last executing test programs: 3m40.031570408s ago: executing program 3 (id=2067): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000011c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000026c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'poly1305-simd\x00'}}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="3800000000000000290000000400000021030000000000000103000000c20400000075c204fffffffc05020006c20400000007000000000038000000000000002900000039000000dc04002800000000fe880000000000000000000000000001ff0200000000000000000000000000011400000000000002290000"], 0x1f8}}], 0x2, 0x20000040) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r5, &(0x7f00000082c0)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m33.709230465s ago: executing program 3 (id=2085): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x30}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x330, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x31c, 0x1, [@m_gact={0x170, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x8, 0x7, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xaeb, 0x20000000}}]}, {0xe1, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xac, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x75, 0x6, "bd3a5376a2440c64d6314cc7f446e251aa486d1931d16d2a624d085a1be90b436fdedf917b760ef37b4272893313d629bb02bcd42142bb0469eba6b0eddd9bc3612d9b46c64f145f45c89cb5bb716f4a44dc897bd951f9775a35dd8303b774f0c02924dc414d297ae96eb8e36c2dfb53b2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xa0, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x1, 0x7, 0x187e, 0x8}}]}, {0x24, 0x6, "644cfabbe56834b72d4965b0f9c601f7e7e0a903f719e150808ef459921b7b7a"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m33.340375877s ago: executing program 3 (id=2087): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x100000, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000fffff9000000000000000006000000feffffff0000000000000000000000000000d9e4aa2f0000000000000000000000000000000000000000000000000000feffffff0020000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 3m30.821343207s ago: executing program 3 (id=2098): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000feffff7f0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 3m30.17323562s ago: executing program 3 (id=2101): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x1f, 0x0, {}, {0xfff1, 0x2}, {0x6, 0xe}}}, 0x24}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_usb_connect(0x3, 0x71, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0xdb, 0x77, 0x9a, 0x10, 0xa46, 0x1269, 0x1a0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc4, 0x77, 0x3, 0x75, 0x17, 0x73, 0x18, [], [{{0x9, 0x5, 0xb, 0x3, 0x200, 0xf8, 0x2, 0x11}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x51, 0x40}}, {{0x9, 0x5, 0xd, 0xc, 0x0, 0x8, 0x5, 0xe}}]}}, {{0x9, 0x4, 0xc4, 0x7, 0x2, 0x64, 0x29, 0x89, 0x7, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0xffff, 0x6}}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x80, 0x3, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0xbf7c9143331c6c16, 0x5, 0x6, 0x3}}]}}]}}]}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000240)={@empty, 0x1, 0x0, 0x1, 0x0, 0x1, 0xfffc}, &(0x7f0000000280)=0x20) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x36, 0x1c, 0xffff, 0x0, 0x1, 0x11, 0x0, @loopback, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) read$FUSE(r6, &(0x7f0000001ec0)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000200)=0x80000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000002740)={0x15f4, 0x26, 0x100, 0x70bd25, 0x25dfdbfc, {0x15}, [@nested={0x274, 0xf2, 0x0, 0x1, [@nested={0x1c8, 0xb9, 0x0, 0x1, [@typed={0x4, 0x19}, @nested={0x1be, 0x112, 0x0, 0x1, [@nested={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @fd=r9}]}, @generic, @generic="5354895670bd77f4df6adac5c58d2768f8e10446e5dbabc822c51c745674a6d25048ea469442dab2404760f42df679f96b20434a6dfdc0ca4b818923ec637b16bd15efdf2a2468caf793ef92141df319db7216a6174d6740f953029f39eabdc2074e460eb77c9b82c12189421a3a12ff5739e03769dd9b51f38e6d79ac8536ff9f6cecef1c89c41cec004a343de374c2bf060399469ca8ac2dbf4acd54a2e779ecc48f22d8", @typed={0x9, 0x104, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @generic="710fe7c5bd9c570b9a65c1735e453779d7d6ffc36de49cf55651ffc9aee313e151ed2181a93f1aa9b56f3aa720a01ce833e7bdefcb2b48e515117504377944152572a77f4b1ca8a6f5f52cd1265e936fd1af1cf918312631cc018373a7221ebf38cd77dbc5e5f4ee80d6dde3f5e3d9728fc42b55dc5df939b9fa32b48067bff514d82e457396b5dc35f50ffc54dd6d3ba366dd2ad05f9720576ad68e74fd4c063c9f657faa8c92a86a63d7fa2735bacc7f96547284117bff4f8dae047c7cc7e00d1fc8b44e529308c17ba63081f811cce38dd08990a6a16d2bb3b876cb32a927fa53c546079f2dd0f139d80e6ecdce1084", @typed={0x8, 0x146, 0x0, 0x0, @ipv4=@remote}, @generic="101f5876"]}]}, @generic="dd682542df5700c8d871e85875bed623f4fd68d0f3116322dd82ddb9962f57f1f392695c3087efc99209c8af8e8edf7cf51e5b3345a7de5cdb58e8d5eb2dc539314e08ddf4bcc0ad4aafc174185ffb1e4e6e7f215482bc8979975bdf5a929e5cedfdbe5595f13a8dcdcf705313445c75e8074232f5ef5897ab1b8c7dc82dca6da538ae85fcea708cf94af0de2e816b2d627770c17ab84aeaa66984bb2a02e4cc", @nested={0x4, 0x88}, @nested={0x4, 0xd}]}, @nested={0x22b, 0x144, 0x0, 0x1, [@nested={0x4, 0xe0}, @generic="122eab355bb8ddf4947c58fa70519e07309fce5a28ce643caac7396b0dcd1c86f885f1b606780ea70d840768e02d0e148ed2306f4ec0d8b6ccb80dcffca7b0873add685d47a8d1da1b427ee1889f1114cf9d06da7af7401cfacc9dc536f7968daf17b8adcb983c6208250892245db833c07b971b7bad6a9cd22c6ba4c5c64ab7e0e241b7f0e5a13d317bc02182c4cd28cfea4a5455356953829385764fa93de1ab8a6ffacad49b32cc8f5c", @nested={0x4, 0xb1}, @generic="b50bb0576fd82eed78551a2227ad436affd7984febb6cb347f41ef72f0487a8951d82bbc81086bccd060f538a371a4b0652a8de69d9a47895255a29d36b5de3643fb070bc14022ac7cf2dac1b30d1ff3cd8cb6b6b568aa96d25b13d817aae0156fb1929f605f02febb65313e12b2e7e4d9e00e3df4561140b2cd87f4f932404ea706664687e79d71868408dd33b346b587a8187f686da440a5e9e9e8523190d60cdeb25dc5707869f1191e1c063c87ecb454e8abe07b43c0b1d282065780fabaed834a0edfe17db01dd72ee7c57d0a9045a32e70f9c039417fc8568a95", @generic="4577c236f8c3fbad7732b8470c19c2dc67433ba63edc115ec35dde63e25b1e3c8de0d7d04495090d34b1a4ccfb572dab16e759b8356494ef9bc204dc973f0c3e884d461771403887bef8d84a514ada19e53ed6ea1116faa65a9e2f658cb6b500264e31d01993899f20fe712f1afee3a9a4e934b691be2b9238763ccba0e28f8b21300327783020f58079c4979342acc5e1b43b0ccda709"]}, @generic="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", @generic="40bc6223a0d4961cde4693065ac930253e3b6e472f1a23e7f15de4f711e3edf6cf2a708e1cefb78b9864bbcf", @typed={0x19, 0xc0, 0x0, 0x0, @str='/dev/bus/usb/00#/00#\x00'}, @typed={0x14, 0x41, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0xcd, 0xd8, 0x0, 0x1, [@generic="c1f89408c7f17375b3b6ca71ba660c1cb18981281dbd1e97cd53cd9468c81000e6e57b1928ba48b57afc01d52ca9e87f8db998dcc562868ce1301fd4ae7f955493324f55e708fe9502e8bd29f136681d6085de0dfc6a075b77b7e85c26117bfdb5b3f8a3165545e3e04cc2a4256748ed328bbe786015a3f042752d80d155a32d328d3009c5a74094312abf309579b035379c1834f37f2e81762cc6bd38ddca002a1a9ee29cb356644bafc7ca773d97872e7ea37529bdebed34c442f3af099316da", @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0xc, 0x53, 0x0, 0x1, [@nested={0x4, 0x85}, @nested={0x4, 0x8a}]}, @typed={0x8, 0x136, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x15f4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 3m27.456946555s ago: executing program 3 (id=2106): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002a60000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0xef, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5}, 0xe) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000580)=ANY=[@ANYBLOB="ced624dd070800e9c5f91e7901905944599a93", @ANYRES16=r0, @ANYBLOB="010029bd7000fcdbdf250f000000080001007063690011000200303030303a30303a31302e300000000008000b00018000000600110040000000080001007063690011000200303030303a30303a31302e300000000008000b00a2fb0000060011000f000000080001007063690011000200303030303a30303a31302e300000000008000b000200000006001100ffff0000080001007063690011000200303030303a30303a31302e300000000008000b00008000000600110002000000"], 0xc4}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) syz_usb_connect(0x5, 0x7dd, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0xbc, 0x2b, 0x2, 0x8, 0xbb4, 0xa2e, 0xadcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7cb, 0x1, 0xc0, 0x8, 0x0, 0x80, [{{0x9, 0x4, 0x73, 0x9, 0x10, 0x5b, 0x7d, 0x9f, 0x2, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x6, 0x9, 0x29, [@generic={0x25, 0x22, "65f7ff26f7a7fcf3ab34ef033291027622ed5ac8b3416af7a7c5bf9578ffedd2f47d7c"}, @generic={0x52, 0xa, "020515a8335f3e8859fc272e66494098bab8f3eeed7df7d95a33f7af3543103cecb6422842ebaa3c840b84e9f6b8cdbd2e6ea8c789d51242466156f57f8afc9dbc8088bfb618b6799797aeaf4b6b515e"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x81, 0x63, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}, @generic={0x15, 0xb, "060ab768b4dcd7e393075989aa1b84521ab57e"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x40, 0x4, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x10, 0x5, 0xfd, [@generic={0xa6, 0x6, "c49b2b164b9b28ec366488b1d266e396e4e74f72c550671265c979e3a44f5311755e29939300bd9dc81f2add55cc88fbac97ebaf07ac6ede372cf477ab6a9b130f894e8130ec55a15058366b047ad51eb097fc1659ef4891b32b2aba116cac3a27ad2cc9f6f3e50da76c7d5324ae0e9b5920e0cc236b7aac6375f5f1b8d9138feac372205d442492ed745aa6369f86256f5016e8714008d563d54adad50a2ecff658a174"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xd, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0xc}, @generic={0xa3, 0x22, "5ac3edf17d40acdc1b5d58b451786f181a8102783e496948023927d9d4d9c1bfa2b8c593ad5c64f4565fbcf2f840f9f91cbac7c8600823247ef4cd360d11bf4a1ec1c1f45fa44d5b76dd09b2e603e517860e87a7daab3a54936a2fc33c79d63b2c094f959554b3d1e5efd56229ddb53e8f95e355c74700325fafaec521e229fe8c7cdca259676c95b2b8316ccfa0ac1a9ceb7162106a94c44bb606b89d5e358800"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0x0, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x100}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x8, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x401}]}}, {{0x9, 0x5, 0x8a, 0x3, 0x10, 0xf, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x200}, @generic={0x4, 0x11, "a9d4"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x2, 0x4, 0xff, [@generic={0x75, 0x21, "c1dd385295105de62c18223e73de8d5a39bee6eb08873efccd131eef972d99fe55f400dab88219b950f9d299434693ad7155ee4ff38e426cd24a10e405caa7caf933401a59883a823a47ea90d3b1b350890e3d356e61e02ffad7478ef3152a359924e64d637c8b55238c7183b2975f590e3ced"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x40, 0x18, 0x2, [@generic={0x8d, 0x10, "eaade05cd76a2101b4ee129caff94186bf87f92cd2f57321be074d7851d54c403027c24443f720dcf86c1b8d2492dad9b74bb15311d619cf1412260adf0912b23687d95632079dcc79b29b57ecb86c9765e1cb24ea8d6fdb9a9be174c90120cb5ac525ba5e06a91bd49b230dfd9ed2c14536fad20b037b86c1d9f7b9540e4fa64f751b5c664db3661cf860"}, @generic={0x18, 0x10, "25daf84e10bba180e222dd7577c6667953a46dbb74b0"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x40, 0x6, 0xb}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x0, 0x7, 0x7, [@generic={0xbc, 0x8, "c9690b164705dc1adb23d2e8979f4545cae2ce4579fccf502ed45af8164589649e702af20109c00e05e37783b4c4b716fcedd8ace661f3c86373db940799b5fd32aa639630bb9965f8501c2ef685dd616a7777f2a169d35c7c8fe046d1ea9a2a8775518dfecfdaba4bb38d70496a80d13d02aafe1e4c5af22d9c28bb348eb8d2e5e15e34e76eb893da4de4e35da1af8a33edba34a56d1f08b1929c99c2cf763b84a3a68d715d10bfc8d5fd42035e2271bf5ce0214a664ae06a3d"}, @generic={0x18, 0x1, "4478a4b9fb7ce2cecffb6e526eb7cc2005918148c52e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x8, 0x78, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0xe9}, @generic={0xa3, 0x31, "0e499f53c79a0dd20b21fce0079cf8f8a1b94de99e64606a63020aee644c150b3bee15d6a22ca6980106b5e4040674181bc821b3d5be4ee0092d2d4cf1b0bc08c79bad8888ab7671fab1e87cbb17231eaf72fe59926eedfceb84ded3541fff919cddf396054a37b6ab7418967bd71d4504c0550eca17577f950d5db8d05bc368b668d7e29d4563adb93fa7e4e915fbdc9b0f7c10bec8ac154cb8b048160554cb54"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x2, 0xa8, 0x4, [@generic={0x7a, 0x30, "7fa1b75daea63605193a349ce7b30e204bab61df025f6385b27f67dd89d74de30ca752ece16d4f0a43ee55a9bb6a92e60c216ca4e5343d4811dbec9a9e2363a18cd40225ceee84431f0ea19a733a70648f0d2012c94104c79e3e004e38a8a4249d1b9519ae36585fda857e8dc57e71229f0c38bddf06e2cf"}, @generic={0x102, 0x31, "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"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x7, 0x7, 0x6}}, {{0x9, 0x5, 0x28e600ad45f787ff, 0x0, 0x400, 0x4, 0x0, 0x2, [@generic={0x66, 0x7, "6f48afd49b4b128403e30f145d3d7375c72398764e4bd26af16903a5e7288bace08491a29405d57953bb52dd245f22bc3bbd5f2f116c67c27644caedf3795aae68eb4e25a269776976b420e5872991e578ff140cc1fe432af4ba54eead46964b32cf0284"}, @generic={0xb3, 0xd78e619fe7b665f0, "871c5794488cbed93bd9b1c04844bcb8c566859d62154f500f8e198a022fe736685afb6a0e7ceb0052edacba6d1634886a6f5a2aeebc3ae2a74363059d460b29a19abb712977b2de4376123d85ead02cd6f0afb03629f5fb4fdc4f456fa4b3a8ae44d62305eb00e9ba7e4268a9ba3cb47575e21a68cac8f183e0526ac40018be546e24effacd4594238f3683b994c7cfd70444f9e40ecf99e1f54c176271d999b5f3d0ab41552c28b6b66b0c3a5c6093ca"}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x80, 0x9a, 0x0, 0x2f}, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="f94f848249f795158b877407fa8dc60739b5a203d5a0ada7b8a42fbd0add007fe4420b5c37d1b43320f7425dc3efaa833ea2d375c21f12ec7b34a467fff4f4f1aeb0a9e1237b8b9ed8203daf34f1da176aa555bb36f1724e7c27737654bc9c19cab6d205c6d9230b2073f91e5319512e281bea8d7b5046c5bddd0c0b9c0aec62752a4c360109ed5e3930f4d6beaa6f77199b1ab5fadc47edba022ee913a566200e475d21f48696b8a73d572df5cbb5868d88512ce92717b4ea6c899da3e0c420c1e7f79ccbd44f6f4364", @ANYRES8=r1, @ANYRES64=r3, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r5, @ANYRES8=r2, @ANYRES64=r2], 0x5, [{0x2, &(0x7f00000003c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xc04}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000200)={0x0, 0x0, "f4a255f6a1cd183f5e6a26980864ff00"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket(0x15, 0x80005, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x27, @mcast1, 0xb}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe32b, 0x13500, 0x0, 0x65}, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x103002) socket$inet6_udp(0xa, 0x2, 0x0) 3m12.177372165s ago: executing program 32 (id=2106): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002a60000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0xef, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5}, 0xe) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000580)=ANY=[@ANYBLOB="ced624dd070800e9c5f91e7901905944599a93", @ANYRES16=r0, @ANYBLOB="010029bd7000fcdbdf250f000000080001007063690011000200303030303a30303a31302e300000000008000b00018000000600110040000000080001007063690011000200303030303a30303a31302e300000000008000b00a2fb0000060011000f000000080001007063690011000200303030303a30303a31302e300000000008000b000200000006001100ffff0000080001007063690011000200303030303a30303a31302e300000000008000b00008000000600110002000000"], 0xc4}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) syz_usb_connect(0x5, 0x7dd, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0xbc, 0x2b, 0x2, 0x8, 0xbb4, 0xa2e, 0xadcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7cb, 0x1, 0xc0, 0x8, 0x0, 0x80, [{{0x9, 0x4, 0x73, 0x9, 0x10, 0x5b, 0x7d, 0x9f, 0x2, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x6, 0x9, 0x29, [@generic={0x25, 0x22, "65f7ff26f7a7fcf3ab34ef033291027622ed5ac8b3416af7a7c5bf9578ffedd2f47d7c"}, @generic={0x52, 0xa, "020515a8335f3e8859fc272e66494098bab8f3eeed7df7d95a33f7af3543103cecb6422842ebaa3c840b84e9f6b8cdbd2e6ea8c789d51242466156f57f8afc9dbc8088bfb618b6799797aeaf4b6b515e"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x81, 0x63, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}, @generic={0x15, 0xb, "060ab768b4dcd7e393075989aa1b84521ab57e"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x40, 0x4, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x10, 0x5, 0xfd, [@generic={0xa6, 