10/0x10 [ 1266.063825][T19721] ? __pfx___might_resched+0x10/0x10 [ 1266.063846][T19721] ? fs_reclaim_acquire+0x7d/0x100 [ 1266.063886][T19721] should_fail_ex+0x414/0x560 [ 1266.063916][T19721] should_failslab+0xa8/0x100 [ 1266.063947][T19721] __kmalloc_cache_noprof+0x70/0x3d0 [ 1266.063977][T19721] ? ip_vs_add_dest+0xfd8/0x1b00 [ 1266.064018][T19721] ip_vs_add_dest+0xfd8/0x1b00 [ 1266.064060][T19721] ? ip_vs_add_dest+0x2a1/0x1b00 [ 1266.064094][T19721] ? __lock_acquire+0xaac/0xd20 [ 1266.064128][T19721] ? __pfx_ip_vs_add_dest+0x10/0x10 [ 1266.064181][T19721] do_ip_vs_set_ctl+0x90d/0xa60 [ 1266.064220][T19721] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1266.064247][T19721] ? rcu_is_watching+0x15/0xb0 [ 1266.064286][T19721] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1266.064324][T19721] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1266.064353][T19721] ? aa_sk_perm+0x81e/0x950 [ 1266.064381][T19721] ? __pfx_aa_sk_perm+0x10/0x10 [ 1266.064412][T19721] nf_setsockopt+0x26c/0x290 [ 1266.064442][T19721] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1266.064471][T19721] do_sock_setsockopt+0x257/0x3e0 [ 1266.064503][T19721] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1266.064530][T19721] ? __fget_files+0x2a/0x420 [ 1266.064565][T19721] ? __fget_files+0x3a0/0x420 [ 1266.064593][T19721] ? __fget_files+0x2a/0x420 [ 1266.064647][T19721] __ia32_sys_setsockopt+0x18b/0x220 [ 1266.064685][T19721] __do_fast_syscall_32+0xb4/0x110 [ 1266.064717][T19721] ? lockdep_hardirqs_on+0x9c/0x150 [ 1266.064750][T19721] do_fast_syscall_32+0x34/0x80 [ 1266.064780][T19721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1266.064806][T19721] RIP: 0023:0xf7f65539 [ 1266.064824][T19721] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1266.064844][T19721] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1266.064866][T19721] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1266.064881][T19721] RDX: 0000000000000487 RSI: 0000000080000000 RDI: 0000000000000044 [ 1266.064896][T19721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.064909][T19721] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1266.064922][T19721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1266.064954][T19721] [ 1266.393997][ T5880] IPVS: starting estimator thread 0... [ 1266.415853][T19722] IPVS: using max 24 ests per chain, 57600 per kthread [ 1266.498411][T19733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.519061][T19733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.543632][T19727] IPVS: using max 25 ests per chain, 60000 per kthread [ 1266.692398][ T49] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1266.732680][ T5880] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1267.276603][ T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.297748][ T49] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1267.320408][ T49] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1267.329867][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.349954][ T49] usb 5-1: config 0 descriptor?? [ 1267.364548][ T49] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1267.371583][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 1267.484132][ T49] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1267.600802][ T49] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1267.608302][ T49] usb 5-1: media controller created [ 1267.652032][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1267.692404][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1267.785160][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 1267.796907][ T49] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1267.826267][ T49] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input130 [ 1267.846050][ T49] dvb-usb: schedule remote query interval to 150 msecs. [ 1267.860008][ T49] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1267.906723][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1267.912402][ T5886] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1268.062503][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1268.196266][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.207665][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1268.217029][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1268.227221][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.263517][ T9] usb 1-1: config 0 descriptor?? [ 1268.320737][ T49] dvb-usb: error while querying for an remote control event. [ 1268.330314][ T5886] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1268.341619][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1268.351469][ T5886] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1268.361007][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1268.372385][ T5886] usb 3-1: Product: syz [ 1268.376610][ T5886] usb 3-1: Manufacturer: syz [ 1268.381444][ T5886] usb 3-1: SerialNumber: syz [ 1268.400856][ T5886] usb 3-1: config 0 descriptor?? [ 1268.462678][ T5886] usb 3-1: selecting invalid altsetting 0 [ 1268.472487][ T5880] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1268.482380][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1268.488158][ T49] dvb-usb: error while querying for an remote control event. [ 1268.631618][ T5886] usb 3-1: USB disconnect, device number 90 [ 1268.668592][ T5880] usb 4-1: not running at top speed; connect to a high speed hub [ 1268.705338][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1268.716440][ T49] dvb-usb: error while querying for an remote control event. [ 1268.723095][ T5880] usb 4-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1268.737443][ T5880] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1268.768448][T19762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.774493][ T5880] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1268.786443][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.809717][ T5880] usb 4-1: Product: syz [ 1268.814671][ T5880] usb 4-1: Manufacturer: syz [ 1268.819465][ T5880] usb 4-1: SerialNumber: syz [ 1268.902854][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1268.942431][ T49] dvb-usb: error while querying for an remote control event. [ 1268.943026][T19762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.103740][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1269.187596][ T49] dvb-usb: error while querying for an remote control event. [ 1269.402390][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1269.551376][ T49] dvb-usb: error while querying for an remote control event. [ 1269.843999][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1269.849812][ T49] dvb-usb: error while querying for an remote control event. [ 1270.049074][T19782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3994'. [ 1270.062507][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1270.068499][ T49] dvb-usb: error while querying for an remote control event. [ 1270.125571][T19782] program syz.2.3994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1270.577653][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 1270.710865][ T5880] usb 4-1: USB disconnect, device number 57 [ 1271.052401][ T5886] dvb-usb: error while querying for an remote control event. [ 1271.087336][T11192] usb 5-1: USB disconnect, device number 91 [ 1271.205592][T11192] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1271.211570][T19792] pimreg: entered allmulticast mode [ 1271.221348][ T5894] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1271.308206][T19794] syz.4.3998 (19794): /proc/19793/oom_adj is deprecated, please use /proc/19793/oom_score_adj instead. [ 1271.357834][ T5886] usb 1-1: USB disconnect, device number 104 [ 1271.402355][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 1271.449169][ T5894] usb 2-1: config 128 has an invalid interface number: 51 but max is 0 [ 1271.462605][ T5894] usb 2-1: config 128 has no interface number 0 [ 1271.481814][ T5894] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1271.491311][ T5894] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1271.499603][ T5894] usb 2-1: Product: syz [ 1271.504010][ T5894] usb 2-1: Manufacturer: syz [ 1271.509738][ T5894] usb 2-1: SerialNumber: syz [ 1271.532779][ T5894] quatech2 2-1:128.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1271.581501][T19803] syzkaller1: entered promiscuous mode [ 1271.587801][T19803] syzkaller1: entered allmulticast mode [ 1272.551156][T19821] loop2: detected capacity change from 0 to 7 [ 1272.560540][T19821] Dev loop2: unable to read RDB block 7 [ 1272.570223][T19821] loop2: AHDI p1 p2 p3 [ 1272.593199][T19821] loop2: partition table partially beyond EOD, truncated [ 1272.634899][T19821] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1272.664273][T19821] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1273.093426][ T5894] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1273.100348][ T5894] quatech2 2-1:128.51: probe with driver quatech2 failed with error -71 [ 1273.118228][ T5894] usb 2-1: USB disconnect, device number 99 [ 1273.598692][T19835] input: syz0 as /devices/virtual/input/input131 [ 1273.922470][ T5880] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1274.084918][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 1274.097366][ T5880] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 1274.117218][ T5880] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 1274.147361][ T5880] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 1274.159743][ T5880] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 1274.175743][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.188816][ T5880] usb 2-1: Product: syz [ 1274.212296][ T5880] usb 2-1: Manufacturer: syz [ 1274.221333][ T5880] usb 2-1: SerialNumber: syz [ 1274.231393][ T5880] usb 2-1: config 0 descriptor?? [ 1274.245601][ T5880] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 1274.505788][ T5880] usb 2-1: USB disconnect, device number 100 [ 1274.712390][ T49] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1274.771725][T19867] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1274.799602][T19865] netlink: 'syz.0.4020': attribute type 29 has an invalid length. [ 1274.810147][T19865] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4020'. [ 1274.931983][ T49] usb 3-1: not running at top speed; connect to a high speed hub [ 1274.951593][ T49] usb 3-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1275.033573][ T49] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1275.055144][ T49] usb 3-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1275.082341][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.097476][ T49] usb 3-1: Product: syz [ 1275.101829][ T49] usb 3-1: Manufacturer: syz [ 1275.118274][ T49] usb 3-1: SerialNumber: syz [ 1276.642339][ T1208] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1277.272636][ T5894] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1277.434620][ T1208] usb 1-1: Using ep0 maxpacket: 32 [ 1277.686351][ T5894] usb 2-1: device descriptor read/64, error -71 [ 1277.940645][ T1208] usb 1-1: config index 0 descriptor too short (expected 16923, got 27) [ 1278.091942][ T1208] usb 1-1: config 242 has too many interfaces: 199, using maximum allowed: 32 [ 1278.101083][ T1208] usb 1-1: config 242 has an invalid interface descriptor of length 8, skipping [ 1278.122391][ T1208] usb 1-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.122401][ T5894] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1278.152398][ T1208] usb 1-1: config 242 has 0 interfaces, different from the descriptor's value: 199 [ 1278.178034][ T1208] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1278.189548][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.203145][ T1208] usb 1-1: Product: syz [ 1278.208616][ T1208] usb 1-1: Manufacturer: syz [ 1278.216296][ T1208] usb 1-1: SerialNumber: syz [ 1278.272472][ T5894] usb 2-1: device descriptor read/64, error -71 [ 1278.434979][ T49] usb 3-1: USB disconnect, device number 91 [ 1278.732844][ T5894] usb usb2-port1: attempt power cycle [ 1278.922338][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1279.072417][ T49] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1279.081007][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1279.093088][ T24] usb 5-1: config 128 has an invalid interface number: 51 but max is 0 [ 1279.101873][ T24] usb 5-1: config 128 has no interface number 0 [ 1279.113544][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1279.122867][ T24] usb 5-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1279.131264][ T24] usb 5-1: Product: syz [ 1279.135857][ T5894] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1279.143661][ T24] usb 5-1: Manufacturer: syz [ 1279.149098][ T24] usb 5-1: SerialNumber: syz [ 1279.163422][ T5894] usb 2-1: device descriptor read/8, error -71 [ 1279.626329][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 1279.744287][ T24] quatech2 5-1:128.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1279.830362][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1279.908353][ T49] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1279.954597][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1279.984436][ T49] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1279.994020][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.006839][ T49] usb 3-1: Product: syz [ 1280.016826][ T49] usb 3-1: Manufacturer: syz [ 1280.027684][ T49] usb 3-1: SerialNumber: syz [ 1280.110713][ T49] usb 3-1: config 0 descriptor?? [ 1280.133927][ T5894] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 1280.243723][ T5894] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1280.352942][ T49] radioshark 3-1:0.0: Invalid radioSHARK device [ 1280.359904][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.378542][ T49] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 1280.388008][ T5894] usb 2-1: config 0 has no interface number 0 [ 1280.395401][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1280.412555][ T1208] usb 1-1: USB disconnect, device number 105 [ 1280.469260][ T5894] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1280.535778][ T5894] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1280.568697][T19904] bridge5: entered promiscuous mode [ 1280.577682][ T5894] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1280.613673][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.658961][ T1208] usb 3-1: USB disconnect, device number 92 [ 1280.681599][ T5894] usb 2-1: config 0 descriptor?? [ 1280.725158][T19910] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1280.760950][ T5894] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1280.954657][ T1208] usb 2-1: USB disconnect, device number 104 [ 1281.455654][ T24] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1281.483473][ T24] quatech2 5-1:128.51: probe with driver quatech2 failed with error -71 [ 1281.535053][ T24] usb 5-1: USB disconnect, device number 92 [ 1282.095880][T19937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4041'. [ 1282.103272][T19935] FAULT_INJECTION: forcing a failure. [ 1282.103272][T19935] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.143412][T19935] CPU: 0 UID: 0 PID: 19935 Comm: syz.2.4039 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1282.143449][T19935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1282.143470][T19935] Call Trace: [ 1282.143481][T19935] [ 1282.143492][T19935] dump_stack_lvl+0x189/0x250 [ 1282.143538][T19935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1282.143575][T19935] ? __pfx__printk+0x10/0x10 [ 1282.143607][T19935] ? __pfx___might_resched+0x10/0x10 [ 1282.143636][T19935] should_fail_ex+0x414/0x560 [ 1282.143669][T19935] should_failslab+0xa8/0x100 [ 1282.143706][T19935] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1282.143741][T19935] ? __alloc_skb+0x112/0x2d0 [ 1282.143770][T19935] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1282.143800][T19935] __alloc_skb+0x112/0x2d0 [ 1282.143837][T19935] pfkey_sendmsg+0x1dd/0x1090 [ 1282.143871][T19935] ? __pfx___might_resched+0x10/0x10 [ 1282.143897][T19935] ? __lock_acquire+0xaac/0xd20 [ 1282.143936][T19935] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1282.143971][T19935] ? aa_sk_perm+0x81e/0x950 [ 1282.144003][T19935] ? __pfx_aa_sk_perm+0x10/0x10 [ 1282.144026][T19935] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1282.144063][T19935] ? __asan_memset+0x22/0x50 [ 1282.144088][T19935] ? __import_iovec+0x5d4/0x7f0 [ 1282.144131][T19935] ? aa_sock_msg_perm+0x94/0x160 [ 1282.144162][T19935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1282.144196][T19935] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1282.144223][T19935] __sock_sendmsg+0x219/0x270 [ 1282.144253][T19935] ____sys_sendmsg+0x505/0x830 [ 1282.144296][T19935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1282.144351][T19935] ___sys_sendmsg+0x21f/0x2a0 [ 1282.144390][T19935] ? __pfx____sys_sendmsg+0x10/0x10 [ 1282.144474][T19935] ? __fget_files+0x2a/0x420 [ 1282.144506][T19935] ? __fget_files+0x3a0/0x420 [ 1282.144552][T19935] __sys_sendmsg+0x164/0x220 [ 1282.144590][T19935] ? __pfx___sys_sendmsg+0x10/0x10 [ 1282.144643][T19935] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1282.144678][T19935] ? lockdep_hardirqs_on+0x9c/0x150 [ 1282.144713][T19935] __do_fast_syscall_32+0xb4/0x110 [ 1282.144747][T19935] ? lockdep_hardirqs_on+0x9c/0x150 [ 1282.144783][T19935] do_fast_syscall_32+0x34/0x80 [ 1282.144817][T19935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1282.144845][T19935] RIP: 0023:0xf705e539 [ 1282.144864][T19935] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1282.144886][T19935] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1282.144911][T19935] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 1282.144927][T19935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1282.144941][T19935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1282.144954][T19935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1282.144968][T19935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1282.145001][T19935] [ 1282.441831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1282.808267][T19943] IPv6: NLM_F_CREATE should be specified when creating new route [ 1283.013997][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1283.122396][ T49] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1283.222433][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1283.243638][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1283.268632][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1283.289907][ T49] usb 5-1: not running at top speed; connect to a high speed hub [ 1283.298355][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1283.333672][ T49] usb 5-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1283.352326][ T24] usb 2-1: Product: syz [ 1283.360438][ T24] usb 2-1: Manufacturer: syz [ 1283.365721][ T49] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1283.382380][ T24] usb 2-1: SerialNumber: syz [ 1283.398279][ T49] usb 5-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1283.408521][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.417799][ T49] usb 5-1: Product: syz [ 1283.423634][ T49] usb 5-1: Manufacturer: syz [ 1283.428325][ T49] usb 5-1: SerialNumber: syz [ 1283.458216][ T24] usb 2-1: config 0 descriptor?? [ 1283.518508][T19941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1283.776574][T19954] random: crng reseeded on system resumption [ 1283.853468][ T5894] usb 2-1: USB disconnect, device number 105 [ 1283.891225][T19953] netlink: 'syz.0.4044': attribute type 29 has an invalid length. [ 1283.923250][T19953] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4044'. [ 1284.169896][T19941] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4041'. [ 1284.180113][T19941] net_ratelimit: 9 callbacks suppressed [ 1284.180132][T19941] netlink: zone id is out of range [ 1284.202732][T19941] netlink: zone id is out of range [ 1284.212634][T19941] netlink: zone id is out of range [ 1284.217798][T19941] netlink: zone id is out of range [ 1284.227220][T19941] netlink: zone id is out of range [ 1284.242475][T19941] netlink: zone id is out of range [ 1284.248095][T19941] netlink: zone id is out of range [ 1284.254795][T19941] netlink: zone id is out of range [ 1284.262777][T19941] netlink: zone id is out of range [ 1284.268609][T19941] netlink: zone id is out of range [ 1285.502496][T19965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4050'. [ 1285.667123][ T49] usb 5-1: USB disconnect, device number 93 [ 1286.033038][ T5886] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1286.422389][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 1286.472469][ T1208] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1286.495903][ T5886] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1286.522474][ T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1286.672708][ T1208] usb 5-1: Using ep0 maxpacket: 16 [ 1286.672881][ T5886] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1286.700321][ T1208] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.738834][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1286.750069][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1286.758478][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1286.770392][ T5886] usb 3-1: Product: syz [ 1286.775291][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1286.785089][ T5886] usb 3-1: Manufacturer: syz [ 1286.789702][ T5886] usb 3-1: SerialNumber: syz [ 1286.796231][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.805210][ T5886] usb 3-1: config 0 descriptor?? [ 1286.812137][T19973] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1286.824115][T19981] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1286.860253][T19989] pimreg: left allmulticast mode [ 1286.888175][ T1208] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1286.907588][ T1208] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1286.933302][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.940577][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.991662][ T1208] usb 5-1: config 0 descriptor?? [ 1287.076302][ T9] usb 3-1: USB disconnect, device number 93 [ 1287.234327][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4057'. [ 1287.349302][T19981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.359368][T19981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.503724][ T1208] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1287.580546][T19994] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4050'. [ 1287.717618][ T1208] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1287.739441][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.871195][ T1208] usb 1-1: Product: syz [ 1287.944480][ T1208] usb 1-1: Manufacturer: syz [ 1287.949337][ T1208] usb 1-1: SerialNumber: syz [ 1287.957831][ T1208] usb 1-1: config 0 descriptor?? [ 1287.971010][ T1208] ch341 1-1:0.0: ch341-uart converter detected [ 1288.388730][ T1208] usb 1-1: failed to send control message: -71 [ 1288.391127][T19999] syzkaller1: entered promiscuous mode [ 1288.415012][ T1208] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1288.443331][T19999] syzkaller1: entered allmulticast mode [ 1288.498546][ T1208] usb 1-1: USB disconnect, device number 106 [ 1288.601002][ T1208] ch341 1-1:0.0: device disconnected [ 1289.010262][ T24] usb 2-1: USB disconnect, device number 106 [ 1289.084518][T20005] netlink: 'syz.1.4061': attribute type 10 has an invalid length. [ 1289.302865][T20009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4064'. [ 1289.312007][T20009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1289.319462][T20009] IPv6: NLM_F_CREATE should be set when creating new route [ 1289.406404][T20011] input: syz1 as /devices/virtual/input/input133 [ 1289.937144][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4068'. [ 1289.988496][ T24] usb 5-1: USB disconnect, device number 94 [ 1290.362387][ T1208] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1291.133059][ T1208] usb 1-1: not running at top speed; connect to a high speed hub [ 1291.222864][ T1208] usb 1-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1291.242362][ T1208] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1291.257457][ T1208] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1291.266830][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.276811][ T1208] usb 1-1: Product: syz [ 1291.281024][ T1208] usb 1-1: Manufacturer: syz [ 1291.286121][ T1208] usb 1-1: SerialNumber: syz [ 1291.742385][ T5843] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1291.798754][T20037] netlink: 'syz.1.4073': attribute type 10 has an invalid length. [ 1291.973358][T20042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4075'. [ 1291.982667][T20042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1291.995082][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 1292.010003][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.065611][T20041] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4074'. [ 1292.160907][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.251460][ T5843] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1292.310872][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.344180][ T5843] usb 4-1: config 0 descriptor?? [ 1292.372040][ T5843] hub 4-1:0.0: USB hub found [ 1292.522507][ T5880] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1292.538469][T20051] FAULT_INJECTION: forcing a failure. [ 1292.538469][T20051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1292.561980][T20051] CPU: 0 UID: 0 PID: 20051 Comm: syz.4.4079 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1292.562022][T20051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1292.562036][T20051] Call Trace: [ 1292.562049][T20051] [ 1292.562059][T20051] dump_stack_lvl+0x189/0x250 [ 1292.562099][T20051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1292.562131][T20051] ? __pfx__printk+0x10/0x10 [ 1292.562164][T20051] should_fail_ex+0x414/0x560 [ 1292.562194][T20051] _copy_to_user+0x31/0xb0 [ 1292.562232][T20051] simple_read_from_buffer+0xe1/0x170 [ 1292.562265][T20051] proc_fail_nth_read+0x1df/0x250 [ 1292.562299][T20051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1292.562335][T20051] ? rw_verify_area+0x258/0x650 [ 1292.562360][T20051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1292.562394][T20051] vfs_read+0x1fd/0x980 [ 1292.562426][T20051] ? __pfx___mutex_lock+0x10/0x10 [ 1292.562457][T20051] ? __pfx_vfs_read+0x10/0x10 [ 1292.562485][T20051] ? __fget_files+0x2a/0x420 [ 1292.562520][T20051] ? __fget_files+0x3a0/0x420 [ 1292.562548][T20051] ? __fget_files+0x2a/0x420 [ 1292.562588][T20051] ksys_read+0x145/0x250 [ 1292.562615][T20051] ? __pfx_ksys_read+0x10/0x10 [ 1292.562643][T20051] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1292.562675][T20051] ? lockdep_hardirqs_on+0x9c/0x150 [ 1292.562705][T20051] __do_fast_syscall_32+0xb4/0x110 [ 1292.562736][T20051] ? lockdep_hardirqs_on+0x9c/0x150 [ 1292.562768][T20051] do_fast_syscall_32+0x34/0x80 [ 1292.562798][T20051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1292.562824][T20051] RIP: 0023:0xf711e539 [ 1292.562843][T20051] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1292.562863][T20051] RSP: 002b:00000000f510e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1292.562886][T20051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f510e620 [ 1292.562901][T20051] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 1292.562915][T20051] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1292.562927][T20051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1292.562940][T20051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1292.562971][T20051] [ 1292.787166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.846301][T20053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4080'. [ 1292.915030][ T5843] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1292.930627][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.940912][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1292.958798][ T5880] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1292.968933][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1292.977213][ T5880] usb 2-1: SerialNumber: syz [ 1293.084454][T20032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.098790][T20032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.197338][ T5880] usb 2-1: bad CDC descriptors [ 1293.209590][ T5880] usb 2-1: USB disconnect, device number 107 [ 1293.351985][ T1208] usb 1-1: USB disconnect, device number 107 [ 1293.557887][ T5843] usbhid 4-1:0.0: can't add hid device: -71 [ 1293.570103][ T5843] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1293.606007][ T5843] usb 4-1: USB disconnect, device number 58 [ 1293.781820][T20065] netlink: 'syz.1.4085': attribute type 10 has an invalid length. [ 1294.170546][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 1294.171168][ T30] audit: type=1326 audit(1747450069.113:14914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1294.222306][ T30] audit: type=1326 audit(1747450069.113:14915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1294.252488][ T30] audit: type=1326 audit(1747450069.133:14916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1294.276272][ T30] audit: type=1326 audit(1747450069.133:14917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1294.299100][ T30] audit: type=1326 audit(1747450069.133:14918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1294.327736][ T30] audit: type=1326 audit(1747450069.133:14919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1294.352033][ T30] audit: type=1326 audit(1747450069.133:14920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1294.430831][ T30] audit: type=1326 audit(1747450069.133:14921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1294.582574][ T30] audit: type=1326 audit(1747450069.133:14922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1294.695734][ T30] audit: type=1326 audit(1747450069.133:14923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1294.933340][T20078] netlink: 'syz.0.4090': attribute type 29 has an invalid length. [ 1294.942370][T20078] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4090'. [ 1295.082321][ T5843] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1295.297877][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 1295.332523][ T5843] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1295.340823][ T5843] usb 2-1: config 0 has no interface number 0 [ 1295.356194][ T5843] usb 2-1: config 0 interface 29 has no altsetting 0 [ 1295.358109][T20082] FAULT_INJECTION: forcing a failure. [ 1295.358109][T20082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.368969][ T5843] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1295.387178][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.391440][T20082] CPU: 1 UID: 0 PID: 20082 Comm: syz.3.4091 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1295.391477][T20082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1295.391494][T20082] Call Trace: [ 1295.391504][T20082] [ 1295.391515][T20082] dump_stack_lvl+0x189/0x250 [ 1295.391562][T20082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1295.391597][T20082] ? __pfx__printk+0x10/0x10 [ 1295.391633][T20082] should_fail_ex+0x414/0x560 [ 1295.391673][T20082] _copy_to_user+0x31/0xb0 [ 1295.391710][T20082] simple_read_from_buffer+0xe1/0x170 [ 1295.391746][T20082] proc_fail_nth_read+0x1df/0x250 [ 1295.391786][T20082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1295.391824][T20082] ? rw_verify_area+0x258/0x650 [ 1295.391852][T20082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1295.391887][T20082] vfs_read+0x1fd/0x980 [ 1295.391924][T20082] ? __pfx_vfs_read+0x10/0x10 [ 1295.391947][T20082] ? count_memcg_event_mm+0x92/0x3b0 [ 1295.391976][T20082] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 1295.392020][T20082] ? __sys_sendmsg+0x189/0x220 [ 1295.392065][T20082] ksys_read+0x145/0x250 [ 1295.392096][T20082] ? __pfx_ksys_read+0x10/0x10 [ 1295.392126][T20082] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1295.392160][T20082] ? lockdep_hardirqs_on+0x9c/0x150 [ 1295.392194][T20082] __do_fast_syscall_32+0xb4/0x110 [ 1295.392233][T20082] ? lockdep_hardirqs_on+0x9c/0x150 [ 1295.392268][T20082] do_fast_syscall_32+0x34/0x80 [ 1295.392300][T20082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1295.392329][T20082] RIP: 0023:0xf706e539 [ 1295.392350][T20082] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1295.392370][T20082] RSP: 002b:00000000f505e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1295.392396][T20082] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f505e620 [ 1295.392412][T20082] RDX: 000000000000000f RSI: 00000000f73d2ff4 RDI: 0000000000000000 [ 1295.392427][T20082] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1295.392442][T20082] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1295.392456][T20082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1295.392489][T20082] [ 1295.644996][ T5843] usb 2-1: Product: syz [ 1295.649239][ T5843] usb 2-1: Manufacturer: syz [ 1295.655107][ T5843] usb 2-1: SerialNumber: syz [ 1295.666310][ T5843] usb 2-1: config 0 descriptor?? [ 1295.822316][T20092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4094'. [ 1295.831449][T20092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1295.838764][T20092] IPv6: NLM_F_CREATE should be set when creating new route [ 1295.922122][ T5843] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 1295.983053][ T5843] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 1296.017140][T20096] FAULT_INJECTION: forcing a failure. [ 1296.017140][T20096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.031260][T20096] CPU: 1 UID: 0 PID: 20096 Comm: syz.0.4098 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1296.031292][T20096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1296.031305][T20096] Call Trace: [ 1296.031314][T20096] [ 1296.031324][T20096] dump_stack_lvl+0x189/0x250 [ 1296.031360][T20096] ? __lock_acquire+0xaac/0xd20 [ 1296.031395][T20096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1296.031426][T20096] ? __pfx__printk+0x10/0x10 [ 1296.031448][T20096] ? __might_fault+0xb0/0x130 [ 1296.031489][T20096] should_fail_ex+0x414/0x560 [ 1296.031518][T20096] _copy_from_user+0x2d/0xb0 [ 1296.031551][T20096] sk_setsockopt+0x280/0x2940 [ 1296.031582][T20096] ? rcu_read_lock_any_held+0xb3/0x120 [ 1296.031605][T20096] ? __pfx_sk_setsockopt+0x10/0x10 [ 1296.031639][T20096] ? aa_sk_perm+0x81e/0x950 [ 1296.031667][T20096] ? __pfx_aa_sk_perm+0x10/0x10 [ 1296.031707][T20096] ? aa_sock_opt_perm+0x74/0x110 [ 1296.031734][T20096] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1296.031766][T20096] do_sock_setsockopt+0x201/0x3e0 [ 1296.031799][T20096] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1296.031827][T20096] ? __fget_files+0x2a/0x420 [ 1296.031861][T20096] ? __fget_files+0x3a0/0x420 [ 1296.031889][T20096] ? __fget_files+0x2a/0x420 [ 1296.031926][T20096] __ia32_sys_setsockopt+0x18b/0x220 [ 1296.031963][T20096] __do_fast_syscall_32+0xb4/0x110 [ 1296.031995][T20096] ? lockdep_hardirqs_on+0x9c/0x150 [ 1296.032027][T20096] do_fast_syscall_32+0x34/0x80 [ 1296.032057][T20096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1296.032083][T20096] RIP: 0023:0xf7f65539 [ 1296.032102][T20096] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1296.032120][T20096] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1296.032142][T20096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 1296.032157][T20096] RDX: 0000000000000041 RSI: 0000000080000100 RDI: 0000000000000008 [ 1296.032171][T20096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1296.032183][T20096] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1296.032199][T20096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1296.032226][T20096] [ 1296.503389][ T5843] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 1296.556060][ T5843] usb 2-1: USB disconnect, device number 108 [ 1296.722373][ T5880] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1296.807038][T20107] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4101'. [ 1296.942282][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 1296.956333][ T5880] usb 1-1: config index 0 descriptor too short (expected 17170, got 18) [ 1297.000863][ T5880] usb 1-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 1297.003176][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1297.017426][ T5880] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 1297.062170][ T5880] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 1297.090000][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.219820][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1297.253362][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1297.309125][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1297.397677][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1297.489562][ T24] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1297.533457][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.584765][ T24] usb 4-1: Product: syz [ 1297.589010][ T24] usb 4-1: Manufacturer: syz [ 1297.602305][ T5880] usb 1-1: Product: syz [ 1297.606572][ T5880] usb 1-1: Manufacturer: syz [ 1297.611199][ T5880] usb 1-1: SerialNumber: syz [ 1297.623431][ T5880] usb 1-1: config 0 descriptor?? [ 1297.644902][ T5880] ums-freecom 1-1:0.0: USB Mass Storage device detected [ 1297.661963][T20118] IPv6: Can't replace route, no match found [ 1297.893502][T20100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.932663][T20100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.952561][ T24] usb 4-1: SerialNumber: syz [ 1297.960120][ T5880] usb 1-1: USB disconnect, device number 108 [ 1298.123378][ T24] usb 4-1: config 0 descriptor?? [ 1298.225536][T20126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4108'. [ 1298.243286][T20126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1298.250719][T20126] IPv6: NLM_F_CREATE should be set when creating new route [ 1298.261048][ T24] radioshark 4-1:0.0: Invalid radioSHARK device [ 1298.267617][ T24] radioshark 4-1:0.0: probe with driver radioshark failed with error -22 [ 1298.277293][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1298.400055][T20103] bridge8: entered promiscuous mode [ 1298.507411][ T5886] usb 4-1: USB disconnect, device number 59 [ 1298.979127][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1298.996848][T20138] ipvlan2: entered promiscuous mode [ 1299.003951][T20138] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1299.011801][T20138] team0: Device ipvlan2 is already an upper device of the team interface [ 1299.417276][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4115'. [ 1299.620523][T20147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4113'. [ 1299.831052][ T5894] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1300.012326][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 1300.071841][ T5894] usb 1-1: config 128 has an invalid interface number: 51 but max is 0 [ 1300.085700][ T5894] usb 1-1: config 128 has no interface number 0 [ 1300.286566][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.294594][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.317260][ T5894] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1300.330951][ T5894] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1300.347427][ T5894] usb 1-1: Product: syz [ 1300.351669][ T5894] usb 1-1: Manufacturer: syz [ 1300.362969][ T5894] usb 1-1: SerialNumber: syz [ 1300.377392][ T5894] quatech2 1-1:128.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1300.672709][ T24] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 1300.702581][ T5843] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1300.882353][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 1300.910397][ T5843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1300.962409][ T5843] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1300.971712][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1300.980011][ T5843] usb 5-1: Product: syz [ 1300.991719][ T5843] usb 5-1: Manufacturer: syz [ 1300.996956][ T5843] usb 5-1: SerialNumber: syz [ 1301.016740][ T5843] usb 5-1: config 0 descriptor?? [ 1301.180503][ T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1301.190050][ T24] usb 2-1: config 0 has no interface number 0 [ 1301.217749][T20147] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1301.282329][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1301.468598][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1301.549929][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1301.638950][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1301.660411][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1301.670504][ T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1301.690568][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1301.701449][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.720820][ T1208] usb 5-1: USB disconnect, device number 95 [ 1301.726109][ T24] usb 2-1: config 0 descriptor?? [ 1301.737561][T20164] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1301.750138][ T24] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1301.807113][ T5843] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1302.039714][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1302.045530][T20164] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1302.079247][ T5843] usb 4-1: config index 0 descriptor too short (expected 17170, got 18) [ 1302.102050][ T5843] usb 4-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 1302.111458][ T1208] usb 2-1: USB disconnect, device number 109 [ 1302.118777][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 1302.137224][ T1208] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1302.146091][ T5843] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 1302.156253][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.182951][ T5843] usb 4-1: Product: syz [ 1302.187314][ T5843] usb 4-1: Manufacturer: syz [ 1302.192887][ T5843] usb 4-1: SerialNumber: syz [ 1302.217689][ T5843] usb 4-1: config 0 descriptor?? [ 1302.281128][ T5843] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 1302.481501][T20170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.522400][ T5894] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1302.543694][T20170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.572102][T20147] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4113'. [ 1302.582679][ T5894] quatech2 1-1:128.51: probe with driver quatech2 failed with error -71 [ 1302.589538][T20147] net_ratelimit: 28 callbacks suppressed [ 1302.589562][T20147] netlink: zone id is out of range [ 1302.608489][T20147] netlink: zone id is out of range [ 1302.614211][T20147] netlink: zone id is out of range [ 1302.619469][T20147] netlink: zone id is out of range [ 1302.646313][T20147] netlink: zone id is out of range [ 1302.658340][ T24] usb 4-1: USB disconnect, device number 60 [ 1302.684680][T20147] netlink: zone id is out of range [ 1302.694757][T20147] netlink: zone id is out of range [ 1302.694872][ T5894] usb 1-1: USB disconnect, device number 109 [ 1302.710402][T20147] netlink: zone id is out of range [ 1302.720521][T20147] netlink: zone id is out of range [ 1302.733314][T20147] netlink: zone id is out of range [ 1302.879983][T20180] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4126'. [ 1303.372445][T20197] input: syz1 as /devices/virtual/input/input134 [ 1303.705169][T20203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4136'. [ 1303.907553][T20212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4140'. [ 1303.994888][T20214] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4139'. [ 1304.892340][ T1208] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 1304.986495][ T5843] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1305.090050][ T1208] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1305.118134][ T1208] usb 3-1: config 0 has no interface number 0 [ 1305.133203][ T1208] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1305.151673][ T1208] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1305.164318][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 1305.177354][ T1208] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1305.191234][ T5843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1305.205595][ T1208] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1305.219685][ T5843] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1305.240232][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1305.248663][ T1208] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1305.265484][ T5843] usb 2-1: Product: syz [ 1305.274098][ T1208] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1305.288511][ T5843] usb 2-1: Manufacturer: syz [ 1305.300647][ T5843] usb 2-1: SerialNumber: syz [ 1305.317161][ T5843] usb 2-1: config 0 descriptor?? [ 1305.332613][ T1208] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1305.350685][T20216] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1305.360965][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.394946][ T49] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1305.438067][ T1208] usb 3-1: config 0 descriptor?? [ 1305.452757][T20209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1305.479943][ T1208] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1305.552353][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 1305.560340][ T49] usb 5-1: config index 0 descriptor too short (expected 17170, got 18) [ 1305.570425][ T49] usb 5-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 1305.590708][ T49] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 1305.602638][ T24] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1305.614499][ T49] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 1305.632719][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.653623][ T49] usb 5-1: Product: syz [ 1305.658158][ T49] usb 5-1: Manufacturer: syz [ 1305.699066][ T49] usb 5-1: SerialNumber: syz [ 1305.703622][ T1208] usb 3-1: USB disconnect, device number 94 [ 1305.723487][ T1208] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 1305.731782][ T49] usb 5-1: config 0 descriptor?? [ 1305.741955][ T49] ums-freecom 5-1:0.0: USB Mass Storage device detected [ 1305.770333][T20234] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4140'. [ 1305.782429][ T24] usb 1-1: device descriptor read/64, error -71 [ 1306.000598][T20222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.067939][T20222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.076308][ T24] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1306.166643][ T1208] usb 5-1: USB disconnect, device number 96 [ 1306.262451][ T24] usb 1-1: device descriptor read/64, error -71 [ 1306.373574][ T24] usb usb1-port1: attempt power cycle [ 1306.471863][T20236] FAULT_INJECTION: forcing a failure. [ 1306.471863][T20236] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.485737][T20236] CPU: 1 UID: 0 PID: 20236 Comm: syz.3.4146 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1306.485769][T20236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1306.485783][T20236] Call Trace: [ 1306.485793][T20236] [ 1306.485803][T20236] dump_stack_lvl+0x189/0x250 [ 1306.485844][T20236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1306.485876][T20236] ? __pfx__printk+0x10/0x10 [ 1306.485914][T20236] ? __pfx___might_resched+0x10/0x10 [ 1306.485936][T20236] ? fs_reclaim_acquire+0x7d/0x100 [ 1306.485976][T20236] should_fail_ex+0x414/0x560 [ 1306.486006][T20236] should_failslab+0xa8/0x100 [ 