0x6, "c49b2b164b9b28ec366488b1d266e396e4e74f72c550671265c979e3a44f5311755e29939300bd9dc81f2add55cc88fbac97ebaf07ac6ede372cf477ab6a9b130f894e8130ec55a15058366b047ad51eb097fc1659ef4891b32b2aba116cac3a27ad2cc9f6f3e50da76c7d5324ae0e9b5920e0cc236b7aac6375f5f1b8d9138feac372205d442492ed745aa6369f86256f5016e8714008d563d54adad50a2ecff658a174"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xd, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0xc}, @generic={0xa3, 0x22, "5ac3edf17d40acdc1b5d58b451786f181a8102783e496948023927d9d4d9c1bfa2b8c593ad5c64f4565fbcf2f840f9f91cbac7c8600823247ef4cd360d11bf4a1ec1c1f45fa44d5b76dd09b2e603e517860e87a7daab3a54936a2fc33c79d63b2c094f959554b3d1e5efd56229ddb53e8f95e355c74700325fafaec521e229fe8c7cdca259676c95b2b8316ccfa0ac1a9ceb7162106a94c44bb606b89d5e358800"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0x0, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x100}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x8, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x401}]}}, {{0x9, 0x5, 0x8a, 0x3, 0x10, 0xf, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x200}, @generic={0x4, 0x11, "a9d4"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x2, 0x4, 0xff, [@generic={0x75, 0x21, "c1dd385295105de62c18223e73de8d5a39bee6eb08873efccd131eef972d99fe55f400dab88219b950f9d299434693ad7155ee4ff38e426cd24a10e405caa7caf933401a59883a823a47ea90d3b1b350890e3d356e61e02ffad7478ef3152a359924e64d637c8b55238c7183b2975f590e3ced"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x40, 0x18, 0x2, [@generic={0x8d, 0x10, "eaade05cd76a2101b4ee129caff94186bf87f92cd2f57321be074d7851d54c403027c24443f720dcf86c1b8d2492dad9b74bb15311d619cf1412260adf0912b23687d95632079dcc79b29b57ecb86c9765e1cb24ea8d6fdb9a9be174c90120cb5ac525ba5e06a91bd49b230dfd9ed2c14536fad20b037b86c1d9f7b9540e4fa64f751b5c664db3661cf860"}, @generic={0x18, 0x10, "25daf84e10bba180e222dd7577c6667953a46dbb74b0"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x40, 0x6, 0xb}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x0, 0x7, 0x7, [@generic={0xbc, 0x8, "c9690b164705dc1adb23d2e8979f4545cae2ce4579fccf502ed45af8164589649e702af20109c00e05e37783b4c4b716fcedd8ace661f3c86373db940799b5fd32aa639630bb9965f8501c2ef685dd616a7777f2a169d35c7c8fe046d1ea9a2a8775518dfecfdaba4bb38d70496a80d13d02aafe1e4c5af22d9c28bb348eb8d2e5e15e34e76eb893da4de4e35da1af8a33edba34a56d1f08b1929c99c2cf763b84a3a68d715d10bfc8d5fd42035e2271bf5ce0214a664ae06a3d"}, @generic={0x18, 0x1, "4478a4b9fb7ce2cecffb6e526eb7cc2005918148c52e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x8, 0x78, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0xe9}, @generic={0xa3, 0x31, "0e499f53c79a0dd20b21fce0079cf8f8a1b94de99e64606a63020aee644c150b3bee15d6a22ca6980106b5e4040674181bc821b3d5be4ee0092d2d4cf1b0bc08c79bad8888ab7671fab1e87cbb17231eaf72fe59926eedfceb84ded3541fff919cddf396054a37b6ab7418967bd71d4504c0550eca17577f950d5db8d05bc368b668d7e29d4563adb93fa7e4e915fbdc9b0f7c10bec8ac154cb8b048160554cb54"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x2, 0xa8, 0x4, [@generic={0x7a, 0x30, "7fa1b75daea63605193a349ce7b30e204bab61df025f6385b27f67dd89d74de30ca752ece16d4f0a43ee55a9bb6a92e60c216ca4e5343d4811dbec9a9e2363a18cd40225ceee84431f0ea19a733a70648f0d2012c94104c79e3e004e38a8a4249d1b9519ae36585fda857e8dc57e71229f0c38bddf06e2cf"}, @generic={0x102, 0x31, "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"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x7, 0x7, 0x6}}, {{0x9, 0x5, 0x28e600ad45f787ff, 0x0, 0x400, 0x4, 0x0, 0x2, [@generic={0x66, 0x7, "6f48afd49b4b128403e30f145d3d7375c72398764e4bd26af16903a5e7288bace08491a29405d57953bb52dd245f22bc3bbd5f2f116c67c27644caedf3795aae68eb4e25a269776976b420e5872991e578ff140cc1fe432af4ba54eead46964b32cf0284"}, @generic={0xb3, 0xd78e619fe7b665f0, "871c5794488cbed93bd9b1c04844bcb8c566859d62154f500f8e198a022fe736685afb6a0e7ceb0052edacba6d1634886a6f5a2aeebc3ae2a74363059d460b29a19abb712977b2de4376123d85ead02cd6f0afb03629f5fb4fdc4f456fa4b3a8ae44d62305eb00e9ba7e4268a9ba3cb47575e21a68cac8f183e0526ac40018be546e24effacd4594238f3683b994c7cfd70444f9e40ecf99e1f54c176271d999b5f3d0ab41552c28b6b66b0c3a5c6093ca"}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x80, 0x9a, 0x0, 0x2f}, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="f94f848249f795158b877407fa8dc60739b5a203d5a0ada7b8a42fbd0add007fe4420b5c37d1b43320f7425dc3efaa833ea2d375c21f12ec7b34a467fff4f4f1aeb0a9e1237b8b9ed8203daf34f1da176aa555bb36f1724e7c27737654bc9c19cab6d205c6d9230b2073f91e5319512e281bea8d7b5046c5bddd0c0b9c0aec62752a4c360109ed5e3930f4d6beaa6f77199b1ab5fadc47edba022ee913a566200e475d21f48696b8a73d572df5cbb5868d88512ce92717b4ea6c899da3e0c420c1e7f79ccbd44f6f4364", @ANYRES8=r1, @ANYRES64=r3, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r5, @ANYRES8=r2, @ANYRES64=r2], 0x5, [{0x2, &(0x7f00000003c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xc04}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000200)={0x0, 0x0, "f4a255f6a1cd183f5e6a26980864ff00"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket(0x15, 0x80005, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x27, @mcast1, 0xb}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe32b, 0x13500, 0x0, 0x65}, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x103002) socket$inet6_udp(0xa, 0x2, 0x0) 11.6610763s ago: executing program 0 (id=2722): syz_open_dev$vim2m(&(0x7f0000000080), 0x4000000000000009, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x100000}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) memfd_create(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000003c0)=ANY=[@ANYBLOB="0207000000000000c91020000000000000000000ffff7f000001c2040000000607200000000006810800010400000000000000e2ffffffffffff0800000000000000000000000000e3181432af7d69c20cc0a3cb0f5c96c3bc2fdd4132c1af0a1b0e01e85f6f5681d4372acb98c8fbca6028fcc3eed5e7b56acd"], 0x48) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x13c}}, 0x0) 10.477106086s ago: executing program 0 (id=2723): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000700)={0x7, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x21], 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x22905a40, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="66b9800000c00f326635000100000f30660f3881030f0120660f1ae20fc72965643e510fc72b0f3264660f1bc60f20d86635080000000f22d8", 0x39}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') pread64(r6, &(0x7f0000000000)=""/73, 0x49, 0x7) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x13) 8.149808817s ago: executing program 1 (id=2737): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x0, {0x0, 0x0, 0x3e00}, {0x3}, {0xf4f2, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x32, 0x1, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x1}) 7.862345352s ago: executing program 1 (id=2739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000005000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x70}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.647976384s ago: executing program 4 (id=2742): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000007fffffe000000000000000000feffffff0000000000000000000000000000d9e4aa2f0000000000000000000000000000000000000000000000000000feffffff0020000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 7.422621862s ago: executing program 1 (id=2744): syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000065c0), 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) pselect6(0x8, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x800, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000400)={0x1f, 0xfffffffffffffc01, 0x40007fff, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) add_key(&(0x7f0000000080)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r2, &(0x7f0000000040)=""/36, 0x24) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x40000000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x0, 0x8, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 7.304880685s ago: executing program 4 (id=2745): bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)="2e3c62de146e74ba8a89dd474c49c55c024ea23dfc62cb3a93a58a29721b0e72971c8d38a20893d3c2d1dbcb5793e0749600e3ceeb1ab2ee506ceab4c4aec6c97e3cbd81dbc3916f2e60e3c483e66921f565f626419b1b1a2eff6bfa", 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404e014) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4000084) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r6, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r5, 0xff08, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x103) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000800)=[@increfs_done={0x40106308, 0x1}, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/232, 0xe8, 0x2, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/69, 0x45, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000000880)=""/244, 0xf4, 0x1, 0x15}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}], 0x148, 0x0, &(0x7f0000000ac0)="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"}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) 7.032871125s ago: executing program 0 (id=2746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x20, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x4804) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/115, 0x73}, {&(0x7f00000002c0)=""/91, 0x5b}], 0x2}, 0x40012002) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 6.417786037s ago: executing program 5 (id=2747): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x0, {}, {0x3, 0x0, 0x3f00}, {0xf4f2, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x1, 0x0, 0x32, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 6.157095456s ago: executing program 5 (id=2748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)=0x5) setxattr$incfs_metadata(&(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000280)="a3349acbf061610a61388d2b9d3c2c4d2001000000000000009307ae53c122", 0x1f, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x40000001, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) tkill(r4, 0x11) sched_setattr(r4, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x0, 0x0, 0xb49, 0x9, 0x7ff, 0x0, 0x3}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000480)=0x2) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x2a, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0x1000000000000002, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x8, 0x4) unshare(0x42000000) 6.050356758s ago: executing program 1 (id=2749): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00'/20, @ANYRES32=0x0, @ANYBLOB="0200000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600020001000000"], 0x50}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x642000, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x42, 0x80) syz_open_pts(0xffffffffffffffff, 0x141601) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x2000000, 0x0, 0x0, 0x2) 4.133703746s ago: executing program 4 (id=2750): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x0, {0x0, 0x0, 0x3f00}, {0x3}, {0xf4f2, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x32, 0x1, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x1}) 3.992975119s ago: executing program 4 (id=2751): sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r2) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) (async) fcntl$setstatus(r3, 0x4, 0x4000) 3.421174704s ago: executing program 0 (id=2753): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000740)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f0000000840), 0x0, 0x0, 0x158, 0x400400c0}}], 0x1, 0x0) gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000500)="78a3b2e978e7da7bde6ccb44e02a185550a716505affeffa49b0eb7f0fccc202fc07a2884ab98481fa3674487708dae13dee97df06188a0c1532c613891bba846e0e61", &(0x7f0000000900)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) poll(&(0x7f0000000c80)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x273d}, {0xffffffffffffffff, 0x28}], 0x200000000000009b, 0xb5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x102, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000580)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000005c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) io_setup(0xcc9, &(0x7f0000000040)=0x0) io_submit(r2, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0x90, 0x0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'macsec0\x00', 'ip6erspan0\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}}, @common=@inet=@ipcomp={{0x30}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@SET1={0x0, 'SET\x00', 0x1, {{0x0, 0x5, 0xb13e7b63f3509774}, {0xffffffffffffffff, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x269) r4 = dup(0xffffffffffffffff) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prctl$PR_SET_PDEATHSIG(0x1, 0x3d) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000280)=""/239, 0xef) writev(r7, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000180)="b6", 0x1}], 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000ac0)={0x0, 0xa}, &(0x7f0000000b00)=0x8) syz_usb_disconnect(r6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mknodat$loop(r3, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) 2.773388164s ago: executing program 2 (id=2756): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fbff97e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.641470969s ago: executing program 5 (id=2757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800100001a0001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa000000002000000000ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000166c000000ac141429000000000000000000000000000000000000000000000000000000000000000000000000ffffffffe7ffffff0000000000000000fcffffffffffffff0000000000000010800000000000000000000000000000000400000000000000000000000000000916ea54d2db37060000000000050000000000000000000000010000000a0001060000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002"], 0x180}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 2.534518552s ago: executing program 1 (id=2758): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x0, {}, {0x3, 0x0, 0x4000}, {0xf4f2, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x1, 0x0, 0x32, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 2.342794789s ago: executing program 5 (id=2759): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x2}, 0x1, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000380)={&(0x7f0000000780)=[0x3ff, 0x2, 0x3, 0x40, 0x7, 0xa, 0x0, 0x101, 0x217ccf13, 0x5, 0x4f5, 0x9, 0x0, 0xf3, 0x0, 0x9, 0x0, 0x3d6a, 0x7f, 0x6, 0x400, 0x80000000, 0x0, 0x2, 0x618776c7, 0x8000, 0x2748, 0x2, 0xfff, 0x1, 0xeb, 0x10001, 0xfffffff9, 0x6, 0x5, 0x85, 0x8, 0xffff, 0x5, 0x7fffffff, 0x80000001, 0x5, 0x5, 0x8, 0x7, 0x6, 0x9, 0xfffffff8, 0xa5f0, 0x9, 0x5, 0x9, 0x3, 0x1, 0x1360, 0x7ff, 0x9, 0x9, 0x487e, 0x8, 0x7ff, 0x4, 0x3, 0x2, 0xfb3, 0x9, 0x60e, 0x7, 0x4, 0x7fff, 0x1, 0x1, 0x3, 0xfffffffd, 0xffffffff, 0x9, 0xa09c, 0x101, 0xfffffffd, 0xe, 0x2, 0x7, 0xf024, 0x200, 0xc49, 0x3, 0x0, 0xa790, 0x3, 0x0, 0x80000001, 0x8, 0x3, 0x8000, 0x4e0, 0x4, 0xfffffffe, 0x1, 0xffffffc8, 0x1, 0x4, 0x8000, 0x2, 0xb339, 0x9, 0x400, 0x4, 0x8, 0x0, 0xfff, 0x9, 0xafc, 0x8, 0xf994, 0x3, 0x400, 0xc, 0xd, 0x1ff, 0x1003, 0x2, 0x5, 0x8, 0x20b8, 0x4e, 0x4, 0x5, 0x5, 0x0, 0x66078cfa, 0x9, 0xfffffff8, 0x5, 0x1, 0x0, 0x1, 0x80, 0x6, 0x29, 0x7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x5, 0x10000, 0x9, 0x200, 0x7, 0x347, 0x40, 0xa7, 0x7b, 0x8, 0x5, 0x7fffffff, 0x2, 0xa5, 0xbf, 0x3, 0xd, 0x3, 0x5, 0x0, 0xc, 0x997, 0x1, 0x6, 0xd, 0xc, 0x6, 0x7fff, 0x2, 0x0, 0x2a, 0x5, 0xe5, 0x3, 0x7f, 0xfff, 0xf, 0x5, 0x2, 0xffff0000, 0xa, 0x500, 0x6, 0x1000, 0x601b, 0xd, 0x1, 0x4d18, 0x7, 0xd42, 0x9, 0xb, 0x0, 0x0, 0x7, 0x5, 0xfffffffe, 0x401, 0xfffffffb, 0xd, 0x8000, 0x2, 0xfffffff4, 0x1, 0x9, 0x1, 0x1, 0x4, 0x80, 0x7, 0x0, 0xffffffff, 0x4, 0x7, 0x5, 0x0, 0x80000000, 0xdbde, 0x9, 0x6, 0x2, 0x2, 0xb, 0x17, 0x2, 0x3, 0x1000, 0xbbd, 0x8, 0xa, 0x1b, 0x5c, 0x8, 0xc5e, 0xc, 0x4, 0x6, 0x1, 0x2, 0x9ec, 0x17, 0x6, 0x9, 0x3, 0x1, 0x1, 0x6, 0x9, 0x3ff, 0xd, 0x9, 0x1000, 0x1400000, 0x3, 0x100, 0x81, 0x7, 0x0, 0xc76, 0x7288cacb, 0x5, 0x1, 0x4, 0x1000, 0x0, 0x1, 0x9, 0xfff, 0x8001, 0x2, 0x7ff, 0xffff, 0x0, 0x6, 0x8, 0x6, 0x4934, 0x0, 0x1, 0x3, 0x7, 0x0, 0xed, 0x0, 0x81d, 0xd9ad, 0x0, 0x5, 0x3, 0x6, 0x6, 0x7ff, 0x200, 0x5, 0x6a0, 0x3b3, 0x946a, 0x8, 0x8, 0x7, 0x5, 0x9, 0x5, 0x0, 0x80000000, 0x4, 0x0, 0x100, 0x10000, 0xff, 0x7df, 0x5, 0x19e, 0x1000, 0x2, 0x3, 0x100, 0x9, 0x8001, 0x401, 0x8, 0x0, 0xffff, 0x2a7a, 0x5b, 0x1, 0xc0, 0x3, 0x0, 0x8, 0x5, 0x2b25573d, 0x7, 0xe971, 0x1, 0x89c, 0xa, 0xa2, 0x7, 0x7fff, 0x80, 0x2, 0xe7e9, 0x200, 0xfdfdffff, 0x9, 0x0, 0x8, 0x9, 0x6, 0x611, 0x3, 0x4, 0x6, 0x8, 0xfffffffa, 0xfff, 0x80000001, 0x7, 0xf, 0x40, 0xc, 0xde, 0x5, 0x7, 0x6, 0xfa4, 0x5, 0x7, 0x7, 0x2f74, 0x3ff, 0x190a, 0x6, 0x1, 0x1, 0x0, 0x42fac47, 0x478, 0xb, 0x7fff, 0x7, 0xe4, 0x4, 0x4, 0x8, 0x1a, 0x80000001, 0x1, 0x9, 0xffff, 0xfffffff6, 0xf46, 0x4, 0x7, 0x6000000, 0x0, 0x401, 0x0, 0x400, 0x737, 0xfff, 0x0, 0x8, 0x4, 0x8, 0x99d, 0x200, 0x1, 0x0, 0x9, 0x7, 0x181, 0x0, 0x8, 0x1, 0x8, 0xffffad91, 0x1, 0x3, 0xd48a, 0x373, 0x401, 0xf8, 0x2, 0x8001, 0x2, 0x3, 0xd, 0xc, 0x200, 0x6, 0xfffffffa, 0x217, 0x10001, 0xe, 0x2, 0x4ab5, 0x8, 0x10000, 0x8, 0x6, 0x1, 0x96, 0x6, 0x8000, 0x2255, 0x6, 0x8, 0x7, 0x4, 0x800, 0x200, 0x407, 0x8, 0x1000, 0x8000, 0x8, 0xff, 0x975f, 0x9, 0x3, 0x4, 0xc, 0x0, 0x3, 0x8, 0x1200000, 0x8000, 0xfff, 0x6, 0xca8, 0x10000, 0x8, 0x93, 0x6, 0x80000000, 0x1, 0x8, 0x3, 0x2, 0x8, 0x5, 0x0, 0x9, 0xffffffff, 0x1, 0xf75, 0xe65, 0x0, 0x4, 0x6, 0x6, 0x7, 0x1, 0x3, 0x5, 0x0, 0x0, 0x4, 0xf, 0x3, 0x400, 0x4, 0x0, 0x6, 0xf, 0x2, 0x80, 0x7, 0x4, 0xff, 0x0, 0x7fff, 0x8, 0x7, 0x3, 0x66be, 0x8, 0xffffffff, 0x3, 0x10, 0xa0000000, 0x2, 0x3, 0x8, 0x80, 0xfffffffa, 0x250, 0x4, 0x313, 0x8, 0x2, 0x0, 0x6ad, 0xa, 0x7fff, 0x9, 0x7, 0x0, 0x7f, 0x4, 0x1, 0x10, 0x3, 0xfffffffd, 0x2, 0x1, 0x6, 0xfffffffc, 0x8, 0xefd, 0x800, 0x2, 0x9, 0x3, 0x7, 0x1, 0x400, 0x8, 0x9, 0x6, 0x9dc00000, 0xff, 0x6, 0x9, 0xa45, 0x0, 0x3, 0xfffffff9, 0x4, 0x43, 0xa, 0xc, 0x6, 0x7fffffff, 0x6, 0x2, 0x2, 0x80, 0x3, 0x9, 0x3, 0x5, 0x5e, 0x5, 0x1ff, 0x3, 0x7, 0x0, 0x7fff, 0x63, 0x7ff, 0x2, 0x7f, 0x1, 0x2, 0x6, 0x8, 0x4, 0x5, 0x7, 0x3, 0xd5f, 0x2, 0x8, 0x3b, 0xc48d, 0x27, 0x4, 0x2, 0x6, 0x4, 0x5, 0x7, 0x1, 0x7ff, 0xe7b9, 0xfffffff8, 0xff, 0xfab2, 0xc, 0xf, 0x1, 0x10, 0x0, 0x4, 0x3, 0x8, 0x40, 0x0, 0x75c358f8, 0x100, 0x9, 0x2, 0x8, 0x9, 0x2, 0x0, 0x2, 0x80, 0x8, 0x3ff, 0x788, 0x10000, 0xfffffc01, 0x8, 0x40, 0x7fffffff, 0x4, 0x8c8f, 0x0, 0x56, 0x0, 0x80000001, 0x8, 0xd, 0xd, 0x8, 0xc, 0x1, 0xffff, 0xf, 0xe, 0x0, 0x100, 0x80000001, 0x2, 0x6, 0x0, 0x3, 0xc, 0x0, 0x0, 0x9, 0x7, 0x7ff, 0xc71, 0x4, 0x9, 0xffffffff, 0x4, 0x4, 0x5, 0x8000, 0x6, 0x1, 0x10000, 0x3, 0x8, 0x7f, 0x0, 0x4, 0x7, 0x4800, 0x3, 0x252, 0xfaef, 0x4, 0xa3, 0x44d, 0xd, 0x9, 0x0, 0x2, 0x51, 0x3, 0x1, 0x3, 0x400000, 0x6, 0x3f, 0xb, 0x2, 0x400, 0xa6c, 0x3, 0x0, 0x7, 0x7fffffff, 0x6, 0x2, 0x4, 0xe, 0x6, 0x3, 0x6, 0x27400000, 0x4, 0x8, 0x7fffffff, 0x81, 0x6, 0x9, 0x2, 0x9, 0x3, 0x5, 0x8, 0x800, 0x5, 0x3, 0x6, 0xffff1e28, 0x100, 0x8, 0x8, 0xee9d, 0x8000, 0x80, 0x5, 0x9, 0x6, 0x3e, 0x4, 0x4, 0x1ff, 0x5, 0xffff, 0x4, 0x5f, 0x6, 0xdb33, 0x6, 0x9, 0x5, 0x37, 0x10001, 0x7, 0x0, 0x733b, 0x4325, 0xc, 0xfffffff7, 0x5, 0x4, 0x9, 0xfffffff7, 0xa5, 0x6, 0x1, 0x7, 0x4, 0x0, 0x410, 0x9, 0xd, 0xd, 0x9, 0x2, 0x80000000, 0x1, 0x4, 0xaf4, 0x8acc00, 0x4, 0x100, 0x7, 0x84, 0x2d4d, 0x4, 0x8, 0xffff, 0x720, 0x7, 0x8, 0x6, 0x4, 0xc082, 0x161d, 0x80000000, 0x10001, 0x4, 0x0, 0x8, 0x7fffffff, 0x9, 0x0, 0x2, 0x56a, 0x7fffffff, 0x4, 0x101, 0x10000, 0x800, 0x9, 0x6, 0x3, 0x6, 0x2, 0x3, 0x10000, 0x67, 0x5, 0x8, 0x5, 0xffff0710, 0x6, 0xcf9, 0x5, 0x7a19, 0x4, 0xffff4ed7, 0x8, 0x1, 0xcff2, 0x5, 0x101, 0x8, 0x9, 0x8000, 0x1, 0x3, 0x2, 0xfff, 0x9, 0x0, 0x0, 0x8, 0x7, 0x9, 0x0, 0x78000000, 0x6, 0x6, 0x7f, 0x0, 0x9, 0x5, 0x10000, 0x6, 0x0, 0x15c2429a, 0x7, 0x7d, 0xa222, 0x4, 0xf, 0x1, 0x3, 0x8, 0x3, 0x2, 0x7, 0x287e, 0x0, 0x4, 0x2, 0x9, 0x6, 0x2, 0x1, 0xfa1, 0x10000, 0x1ff35398, 0x1, 0x40, 0x4160, 0x3, 0x8, 0x3, 0x6, 0x19, 0x4, 0x3ff, 0x3, 0x1000, 0x4, 0x1, 0x3fe0000, 0x3, 0x7, 0x5, 0x3, 0x5, 0xfffffff8, 0x3, 0x7, 0x8001, 0x3, 0xe, 0xa66, 0x0, 0xfff, 0xc2, 0x4, 0x800, 0xb9, 0x4, 0x600, 0xa, 0x2, 0x0, 0x5, 0x9, 0x5, 0x800, 0x7f, 0xbf82, 0x4, 0xdb28, 0x7f, 0x6, 0x1, 0x1, 0x2, 0x4, 0xffffffff, 0xffff, 0x5, 0x3, 0x8, 0xa53, 0x1, 0x5, 0x5, 0xb438, 0x4f, 0x186, 0x10000, 0x6, 0x6, 0x9, 0x81, 0x5, 0xe, 0x3, 0x1, 0xf48, 0xffff, 0x3, 0x7ff, 0x6, 0xfffffffc, 0x4, 0x9, 0x81, 0x4, 0xe1, 0x6d1, 0x7, 0xce9, 0x7, 0xffffffc9, 0x7, 0x7, 0x1, 0x80000000, 0xab2, 0x6, 0x0, 0x800, 0x81, 0x2234, 0x1, 0x9, 0xc, 0x7, 0x1, 0xc31, 0xf, 0x2fe, 0x7, 0x6, 0x8, 0xb80, 0x5, 0xe4, 0x2, 0x7, 0x4, 0xe, 0xffff8bc5, 0x2, 0xfffff000, 0xc, 0x4848, 0xfff, 0xc5], 0x6, 0x400, 0x4}) 2.279285446s ago: executing program 2 (id=2760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xaa}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.18683272s ago: executing program 1 (id=2761): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000340)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xfffd}}}, 0x24}}, 0x40000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="dc388e486c38ce6b21a4cb765e7581d81e", @ANYRES16=r7, @ANYBLOB="010025bdf000fcdbdf251000000008000300", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="08003b000100010008003a0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000096000040"]) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)) 2.048882507s ago: executing program 5 (id=2762): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa97aa1553ff41cf1186dd604dda0000280600fc0100000000000000000089000002fe8000"/52, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000"], 0xb8}, 0x1, 0x0, 0x0, 0x30}, 0x0) 2.032298479s ago: executing program 2 (id=2763): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x7, 0x5, 0x3, 0x3}, 0x40, [0x10, 0x200, 0x63, 0x6, 0x10001, 0x9, 0x3626, 0xffff, 0x3b, 0x4, 0xff, 0x5f19, 0x6, 0x3, 0x3, 0x6, 0x8, 0x7, 0xfffffff4, 0x23, 0xfffffff7, 0x1, 0x20003, 0x6, 0x6, 0x8, 0x10001, 0x0, 0x0, 0xb2, 0x0, 0x1, 0x6, 0x3, 0x6, 0x8, 0x8, 0x0, 0x80000001, 0x3, 0x1, 0x7, 0x4, 0x7ff, 0xfffffffd, 0x3, 0x9f, 0x1, 0x8f2, 0x9, 0x0, 0x100, 0x0, 0x6, 0x6, 0x7, 0x4, 0x9, 0x81, 0x2, 0x1aff, 0x8, 0x9, 0x7f], [0xd, 0x2, 0x9, 0xfffffffe, 0x4, 0x4, 0x87c5, 0x800, 0x9, 0xd, 0x10, 0x80000000, 0x5, 0x7, 0x4, 0xed2f, 0x8, 0x400, 0x6002, 0x7, 0x10001, 0x2, 0xdbf, 0x401, 0x8001, 0x5f58, 0x10, 0x200, 0x6, 0x4, 0x18, 0x80, 0x101, 0x8, 0x2, 0x4, 0x3, 0x63, 0x0, 0x7f, 0x0, 0x0, 0x101, 0x9, 0x42a4, 0x6, 0x5, 0x5, 0x7, 0x3, 0xfffffff3, 0x8d, 0x6, 0x6, 0x4, 0x0, 0x0, 0xff, 0x1, 0xffff, 0x36cc, 0x7, 0xa, 0x43d], [0x0, 0x80000000, 0xf, 0x400, 0x3, 0xd9, 0x0, 0x2, 0x1, 0x6586de57, 0x1ff, 0x6, 0x7, 0xec, 0x7, 0xfffffe00, 0x1, 0x1005, 0x80, 0x6, 0x5, 0x80000000, 0xfffffffc, 0x80, 0x1, 0xeb9, 0x1000, 0xec5, 0x0, 0x400, 0x1, 0xb54, 0x101, 0x3f, 0x100, 0x7, 0x0, 0x2, 0x4, 0x4, 0x9, 0x4, 0x69, 0x3, 0x3c5, 0x0, 0x6, 0x9, 0x8, 0x400000, 0x1, 0xe32, 0x2, 0xffff0000, 0xfffffff9, 0x85ebe063, 0x1, 0xc, 0x43f, 0x2, 0x2, 0x3, 0xf, 0xa48], [0x1, 0x1, 0x8, 0x9, 0x8009, 0x5, 0x2351, 0x7, 0x6, 0xfff, 0x2, 0x6, 0x10, 0x1, 0x80000000, 0x1, 0xd, 0xa7f, 0x0, 0x100, 0x1, 0x4, 0xd2, 0x3, 0x8000002, 0x2b, 0x9, 0x4, 0x6, 0x7f, 0xea6b, 0x7, 0x2, 0x0, 0xffff8d95, 0xec, 0x0, 0x7f, 0xfffffffb, 0x10, 0x3, 0x9, 0xb, 0xfffffffe, 0x8, 0x5, 0x7e, 0xb, 0x3ff, 0x5, 0xe, 0x7, 0x7f, 0x6, 0x9, 0x93, 0x8, 0x6, 0x7f, 0x0, 0x7, 0x7, 0x0, 0x4]}, 0x45c) 1.862880428s ago: executing program 5 (id=2764): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000020}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x4804) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/115, 0x73}, {&(0x7f00000002c0)=""/91, 0x5b}], 0x2}, 0x40012002) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.585294616s ago: executing program 2 (id=2765): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x30}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2b0, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x29c, 0x1, [@m_gact={0x154, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x8, 0x7, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xaeb, 0x20000000}}]}, {0xc6, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x38, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xb0, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x1, 0x7, 0x187e, 0x8}}]}, {0x31, 0x6, "644cfabbe56834b72d4965b0f9c601f7e7e0a903f719e150808ef459921b7b7a784878285ded9060f2020ae3e0"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.190520684s ago: executing program 2 (id=2767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 785.204496ms ago: executing program 2 (id=2768): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00'/20, @ANYRES32=0x0, @ANYBLOB="0200000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600020001000000"], 0x50}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x642000, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x42, 0x80) syz_open_pts(0xffffffffffffffff, 0x141601) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3000000, 0x0, 0x0, 0x2) 522.152884ms ago: executing program 0 (id=2769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800100001a0001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa00000000200000000080ffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000166c000000ac141429000000000000000000000000000000000000000000000000000000000000000000000000ffffffffe7ffffff0000000000000000fcffffffffffffff0000000000000010800000000000000000000000000000000400000000000000000000000000000916ea54d2db37060000000000050000000000000000000000010000000a0001060000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002"], 0x180}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 521.492176ms ago: executing program 4 (id=2770): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 291.118851ms ago: executing program 0 (id=2771): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x73, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2084) writev(r3, &(0x7f00000036c0)=[{&(0x7f0000002080)='T', 0x1}], 0x1) (async, rerun: 64) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xe07) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000002100)=ANY=[@ANYBLOB="010c00080800"], 0x6) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1e4) close(r5) execveat(r3, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) (async, rerun: 32) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) (async) r6 = syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f0000006140)={0x0, 0x0, 0x0, '\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x402) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@empty, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x0, 0x0, 0xffffffff], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xfffd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x458) 0s ago: executing program 4 (id=2772): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8, 0x0, 0xb49, 0x10001, 0x6, 0x0, 0x3}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000), 0x4) r5 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x3d7803, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r3, 0x0, 0x50) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0xc048aec8, &(0x7f0000000700)={0x6, 0x0, @pic={0x1, 0x10, 0x8, 0x7, 0x6, 0x6, 0xa, 0x52, 0x3, 0x7, 0x5, 0xd, 0xbb, 0x1, 0x6, 0xb}}) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x57, 0xa, 0x0, "3258c5c00e7f94ae1e008fba001a0000f4ff40000000000f2300e91aba2800", 0x34343459}) syz_emit_ethernet(0x142, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xfffffffffffffffc) kernel console output (not intermixed with test programs): disconnect, device number 2 [ 666.129749][ T24] usb 1-1: USB disconnect, device number 104 [ 666.881493][T13211] batadv_slave_1: entered promiscuous mode [ 666.949731][T13214] batadv_slave_1: left promiscuous mode [ 667.295695][ T7174] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 667.459190][T13222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2240'. [ 667.477480][ T7174] usb 1-1: Using ep0 maxpacket: 32 [ 667.501292][ T7174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 667.577645][ T7174] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 667.615526][ T7174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 667.615547][ T7174] usb 1-1: Product: syz [ 667.615556][ T7174] usb 1-1: Manufacturer: syz [ 667.615566][ T7174] usb 1-1: SerialNumber: syz [ 667.621762][ T7174] usb 1-1: config 0 descriptor?? [ 667.638020][ T7174] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 667.803138][ T7174] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 668.043680][T11958] udevd[11958]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 668.275006][T13235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.294570][T13235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.307044][ T7191] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 668.314880][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 668.465425][ T7191] usb 3-1: device descriptor read/64, error -71 [ 668.487852][ T24] usb 6-1: config 0 has an invalid interface number: 175 but max is 0 [ 668.496581][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.514212][T13243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.522800][ T24] usb 6-1: config 0 has no interface number 0 [ 668.522860][ T24] usb 6-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 668.522885][ T24] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 668.522911][ T24] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 668.522933][ T24] usb 6-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 668.525680][ T24] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 668.596623][T13243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.619984][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.628169][ T24] usb 6-1: Product: syz [ 668.632573][ T24] usb 6-1: Manufacturer: syz [ 668.637545][ T24] usb 6-1: SerialNumber: syz [ 668.657962][ T24] usb 6-1: config 0 descriptor?? [ 668.725325][ T7191] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 668.751675][ T24] symbolserial 6-1:0.175: symbol converter detected [ 668.783683][ T24] usb 6-1: symbol converter now attached to ttyUSB0 [ 668.925526][ T7191] usb 3-1: device descriptor read/64, error -71 [ 668.988699][ T24] usb 6-1: USB disconnect, device number 3 [ 669.027804][ T24] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 669.122830][ T7191] usb usb3-port1: attempt power cycle [ 669.163311][ T24] symbolserial 6-1:0.175: device disconnected [ 669.495396][ T7191] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 669.585986][ T7191] usb 3-1: device descriptor read/8, error -71 [ 669.683239][T13246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.740057][T13246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.845547][ T7191] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 669.880371][ T7191] usb 3-1: device descriptor read/8, error -71 [ 669.997755][ T7191] usb usb3-port1: unable to enumerate USB device [ 670.048819][ T7174] usb 1-1: USB disconnect, device number 105 [ 670.066164][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 670.258168][ T24] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 670.286862][ T24] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 670.351502][ T24] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 7 [ 670.400692][ T24] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8549, setting to 1024 [ 670.441901][ T24] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 670.478635][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 670.527152][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.787540][T13263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.804148][T13282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2252'. [ 670.814167][T13282] 8021q: VLANs not supported on gre0 [ 670.851193][T13263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.038841][ T24] ath6kl: Failed to submit usb control message: -71 [ 671.084962][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 671.141130][ T24] ath6kl: Unable to send get target info: -71 [ 671.219193][ T24] ath6kl: Failed to init ath6kl core: -71 [ 671.242762][ T24] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 671.323412][ T24] usb 6-1: USB disconnect, device number 4 [ 671.745351][ T10] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 672.195982][T13310] sctp: [Deprecated]: syz.1.2259 (pid 13310) Use of int in maxseg socket option. [ 672.195982][T13310] Use struct sctp_assoc_value instead [ 672.223292][T13312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.468415][T13312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.525529][ T7174] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 672.699851][ T7174] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 672.710187][ T7174] usb 6-1: config 0 has no interface number 0 [ 672.717042][ T7174] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 672.729410][ T7174] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 672.771327][ T7174] usb 6-1: config 0 interface 255 has no altsetting 0 [ 672.789373][ T7174] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 672.822206][ T10] usb 1-1: config 0 has no interfaces? [ 672.842512][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 672.852578][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.877213][ T10] usb 1-1: Product: syz [ 672.910678][ T10] usb 1-1: Manufacturer: syz [ 672.935427][ T7174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.947216][ T10] usb 1-1: SerialNumber: syz [ 672.981682][ T10] usb 1-1: config 0 descriptor?? [ 673.016924][ T7174] usb 6-1: config 0 descriptor?? [ 673.064965][ T7174] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 673.767238][T13299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2255'. [ 674.044691][T13330] input: syz0 as /devices/virtual/input/input40 [ 674.092280][ T30] audit: type=1326 audit(1749173380.721:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d51f8e929 code=0x7ffc0000 [ 674.239198][ T30] audit: type=1326 audit(1749173380.721:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0d51f8e929 code=0x7ffc0000 [ 674.357304][ T30] audit: type=1326 audit(1749173380.721:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d51f8e929 code=0x7ffc0000 [ 674.481055][ T30] audit: type=1326 audit(1749173380.721:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f0d51f8e929 code=0x7ffc0000 [ 674.619313][ T10] usb 6-1: USB disconnect, device number 5 [ 674.709890][ T30] audit: type=1326 audit(1749173380.781:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d51f8e929 code=0x7ffc0000 [ 674.826098][ T30] audit: type=1326 audit(1749173380.781:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0d51f8e929 code=0x7ffc0000 [ 674.849434][ T30] audit: type=1326 audit(1749173380.831:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d51f8e929 code=0x7ffc0000 [ 674.888671][ T30] audit: type=1326 audit(1749173380.831:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d51f8e929 code=0x7ffc0000 [ 676.247056][T13372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.284668][ T5888] usb 1-1: USB disconnect, device number 106 [ 676.305788][T13372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.391732][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2275'. [ 676.460959][T13368] program syz.4.2272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 676.586513][T13383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.596321][T13383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.736927][T13390] netlink: 'syz.1.2274': attribute type 2 has an invalid length. [ 677.045408][ T5888] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 677.266916][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 677.282381][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 677.312920][ T5888] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 677.334410][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 677.362634][ T5888] usb 3-1: Product: syz [ 677.387833][ T5888] usb 3-1: Manufacturer: syz [ 677.405073][ T5888] usb 3-1: SerialNumber: syz [ 677.433431][ T5888] usb 3-1: config 0 descriptor?? [ 677.498362][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 677.743297][ T5888] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 677.945325][T11958] udevd[11958]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.474042][T13420] FAULT_INJECTION: forcing a failure. [ 679.474042][T13420] name failslab, interval 1, probability 0, space 0, times 0 [ 679.575536][T13420] CPU: 0 UID: 0 PID: 13420 Comm: syz.0.2283 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 679.575571][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.575582][T13420] Call Trace: [ 679.575589][T13420] [ 679.575597][T13420] dump_stack_lvl+0x189/0x250 [ 679.575632][T13420] ? __pfx____ratelimit+0x10/0x10 [ 679.575655][T13420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.575680][T13420] ? __pfx__printk+0x10/0x10 [ 679.575705][T13420] ? __pfx___might_resched+0x10/0x10 [ 679.575728][T13420] should_fail_ex+0x414/0x560 [ 679.575757][T13420] ? alloc_netdev_mqs+0xa6/0x11e0 [ 679.575779][T13420] should_failslab+0xa8/0x100 [ 679.575801][T13420] __kvmalloc_node_noprof+0x161/0x5f0 [ 679.575821][T13420] ? alloc_netdev_mqs+0xa6/0x11e0 [ 679.575839][T13420] ? __pfx_snprintf+0x10/0x10 [ 679.575861][T13420] ? __pfx_vlan_setup+0x10/0x10 [ 679.575880][T13420] alloc_netdev_mqs+0xa6/0x11e0 [ 679.575902][T13420] ? __pfx_vlan_setup+0x10/0x10 [ 679.575927][T13420] register_vlan_device+0x24f/0x4c0 [ 679.575950][T13420] ? __pfx_register_vlan_device+0x10/0x10 [ 679.575970][T13420] ? security_capable+0x7e/0x2e0 [ 679.576003][T13420] vlan_ioctl_handler+0x281/0x650 [ 679.576023][T13420] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 679.576040][T13420] ? __lock_acquire+0xab9/0xd20 [ 679.576081][T13420] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 679.576100][T13420] sock_ioctl+0x610/0x790 [ 679.576128][T13420] ? __pfx_sock_ioctl+0x10/0x10 [ 679.576152][T13420] ? __fget_files+0x2a/0x420 [ 679.576172][T13420] ? __fget_files+0x3a0/0x420 [ 679.576192][T13420] ? __fget_files+0x2a/0x420 [ 679.576216][T13420] ? bpf_lsm_file_ioctl+0x9/0x20 [ 679.576242][T13420] ? __pfx_sock_ioctl+0x10/0x10 [ 679.576263][T13420] __se_sys_ioctl+0xfc/0x170 [ 679.576304][T13420] do_syscall_64+0xfa/0x3b0 [ 679.576328][T13420] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.576352][T13420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.576371][T13420] ? clear_bhb_loop+0x60/0xb0 [ 679.576394][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.576411][T13420] RIP: 0033:0x7f8ce658e929 [ 679.576429][T13420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.576445][T13420] RSP: 002b:00007f8ce740a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.576467][T13420] RAX: ffffffffffffffda RBX: 00007f8ce67b5fa0 RCX: 00007f8ce658e929 [ 679.576481][T13420] RDX: 0000200000000040 RSI: 0000000000008982 RDI: 0000000000000003 [ 679.576492][T13420] RBP: 00007f8ce740a090 R08: 0000000000000000 R09: 0000000000000000 [ 679.576503][T13420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.576514][T13420] R13: 0000000000000000 R14: 00007f8ce67b5fa0 R15: 00007f8ce68dfa28 [ 679.576547][T13420] [ 680.350677][ T5888] usb 3-1: USB disconnect, device number 88 [ 680.515100][T13434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.525115][T13434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.710221][T13434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2286'. [ 680.824061][T13443] input: syz0 as /devices/virtual/input/input41 [ 680.953263][T13447] netlink: 'syz.2.2289': attribute type 5 has an invalid length. [ 680.977174][T13447] netlink: 'syz.2.2289': attribute type 5 has an invalid length. [ 681.895282][T13459] macvlan1: entered promiscuous mode [ 681.953587][T13459] macvlan1: left promiscuous mode [ 682.204057][T13461] netlink: 'syz.5.2292': attribute type 12 has an invalid length. [ 682.225414][ T24] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 682.228342][T13461] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2292'. [ 682.525476][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 682.557833][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 682.605919][ T24] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 682.672743][ T24] usb 1-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 682.736241][ T24] usb 1-1: config 1 interface 0 altsetting 13 bulk endpoint 0x3 has invalid maxpacket 1024 [ 682.827494][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 682.880602][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.909653][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.933428][ T24] usb 1-1: Product: Э [ 682.948047][ T24] usb 1-1: Manufacturer: п [ 682.975984][ T24] usb 1-1: SerialNumber: 芡ⰻ烣㬦錣찺鶎籢옐㭪Ղ㳙ꢹ朒籔悭﷏샐垀ꬕ래瀢襁ᦳ빥騩苾海羟빺↏풰ᙳꚁ숱鉱鏨ꖒκ﫡༫ 婸盨㵫ᓫ푹경❬뉀覢鬚朦व廍槬 [ 683.154474][T13476] FAULT_INJECTION: forcing a failure. [ 683.154474][T13476] name failslab, interval 1, probability 0, space 0, times 0 [ 683.157402][T13455] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 683.252062][T13476] CPU: 1 UID: 0 PID: 13476 Comm: syz.4.2295 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 683.252095][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.252106][T13476] Call Trace: [ 683.252115][T13476] [ 683.252124][T13476] dump_stack_lvl+0x189/0x250 [ 683.252158][T13476] ? __pfx____ratelimit+0x10/0x10 [ 683.252188][T13476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.252216][T13476] ? __pfx__printk+0x10/0x10 [ 683.252241][T13476] ? __mutex_trylock_common+0x153/0x260 [ 683.252270][T13476] should_fail_ex+0x414/0x560 [ 683.252302][T13476] should_failslab+0xa8/0x100 [ 683.252325][T13476] __kmalloc_cache_noprof+0x70/0x3d0 [ 683.252355][T13476] ? __hw_addr_add_ex+0x1f4/0x770 [ 683.252382][T13476] __hw_addr_add_ex+0x1f4/0x770 [ 683.252411][T13476] dev_addr_init+0x14f/0x230 [ 683.252436][T13476] ? __pfx_dev_addr_init+0x10/0x10 [ 683.252473][T13476] alloc_netdev_mqs+0x2f3/0x11e0 [ 683.252495][T13476] ? __pfx_vlan_setup+0x10/0x10 [ 683.252522][T13476] register_vlan_device+0x24f/0x4c0 [ 683.252546][T13476] ? __pfx_register_vlan_device+0x10/0x10 [ 683.252565][T13476] ? security_capable+0x7e/0x2e0 [ 683.252599][T13476] vlan_ioctl_handler+0x281/0x650 [ 683.252619][T13476] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 683.252637][T13476] ? __lock_acquire+0xab9/0xd20 [ 683.252681][T13476] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 683.252701][T13476] sock_ioctl+0x610/0x790 [ 683.252729][T13476] ? __pfx_sock_ioctl+0x10/0x10 [ 683.252753][T13476] ? __fget_files+0x2a/0x420 [ 683.252774][T13476] ? __fget_files+0x3a0/0x420 [ 683.252794][T13476] ? __fget_files+0x2a/0x420 [ 683.252820][T13476] ? bpf_lsm_file_ioctl+0x9/0x20 [ 683.252848][T13476] ? __pfx_sock_ioctl+0x10/0x10 [ 683.252872][T13476] __se_sys_ioctl+0xfc/0x170 [ 683.252904][T13476] do_syscall_64+0xfa/0x3b0 [ 683.252927][T13476] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.252951][T13476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.252971][T13476] ? clear_bhb_loop+0x60/0xb0 [ 683.252995][T13476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.253014][T13476] RIP: 0033:0x7efd23d8e929 [ 683.253033][T13476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.253050][T13476] RSP: 002b:00007efd24be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.253073][T13476] RAX: ffffffffffffffda RBX: 00007efd23fb5fa0 RCX: 00007efd23d8e929 [ 683.253088][T13476] RDX: 0000200000000040 RSI: 0000000000008982 RDI: 0000000000000003 [ 683.253099][T13476] RBP: 00007efd24be6090 R08: 0000000000000000 R09: 0000000000000000 [ 683.253110][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.253122][T13476] R13: 0000000000000000 R14: 00007efd23fb5fa0 R15: 00007efd240dfa28 [ 683.253155][T13476] [ 683.335390][T13455] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 683.337878][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.543613][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.649668][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.327228][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 684.444848][ T24] usb 1-1: USB disconnect, device number 107 [ 684.475906][T13493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.555518][T13493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.081430][T13510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2305'. [ 685.121424][T13510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2305'. [ 685.793245][T13517] batadv_slave_0: entered promiscuous mode [ 685.952198][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.959162][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.747657][T13549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2313'. [ 687.101631][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.119223][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.225359][ T7191] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 688.469708][ T7191] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 688.491961][ T7191] usb 6-1: can't read configurations, error -61 [ 688.934036][ T30] audit: type=1326 audit(1749173395.561:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13578 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f318e929 code=0x7ffc0000 [ 689.045241][ T7191] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 689.100790][ T30] audit: type=1326 audit(1749173395.591:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13578 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f318e929 code=0x7ffc0000 [ 689.156274][ T24] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 689.280240][ T7191] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 689.292629][ T7191] usb 6-1: can't read configurations, error -61 [ 689.348644][ T7191] usb usb6-port1: attempt power cycle [ 689.384535][ T24] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 689.442184][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.469488][T13589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.489528][T13589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.536190][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 689.613864][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 689.681421][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 689.775971][ T7191] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 689.797576][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 689.840044][ T7191] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 689.861047][ T7191] usb 6-1: can't read configurations, error -61 [ 689.869834][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.919512][ T24] usb 1-1: config 0 descriptor?? [ 689.925891][T13576] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 689.995366][ T5887] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 690.025734][ T7191] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 690.092549][ T7191] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 690.150070][ T5887] usb 3-1: device descriptor read/64, error -71 [ 690.313924][ T7191] usb 6-1: can't read configurations, error -61 [ 690.344263][T13602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2330'. [ 690.355756][ T7191] usb usb6-port1: unable to enumerate USB device [ 690.553676][ T24] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 690.573412][ T24] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 690.595652][ T5887] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 690.603566][ T24] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 690.745444][ T5887] usb 3-1: device descriptor read/64, error -71 [ 690.859976][ T5887] usb usb3-port1: attempt power cycle [ 690.926633][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.935797][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.305376][ T5887] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 691.323953][T13613] netlink: 'syz.5.2331': attribute type 10 has an invalid length. [ 691.334624][ T5887] usb 3-1: device descriptor read/8, error -71 [ 691.350578][T13613] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2331'. [ 691.586526][ T5887] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 691.628015][T13613] team0: Port device geneve0 added [ 691.646772][ T5887] usb 3-1: device descriptor read/8, error -71 [ 691.785828][ T5887] usb usb3-port1: unable to enumerate USB device [ 691.965919][ T5887] usb 1-1: reset high-speed USB device number 108 using dummy_hcd [ 692.225364][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 692.398781][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 692.441373][ T24] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 692.465297][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.520765][ T24] usb 6-1: Product: syz [ 692.552497][ T24] usb 6-1: Manufacturer: syz [ 692.600360][ T24] usb 6-1: SerialNumber: syz [ 692.655677][ T24] usb 6-1: config 0 descriptor?? [ 693.755389][T13645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.875853][ T5888] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 693.961885][T13646] xt_TCPMSS: Only works on TCP SYN packets [ 694.085936][ T10] usb 1-1: USB disconnect, device number 108 [ 