1306.486039][T20236] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1306.486070][T20236] ? __alloc_skb+0x112/0x2d0 [ 1306.486104][T20236] __alloc_skb+0x112/0x2d0 [ 1306.486136][T20236] netlink_ack+0x146/0xa50 [ 1306.486160][T20236] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1306.486203][T20236] ? ref_tracker_free+0x63a/0x7d0 [ 1306.486227][T20236] ? __copy_skb_header+0xa7/0x550 [ 1306.486270][T20236] netlink_rcv_skb+0x2a0/0x490 [ 1306.486297][T20236] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1306.486333][T20236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1306.486381][T20236] ? down_read+0x1ad/0x2e0 [ 1306.486417][T20236] genl_rcv+0x28/0x40 [ 1306.486447][T20236] netlink_unicast+0x758/0x8d0 [ 1306.486483][T20236] netlink_sendmsg+0x805/0xb30 [ 1306.486521][T20236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.486553][T20236] ? __import_iovec+0x5d4/0x7f0 [ 1306.486582][T20236] ? aa_sock_msg_perm+0x94/0x160 [ 1306.486610][T20236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1306.486638][T20236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.486666][T20236] __sock_sendmsg+0x219/0x270 [ 1306.486694][T20236] ____sys_sendmsg+0x505/0x830 [ 1306.486732][T20236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1306.486781][T20236] ___sys_sendmsg+0x21f/0x2a0 [ 1306.486816][T20236] ? __pfx____sys_sendmsg+0x10/0x10 [ 1306.486886][T20236] ? __fget_files+0x2a/0x420 [ 1306.486927][T20236] ? __fget_files+0x3a0/0x420 [ 1306.486968][T20236] __sys_sendmsg+0x164/0x220 [ 1306.487002][T20236] ? __pfx___sys_sendmsg+0x10/0x10 [ 1306.487051][T20236] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1306.487083][T20236] ? lockdep_hardirqs_on+0x9c/0x150 [ 1306.487114][T20236] __do_fast_syscall_32+0xb4/0x110 [ 1306.487152][T20236] do_fast_syscall_32+0x34/0x80 [ 1306.487252][T20236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1306.487287][T20236] RIP: 0023:0xf706e539 [ 1306.487305][T20236] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1306.487326][T20236] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1306.487349][T20236] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1306.487366][T20236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1306.487380][T20236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1306.487393][T20236] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1306.487407][T20236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1306.487449][T20236] [ 1306.896978][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4148'. [ 1306.933353][ T24] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1306.972898][ T24] usb 1-1: device descriptor read/8, error -71 [ 1307.098820][ T5843] usb 2-1: USB disconnect, device number 110 [ 1307.178365][T20246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4151'. [ 1307.212357][ T24] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1307.243292][ T24] usb 1-1: device descriptor read/8, error -71 [ 1307.392460][ T24] usb usb1-port1: unable to enumerate USB device [ 1307.502362][ T5894] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1307.680654][T20260] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4155'. [ 1307.749271][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 1307.799309][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1307.829624][ T5894] usb 3-1: config 8 has an invalid interface number: 132 but max is 0 [ 1307.839019][T20264] netlink: 'syz.1.4158': attribute type 1 has an invalid length. [ 1307.870172][ T5894] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.876703][T20264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1307.902572][ T5894] usb 3-1: config 8 has no interface number 0 [ 1307.908803][ T5894] usb 3-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1307.922496][ T5894] usb 3-1: config 8 interface 132 has no altsetting 0 [ 1307.932089][ T5894] usb 3-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 1307.966687][T20267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1307.968506][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.975517][T20267] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1307.981980][ T5894] usb 3-1: Product: syz [ 1307.994861][T20267] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1308.002332][ T5894] usb 3-1: Manufacturer: syz [ 1308.009088][ T5894] usb 3-1: SerialNumber: syz [ 1308.016354][T20270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1308.052016][T20264] erspan0: entered allmulticast mode [ 1308.072785][T20264] bond1: (slave erspan0): making interface the new active one [ 1308.081665][T20264] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 1308.345080][T20276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.356869][T20276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.582417][ T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1309.634073][ T5894] usb-storage 3-1:8.132: USB Mass Storage device detected [ 1309.661103][T20280] input: syz1 as /devices/virtual/input/input135 [ 1309.674663][ T5894] usb-storage 3-1:8.132: Quirks match for vid 07cf pid 1001: a [ 1309.713056][ T5843] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1309.721884][ T5894] usb 3-1: USB disconnect, device number 95 [ 1309.742324][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1309.750641][ T24] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 1309.762505][ T24] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 1309.771370][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 1309.780414][T20282] !: renamed from dummy0 (while UP) [ 1309.790643][ T24] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 1309.800651][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.809757][ T24] usb 2-1: Product: syz [ 1309.814395][ T24] usb 2-1: Manufacturer: syz [ 1309.819033][ T24] usb 2-1: SerialNumber: syz [ 1309.826477][ T24] usb 2-1: config 0 descriptor?? [ 1309.836392][ T24] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 1309.929826][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 1309.940999][ T5843] usb 4-1: config 128 has an invalid interface number: 51 but max is 0 [ 1309.967959][ T5843] usb 4-1: config 128 has no interface number 0 [ 1309.989613][ T5843] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1310.022296][ T5843] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1310.051422][ T5843] usb 4-1: Product: syz [ 1310.055285][T20273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.060317][ T5843] usb 4-1: Manufacturer: syz [ 1310.065511][T20273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.079720][ T5843] usb 4-1: SerialNumber: syz [ 1310.086159][ T5894] usb 2-1: USB disconnect, device number 111 [ 1310.110639][T20288] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4162'. [ 1310.125092][ T5843] quatech2 4-1:128.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1312.039504][T20312] pimreg: left allmulticast mode [ 1312.270487][ T5843] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1312.318486][ T5843] quatech2 4-1:128.51: probe with driver quatech2 failed with error -71 [ 1312.338587][T20319] FAULT_INJECTION: forcing a failure. [ 1312.338587][T20319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1312.352034][T20319] CPU: 0 UID: 0 PID: 20319 Comm: syz.1.4174 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1312.352056][T20319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1312.352065][T20319] Call Trace: [ 1312.352072][T20319] [ 1312.352079][T20319] dump_stack_lvl+0x189/0x250 [ 1312.352105][T20319] ? __lock_acquire+0xaac/0xd20 [ 1312.352130][T20319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1312.352152][T20319] ? __pfx__printk+0x10/0x10 [ 1312.352167][T20319] ? __might_fault+0xb0/0x130 [ 1312.352212][T20319] should_fail_ex+0x414/0x560 [ 1312.352239][T20319] _copy_from_user+0x2d/0xb0 [ 1312.352273][T20319] __sys_bpf+0x1ed/0x860 [ 1312.352296][T20319] ? __pfx___sys_bpf+0x10/0x10 [ 1312.352326][T20319] ? ksys_write+0x1f0/0x250 [ 1312.352354][T20319] __ia32_sys_bpf+0x7c/0x90 [ 1312.352374][T20319] __do_fast_syscall_32+0xb4/0x110 [ 1312.352397][T20319] ? lockdep_hardirqs_on+0x9c/0x150 [ 1312.352419][T20319] do_fast_syscall_32+0x34/0x80 [ 1312.352444][T20319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1312.352466][T20319] RIP: 0023:0xf70be539 [ 1312.352479][T20319] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1312.352493][T20319] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1312.352509][T20319] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000640 [ 1312.352520][T20319] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1312.352530][T20319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1312.352539][T20319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1312.352548][T20319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1312.352569][T20319] [ 1312.529055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1312.563846][ T5843] usb 4-1: USB disconnect, device number 61 [ 1312.697530][T20321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4175'. [ 1312.928527][T20328] netlink: 'syz.1.4179': attribute type 1 has an invalid length. [ 1312.997288][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1313.024729][T20328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1313.135115][T20331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1313.142469][T20331] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1313.154129][T20331] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1314.391625][T20345] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4182'. [ 1316.012377][ T24] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1316.738331][T20359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4187'. [ 1316.775881][T20360] FAULT_INJECTION: forcing a failure. [ 1316.775881][T20360] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.792439][T20360] CPU: 1 UID: 0 PID: 20360 Comm: syz.4.4186 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1316.792470][T20360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1316.792483][T20360] Call Trace: [ 1316.792492][T20360] [ 1316.792502][T20360] dump_stack_lvl+0x189/0x250 [ 1316.792541][T20360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1316.792574][T20360] ? __pfx__printk+0x10/0x10 [ 1316.792603][T20360] ? __pfx___might_resched+0x10/0x10 [ 1316.792623][T20360] ? fs_reclaim_acquire+0x7d/0x100 [ 1316.792664][T20360] should_fail_ex+0x414/0x560 [ 1316.792694][T20360] should_failslab+0xa8/0x100 [ 1316.792726][T20360] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1316.792758][T20360] ? __alloc_skb+0x112/0x2d0 [ 1316.792792][T20360] __alloc_skb+0x112/0x2d0 [ 1316.792824][T20360] l2tp_nl_cmd_session_delete+0x4d/0x320 [ 1316.792860][T20360] genl_family_rcv_msg_doit+0x212/0x300 [ 1316.792903][T20360] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1316.792953][T20360] ? bpf_lsm_capable+0x9/0x20 [ 1316.792984][T20360] ? security_capable+0x7e/0x2e0 [ 1316.793018][T20360] genl_rcv_msg+0x60e/0x790 [ 1316.793070][T20360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1316.793102][T20360] ? __pfx_l2tp_nl_cmd_session_delete+0x10/0x10 [ 1316.793136][T20360] ? ref_tracker_free+0x63a/0x7d0 [ 1316.793159][T20360] ? __copy_skb_header+0xa7/0x550 [ 1316.793201][T20360] netlink_rcv_skb+0x21c/0x490 [ 1316.793229][T20360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1316.793264][T20360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1316.793318][T20360] ? down_read+0x1ad/0x2e0 [ 1316.793353][T20360] genl_rcv+0x28/0x40 [ 1316.793384][T20360] netlink_unicast+0x758/0x8d0 [ 1316.793421][T20360] netlink_sendmsg+0x805/0xb30 [ 1316.793460][T20360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1316.793490][T20360] ? __import_iovec+0x5d4/0x7f0 [ 1316.793521][T20360] ? aa_sock_msg_perm+0x94/0x160 [ 1316.793549][T20360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1316.793575][T20360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1316.793604][T20360] __sock_sendmsg+0x219/0x270 [ 1316.793631][T20360] ____sys_sendmsg+0x505/0x830 [ 1316.793670][T20360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1316.793721][T20360] ___sys_sendmsg+0x21f/0x2a0 [ 1316.793756][T20360] ? __pfx____sys_sendmsg+0x10/0x10 [ 1316.793828][T20360] ? __fget_files+0x2a/0x420 [ 1316.793857][T20360] ? __fget_files+0x3a0/0x420 [ 1316.793901][T20360] __sys_sendmsg+0x164/0x220 [ 1316.793935][T20360] ? __pfx___sys_sendmsg+0x10/0x10 [ 1316.793984][T20360] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1316.794016][T20360] ? lockdep_hardirqs_on+0x9c/0x150 [ 1316.794046][T20360] __do_fast_syscall_32+0xb4/0x110 [ 1316.794086][T20360] ? lockdep_hardirqs_on+0x9c/0x150 [ 1316.794118][T20360] do_fast_syscall_32+0x34/0x80 [ 1316.794150][T20360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1316.794177][T20360] RIP: 0023:0xf711e539 [ 1316.794196][T20360] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1316.794216][T20360] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1316.794239][T20360] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1316.794255][T20360] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1316.794268][T20360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1316.794282][T20360] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1316.794295][T20360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1316.794328][T20360] [ 1317.158818][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 1317.169869][ T24] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1317.180968][ T24] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1317.196333][ T24] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1317.205518][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.213703][ T24] usb 2-1: Product: syz [ 1317.217909][ T24] usb 2-1: Manufacturer: syz [ 1317.222561][ T24] usb 2-1: SerialNumber: syz [ 1317.597010][T20359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.604600][T20359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.002740][ T49] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1318.300246][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 1318.314374][ T49] usb 4-1: config 128 has an invalid interface number: 51 but max is 0 [ 1318.324139][ T49] usb 4-1: config 128 has no interface number 0 [ 1318.333938][ T49] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1318.345971][ T49] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1318.355007][ T49] usb 4-1: Product: syz [ 1318.359248][ T49] usb 4-1: Manufacturer: syz [ 1318.364611][ T49] usb 4-1: SerialNumber: syz [ 1318.390020][ T49] quatech2 4-1:128.