694.174915][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 694.266281][ T24] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 694.273726][ T24] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 694.479305][ T5888] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 694.511225][ T24] usb 6-1: USB disconnect, device number 10 [ 694.542631][ T5888] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 694.610409][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 694.834220][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.996090][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 695.193217][T13637] delete_channel: no stack [ 695.564506][ T5888] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 696.023723][ T5888] usb 3-1: USB disconnect, device number 93 [ 696.362618][T13672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2341'. [ 697.061725][T13672] vlan2: entered promiscuous mode [ 697.075339][T13672] hsr0: entered promiscuous mode [ 698.575333][ T5888] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 698.666613][ T24] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 698.755855][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 698.771877][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 698.797962][ T5888] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 698.808545][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 698.829090][ T5888] usb 6-1: Product: syz [ 698.851800][ T5888] usb 6-1: Manufacturer: syz [ 698.867372][ T5888] usb 6-1: SerialNumber: syz [ 698.883374][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 698.896818][T13696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2345'. [ 698.916868][ T5888] usb 6-1: config 0 descriptor?? [ 698.926855][ T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 698.950301][ T24] usb 1-1: config 0 has no interface number 0 [ 698.963054][ T5888] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 698.980604][ T24] usb 1-1: config 0 interface 12 has no altsetting 0 [ 699.067960][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 699.127360][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.186304][ T24] usb 1-1: Product: syz [ 699.198604][ T5888] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 699.290576][ T24] usb 1-1: Manufacturer: syz [ 699.343731][ T24] usb 1-1: SerialNumber: syz [ 699.580283][ T24] usb 1-1: config 0 descriptor?? [ 699.867300][T11958] udevd[11958]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.091733][T13713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.224463][T13713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.637349][ T24] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 700.645960][ T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 700.663478][ T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 700.763431][ T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 701.007409][ T24] usb 1-1: USB disconnect, device number 109 [ 701.443389][ T24] usb 6-1: USB disconnect, device number 11 [ 701.785360][ T7187] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 701.873870][T13733] macvlan1: entered promiscuous mode [ 701.937844][T13733] macvlan1: left promiscuous mode [ 701.975336][ T7187] usb 1-1: Using ep0 maxpacket: 32 [ 702.001385][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2353'. [ 702.047146][ T7187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.419861][ T7187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.484209][ T7187] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 702.555217][ T7187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.620311][ T7187] usb 1-1: config 0 descriptor?? [ 702.768073][ T7187] hub 1-1:0.0: USB hub found [ 702.804999][T13752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.852395][T13752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.983693][ T5888] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 703.067858][T13759] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2351'. [ 704.730483][ T7187] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 704.768244][ T7187] usbhid 1-1:0.0: can't add hid device: -71 [ 704.882385][ T7187] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 704.988432][ T7187] usb 1-1: USB disconnect, device number 110 [ 705.375253][ T5888] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 705.638299][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.683657][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.697698][ T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 705.765898][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 705.817083][ T5888] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 705.871148][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.925419][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 706.090870][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 706.109486][ T5888] usb 6-1: config 0 descriptor?? [ 706.238640][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 706.287264][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 706.319261][ T24] usb 3-1: Product: syz [ 706.345448][ T24] usb 3-1: Manufacturer: syz [ 706.355630][ T7187] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 706.367350][ T24] usb 3-1: SerialNumber: syz [ 706.419048][ T24] usb 3-1: config 0 descriptor?? [ 706.497761][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 706.533852][ T5888] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 706.665566][ T7187] usb 1-1: config 0 has no interfaces? [ 706.683157][ T5888] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 706.721060][ T24] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 706.794161][ T5888] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 706.832676][ T7187] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 706.870506][ T7187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.901705][ T7187] usb 1-1: Product: syz [ 706.952421][ T7187] usb 1-1: Manufacturer: syz [ 706.966053][ T7187] usb 1-1: SerialNumber: syz [ 707.098271][ T24] usb 6-1: USB disconnect, device number 12 [ 707.205765][T11958] udevd[11958]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.258614][ T7187] usb 1-1: config 0 descriptor?? [ 707.679176][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'. [ 707.737015][T13788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2364'. [ 707.856758][T13795] fido_id[13795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 708.365006][ T10] usb 3-1: USB disconnect, device number 95 [ 709.422187][T13838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2374'. [ 709.540920][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.550338][T13838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2374'. [ 709.695970][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.904182][ T10] usb 1-1: USB disconnect, device number 111 [ 710.719943][T13862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.771832][T13862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.868550][T13865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.925696][T13865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.675518][T13875] input: syz1 as /devices/virtual/input/input44 [ 712.749370][T13859] warn_alloc: 1 callbacks suppressed [ 712.749387][T13859] syz.0.2378: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 712.777739][T13859] CPU: 0 UID: 0 PID: 13859 Comm: syz.0.2378 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 712.777775][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 712.777789][T13859] Call Trace: [ 712.777798][T13859] [ 712.777808][T13859] dump_stack_lvl+0x189/0x250 [ 712.777850][T13859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.777892][T13859] ? __pfx__printk+0x10/0x10 [ 712.777916][T13859] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 712.777938][T13859] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 712.777963][T13859] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 712.777989][T13859] warn_alloc+0x214/0x310 [ 712.778022][T13859] ? __pfx_warn_alloc+0x10/0x10 [ 712.778057][T13859] ? __get_vm_area_node+0x28f/0x300 [ 712.778081][T13859] ? translate_table+0x1a8/0x1f90 [ 712.778111][T13859] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 712.778165][T13859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 712.778195][T13859] ? rcu_is_watching+0x15/0xb0 [ 712.778215][T13859] ? translate_table+0x1a8/0x1f90 [ 712.778237][T13859] ? translate_table+0x1a8/0x1f90 [ 712.778257][T13859] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 712.778278][T13859] ? translate_table+0x1a8/0x1f90 [ 712.778299][T13859] ? xt_alloc_table_info+0x3b/0xa0 [ 712.778329][T13859] translate_table+0x1a8/0x1f90 [ 712.778379][T13859] ? __pfx_translate_table+0x10/0x10 [ 712.778423][T13859] ? _copy_from_user+0x94/0xb0 [ 712.778452][T13859] do_arpt_set_ctl+0x993/0xf10 [ 712.778477][T13859] ? __mutex_trylock_common+0x153/0x260 [ 712.778503][T13859] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 712.778530][T13859] ? rcu_is_watching+0x15/0xb0 [ 712.778564][T13859] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 712.778594][T13859] ? __pfx___mutex_lock+0x10/0x10 [ 712.778618][T13859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 712.778642][T13859] ? aa_sk_perm+0x81e/0x950 [ 712.778670][T13859] ? __pfx_aa_sk_perm+0x10/0x10 [ 712.778698][T13859] nf_setsockopt+0x26f/0x290 [ 712.778723][T13859] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 712.778755][T13859] do_sock_setsockopt+0x257/0x3e0 [ 712.778780][T13859] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 712.778805][T13859] ? __fget_files+0x2a/0x420 [ 712.778835][T13859] __x64_sys_setsockopt+0x18b/0x220 [ 712.778862][T13859] do_syscall_64+0xfa/0x3b0 [ 712.778897][T13859] ? lockdep_hardirqs_on+0x9c/0x150 [ 712.778922][T13859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.778941][T13859] ? clear_bhb_loop+0x60/0xb0 [ 712.778964][T13859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.778984][T13859] RIP: 0033:0x7f8ce658e929 [ 712.779004][T13859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.779021][T13859] RSP: 002b:00007f8ce740a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 712.779045][T13859] RAX: ffffffffffffffda RBX: 00007f8ce67b5fa0 RCX: 00007f8ce658e929 [ 712.779060][T13859] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 712.779072][T13859] RBP: 00007f8ce6610b39 R08: 0000000000000068 R09: 0000000000000000 [ 712.779084][T13859] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 712.779096][T13859] R13: 0000000000000000 R14: 00007f8ce67b5fa0 R15: 00007f8ce68dfa28 [ 712.779127][T13859] [ 712.779279][T13859] Mem-Info: [ 712.987245][T13888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.138260][T13859] active_anon:9510 inactive_anon:0 isolated_anon:0 [ 713.138260][T13859] active_file:19825 inactive_file:40115 isolated_file:0 [ 713.138260][T13859] unevictable:769 dirty:174 writeback:0 [ 713.138260][T13859] slab_reclaimable:10419 slab_unreclaimable:103635 [ 713.138260][T13859] mapped:33507 shmem:4250 pagetables:1592 [ 713.138260][T13859] sec_pagetables:0 bounce:0 [ 713.138260][T13859] kernel_misc_reclaimable:0 [ 713.138260][T13859] free:1297611 free_pcp:15673 free_cma:0 [ 713.227518][T13859] Node 0 active_anon:38140kB inactive_anon:0kB active_file:79300kB inactive_file:160260kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:134028kB dirty:696kB writeback:0kB shmem:15464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11600kB pagetables:6236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 713.285919][T13859] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 713.345260][T13859] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 713.394961][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2377'. [ 713.415658][T13888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.431223][T13859] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 713.454793][T13859] Node 0 DMA32 free:1269316kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38096kB inactive_anon:0kB active_file:79300kB inactive_file:158416kB unevictable:1540kB writepending:696kB present:3129332kB managed:2561084kB mlocked:0kB bounce:0kB free_pcp:47796kB local_pcp:32384kB free_cma:0kB [ 713.496555][T13859] lowmem_reserve[]: 0 0 1 1 1 [ 713.535295][T13859] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 713.605235][T13888] netlink: 'syz.1.2385': attribute type 1 has an invalid length. [ 713.655308][T13859] lowmem_reserve[]: 0 0 0 0 0 [ 713.660293][T13859] Node 1 Normal free:3906064kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13952kB local_pcp:4384kB free_cma:0kB [ 713.785394][T13859] lowmem_reserve[]: 0 0 0 0 0 [ 713.812865][T13859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 713.865528][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 713.881224][T13859] Node 0 DMA32: 2164*4kB (UM) 2152*8kB (UME) 1126*16kB (UM) 796*32kB (UM) 322*64kB (UME) 150*128kB (UM) 83*256kB (UME) 79*512kB (UM) 33*1024kB (UME) 6*2048kB (UM) 257*4096kB (M) = 1269616kB [ 713.934627][T13859] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 713.962326][T13888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.995209][T13859] Node 1 Normal: 210*4kB (UM) 55*8kB (UME) 49*16kB (UME) 230*32kB (UME) 73*64kB (UME) 12*128kB (UME) 5*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 0*2048kB 948*4096kB (M) = 3906064kB [ 714.016192][T13899] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 714.043241][ T10] usb 6-1: config 0 has no interfaces? [ 714.054159][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 714.063690][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.078977][ T10] usb 6-1: Product: syz [ 714.094621][ T10] usb 6-1: Manufacturer: syz [ 714.118110][ T10] usb 6-1: SerialNumber: syz [ 714.147431][T13902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.198366][ T10] usb 6-1: config 0 descriptor?? [ 714.213958][T13902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.222376][T13859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 714.240914][T13859] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 714.367327][T13859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 714.395374][T13859] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 714.467440][T13896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2386'. [ 714.477910][T13859] 64186 total pagecache pages [ 714.495515][T13859] 0 pages in swap cache [ 714.499986][T13859] Free swap = 124996kB [ 714.504521][T13859] Total swap = 124996kB [ 714.569473][T13859] 2097051 pages RAM [ 714.607537][T13859] 0 pages HighMem/MovableOnly [ 714.618374][T13859] 424674 pages reserved [ 714.666955][T13859] 0 pages cma reserved [ 715.266051][ T5887] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 715.386671][T13915] usb usb8: usbfs: process 13915 (syz.1.2389) did not claim interface 0 before use [ 715.399587][T13914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.452215][T13914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.486452][ T5887] usb 1-1: not running at top speed; connect to a high speed hub [ 715.507310][ T5887] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 715.525865][ T5887] usb 1-1: can't read configurations, error -22 [ 715.577675][T13916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.601727][T13916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.695535][ T5887] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 715.889810][ T5887] usb 1-1: not running at top speed; connect to a high speed hub [ 715.903035][ T5887] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 715.920220][ T5887] usb 1-1: can't read configurations, error -22 [ 715.987979][ T5887] usb usb1-port1: attempt power cycle [ 716.355512][ T5887] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 716.450755][ T5887] usb 1-1: not running at top speed; connect to a high speed hub [ 716.469316][ T5887] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 716.520113][ T5887] usb 1-1: can't read configurations, error -22 [ 716.677072][T13915] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 716.705767][ T5887] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 716.759634][ T5887] usb 1-1: not running at top speed; connect to a high speed hub [ 716.790392][ T5887] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 716.805068][ T5887] usb 1-1: can't read configurations, error -22 [ 716.869197][ T5887] usb usb1-port1: unable to enumerate USB device [ 716.973568][ T5887] usb 6-1: USB disconnect, device number 13 [ 717.595554][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 717.775982][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 717.810131][ T24] usb 6-1: config 0 has an invalid interface number: 215 but max is 0 [ 717.839568][ T24] usb 6-1: config 0 has no interface number 0 [ 717.871578][T13941] macvlan1: entered promiscuous mode [ 717.891877][ T24] usb 6-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 717.917932][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.943321][T13941] macvlan1: left promiscuous mode [ 717.974179][ T24] usb 6-1: Product: syz [ 717.996219][ T24] usb 6-1: Manufacturer: syz [ 718.005413][ T24] usb 6-1: SerialNumber: syz [ 718.035648][ T24] usb 6-1: config 0 descriptor?? [ 718.058992][ T24] io_ti 6-1:0.215: required endpoints missing [ 718.259231][ T24] usb 6-1: USB disconnect, device number 14 [ 718.435078][T13956] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 718.517524][T13956] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 718.540075][T13959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.551819][T13959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.155925][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2404'. [ 719.165352][ T5887] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 719.388081][ T5887] usb 1-1: config 0 has no interfaces? [ 719.402712][ T5887] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 719.414590][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.443985][ T5887] usb 1-1: Product: syz [ 719.456523][ T5887] usb 1-1: Manufacturer: syz [ 719.468897][ T5887] usb 1-1: SerialNumber: syz [ 719.552014][ T5887] usb 1-1: config 0 descriptor?? [ 719.583450][T13977] vlan2: entered promiscuous mode [ 719.624543][T13977] hsr0: entered promiscuous mode [ 720.002484][T13984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.034442][T13969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2401'. [ 720.094088][T13984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.435883][ T24] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 720.513689][T13993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.570974][T13993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.638780][ T24] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 720.672159][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.714791][ T24] usb 3-1: Product: syz [ 720.724848][ T24] usb 3-1: Manufacturer: syz [ 720.735244][ T24] usb 3-1: SerialNumber: syz [ 720.761339][ T24] usb 3-1: config 0 descriptor?? [ 720.821494][ T24] ch341 3-1:0.0: ch341-uart converter detected [ 720.920987][T13999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2412'. [ 720.959766][T13999] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2412'. [ 721.277434][T14001] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2413'. [ 721.562667][T14006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.643822][T14006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.097203][ T24] usb 3-1: failed to send control message: -110 [ 722.105377][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 722.839839][ T5888] usb 1-1: USB disconnect, device number 116 [ 724.338513][ T5887] usb 3-1: USB disconnect, device number 96 [ 724.346567][ T5887] ch341 3-1:0.0: device disconnected [ 724.727740][ T30] audit: type=1326 audit(1749173431.361:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce658e929 code=0x7ffc0000 [ 724.773805][ T30] audit: type=1326 audit(1749173431.361:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce658e929 code=0x7ffc0000 [ 725.085277][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 725.585298][ T5887] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 725.684227][T14044] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.2428'. [ 725.859602][ T5887] usb 1-1: config 0 has no interfaces? [ 725.869925][ T5887] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 725.913416][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.944158][ T5887] usb 1-1: Product: syz [ 726.175287][ T7174] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 726.273484][ T5887] usb 1-1: Manufacturer: syz [ 726.306591][T14044] program syz.5.2428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 726.317783][T14044] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 726.345239][ T5887] usb 1-1: SerialNumber: syz [ 726.373175][ T5887] usb 1-1: config 0 descriptor?? [ 726.385639][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'. [ 726.442791][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.505400][ T7174] usb 3-1: Using ep0 maxpacket: 32 [ 726.525878][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.555090][ T7174] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 726.563610][ T7174] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 726.579415][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'. [ 726.624819][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.640924][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.672436][T14053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2430'. [ 726.747749][ T7174] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 726.795349][ T7174] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 726.943337][ T7174] usb 3-1: config 0 interface 0 has no altsetting 0 [ 726.993756][ T7174] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 727.016807][ T7174] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 727.048143][ T7174] usb 3-1: Product: syz [ 727.073309][ T7174] usb 3-1: Manufacturer: syz [ 727.110355][ T7174] usb 3-1: SerialNumber: syz [ 727.425851][ T7174] usb 3-1: config 0 descriptor?? [ 727.436506][ T7174] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 727.451493][ T7174] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 728.323637][ T5888] usb 1-1: USB disconnect, device number 117 [ 728.472943][T14073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.524575][T14073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.695462][T14075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 729.136695][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 729.175626][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 729.183909][ T24] usb 6-1: can't read configurations, error -71 [ 729.445642][ T5888] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 729.597777][ T7174] usb 3-1: USB disconnect, device number 97 [ 729.603804][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 729.622692][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 729.662473][ T5888] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 729.677596][ T7174] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 729.707942][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 729.754742][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 729.865687][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 729.991783][ T5888] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 730.045802][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.054027][ T5888] usb 1-1: Product: syz [ 730.109387][T14083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.141781][ T5888] usb 1-1: Manufacturer: syz [ 730.166112][ T5888] usb 1-1: SerialNumber: syz [ 730.340293][ T5888] usb 1-1: config 0 descriptor?? [ 730.527877][T14096] netlink: 'syz.2.2441': attribute type 12 has an invalid length. [ 730.581287][ T5888] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 732.415502][ T5888] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 732.745300][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 732.827600][ T5888] usb 6-1: config 0 has no interfaces? [ 732.865680][ T5888] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 732.875038][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.195915][T14119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.212405][ T5888] usb 6-1: config 0 descriptor?? [ 733.274628][T14119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.351830][T14118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2447'. [ 734.598202][ T7174] usb 1-1: USB disconnect, device number 118 [ 734.764721][T14129] netlink: 'syz.4.2449': attribute type 3 has an invalid length. [ 735.531595][ T7174] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 735.741699][ T7174] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.744643][T14144] program syz.4.2451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.761539][ T7174] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 735.772390][ T7174] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 735.785353][ T7174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.862770][ T7174] usb 3-1: config 0 descriptor?? [ 735.891380][ T7174] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 735.902428][ T7174] dvb-usb: bulk message failed: -22 (3/0) [ 735.945780][ T7174] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 736.041993][ T7174] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 736.068908][ T7174] usb 3-1: media controller created [ 736.117342][ T7174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 736.150454][ T5888] usb 6-1: USB disconnect, device number 17 [ 736.161818][ T7174] dvb-usb: bulk message failed: -22 (6/0) [ 736.213856][ T7174] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 736.237834][T14139] netlink: 'syz.2.2448': attribute type 13 has an invalid length. [ 736.338817][ T7174] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 736.399823][ T7174] dvb-usb: schedule remote query interval to 150 msecs. [ 736.440270][ T7174] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 736.653493][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 736.800040][ T10] dvb-usb: error while querying for an remote control event. [ 737.071779][T14148] xt_hashlimit: size too large, truncated to 1048576 [ 737.114453][T14151] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2452'. [ 737.134523][T14139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.151396][T14139] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.158669][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 737.173215][ T10] dvb-usb: error while querying for an remote control event. [ 737.225314][T14151] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2452'. [ 737.365562][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 737.374369][ T10] dvb-usb: error while querying for an remote control event. [ 737.586550][T14139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 737.645565][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 737.651548][ T10] dvb-usb: error while querying for an remote control event. [ 737.663023][T14148] syz.1.2453: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 737.788822][T14148] CPU: 0 UID: 0 PID: 14148 Comm: syz.1.2453 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 737.788853][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 737.788867][T14148] Call Trace: [ 737.788875][T14148] [ 737.788883][T14148] dump_stack_lvl+0x189/0x250 [ 737.788926][T14148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.788953][T14148] ? __pfx__printk+0x10/0x10 [ 737.788967][T14148] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 737.788981][T14148] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 737.788996][T14148] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 737.789012][T14148] warn_alloc+0x214/0x310 [ 737.789031][T14148] ? __pfx_warn_alloc+0x10/0x10 [ 737.789055][T14148] ? __get_vm_area_node+0x28f/0x300 [ 737.789069][T14148] ? htable_create+0xfc/0x7a0 [ 737.789088][T14148] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 737.789122][T14148] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 737.789139][T14148] ? rcu_is_watching+0x15/0xb0 [ 737.789151][T14148] ? htable_create+0xfc/0x7a0 [ 737.789164][T14148] ? htable_create+0xfc/0x7a0 [ 737.789175][T14148] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 737.789189][T14148] ? htable_create+0xfc/0x7a0 [ 737.789200][T14148] ? hashlimit_pernet+0x23/0x240 [ 737.789218][T14148] htable_create+0xfc/0x7a0 [ 737.789237][T14148] hashlimit_mt_check_common+0x719/0xa10 [ 737.789257][T14148] hashlimit_mt_check_v1+0x221/0x360 [ 737.789272][T14148] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 737.789290][T14148] ? xt_find_match+0x1f7/0x250 [ 737.789307][T14148] xt_check_match+0x3d1/0xab0 [ 737.789320][T14148] ? __pfx___mutex_lock+0x10/0x10 [ 737.789338][T14148] ? __pfx_xt_check_match+0x10/0x10 [ 737.789353][T14148] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 737.789371][T14148] ? xt_find_match+0x1f7/0x250 [ 737.789388][T14148] translate_table+0x1553/0x2040 [ 737.789416][T14148] ? __pfx_translate_table+0x10/0x10 [ 737.789430][T14148] ? __might_fault+0xb0/0x130 [ 737.789454][T14148] ? _copy_from_user+0x94/0xb0 [ 737.789471][T14148] do_ip6t_set_ctl+0x970/0xce0 [ 737.789489][T14148] ? rcu_is_watching+0x15/0xb0 [ 737.789499][T14148] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 737.789524][T14148] ? __pfx___mutex_lock+0x10/0x10 [ 737.789539][T14148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 737.789558][T14148] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 737.789573][T14148] ? __pfx_futex_wake+0x10/0x10 [ 737.789592][T14148] nf_setsockopt+0x26f/0x290 [ 737.789609][T14148] rawv6_setsockopt+0x23b/0x5b0 [ 737.789623][T14148] ? __lock_acquire+0xab9/0xd20 [ 737.789640][T14148] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 737.789653][T14148] ? aa_sock_opt_perm+0x74/0x110 [ 737.789668][T14148] ? sock_common_setsockopt+0x36/0xc0 [ 737.789684][T14148] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 737.789701][T14148] do_sock_setsockopt+0x257/0x3e0 [ 737.789716][T14148] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 737.789739][T14148] ? __fget_files+0x2a/0x420 [ 737.789758][T14148] __x64_sys_setsockopt+0x18b/0x220 [ 737.789774][T14148] do_syscall_64+0xfa/0x3b0 [ 737.789789][T14148] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.789803][T14148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.789815][T14148] ? clear_bhb_loop+0x60/0xb0 [ 737.789829][T14148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.789841][T14148] RIP: 0033:0x7f0d51f8e929 [ 737.789854][T14148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.789864][T14148] RSP: 002b:00007f0d52dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 737.789879][T14148] RAX: ffffffffffffffda RBX: 00007f0d521b6080 RCX: 00007f0d51f8e929 [ 737.789887][T14148] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 737.789894][T14148] RBP: 00007f0d52010b39 R08: 00000000000004c0 R09: 0000000000000000 [ 737.789902][T14148] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 737.789909][T14148] R13: 0000000000000000 R14: 00007f0d521b6080 R15: 00007f0d522dfa28 [ 737.789927][T14148] [ 737.790004][T14148] Mem-Info: [ 738.194752][T14148] active_anon:9440 inactive_anon:0 isolated_anon:0 [ 738.194752][T14148] active_file:22695 inactive_file:40125 isolated_file:0 [ 738.194752][T14148] unevictable:769 dirty:118 writeback:0 [ 738.194752][T14148] slab_reclaimable:10376 slab_unreclaimable:117506 [ 738.194752][T14148] mapped:38713 shmem:4233 pagetables:1577 [ 738.194752][T14148] sec_pagetables:0 bounce:0 [ 738.194752][T14148] kernel_misc_reclaimable:0 [ 738.194752][T14148] free:1284493 free_pcp:12981 free_cma:0 [ 738.240689][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 738.268733][T14148] Node 0 active_anon:37760kB inactive_anon:0kB active_file:90780kB inactive_file:160300kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:154852kB dirty:472kB writeback:0kB shmem:15396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11944kB pagetables:6176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 738.303290][ T10] dvb-usb: error while querying for an remote control event. [ 738.326352][T14148] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 738.400862][T14148] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.439065][T14163] IPVS: set_ctl: invalid protocol: 60 172.30.0.6:20003 [ 738.515884][T14148] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 738.521827][T14148] Node 0 DMA32 free:1216492kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37840kB inactive_anon:0kB active_file:88880kB inactive_file:158456kB unevictable:1540kB