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1318.908485][ T24] usb 2-1: USB disconnect, device number 112 [ 1318.997346][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4193'. [ 1319.385514][T20387] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4196'. [ 1319.513523][ T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1319.711922][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.733115][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.744846][ T24] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1319.756187][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.816629][ T24] usb 2-1: config 0 descriptor?? [ 1320.234161][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1320.234180][ T30] audit: type=1326 audit(1747450095.183:14932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20393 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1320.282505][ T30] audit: type=1326 audit(1747450095.223:14933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20393 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1320.304672][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.322609][ T30] audit: type=1326 audit(1747450095.223:14934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20393 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1320.346611][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1320.347204][ T30] audit: type=1326 audit(1747450095.223:14935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20393 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1320.375705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.377164][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1320.430344][ T30] audit: type=1326 audit(1747450095.223:14936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20393 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1320.511318][ T30] audit: type=1326 audit(1747450095.223:14937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20393 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1320.516002][ T24] usb 2-1: USB disconnect, device number 113 [ 1320.549550][ T30] audit: type=1326 audit(1747450095.223:14938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20393 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1320.571834][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.627892][ T30] audit: type=1326 audit(1747450095.223:14939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20393 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1320.690996][ T30] audit: type=1326 audit(1747450095.223:14940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20393 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1320.743145][ T30] audit: type=1326 audit(1747450095.223:14941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20393 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1321.040023][ T49] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1321.121612][ T49] quatech2 4-1:128.51: probe with driver quatech2 failed with error -71 [ 1321.173615][ T49] usb 4-1: USB disconnect, device number 62 [ 1321.192440][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1321.363122][T20401] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1321.469441][ T9] usb 5-1: config 0 has no interfaces? [ 1321.521803][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1321.650813][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.662333][ T9] usb 5-1: Product: syz [ 1321.666564][ T9] usb 5-1: Manufacturer: syz [ 1321.852341][ T49] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1321.922568][ T5894] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1322.383009][ T9] usb 5-1: SerialNumber: syz [ 1322.408870][ T9] usb 5-1: config 0 descriptor?? [ 1322.535447][ T49] usb 2-1: not running at top speed; connect to a high speed hub [ 1322.543919][ T5894] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1322.565414][ T49] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1322.576529][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1322.597712][ T49] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1322.620216][ T5894] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1322.642125][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1322.655703][ T5894] usb 3-1: Product: syz [ 1322.660763][ T5894] usb 3-1: Manufacturer: syz [ 1322.677127][ T5894] usb 3-1: SerialNumber: syz [ 1322.694060][ T49] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1322.704364][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.715673][ T5894] usb 3-1: config 0 descriptor?? [ 1322.721878][ T49] usb 2-1: Product: syz [ 1322.730638][ T5894] usb 3-1: selecting invalid altsetting 0 [ 1322.738057][ T49] usb 2-1: Manufacturer: syz [ 1322.744163][ T49] usb 2-1: SerialNumber: syz [ 1323.008273][ T5894] usb 3-1: USB disconnect, device number 96 [ 1323.888515][ T9] usb 5-1: USB disconnect, device number 97 [ 1324.544288][ T49] usb 2-1: USB disconnect, device number 114 [ 1324.747858][T20430] fuse: Unknown parameter '000000000000000000000040x0000000000000003' [ 1324.792504][ T7445] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1325.552668][ T7445] usb 3-1: Using ep0 maxpacket: 32 [ 1325.622857][ T7445] usb 3-1: config 128 has an invalid interface number: 51 but max is 0 [ 1325.852314][ T7445] usb 3-1: config 128 has no interface number 0 [ 1326.876373][ T7445] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1326.885684][ T7445] usb 3-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1326.917722][ T7445] usb 3-1: Product: syz [ 1326.956757][ T7445] usb 3-1: Manufacturer: syz [ 1326.961539][ T7445] usb 3-1: SerialNumber: syz [ 1327.048001][ T7445] quatech2 3-1:128.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1327.172526][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4214'. [ 1327.797972][T20453] input: syz1 as /devices/virtual/input/input136 [ 1327.988760][ T7445] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1327.998547][ T7445] quatech2 3-1:128.51: probe with driver quatech2 failed with error -71 [ 1328.043474][T19272] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1328.061719][ T7445] usb 3-1: USB disconnect, device number 97 [ 1328.212567][ T5880] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1328.303442][T19272] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1328.322306][T19272] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1328.363560][T19272] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1328.384788][T19272] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1328.422451][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 1328.426286][T19272] usb 2-1: Product: syz [ 1328.453626][T19272] usb 2-1: Manufacturer: syz [ 1328.472769][T19272] usb 2-1: SerialNumber: syz [ 1328.489214][ T5880] usb 1-1: config 128 has an invalid interface number: 51 but max is 0 [ 1328.502490][ T5880] usb 1-1: config 128 has no interface number 0 [ 1328.524812][T19272] usb 2-1: config 0 descriptor?? [ 1328.556051][ T5880] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1328.572359][ T5880] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1328.581018][ T5880] usb 1-1: Product: syz [ 1328.586007][ T5880] usb 1-1: Manufacturer: syz [ 1328.590689][ T5880] usb 1-1: SerialNumber: syz [ 1328.619519][T19272] usb 2-1: selecting invalid altsetting 0 [ 1328.625562][ T5880] quatech2 1-1:128.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1328.824516][T19272] usb 2-1: USB disconnect, device number 115 [ 1328.908671][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1329.273359][ T1208] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1329.303944][T20472] FAULT_INJECTION: forcing a failure. [ 1329.303944][T20472] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.402390][T20472] CPU: 1 UID: 0 PID: 20472 Comm: syz.3.4221 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1329.402420][T20472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1329.402432][T20472] Call Trace: [ 1329.402439][T20472] [ 1329.402448][T20472] dump_stack_lvl+0x189/0x250 [ 1329.402481][T20472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1329.402507][T20472] ? __pfx__printk+0x10/0x10 [ 1329.402530][T20472] ? __pfx___might_resched+0x10/0x10 [ 1329.402547][T20472] ? fs_reclaim_acquire+0x7d/0x100 [ 1329.402578][T20472] should_fail_ex+0x414/0x560 [ 1329.402615][T20472] should_failslab+0xa8/0x100 [ 1329.402640][T20472] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1329.402664][T20472] ? __alloc_skb+0x112/0x2d0 [ 1329.402692][T20472] __alloc_skb+0x112/0x2d0 [ 1329.402718][T20472] netlink_ack+0x146/0xa50 [ 1329.402737][T20472] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1329.402763][T20472] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1329.402784][T20472] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1329.402806][T20472] ? ref_tracker_free+0x63a/0x7d0 [ 1329.402826][T20472] ? __copy_skb_header+0xa7/0x550 [ 1329.402860][T20472] netlink_rcv_skb+0x2a0/0x490 [ 1329.402882][T20472] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1329.402909][T20472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1329.402951][T20472] ? down_read+0x1ad/0x2e0 [ 1329.402980][T20472] genl_rcv+0x28/0x40 [ 1329.403005][T20472] netlink_unicast+0x758/0x8d0 [ 1329.403035][T20472] netlink_sendmsg+0x805/0xb30 [ 1329.403066][T20472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1329.403091][T20472] ? __import_iovec+0x5d4/0x7f0 [ 1329.403116][T20472] ? aa_sock_msg_perm+0x94/0x160 [ 1329.403138][T20472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1329.403159][T20472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1329.403181][T20472] __sock_sendmsg+0x219/0x270 [ 1329.403215][T20472] ____sys_sendmsg+0x505/0x830 [ 1329.403246][T20472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1329.403285][T20472] ___sys_sendmsg+0x21f/0x2a0 [ 1329.403314][T20472] ? __pfx____sys_sendmsg+0x10/0x10 [ 1329.403380][T20472] ? __fget_files+0x2a/0x420 [ 1329.403403][T20472] ? __fget_files+0x3a0/0x420 [ 1329.403436][T20472] __sys_sendmsg+0x164/0x220 [ 1329.403464][T20472] ? __pfx___sys_sendmsg+0x10/0x10 [ 1329.403503][T20472] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1329.403531][T20472] ? lockdep_hardirqs_on+0x9c/0x150 [ 1329.403557][T20472] __do_fast_syscall_32+0xb4/0x110 [ 1329.403594][T20472] ? lockdep_hardirqs_on+0x9c/0x150 [ 1329.403625][T20472] do_fast_syscall_32+0x34/0x80 [ 1329.403654][T20472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1329.403681][T20472] RIP: 0023:0xf706e539 [ 1329.403700][T20472] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1329.403718][T20472] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1329.403741][T20472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1329.403756][T20472] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1329.403769][T20472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1329.403781][T20472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1329.403794][T20472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1329.403824][T20472] [ 1330.094421][ T1208] usb 3-1: not running at top speed; connect to a high speed hub [ 1330.127510][ T1208] usb 3-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1330.155585][ T1208] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1330.192834][ T1208] usb 3-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1330.202087][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.322491][ T1208] usb 3-1: Product: syz [ 1330.326778][ T1208] usb 3-1: Manufacturer: syz [ 1330.345868][ T1208] usb 3-1: SerialNumber: syz [ 1330.687097][T20478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4223'. [ 1330.834499][ T5880] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1330.894096][ T5880] quatech2 1-1:128.51: probe with driver quatech2 failed with error -71 [ 1330.901665][T20480] bridge2: entered promiscuous mode [ 1330.981290][ T5880] usb 1-1: USB disconnect, device number 114 [ 1331.311966][T20487] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4227'. [ 1331.792470][ T5843] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1331.826788][ T1208] usb 3-1: USB disconnect, device number 98 [ 1331.986685][ T5843] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1331.997099][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.006430][ T5843] usb 2-1: Product: syz [ 1332.020558][ T5843] usb 2-1: Manufacturer: syz [ 1332.027926][ T5843] usb 2-1: SerialNumber: syz [ 1332.036491][ T5843] usb 2-1: config 0 descriptor?? [ 1332.046189][ T5843] ch341 2-1:0.0: ch341-uart converter detected [ 1332.459679][ T5843] usb 2-1: failed to send control message: -71 [ 1332.468339][ T5843] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1332.479480][ T5843] usb 2-1: USB disconnect, device number 116 [ 1332.498366][ T5843] ch341 2-1:0.0: device disconnected [ 1332.538604][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1332.538632][ T30] audit: type=1326 audit(1747450107.483:14951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20499 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1332.603128][ T30] audit: type=1326 audit(1747450107.483:14952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20499 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1332.625308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.634697][ T30] audit: type=1326 audit(1747450107.543:14953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20499 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1332.656973][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.664938][ T30] audit: type=1326 audit(1747450107.543:14954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20499 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1332.687118][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.696213][ T30] audit: type=1326 audit(1747450107.543:14955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20499 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1332.719684][ T30] audit: type=1326 audit(1747450107.583:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20499 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1332.741784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.760645][ T30] audit: type=1326 audit(1747450107.583:14957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20499 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1332.790464][ T30] audit: type=1326 audit(1747450107.583:14958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20499 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1332.817486][ T30] audit: type=1326 audit(1747450107.583:14959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20499 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1332.839786][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.847810][ T30] audit: type=1326 audit(1747450107.613:14960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20499 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1332.867738][T20506] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4233'. [ 1332.869975][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.992694][ T49] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1333.262422][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 1333.276062][T20511] syzkaller1: entered promiscuous mode [ 1333.281808][T20511] syzkaller1: entered allmulticast mode [ 1333.284159][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.332496][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.342509][ T49] usb 1-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1333.353105][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.364456][ T49] usb 1-1: config 0 descriptor?? [ 1333.555782][T20513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4237'. [ 1333.950165][T20523] FAULT_INJECTION: forcing a failure. [ 1333.950165][T20523] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.963380][T20523] CPU: 1 UID: 0 PID: 20523 Comm: syz.2.4241 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1333.963412][T20523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1333.963434][T20523] Call Trace: [ 1333.963444][T20523] [ 1333.963457][T20523] dump_stack_lvl+0x189/0x250 [ 1333.963498][T20523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1333.963530][T20523] ? __pfx__printk+0x10/0x10 [ 1333.963558][T20523] ? __pfx___might_resched+0x10/0x10 [ 1333.963579][T20523] ? fs_reclaim_acquire+0x7d/0x100 [ 1333.963618][T20523] should_fail_ex+0x414/0x560 [ 1333.963647][T20523] should_failslab+0xa8/0x100 [ 1333.963679][T20523] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1333.963709][T20523] ? __alloc_skb+0x112/0x2d0 [ 1333.963742][T20523] __alloc_skb+0x112/0x2d0 [ 1333.963774][T20523] netlink_ack+0x146/0xa50 [ 1333.963797][T20523] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1333.963827][T20523] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1333.963861][T20523] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1333.963894][T20523] ? ref_tracker_free+0x63a/0x7d0 [ 1333.963918][T20523] ? __copy_skb_header+0xa7/0x550 [ 1333.963970][T20523] netlink_rcv_skb+0x2a0/0x490 [ 1333.963997][T20523] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1333.964032][T20523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1333.964083][T20523] ? down_read+0x1ad/0x2e0 [ 1333.964118][T20523] genl_rcv+0x28/0x40 [ 1333.964148][T20523] netlink_unicast+0x758/0x8d0 [ 1333.964183][T20523] netlink_sendmsg+0x805/0xb30 [ 1333.964221][T20523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.964251][T20523] ? __import_iovec+0x5d4/0x7f0 [ 1333.964280][T20523] ? aa_sock_msg_perm+0x94/0x160 [ 1333.964309][T20523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1333.964335][T20523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.964363][T20523] __sock_sendmsg+0x219/0x270 [ 1333.964390][T20523] ____sys_sendmsg+0x505/0x830 [ 1333.964433][T20523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.964483][T20523] ___sys_sendmsg+0x21f/0x2a0 [ 1333.964516][T20523] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.964588][T20523] ? __fget_files+0x2a/0x420 [ 1333.964616][T20523] ? __fget_files+0x3a0/0x420 [ 1333.964658][T20523] __sys_sendmsg+0x164/0x220 [ 1333.964691][T20523] ? __pfx___sys_sendmsg+0x10/0x10 [ 1333.964738][T20523] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1333.964769][T20523] ? lockdep_hardirqs_on+0x9c/0x150 [ 1333.964800][T20523] __do_fast_syscall_32+0xb4/0x110 [ 1333.964830][T20523] ? lockdep_hardirqs_on+0x9c/0x150 [ 1333.964862][T20523] do_fast_syscall_32+0x34/0x80 [ 1333.964892][T20523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.964919][T20523] RIP: 0023:0xf705e539 [ 1333.964939][T20523] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1333.964958][T20523] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1333.964981][T20523] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1333.964996][T20523] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.965009][T20523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.965022][T20523] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1333.965035][T20523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.965065][T20523] [ 1334.372371][ T1208] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1334.669527][ T1208] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.693680][T20529] loop2: detected capacity change from 0 to 7 [ 1334.708646][T20529] Dev loop2: unable to read RDB block 7 [ 1334.716414][ T1208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1334.733927][ T1208] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1334.751215][ T1208] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1334.762618][T20532] netlink: 'syz.1.4244': attribute type 1 has an invalid length. [ 1334.771797][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.808427][T20532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1334.823492][T20529] loop2: unable to read partition table [ 1334.829606][T20535] bond3: (slave gretap1): making interface the new active one [ 1334.841387][T20535] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1334.845192][ T1208] usb 4-1: Product: В [ 1334.863105][T20529] loop2: partition table beyond EOD, truncated [ 1334.880594][ T49] usbhid 1-1:0.0: can't add hid device: -71 [ 1334.887858][ T1208] usb 4-1: Manufacturer: 丬眚폐㜝撎ꕄ䉠텳楏聐넪锕⭱▢衍꣋ꁆᤐ쵲䯼倪孞䗸ؽꋥˏ瘃区ᔝ⢲䨘臅ǛＢ斊遞Ҡ썇鎎풚믄笚鏰蟑膧風⬍㷘快巬䙄 [ 1334.895243][T20529] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1334.931214][ T1208] usb 4-1: SerialNumber: 흕ﴈ썰撼迦뻅쨶Ⴄ犙腊מ﷜㸖释퍏ꫴ䓢죓㴦¦ޠ눾䷦ӱ꧸鋻滵렊䓞౥롨鐨⵵屃折ܹ閘ᇂ杛 [ 1334.942380][ T49] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1335.006301][ T49] usb 1-1: USB disconnect, device number 115 [ 1335.257542][T20519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.266656][T20519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.431922][T20535] syz.1.4244 (20535) used greatest stack depth: 19912 bytes left [ 1335.459235][T20519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.541749][T20519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.763478][ T1208] usb 4-1: 0:2 : does not exist [ 1336.786332][ T1208] usb 4-1: USB disconnect, device number 63 [ 1336.906915][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.058627][T20555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4251'. [ 1337.322503][T19272] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1337.487208][T19272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.497919][T19272] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1337.509962][T19272] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1337.519131][T19272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.522550][ T1208] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1337.534602][T19272] usb 3-1: config 0 descriptor?? [ 1337.542586][ T49] usb 1-1: new low-speed USB device number 116 using dummy_hcd [ 1337.566014][T19272] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1337.576625][T19272] dvb-usb: bulk message failed: -22 (3/0) [ 1337.588063][T19272] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1337.601524][T19272] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1337.608946][T19272] usb 3-1: media controller created [ 1337.616240][T19272] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1337.628701][T19272] dvb-usb: bulk message failed: -22 (6/0) [ 1337.647332][T19272] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1337.666123][T19272] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input137 [ 1337.684613][ T1208] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1337.697447][ T1208] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1337.699652][T19272] dvb-usb: schedule remote query interval to 150 msecs. [ 1337.712603][ T1208] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1337.722574][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1337.732507][ T1208] usb 4-1: Product: syz [ 1337.741564][T19272] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1337.752481][ T49] usb 1-1: Invalid ep0 maxpacket: 32 [ 1337.790292][ T1208] usb 4-1: Manufacturer: syz [ 1337.804353][ T1208] usb 4-1: SerialNumber: syz [ 1337.902322][ T7445] dvb-usb: bulk message failed: -22 (1/0) [ 1337.908096][ T7445] dvb-usb: error while querying for an remote control event. [ 1337.975581][ T1208] usb 4-1: config 0 descriptor?? [ 1337.994723][ T1208] usb 4-1: selecting invalid altsetting 0 [ 1338.012774][ T49] usb 1-1: new low-speed USB device number 117 using dummy_hcd [ 1338.112450][T19272] dvb-usb: bulk message failed: -22 (1/0) [ 1338.118582][T19272] dvb-usb: error while querying for an remote control event. [ 1338.212296][ T49] usb 1-1: Invalid ep0 maxpacket: 32 [ 1338.219047][ T49] usb usb1-port1: attempt power cycle [ 1338.282322][T19272] dvb-usb: bulk message failed: -22 (1/0) [ 1338.288252][T19272] dvb-usb: error while querying for an remote control event. [ 1338.460965][ T1208] usb 4-1: USB disconnect, device number 64 [ 1338.502698][T19272] dvb-usb: bulk message failed: -22 (1/0) [ 1338.524150][T19272] dvb-usb: error while querying for an remote control event. [ 1338.535058][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1338.550941][T20556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.583040][T20556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.612377][ T49] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 1338.739684][T19272] dvb-usb: bulk message failed: -22 (1/0) [ 1338.776700][T19272] dvb-usb: error while querying for an remote control event. [ 1338.786773][ T49] usb 1-1: Invalid ep0 maxpacket: 32 [ 1338.870381][T20578] fuse: Unknown parameter '000000000000000000000040x0000000000000003' [ 1338.922481][ T49] usb 1-1: new low-speed USB device number 119 using dummy_hcd [ 1338.952450][T19272] dvb-usb: bulk message failed: -22 (1/0) [ 1338.961415][T19272] dvb-usb: error while querying for an remote control event. [ 1338.969359][ T49] usb 1-1: Invalid ep0 maxpacket: 32 [ 1339.009771][ T49] usb usb1-port1: unable to enumerate USB device [ 1339.176073][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1339.192452][ T49] dvb-usb: error while querying for an remote control event. [ 1339.254721][T20594] bridge3: entered promiscuous mode [ 1339.365646][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1339.371449][ T49] dvb-usb: error while querying for an remote control event. [ 1339.389449][T20599] pimreg: entered allmulticast mode [ 1339.563256][T19272] dvb-usb: bulk message failed: -22 (1/0) [ 1339.569078][T19272] dvb-usb: error while querying for an remote control event. [ 1339.712354][ T1208] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1339.732492][T19272] dvb-usb: bulk message failed: -22 (1/0) [ 1339.743411][T19272] dvb-usb: error while querying for an remote control event. [ 1339.912515][T19272] dvb-usb: bulk message failed: -22 (1/0) [ 1339.960211][T19272] dvb-usb: error while querying for an remote control event. [ 1339.998916][ T1208] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1340.028616][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.064805][ T1208] usb 5-1: Product: syz [ 1340.069066][ T1208] usb 5-1: Manufacturer: syz [ 1340.076489][ T1208] usb 5-1: SerialNumber: syz [ 1340.088977][ T1208] usb 5-1: config 0 descriptor?? [ 1340.106827][ T1208] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1340.122851][T19272] dvb-usb: bulk message failed: -22 (1/0) [ 1340.128910][T19272] dvb-usb: error while querying for an remote control event. [ 1340.314781][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 1340.322990][ T49] dvb-usb: error while querying for an remote control event. [ 1340.396553][ T9] usb 3-1: USB disconnect, device number 99 [ 1340.530836][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1341.143181][ T1208] gspca_sunplus: reg_r err -110 [ 1341.188789][ T1208] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1341.231105][T20621] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 1341.285277][T20621] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 1341.308601][T20621] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 1341.878733][ T5894] usb 5-1: USB disconnect, device number 98 [ 1341.936201][T20621] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 1341.943659][ T49] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1342.122363][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 1342.210217][ T49] usb 1-1: config 128 has an invalid interface number: 51 but max is 0 [ 1342.228747][ T49] usb 1-1: config 128 has no interface number 0 [ 1342.240286][ T49] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1342.249843][ T49] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1342.270227][ T49] usb 1-1: Product: syz [ 1342.300782][ T49] usb 1-1: Manufacturer: syz [ 1342.318864][ T49] usb 1-1: SerialNumber: syz [ 1342.504979][ T49] quatech2 1-1:128.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1342.538736][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4278'. [ 1342.708840][ T5880] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1342.902980][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 1343.181993][T20652] pimreg: entered allmulticast mode [ 1343.209384][T20652] pimreg: left allmulticast mode [ 1343.303356][ T5880] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1343.412594][ T5880] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1343.587898][ T5880] usb 3-1: string descriptor 0 read error: -22 [ 1343.594423][ T5880] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1343.635841][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.334291][ T49] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1344.357523][ T49] quatech2 1-1:128.51: probe with driver quatech2 failed with error -71 [ 1344.384997][ T49] usb 1-1: USB disconnect, device number 120 [ 1344.862523][ T49] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1344.965608][T20666] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4284'. [ 1345.619806][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.640639][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1345.662617][ T49] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1345.672837][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1345.681278][ T49] usb 2-1: SerialNumber: syz [ 1345.732529][ T7445] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1345.881566][ T5843] usb 3-1: USB disconnect, device number 100 [ 1345.897976][ T7445] usb 1-1: Using ep0 maxpacket: 32 [ 1345.923710][ T5880] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1345.969894][ T49] usb 2-1: 0:2 : does not exist [ 1346.013165][ T7445] usb 1-1: config 128 has an invalid interface number: 51 but max is 0 [ 1346.022789][ T7445] usb 1-1: config 128 has no interface number 0 [ 1346.038067][ T7445] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1346.067453][ T49] usb 2-1: USB disconnect, device number 117 [ 1346.073771][ T7445] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1346.088536][ T7445] usb 1-1: Product: syz [ 1346.104229][ T7445] usb 1-1: Manufacturer: syz [ 1346.122273][ T7445] usb 1-1: SerialNumber: syz [ 1346.130200][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 1346.145744][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1346.165521][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1346.187982][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1346.206710][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1346.209437][ T7445] quatech2 1-1:128.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1346.227997][ T5880] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1346.297762][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.407818][ T5880] usb 5-1: Product: syz [ 1346.482363][ T5880] usb 5-1: Manufacturer: syz [ 1346.513477][ T5880] usb 5-1: SerialNumber: syz [ 1346.597177][ T5880] usb 5-1: config 0 descriptor?? [ 1346.649673][ T5880] radioshark 5-1:0.0: Invalid radioSHARK device [ 1346.700423][ T5880] radioshark 5-1:0.0: probe with driver radioshark failed with error -22 [ 1346.745629][T20697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4293'. [ 1346.746116][ T5880] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1346.829404][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4292'. [ 1346.926302][T20684] bridge3: entered promiscuous mode [ 1347.238810][ T5843] usb 5-1: USB disconnect, device number 99 [ 1347.262401][ T5880] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1347.425535][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1347.443196][ T5880] usb 4-1: Dual-Role OTG device on HNP port [ 1347.449579][ T5880] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 1347.459541][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.481828][ T5880] usb 4-1: Product: syz [ 1347.501574][ T5880] usb 4-1: Manufacturer: syz [ 1347.511350][ T5880] usb 4-1: SerialNumber: syz [ 1347.530506][ T5880] usb 4-1: config 0 descriptor?? [ 1347.578252][ T5880] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1347.880660][ T5843] usb 4-1: USB disconnect, device number 65 [ 1347.957045][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1347.957065][ T30] audit: type=1326 audit(1747450122.903:15005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.4.4296" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf711e539 code=0x0 [ 1348.012708][ T5880] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1348.142560][ T5880] usb 3-1: device descriptor read/64, error -71 [ 1348.392407][ T5880] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1348.412159][ T7445] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1348.419215][ T7445] quatech2 1-1:128.51: probe with driver quatech2 failed with error -71 [ 1348.464243][ T7445] usb 1-1: USB disconnect, device number 121 [ 1348.524628][ T30] audit: type=1326 audit(1747450123.463:15006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20715 comm="syz.0.4298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1348.561909][ T5880] usb 3-1: device descriptor read/64, error -71 [ 1348.618760][ T30] audit: type=1326 audit(1747450123.473:15007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20715 comm="syz.0.4298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1348.661075][ T30] audit: type=1326 audit(1747450123.483:15008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20715 comm="syz.0.4298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1348.694468][ T30] audit: type=1326 audit(1747450123.483:15009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20715 comm="syz.0.4298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1348.699451][ T5880] usb usb3-port1: attempt power cycle [ 1348.735237][ T30] audit: type=1326 audit(1747450123.483:15010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20715 comm="syz.0.4298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1348.765070][T20718] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4299'. [ 1348.796452][ T30] audit: type=1326 audit(1747450123.483:15011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20715 comm="syz.0.4298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1348.822951][ T30] audit: type=1326 audit(1747450123.483:15012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20715 comm="syz.0.4298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1348.845777][ T30] audit: type=1326 audit(1747450123.483:15013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20715 comm="syz.0.4298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1348.872716][ T30] audit: type=1326 audit(1747450123.493:15014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20715 comm="syz.0.4298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1349.017401][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4301'. [ 1349.092469][ T5880] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1349.123129][ T5880] usb 3-1: device descriptor read/8, error -71 [ 1349.382902][ T5880] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1349.406490][ T5880] usb 3-1: device descriptor read/8, error -71 [ 1349.416612][T20735] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 1349.442334][ T7445] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1349.522801][ T5880] usb usb3-port1: unable to enumerate USB device [ 1349.605262][ T7445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.620815][ T7445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.636830][ T7445] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1349.652747][ T7445] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1349.662297][ T7445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.678947][ T7445] usb 5-1: config 0 descriptor?? [ 1350.167925][ T7445] plantronics 0003:047F:FFFF.0065: No inputs registered, leaving [ 1350.189545][ T7445] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1350.516054][T20751] syzkaller1: entered promiscuous mode [ 1350.521795][T20751] syzkaller1: entered allmulticast mode [ 1351.152338][ T5843] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1351.327810][ T5843] usb 2-1: not running at top speed; connect to a high speed hub [ 1351.350003][ T5843] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1351.370752][ T5843] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1351.404516][ T5843] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1351.414116][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.433091][ T5843] usb 2-1: Product: syz [ 1351.437449][ T5843] usb 2-1: Manufacturer: syz [ 1351.443190][ T5843] usb 2-1: SerialNumber: syz [ 1351.547299][ T1208] usb 5-1: reset high-speed USB device number 100 using dummy_hcd [ 1351.702509][ T1208] usb 5-1: device descriptor read/64, error -32 [ 1351.837448][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4317'. [ 1352.196002][T20781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4320'. [ 1352.600619][ T5880] usb 5-1: USB disconnect, device number 100 [ 1352.632378][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1352.892523][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1352.917316][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1352.931793][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1352.941750][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1352.977370][ T9] usb 4-1: Product: syz [ 1353.003242][ T9] usb 4-1: Manufacturer: syz [ 1353.092434][ T9] usb 4-1: SerialNumber: syz [ 1353.104884][ T9] usb 4-1: config 0 descriptor?? [ 1353.132731][T20786] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1353.240878][ T5843] usb 2-1: USB disconnect, device number 118 [ 1353.332568][T20793] FAULT_INJECTION: forcing a failure. [ 1353.332568][T20793] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.345935][T20793] CPU: 1 UID: 0 PID: 20793 Comm: syz.1.4324 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1353.345956][T20793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1353.345967][T20793] Call Trace: [ 1353.345976][T20793] [ 1353.345984][T20793] dump_stack_lvl+0x189/0x250 [ 1353.346014][T20793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1353.346038][T20793] ? __pfx__printk+0x10/0x10 [ 1353.346057][T20793] ? __pfx___might_resched+0x10/0x10 [ 1353.346072][T20793] ? fs_reclaim_acquire+0x7d/0x100 [ 1353.346099][T20793] should_fail_ex+0x414/0x560 [ 1353.346120][T20793] should_failslab+0xa8/0x100 [ 1353.346144][T20793] __kmalloc_cache_noprof+0x70/0x3d0 [ 1353.346165][T20793] ? __inet_diag_dump_start+0x9d/0xa10 [ 1353.346193][T20793] __inet_diag_dump_start+0x9d/0xa10 [ 1353.346217][T20793] ? netlink_lookup+0x30/0x200 [ 1353.346234][T20793] ? netlink_lookup+0x30/0x200 [ 1353.346255][T20793] __netlink_dump_start+0x469/0x7e0 [ 1353.346279][T20793] inet_diag_rcv_msg_compat+0x1ea/0x3d0 [ 1353.346306][T20793] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 1353.346337][T20793] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 1353.346361][T20793] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 1353.346383][T20793] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 1353.346412][T20793] ? sock_diag_rcv_msg+0xd0/0x610 [ 1353.346441][T20793] sock_diag_rcv_msg+0x3d7/0x610 [ 1353.346462][T20793] netlink_rcv_skb+0x21c/0x490 [ 1353.346481][T20793] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1353.346499][T20793] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1353.346532][T20793] ? netlink_deliver_tap+0x2e/0x1b0 [ 1353.346550][T20793] ? netlink_deliver_tap+0x2e/0x1b0 [ 1353.346573][T20793] netlink_unicast+0x758/0x8d0 [ 1353.346598][T20793] netlink_sendmsg+0x805/0xb30 [ 1353.346624][T20793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1353.346645][T20793] ? __import_iovec+0x40e/0x7f0 [ 1353.346666][T20793] ? aa_sock_msg_perm+0x94/0x160 [ 1353.346685][T20793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1353.346704][T20793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1353.346724][T20793] __sock_sendmsg+0x219/0x270 [ 1353.346743][T20793] ____sys_sendmsg+0x505/0x830 [ 1353.346769][T20793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1353.346803][T20793] ___sys_sendmsg+0x21f/0x2a0 [ 1353.346827][T20793] ? __pfx____sys_sendmsg+0x10/0x10 [ 1353.346876][T20793] ? __fget_files+0x2a/0x420 [ 1353.346896][T20793] ? __fget_files+0x3a0/0x420 [ 1353.346924][T20793] __sys_sendmsg+0x164/0x220 [ 1353.346947][T20793] ? __pfx___sys_sendmsg+0x10/0x10 [ 1353.346980][T20793] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1353.347002][T20793] ? lockdep_hardirqs_on+0x9c/0x150 [ 1353.347023][T20793] __do_fast_syscall_32+0xb4/0x110 [ 1353.347046][T20793] ? lockdep_hardirqs_on+0x9c/0x150 [ 1353.347068][T20793] do_fast_syscall_32+0x34/0x80 [ 1353.347090][T20793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1353.347109][T20793] RIP: 0023:0xf70be539 [ 1353.347123][T20793] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1353.347137][T20793] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1353.347154][T20793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1353.347165][T20793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1353.347174][T20793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1353.347183][T20793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1353.347193][T20793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1353.347214][T20793] [ 1353.814993][ T24] usb 4-1: USB disconnect, device number 66 [ 1353.884180][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1353.884201][ T30] audit: type=1326 audit(1747450128.833:15028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20796 comm="syz.1.4325" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 1354.089770][T20797] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4320'. [ 1354.113023][T20797] net_ratelimit: 28 callbacks suppressed [ 1354.113072][T20797] netlink: zone id is out of range [ 1354.132293][T20797] netlink: zone id is out of range [ 1354.140628][T20797] netlink: zone id is out of range [ 1354.240139][T20797] netlink: zone id is out of range [ 1354.249648][T20797] netlink: zone id is out of range [ 1354.258247][T20797] netlink: zone id is out of range [ 1354.265439][T20797] netlink: zone id is out of range [ 1354.270722][T20797] netlink: zone id is out of range [ 1354.279835][T20797] netlink: zone id is out of range [ 1354.338186][T20797] netlink: zone id is out of range [ 1354.725817][ T5843] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1354.922658][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 1354.933553][ T5843] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1354.941877][ T5843] usb 3-1: config 0 has no interface number 0 [ 1354.955596][ T5843] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1354.968920][ T5843] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1354.979067][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.988129][ T5843] usb 3-1: Product: syz [ 1354.992816][ T5843] usb 3-1: Manufacturer: syz [ 1354.997490][ T5843] usb 3-1: SerialNumber: syz [ 1355.009584][ T5843] usb 3-1: config 0 descriptor?? [ 1355.034185][ T7445] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1355.102340][ T5880] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1355.204660][ T7445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.228133][ T7445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.249448][ T7445] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1355.265377][ T7445] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1355.272505][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 1355.281289][ T7445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.298944][ T5880] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1355.308982][ T5880] usb 5-1: config 179 has no interface number 0 [ 1355.313661][ T7445] usb 2-1: config 0 descriptor?? [ 1355.315717][ T5880] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1355.331863][ T5880] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1355.345440][ T5880] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1355.359981][ T5880] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1355.374772][ T5880] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1355.388527][ T5880] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1355.398123][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.412078][T20816] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1355.549017][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4336'. [ 1355.682870][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1355.682870][T19272] usb 5-1: USB disconnect, device number 101 [ 1355.682926][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1355.706966][ C0] ================================================================== [ 1355.715087][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 1355.722944][ C0] Read of size 4 at addr ffff88807fe3c05c by task kworker/u8:1/9377 [ 1355.730966][ C0] [ 1355.733330][ C0] CPU: 0 UID: 0 PID: 9377 Comm: kworker/u8:1 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1355.733360][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1355.733380][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1355.733421][ C0] Call Trace: [ 1355.733430][ C0] [ 1355.733440][ C0] dump_stack_lvl+0x189/0x250 [ 1355.733475][ C0] ? __virt_addr_valid+0x18c/0x540 [ 1355.733509][ C0] ? rcu_is_watching+0x15/0xb0 [ 1355.733528][ C0] ? __kasan_check_byte+0x12/0x40 [ 1355.733559][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1355.733591][ C0] ? rcu_is_watching+0x15/0xb0 [ 1355.733611][ C0] ? lock_release+0x4b/0x3e0 [ 1355.733645][ C0] ? __virt_addr_valid+0x18c/0x540 [ 1355.733675][ C0] ? __virt_addr_valid+0x469/0x540 [ 1355.733708][ C0] print_report+0xb4/0x290 [ 1355.733735][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1355.733761][ C0] kasan_report+0x118/0x150 [ 1355.733792][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1355.733823][ C0] do_raw_spin_lock+0x23d/0x290 [ 1355.733850][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 1355.733881][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1355.733912][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1355.733937][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1355.733964][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 1355.733995][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 1355.734028][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 1355.734053][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1355.734077][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1355.734105][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1355.734130][ C0] dummy_timer+0x862/0x4550 [ 1355.734162][ C0] ? ktime_get+0x3e/0x1f0 [ 1355.734198][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1355.734224][ C0] ? __lock_acquire+0xaac/0xd20 [ 1355.734274][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1355.734307][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1355.734339][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1355.734373][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 1355.734420][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1355.734456][ C0] ? read_tsc+0x9/0x20 [ 1355.734476][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1355.734504][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1355.734528][ C0] handle_softirqs+0x283/0x870 [ 1355.734552][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1355.734577][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1355.734605][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1355.734627][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1355.734654][ C0] irq_exit_rcu+0x9/0x30 [ 1355.734674][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1355.734702][ C0] [ 1355.734711][ C0] [ 1355.734720][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1355.734744][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 1355.734767][ C0] Code: c7 c7 00 2c f4 8d e8 0f ef 46 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 a0 76 ce 10 e8 fb 67 af 09 89 [ 1355.734787][ C0] RSP: 0018:ffffc9001a61eb10 EFLAGS: 00000202 [ 1355.734807][ C0] RAX: 0000000000000001 RBX: ffffffff900ed201 RCX: ffff8880241d9e00 [ 1355.734825][ C0] RDX: ffffc9001a61ec01 RSI: dffffc0000000000 RDI: ffffc9001a61ebf0 [ 1355.734842][ C0] RBP: dffffc0000000000 R08: ffffc9001a61fe30 R09: 0000000000000000 [ 1355.734859][ C0] R10: ffffc9001a61ec38 R11: fffff520034c3d89 R12: ffffc9001a61fe40 [ 1355.734876][ C0] R13: ffffc9001a618000 R14: ffffc9001a61ebe8 R15: ffffffff8171ca05 [ 1355.734892][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1355.734930][ C0] unwind_next_frame+0x1965/0x2390 [ 1355.734962][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1355.734990][ C0] ? worker_thread+0x8a0/0xda0 [ 1355.735012][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1355.735039][ C0] arch_stack_walk+0x11c/0x150 [ 1355.735072][ C0] ? kthread+0x711/0x8a0 [ 1355.735102][ C0] stack_trace_save+0x9c/0xe0 [ 1355.735126][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1355.735157][ C0] kasan_save_track+0x3e/0x80 [ 1355.735183][ C0] ? kasan_save_track+0x3e/0x80 [ 1355.735209][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1355.735234][ C0] ? __kmalloc_noprof+0x27a/0x4f0 [ 1355.735271][ C0] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 1355.735301][ C0] ? cfg80211_inform_bss_data+0x1fb/0x3b20 [ 1355.735330][ C0] ? cfg80211_inform_bss_frame_data+0x362/0x700 [ 