writepending:528kB present:3129332kB managed:2561084kB mlocked:0kB bounce:0kB free_pcp:40548kB local_pcp:20176kB free_cma:0kB [ 738.605491][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 738.620381][ T10] dvb-usb: error while querying for an remote control event. [ 738.687163][T14148] lowmem_reserve[]: 0 0 1 1 1 [ 738.784198][T14148] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 738.842375][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 738.858328][ T30] audit: type=1326 audit(1749173445.481:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.4.2454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd23d8e929 code=0x0 [ 738.883934][ T10] dvb-usb: error while querying for an remote control event. [ 738.918146][T14148] lowmem_reserve[]: 0 0 0 0 0 [ 738.922949][T14148] Node 1 Normal free:3906064kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13956kB local_pcp:4388kB free_cma:0kB [ 739.067905][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 739.077573][ T7191] usb 3-1: USB disconnect, device number 98 [ 739.136651][ T10] dvb-usb: error while querying for an remote control event. [ 739.195383][T14148] lowmem_reserve[]: 0 0 0 0 0 [ 739.202492][T14148] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 739.277237][T14148] Node 0 DMA32: 3889*4kB (UM) 2084*8kB (UME) 785*16kB (UME) 920*32kB (UME) 356*64kB (UME) 162*128kB (UM) 92*256kB (UME) 77*512kB (UM) 34*1024kB (UME) 6*2048kB (M) 243*4096kB (M) = 1223156kB [ 739.374927][T14148] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 739.426874][ T7191] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 739.469377][T14148] Node 1 Normal: 210*4kB (UM) 55*8kB (UME) 49*16kB (UME) 230*32kB (UME) 73*64kB (UME) 12*128kB (UME) 5*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 0*2048kB 948*4096kB (M) = 3906064kB [ 739.565357][T14148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.655364][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 739.690955][T14148] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 739.756050][T14148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.809183][T14148] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 739.865361][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 739.892377][T14148] 62050 total pagecache pages [ 739.920369][ T10] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 739.937475][T14148] 0 pages in swap cache [ 739.941820][T14148] Free swap = 124996kB [ 739.960208][T14148] Total swap = 124996kB [ 739.964620][T14148] 2097051 pages RAM [ 739.968495][ T10] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 739.968526][ T10] usb 6-1: config 0 has no interface number 0 [ 739.968560][ T10] usb 6-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 740.043642][T14148] 0 pages HighMem/MovableOnly [ 740.049001][ T10] usb 6-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 740.062927][ T10] usb 6-1: config 0 interface 101 has no altsetting 0 [ 740.070964][T14148] 424674 pages reserved [ 740.073663][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5 [ 740.085005][ T10] usb 6-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3 [ 740.103574][ T10] usb 6-1: Product: syz [ 740.115301][ T10] usb 6-1: Manufacturer: syz [ 740.129836][ T10] usb 6-1: SerialNumber: syz [ 740.129858][T14148] 0 pages cma reserved [ 740.145338][ T7191] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 740.213934][ T10] usb 6-1: config 0 descriptor?? [ 740.325347][ T7191] usb 3-1: Using ep0 maxpacket: 32 [ 740.339484][ T7191] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 740.348566][ T7191] usb 3-1: config 0 has no interface number 0 [ 740.354728][ T7191] usb 3-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 740.378412][ T7191] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 740.412549][ T7191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.434220][ T7191] usb 3-1: Product: syz [ 740.455491][ T7191] usb 3-1: Manufacturer: syz [ 740.466397][ T10] usb 6-1: USB disconnect, device number 18 [ 740.475357][ T7191] usb 3-1: SerialNumber: syz [ 740.529086][ T7191] usb 3-1: config 0 descriptor?? [ 740.547307][T14173] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 741.101457][ T7191] net1080 3-1:0.183: probe with driver net1080 failed with error -71 [ 741.146580][ T7191] usb 3-1: USB disconnect, device number 99 [ 747.389212][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.396137][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.046607][T14189] input: syz1 as /devices/virtual/input/input46 [ 749.088565][T14190] 8021q: adding VLAN 0 to HW filter on device bond5 [ 749.098001][T14190] bond5: entered promiscuous mode [ 749.104087][T14190] bond0: (slave bond5): Enslaving as an active interface with an up link [ 749.182397][T14193] macvlan1: entered promiscuous mode [ 749.240535][T14193] macvlan1: left promiscuous mode [ 749.283607][T14194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.346785][T14194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.624369][T14208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.636258][T14208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.663679][T14208] delete_channel: no stack [ 749.675327][ T7191] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 749.845507][ T7191] usb 6-1: Using ep0 maxpacket: 32 [ 749.853953][ T7191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 749.879907][ T7191] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 749.907774][ T7191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 749.948807][ T7191] usb 6-1: Product: syz [ 749.965264][ T7191] usb 6-1: Manufacturer: syz [ 749.980092][ T7191] usb 6-1: SerialNumber: syz [ 750.009460][ T7191] usb 6-1: config 0 descriptor?? [ 750.028646][ T7191] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.116206][ T7191] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 750.146271][ T10] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 750.207416][T14197] udevd[14197]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 750.395385][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 750.408379][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 750.416589][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 750.428318][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 750.445299][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 750.457303][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 750.472363][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 750.552498][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 750.574439][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 750.806897][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 750.844826][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 750.900396][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 750.915734][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 750.928104][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 751.026594][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 751.041749][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 751.077445][ T10] usb 1-1: string descriptor 0 read error: -22 [ 751.084524][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 751.103249][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.177463][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 751.236085][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'. [ 751.326877][T14227] vlan2: entered promiscuous mode [ 751.334143][T14214] FAULT_INJECTION: forcing a failure. [ 751.334143][T14214] name failslab, interval 1, probability 0, space 0, times 0 [ 751.371083][T14214] CPU: 0 UID: 0 PID: 14214 Comm: syz.0.2473 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 751.371114][T14214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.371126][T14214] Call Trace: [ 751.371134][T14214] [ 751.371144][T14214] dump_stack_lvl+0x189/0x250 [ 751.371185][T14214] ? __pfx____ratelimit+0x10/0x10 [ 751.371209][T14214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.371266][T14214] ? __pfx__printk+0x10/0x10 [ 751.371300][T14214] ? __pfx___might_resched+0x10/0x10 [ 751.371317][T14214] ? fs_reclaim_acquire+0x7d/0x100 [ 751.371346][T14214] should_fail_ex+0x414/0x560 [ 751.371378][T14214] should_failslab+0xa8/0x100 [ 751.371402][T14214] __kmalloc_cache_noprof+0x70/0x3d0 [ 751.371421][T14214] ? dummy_urb_enqueue+0x7c/0x780 [ 751.371446][T14214] dummy_urb_enqueue+0x7c/0x780 [ 751.371475][T14214] usb_hcd_submit_urb+0x322/0x1aa0 [ 751.371509][T14214] adu_read+0xc61/0x1cf0 [ 751.371561][T14214] ? __pfx_adu_read+0x10/0x10 [ 751.371582][T14214] ? __pfx_default_wake_function+0x10/0x10 [ 751.371612][T14214] ? bpf_lsm_file_permission+0x9/0x20 [ 751.371638][T14214] ? security_file_permission+0x75/0x290 [ 751.371670][T14214] ? rw_verify_area+0x258/0x650 [ 751.371698][T14214] ? __pfx_adu_read+0x10/0x10 [ 751.371720][T14214] vfs_read+0x200/0x980 [ 751.371748][T14214] ? __pfx_vfs_read+0x10/0x10 [ 751.371770][T14214] ? __fget_files+0x2a/0x420 [ 751.371796][T14214] ? __fget_files+0x2a/0x420 [ 751.371817][T14214] ? __fget_files+0x3a0/0x420 [ 751.371837][T14214] ? __fget_files+0x2a/0x420 [ 751.371868][T14214] ksys_read+0x145/0x250 [ 751.371890][T14214] ? __pfx_ksys_read+0x10/0x10 [ 751.371905][T14214] ? rcu_is_watching+0x15/0xb0 [ 751.371929][T14214] ? do_syscall_64+0xbe/0x3b0 [ 751.371958][T14214] do_syscall_64+0xfa/0x3b0 [ 751.371984][T14214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.372002][T14214] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 751.372021][T14214] ? clear_bhb_loop+0x60/0xb0 [ 751.372046][T14214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.372075][T14214] RIP: 0033:0x7f8ce658e929 [ 751.372093][T14214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.372109][T14214] RSP: 002b:00007f8ce740a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.372130][T14214] RAX: ffffffffffffffda RBX: 00007f8ce67b5fa0 RCX: 00007f8ce658e929 [ 751.372144][T14214] RDX: 00000000000000ef RSI: 0000200000000280 RDI: 0000000000000007 [ 751.372155][T14214] RBP: 00007f8ce740a090 R08: 0000000000000000 R09: 0000000000000000 [ 751.372166][T14214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.372177][T14214] R13: 0000000000000000 R14: 00007f8ce67b5fa0 R15: 00007f8ce68dfa28 [ 751.372218][T14214] [ 751.670239][ T10] usb 1-1: USB disconnect, device number 119 [ 752.474799][ T7191] usb 6-1: USB disconnect, device number 19 [ 752.563846][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 752.625325][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 753.281313][T14253] xt_connbytes: Forcing CT accounting to be enabled [ 753.339041][T14253] --map-set only usable from mangle table [ 753.603536][T14258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.683369][T14258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.797727][T14258] delete_channel: no stack [ 754.140854][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2490'. [ 754.232962][T14266] vlan0: entered promiscuous mode [ 755.125751][T14278] input: syz1 as /devices/virtual/input/input47 [ 756.015811][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2500'. [ 756.130945][T14291] vlan2: entered promiscuous mode [ 756.160539][T14291] bond0: entered promiscuous mode [ 756.206181][T14291] bond_slave_0: entered promiscuous mode [ 756.236892][T14291] bond_slave_1: entered promiscuous mode [ 756.445405][ T7191] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 756.645395][ T7191] usb 3-1: Using ep0 maxpacket: 8 [ 756.666400][ T7191] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 756.674381][ T7191] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 756.732711][ T7191] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.807618][ T7191] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 756.875929][T14310] input: syz1 as /devices/virtual/input/input48 [ 757.095451][ T7191] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 757.115354][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 757.699245][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 757.708569][ T10] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 757.718210][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 757.730250][ T10] usb 6-1: config 220 has no interface number 2 [ 757.737055][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 757.752086][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 757.758757][ T7191] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 757.759247][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 757.774118][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 757.774196][ T7191] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 757.786031][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 757.803549][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.812054][ T10] usb 6-1: Product: syz [ 757.816749][ T10] usb 6-1: Manufacturer: syz [ 757.821505][ T10] usb 6-1: SerialNumber: syz [ 757.868594][ T7191] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 757.905880][ T7191] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 757.957430][T14312] loop2: detected capacity change from 0 to 7 [ 757.969156][T14312] loop2: p1 [ 757.972536][T14312] loop2: partition table partially beyond EOD, truncated [ 757.981039][T14312] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 758.031642][ T7191] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 758.079819][ T10] usb 6-1: selecting invalid altsetting 0 [ 758.100455][ T10] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 758.122640][ T10] usb 6-1: No valid video chain found. [ 758.131055][ T7191] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 758.160389][ T7191] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 758.210751][ T7191] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 758.244740][ T10] usb 6-1: selecting invalid altsetting 0 [ 758.280693][ T7191] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 758.302697][ T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 758.319208][ T7191] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 758.334189][T14313] udevd[14313]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 758.403181][ T10] usb 6-1: USB disconnect, device number 20 [ 758.403291][ T7191] usb 3-1: string descriptor 0 read error: -22 [ 758.532317][ T7191] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 758.640603][T14319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.653398][ T7191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.673404][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2509'. [ 758.770833][ T7191] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 758.959605][ T7191] usb 3-1: USB disconnect, device number 100 [ 759.083576][T14317] could not allocate digest TFM handle poly1305-simd [ 759.192895][T14327] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2512'. [ 759.222943][T14327] 8021q: VLANs not supported on gre0 [ 760.095950][T14336] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2515'. [ 760.357911][ T10] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 760.603799][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 760.619235][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.637696][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 760.674352][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.953960][T14331] delete_channel: no stack [ 760.959754][ T10] usb 6-1: usb_control_msg returned -32 [ 761.006572][ T10] usbtmc 6-1:16.0: can't read capabilities [ 761.506417][T14350] loop2: detected capacity change from 0 to 7 [ 761.547790][T14350] loop2: p1 [ 761.570345][T14350] loop2: partition table partially beyond EOD, truncated [ 761.587984][T14350] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 761.720963][T14197] udevd[14197]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 762.041934][T14356] input: syz1 as /devices/virtual/input/input49 [ 762.463886][T14359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.473978][T14359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.847535][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 765.631863][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2527'. [ 765.725499][T14376] vlan2: entered promiscuous mode [ 765.944399][T14382] loop2: detected capacity change from 0 to 7 [ 765.980232][T14382] loop2: p1 [ 765.984400][T14382] loop2: partition table partially