1355.735359][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 1355.735387][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 1355.735414][ C0] ? ieee80211_iface_work+0x806/0xfe0 [ 1355.735443][ C0] ? cfg80211_wiphy_work+0x2dc/0x460 [ 1355.735476][ C0] ? process_scheduled_works+0xade/0x17a0 [ 1355.735497][ C0] ? worker_thread+0x8a0/0xda0 [ 1355.735542][ C0] __kasan_kmalloc+0x93/0xb0 [ 1355.735571][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 1355.735599][ C0] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 1355.735632][ C0] cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 1355.735667][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1355.735713][ C0] ? cfg80211_inform_bss_data+0x1e8/0x3b20 [ 1355.735745][ C0] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 1355.735790][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1355.735835][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 1355.735884][ C0] cfg80211_inform_bss_frame_data+0x362/0x700 [ 1355.735921][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 1355.735954][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1355.735987][ C0] ? __lock_acquire+0xaac/0xd20 [ 1355.736022][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1355.736051][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 1355.736088][ C0] ? __lock_acquire+0xaac/0xd20 [ 1355.736123][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1355.736151][ C0] ? __lock_acquire+0xaac/0xd20 [ 1355.736189][ C0] ? __lock_acquire+0xaac/0xd20 [ 1355.736238][ C0] ieee80211_iface_work+0x806/0xfe0 [ 1355.736283][ C0] cfg80211_wiphy_work+0x2dc/0x460 [ 1355.736318][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 1355.736342][ C0] process_scheduled_works+0xade/0x17a0 [ 1355.736377][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1355.736424][ C0] worker_thread+0x8a0/0xda0 [ 1355.736448][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1355.736481][ C0] ? __kthread_parkme+0x7b/0x200 [ 1355.736510][ C0] kthread+0x711/0x8a0 [ 1355.736540][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1355.736561][ C0] ? __pfx_kthread+0x10/0x10 [ 1355.736590][ C0] ? __pfx_kthread+0x10/0x10 [ 1355.736617][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1355.736642][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1355.736671][ C0] ? __pfx_kthread+0x10/0x10 [ 1355.736698][ C0] ret_from_fork+0x4b/0x80 [ 1355.736721][ C0] ? __pfx_kthread+0x10/0x10 [ 1355.736748][ C0] ret_from_fork_asm+0x1a/0x30 [ 1355.736780][ C0] [ 1355.736789][ C0] [ 1355.758674][ T7445] plantronics 0003:047F:FFFF.0066: No inputs registered, leaving [ 1355.759009][ C0] Allocated by task 5880: [ 1355.759027][ C0] kasan_save_track+0x3e/0x80 [ 1355.822049][ T7445] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1355.825194][ C0] __kasan_kmalloc+0x93/0xb0 [ 1355.825228][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 1355.825263][ C0] xpad_probe+0x41c/0x1ed0 [ 1355.825289][ C0] usb_probe_interface+0x641/0xbc0 [ 1355.825310][ C0] really_probe+0x26a/0x9a0 [ 1355.825338][ C0] __driver_probe_device+0x18c/0x2f0 [ 1355.825364][ C0] driver_probe_device+0x4f/0x430 [ 1355.825392][ C0] __device_attach_driver+0x2ce/0x530 [ 1356.460396][ C0] bus_for_each_drv+0x251/0x2e0 [ 1356.465454][ C0] __device_attach+0x2b8/0x400 [ 1356.470247][ C0] bus_probe_device+0x185/0x260 [ 1356.475107][ C0] device_add+0x7b6/0xb50 [ 1356.479444][ C0] usb_set_configuration+0x1a87/0x20e0 [ 1356.484925][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1356.490406][ C0] usb_probe_device+0x1c4/0x390 [ 1356.495262][ C0] really_probe+0x26a/0x9a0 [ 1356.499776][ C0] __driver_probe_device+0x18c/0x2f0 [ 1356.505163][ C0] driver_probe_device+0x4f/0x430 [ 1356.510210][ C0] __device_attach_driver+0x2ce/0x530 [ 1356.515601][ C0] bus_for_each_drv+0x251/0x2e0 [ 1356.520466][ C0] __device_attach+0x2b8/0x400 [ 1356.525239][ C0] bus_probe_device+0x185/0x260 [ 1356.530118][ C0] device_add+0x7b6/0xb50 [ 1356.534456][ C0] usb_new_device+0xa39/0x16c0 [ 1356.539231][ C0] hub_event+0x2941/0x4a00 [ 1356.543659][ C0] process_scheduled_works+0xade/0x17a0 [ 1356.549210][ C0] worker_thread+0x8a0/0xda0 [ 1356.553807][ C0] kthread+0x711/0x8a0 [ 1356.557881][ C0] ret_from_fork+0x4b/0x80 [ 1356.562301][ C0] ret_from_fork_asm+0x1a/0x30 [ 1356.567069][ C0] [ 1356.569390][ C0] Freed by task 19272: [ 1356.573459][ C0] kasan_save_track+0x3e/0x80 [ 1356.578144][ C0] kasan_save_free_info+0x46/0x50 [ 1356.583171][ C0] __kasan_slab_free+0x62/0x70 [ 1356.587949][ C0] kfree+0x193/0x440 [ 1356.591851][ C0] xpad_disconnect+0x350/0x480 [ 1356.596629][ C0] usb_unbind_interface+0x26b/0x8f0 [ 1356.601836][ C0] device_release_driver_internal+0x4d9/0x7c0 [ 1356.607928][ C0] bus_remove_device+0x34d/0x410 [ 1356.612880][ C0] device_del+0x511/0x8e0 [ 1356.617230][ C0] usb_disable_device+0x3e9/0x8a0 [ 1356.622269][ C0] usb_disconnect+0x330/0x910 [ 1356.626957][ C0] hub_event+0x1cdb/0x4a00 [ 1356.631479][ C0] process_scheduled_works+0xade/0x17a0 [ 1356.637038][ C0] worker_thread+0x8a0/0xda0 [ 1356.641638][ C0] kthread+0x711/0x8a0 [ 1356.645713][ C0] ret_from_fork+0x4b/0x80 [ 1356.650145][ C0] ret_from_fork_asm+0x1a/0x30 [ 1356.654916][ C0] [ 1356.657328][ C0] The buggy address belongs to the object at ffff88807fe3c000 [ 1356.657328][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 1356.671473][ C0] The buggy address is located 92 bytes inside of [ 1356.671473][ C0] freed 1024-byte region [ffff88807fe3c000, ffff88807fe3c400) [ 1356.685277][ C0] [ 1356.687730][ C0] The buggy address belongs to the physical page: [ 1356.694152][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe38 [ 1356.702936][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1356.711467][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1356.719036][ C0] page_type: f5(slab) [ 1356.723044][ C0] raw: 00fff00000000040 ffff88801a041dc0 ffffea0000a13a00 dead000000000002 [ 1356.731634][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1356.740228][ C0] head: 00fff00000000040 ffff88801a041dc0 ffffea0000a13a00 dead000000000002 [ 1356.748914][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1356.757589][ C0] head: 00fff00000000003 ffffea0001ff8e01 00000000ffffffff 00000000ffffffff [ 1356.766266][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1356.774936][ C0] page dumped because: kasan: bad access detected [ 1356.781371][ C0] page_owner tracks the page as allocated [ 1356.787179][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9, tgid 9 (kworker/0:0), ts 94135045898, free_ts 94124369807 [ 1356.805871][ C0] post_alloc_hook+0x1d8/0x230 [ 1356.810679][ C0] get_page_from_freelist+0x21ce/0x22b0 [ 1356.816236][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 1356.822052][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1356.826919][ C0] allocate_slab+0x8a/0x3b0 [ 1356.831440][ C0] ___slab_alloc+0xbfc/0x1480 [ 1356.836135][ C0] __kmalloc_noprof+0x305/0x4f0 [ 1356.840999][ C0] ___neigh_create+0x6d5/0x2260 [ 1356.845879][ C0] ip6_finish_output2+0xb4d/0x16a0 [ 1356.851013][ C0] ip6_finish_output+0x234/0x7d0 [ 1356.855955][ C0] NF_HOOK+0x9e/0x380 [ 1356.859958][ C0] mld_sendpack+0x800/0xd80 [ 1356.864466][ C0] mld_ifc_work+0x835/0xde0 [ 1356.868976][ C0] process_scheduled_works+0xade/0x17a0 [ 1356.874524][ C0] worker_thread+0x8a0/0xda0 [ 1356.879131][ C0] kthread+0x711/0x8a0 [ 1356.883213][ C0] page last free pid 5199 tgid 5199 stack trace: [ 1356.889625][ C0] __free_frozen_pages+0xb0e/0xcd0 [ 1356.894748][ C0] __slab_free+0x326/0x400 [ 1356.899186][ C0] qlist_free_all+0x9a/0x140 [ 1356.903792][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1356.909275][ C0] __kasan_slab_alloc+0x22/0x80 [ 1356.914140][ C0] __kmalloc_cache_noprof+0x1be/0x3d0 [ 1356.919539][ C0] kernfs_iop_get_link+0x66/0x6c0 [ 1356.924572][ C0] vfs_readlink+0x24a/0x550 [ 1356.929086][ C0] do_readlinkat+0x215/0x500 [ 1356.933682][ C0] __x64_sys_readlink+0x7f/0x90 [ 1356.938546][ C0] do_syscall_64+0xf6/0x210 [ 1356.943059][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.948965][ C0] [ 1356.951290][ C0] Memory state around the buggy address: [ 1356.956925][ C0] ffff88807fe3bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1356.964999][ C0] ffff88807fe3bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1356.973064][ C0] >ffff88807fe3c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1356.981124][ C0] ^ [ 1356.988076][ C0] ffff88807fe3c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1356.996150][ C0] ffff88807fe3c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1357.004224][ C0] ================================================================== [ 1357.012306][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1357.019523][ C0] CPU: 0 UID: 0 PID: 9377 Comm: kworker/u8:1 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1357.031679][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1357.041741][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1357.048007][ C0] Call Trace: [ 1357.051308][ C0] [ 1357.054176][ C0] dump_stack_lvl+0x99/0x250 [ 1357.058798][ C0] ? __asan_memcpy+0x40/0x70 [ 1357.063408][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1357.068627][ C0] ? __pfx__printk+0x10/0x10 [ 1357.073230][ C0] panic+0x2db/0x790 [ 1357.077148][ C0] ? __pfx_panic+0x10/0x10 [ 1357.081588][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1357.087510][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1357.093862][ C0] ? print_memory_metadata+0x314/0x400 [ 1357.099356][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1357.104399][ C0] check_panic_on_warn+0x89/0xb0 [ 1357.109356][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1357.114397][ C0] end_report+0x78/0x160 [ 1357.118656][ C0] kasan_report+0x129/0x150 [ 1357.123174][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1357.128212][ C0] do_raw_spin_lock+0x23d/0x290 [ 1357.133081][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 1357.138466][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1357.143852][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1357.149067][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1357.154973][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 1357.159923][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 1357.165137][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 1357.170518][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1357.176333][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1357.182240][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1357.187618][ C0] dummy_timer+0x862/0x4550 [ 1357.192137][ C0] ? ktime_get+0x3e/0x1f0 [ 1357.196510][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1357.201893][ C0] ? __lock_acquire+0xaac/0xd20 [ 1357.206767][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1357.211726][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1357.216681][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1357.221634][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 1357.226944][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1357.232690][ C0] ? read_tsc+0x9/0x20 [ 1357.236764][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1357.242595][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1357.247750][ C0] handle_softirqs+0x283/0x870 [ 1357.252540][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1357.257320][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1357.262629][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1357.267255][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1357.272480][ C0] irq_exit_rcu+0x9/0x30 [ 1357.276732][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1357.282379][ C0] [ 1357.285314][ C0] [ 1357.288251][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1357.294242][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 1357.299538][ C0] Code: c7 c7 00 2c f4 8d e8 0f ef 46 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 a0 76 ce 10 e8 fb 67 af 09 89 [ 1357.319155][ C0] RSP: 0018:ffffc9001a61eb10 EFLAGS: 00000202 [ 1357.325244][ C0] RAX: 0000000000000001 RBX: ffffffff900ed201 RCX: ffff8880241d9e00 [ 1357.333231][ C0] RDX: ffffc9001a61ec01 RSI: dffffc0000000000 RDI: ffffc9001a61ebf0 [ 1357.341258][ C0] RBP: dffffc0000000000 R08: ffffc9001a61fe30 R09: 0000000000000000 [ 1357.349264][ C0] R10: ffffc9001a61ec38 R11: fffff520034c3d89 R12: ffffc9001a61fe40 [ 1357.357254][ C0] R13: ffffc9001a618000 R14: ffffc9001a61ebe8 R15: ffffffff8171ca05 [ 1357.365240][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1357.370384][ C0] unwind_next_frame+0x1965/0x2390 [ 1357.375531][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1357.380657][ C0] ? worker_thread+0x8a0/0xda0 [ 1357.385430][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1357.391594][ C0] arch_stack_walk+0x11c/0x150 [ 1357.396373][ C0] ? kthread+0x711/0x8a0 [ 1357.400627][ C0] stack_trace_save+0x9c/0xe0 [ 1357.405313][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1357.410755][ C0] kasan_save_track+0x3e/0x80 [ 1357.415443][ C0] ? kasan_save_track+0x3e/0x80 [ 1357.420308][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1357.425134][ C0] ? __kmalloc_noprof+0x27a/0x4f0 [ 1357.430170][ C0] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 1357.436598][ C0] ? cfg80211_inform_bss_data+0x1fb/0x3b20 [ 1357.442428][ C0] ? cfg80211_inform_bss_frame_data+0x362/0x700 [ 1357.448687][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 1357.454505][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 1357.460755][ C0] ? ieee80211_iface_work+0x806/0xfe0 [ 1357.466140][ C0] ? cfg80211_wiphy_work+0x2dc/0x460 [ 1357.471440][ C0] ? process_scheduled_works+0xade/0x17a0 [ 1357.477167][ C0] ? worker_thread+0x8a0/0xda0 [ 1357.481964][ C0] __kasan_kmalloc+0x93/0xb0 [ 1357.486569][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 1357.491429][ C0] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 1357.497855][ C0] cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 1357.504111][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1357.510810][ C0] ? cfg80211_inform_bss_data+0x1e8/0x3b20 [ 1357.516719][ C0] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 1357.522387][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1357.528489][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 1357.534936][ C0] cfg80211_inform_bss_frame_data+0x362/0x700 [ 1357.541045][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 1357.546693][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1357.552860][ C0] ? __lock_acquire+0xaac/0xd20 [ 1357.557726][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1357.563633][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 1357.569722][ C0] ? __lock_acquire+0xaac/0xd20 [ 1357.574595][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1357.581137][ C0] ? __lock_acquire+0xaac/0xd20 [ 1357.586014][ C0] ? __lock_acquire+0xaac/0xd20 [ 1357.590905][ C0] ieee80211_iface_work+0x806/0xfe0 [ 1357.596144][ C0] cfg80211_wiphy_work+0x2dc/0x460 [ 1357.601305][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 1357.607051][ C0] process_scheduled_works+0xade/0x17a0 [ 1357.612625][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1357.618629][ C0] worker_thread+0x8a0/0xda0 [ 1357.623236][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1357.629587][ C0] ? __kthread_parkme+0x7b/0x200 [ 1357.634544][ C0] kthread+0x711/0x8a0 [ 1357.638630][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1357.643757][ C0] ? __pfx_kthread+0x10/0x10 [ 1357.648368][ C0] ? __pfx_kthread+0x10/0x10 [ 1357.652969][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1357.658176][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.663399][ C0] ? __pfx_kthread+0x10/0x10 [ 1357.667996][ C0] ret_from_fork+0x4b/0x80 [ 1357.672421][ C0] ? __pfx_kthread+0x10/0x10 [ 1357.677022][ C0] ret_from_fork_asm+0x1a/0x30 [ 1357.681803][ C0] [ 1357.685156][ C0] Kernel Offset: disabled [ 1357.689486][ C0] Rebooting in 86400 seconds..