beyond EOD, truncated [ 766.036157][T14382] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 766.040321][T14385] input: syz1 as /devices/virtual/input/input50 [ 766.097901][T14333] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -110 [ 766.321132][T14197] udevd[14197]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 766.410248][ T5887] usb 6-1: USB disconnect, device number 21 [ 766.748250][T14395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2533'. [ 766.759305][T14395] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 767.172823][T14390] 8021q: adding VLAN 0 to HW filter on device bond6 [ 767.355264][ T24] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 767.393928][T14390] bond6: entered promiscuous mode [ 767.525256][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 767.672942][ T24] usb 3-1: config 0 has no interfaces? [ 767.751817][T14390] bond0: (slave bond6): Enslaving as an active interface with an up link [ 767.813323][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2539'. [ 767.838945][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 767.862789][T14412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2539'. [ 767.893758][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.959916][T14412] vlan0: entered allmulticast mode [ 767.972696][ T24] usb 3-1: config 0 descriptor?? [ 767.984312][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2538'. [ 768.025372][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2538'. [ 768.338264][T14392] could not allocate digest TFM handle poly1305-simd [ 768.379282][T14416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2540'. [ 768.407681][T14416] netlink: 'syz.1.2540': attribute type 7 has an invalid length. [ 768.447443][T14416] netlink: 'syz.1.2540': attribute type 8 has an invalid length. [ 768.481940][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2540'. [ 769.028365][T14423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2543'. [ 769.044964][T14425] FAULT_INJECTION: forcing a failure. [ 769.044964][T14425] name failslab, interval 1, probability 0, space 0, times 0 [ 769.098164][T14423] 8021q: VLANs not supported on gre0 [ 769.139638][T14425] CPU: 1 UID: 0 PID: 14425 Comm: syz.5.2542 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 769.139669][T14425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 769.139681][T14425] Call Trace: [ 769.139690][T14425] [ 769.139700][T14425] dump_stack_lvl+0x189/0x250 [ 769.139734][T14425] ? __pfx____ratelimit+0x10/0x10 [ 769.139770][T14425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.139798][T14425] ? __pfx__printk+0x10/0x10 [ 769.139825][T14425] ? __pfx___might_resched+0x10/0x10 [ 769.139843][T14425] ? fs_reclaim_acquire+0x7d/0x100 [ 769.139868][T14425] should_fail_ex+0x414/0x560 [ 769.139898][T14425] should_failslab+0xa8/0x100 [ 769.139921][T14425] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 769.139942][T14425] ? __alloc_skb+0x112/0x2d0 [ 769.139966][T14425] __alloc_skb+0x112/0x2d0 [ 769.139990][T14425] netlink_ack+0x146/0xa50 [ 769.140030][T14425] netlink_rcv_skb+0x28c/0x470 [ 769.140050][T14425] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 769.140077][T14425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 769.140108][T14425] ? bpf_lsm_capable+0x9/0x20 [ 769.140126][T14425] ? security_capable+0x7e/0x2e0 [ 769.140165][T14425] nfnetlink_rcv+0x26a/0x2520 [ 769.140195][T14425] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 769.140223][T14425] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 769.140246][T14425] ? __dev_queue_xmit+0x27e/0x3a70 [ 769.140268][T14425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.140299][T14425] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 769.140324][T14425] ? __pfx___dev_queue_xmit+0x10/0x10 [ 769.140362][T14425] ? ref_tracker_free+0x63a/0x7d0 [ 769.140387][T14425] ? __copy_skb_header+0xa7/0x550 [ 769.140410][T14425] ? __pfx_ref_tracker_free+0x10/0x10 [ 769.140436][T14425] ? __skb_clone+0x63/0x7a0 [ 769.140460][T14425] ? __skb_clone+0x483/0x7a0 [ 769.140490][T14425] ? skb_clone+0x246/0x3a0 [ 769.140514][T14425] ? __netlink_deliver_tap+0x807/0x850 [ 769.140533][T14425] ? netlink_deliver_tap+0x2e/0x1b0 [ 769.140560][T14425] ? netlink_deliver_tap+0x2e/0x1b0 [ 769.140578][T14425] ? netlink_deliver_tap+0x2e/0x1b0 [ 769.140603][T14425] netlink_unicast+0x75b/0x8d0 [ 769.140646][T14425] netlink_sendmsg+0x805/0xb30 [ 769.140677][T14425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.140701][T14425] ? aa_sock_msg_perm+0x94/0x160 [ 769.140728][T14425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 769.140752][T14425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.140781][T14425] __sock_sendmsg+0x21c/0x270 [ 769.140810][T14425] ____sys_sendmsg+0x505/0x830 [ 769.140838][T14425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 769.140870][T14425] ? import_iovec+0x74/0xa0 [ 769.140893][T14425] ___sys_sendmsg+0x21f/0x2a0 [ 769.140917][T14425] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.140945][T14425] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 769.140995][T14425] ? __fget_files+0x2a/0x420 [ 769.141015][T14425] ? __fget_files+0x3a0/0x420 [ 769.141047][T14425] __x64_sys_sendmsg+0x19b/0x260 [ 769.141072][T14425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 769.141102][T14425] ? __pfx_ksys_write+0x10/0x10 [ 769.141117][T14425] ? rcu_is_watching+0x15/0xb0 [ 769.141140][T14425] ? do_syscall_64+0xbe/0x3b0 [ 769.141163][T14425] do_syscall_64+0xfa/0x3b0 [ 769.141177][T14425] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.141190][T14425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.141206][T14425] ? clear_bhb_loop+0x60/0xb0 [ 769.141227][T14425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.141246][T14425] RIP: 0033:0x7fa4ae58e929 [ 769.141265][T14425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.141282][T14425] RSP: 002b:00007fa4af481038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.141304][T14425] RAX: ffffffffffffffda RBX: 00007fa4ae7b5fa0 RCX: 00007fa4ae58e929 [ 769.141318][T14425] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 769.141330][T14425] RBP: 00007fa4af481090 R08: 0000000000000000 R09: 0000000000000000 [ 769.141391][T14425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 769.141402][T14425] R13: 0000000000000000 R14: 00007fa4ae7b5fa0 R15: 00007fa4ae8dfa28 [ 769.141438][T14425] [ 770.090900][ T30] audit: type=1326 audit(1749173476.721:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.0.2546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ce658e929 code=0x0 [ 770.251853][ T7174] usb 3-1: USB disconnect, device number 101 [ 770.456819][ T10] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 770.659155][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.716793][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.774967][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 770.808331][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'. [ 770.835232][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.877955][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'. [ 771.121672][T14432] delete_channel: no stack [ 771.128025][ T10] usb 6-1: usb_control_msg returned -32 [ 771.133858][ T10] usbtmc 6-1:16.0: can't read capabilities [ 771.294380][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.337600][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.711653][T14465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2557'. [ 772.721217][T14465] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 773.377235][T14463] could not allocate digest TFM handle poly1305-simd [ 774.421281][T14475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2560'. [ 774.863537][T14482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2560'. [ 775.070776][T14485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.108230][T14485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.335927][T14439] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -110 [ 776.472600][ T7174] usb 6-1: USB disconnect, device number 22 [ 777.410431][T14500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2568'. [ 777.460729][T14501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2568'. [ 777.471490][T14500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2568'. [ 777.483109][T14501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2568'. [ 777.615481][ T24] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 777.755387][ T5888] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 777.763470][ T24] usb 3-1: device descriptor read/64, error -71 [ 777.997964][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.019532][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 778.045626][ T24] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 778.167223][ T5888] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 778.219126][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 778.252112][ T5888] usb 1-1: SerialNumber: syz [ 778.395583][ T24] usb 3-1: device descriptor read/64, error -71 [ 778.588918][ T5888] usb 1-1: 0:2 : does not exist [ 778.598136][ T24] usb usb3-port1: attempt power cycle [ 778.697878][ T5888] usb 1-1: USB disconnect, device number 120 [ 778.740633][T14514] netlink: 'syz.4.2573': attribute type 1 has an invalid length. [ 778.770539][T14513] loop2: detected capacity change from 0 to 7 [ 778.790597][T14513] loop2: p1 [ 778.793989][T14513] loop2: partition table partially beyond EOD, truncated [ 778.808724][T14513] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 778.865710][T14394] udevd[14394]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.995258][ T24] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 779.067214][ T24] usb 3-1: device descriptor read/8, error -71 [ 779.107064][T14197] udevd[14197]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 779.175047][T14516] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 779.290910][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 779.366679][T14523] binder: 14521:14523 ioctl c0306201 2000000003c0 returned -14 [ 779.374573][ T24] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 779.419982][ T24] usb 3-1: device descriptor read/8, error -71 [ 779.431306][T14517] veth9: entered promiscuous mode [ 779.461288][T14527] @: renamed from vlan0 (while UP) [ 779.556000][ T24] usb usb3-port1: unable to enumerate USB device [ 779.637557][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2576'. [ 779.655306][T14530] netlink: 'syz.5.2576': attribute type 7 has an invalid length. [ 779.778011][T14530] netlink: 'syz.5.2576': attribute type 8 has an invalid length. [ 779.797120][T14535] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 779.881312][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2576'. [ 779.898319][T14537] bond0: (slave bond_slave_0): Releasing backup interface [ 779.914186][T14537] bond_slave_0: left promiscuous mode [ 779.950499][T14537] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 780.007857][T14530] team0: entered promiscuous mode [ 780.013780][T14530] team_slave_0: entered promiscuous mode [ 780.022870][T14530] team_slave_1: entered promiscuous mode [ 780.029361][T14530] geneve0: entered promiscuous mode [ 780.038610][T14530] erspan0: entered promiscuous mode [ 780.045579][T14530] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 780.055186][T14530] Cannot create hsr debugfs directory [ 780.064848][T14530] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 780.814634][T14552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.850528][T14552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.123472][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2584'. [ 781.586427][T14561] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2585'. [ 782.806412][T14574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2587'. [ 782.815826][T14574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2587'. [ 783.054069][T14576] input: syz1 as /devices/virtual/input/input51 [ 783.762284][T14584] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2592'. [ 783.815845][T14584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 784.021312][T14589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.087448][T14589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.108621][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 784.297920][ T24] usb 6-1: config 12 has an invalid interface number: 26 but max is 0 [ 784.317960][ T24] usb 6-1: config 12 has no interface number 0 [ 784.343077][ T24] usb 6-1: config 12 interface 26 has no altsetting 0 [ 784.371772][ T24] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0003, bcdDevice=3c.82 [ 784.389259][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.423607][ T24] usb 6-1: Product: syz [ 784.438342][ T24] usb 6-1: Manufacturer: syz [ 784.450927][ T24] usb 6-1: SerialNumber: syz [ 784.517261][T14603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.545038][T14603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.698692][ T24] kvaser_usb 6-1:12.26: error -ENODEV: Cannot get usb endpoint(s) [ 784.796506][ T24] usb 6-1: USB disconnect, device number 23 [ 784.882550][T14607] input: syz1 as /devices/virtual/input/input52 [ 785.400843][ T30] audit: type=1800 audit(1749173492.031:236): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2602" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 785.915321][ T10] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 786.075463][ T7174] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 786.445248][ T7174] usb 6-1: Using ep0 maxpacket: 16 [ 786.464684][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 786.475019][ T7174] usb 6-1: config 0 has no interfaces? [ 786.475198][ T7174] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 786.475225][ T7174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.493643][ T7174] usb 6-1: config 0 descriptor?? [ 786.510916][ T10] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 786.510951][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.510972][ T10] usb 1-1: config 0 has no interface number 0 [ 786.511098][ T10] usb 1-1: config 0 interface 246 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 786.515865][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 786.515896][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.515917][ T10] usb 1-1: Product: syz [ 786.516014][ T10] usb 1-1: Manufacturer: syz [ 786.516030][ T10] usb 1-1: SerialNumber: syz [ 786.521945][ T10] usb 1-1: config 0 descriptor?? [ 786.782296][T14639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2611'. [ 786.782325][T14639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2611'. [ 787.187665][ T10] msi2500 1-1:0.246: Registered as swradio24 [ 787.244049][ T10] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 787.375717][ T10] usb 1-1: USB disconnect, device number 121 [ 787.576465][T14660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2619'. [ 787.699643][T14660] vlan0: entered promiscuous mode [ 789.283714][T14681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.293557][T14681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.313081][T14681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.446301][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'. [ 790.161600][T14690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2628'. [ 790.230085][T14690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2628'. [ 790.485428][ T5888] usb 6-1: USB disconnect, device number 24 [ 790.935673][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2632'. [ 791.385721][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 791.452221][T14705] vlan0: entered promiscuous mode [ 791.553156][ T9] usb 3-1: config 0 has no interfaces? [ 791.573011][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 791.583557][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.600496][ T9] usb 3-1: Product: syz [ 791.604974][ T9] usb 3-1: Manufacturer: syz [ 791.621726][ T9] usb 3-1: SerialNumber: syz [ 791.648902][ T9] usb 3-1: config 0 descriptor?? [ 791.996012][T14706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.011782][T14706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.905759][T14715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.920617][T14715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.529715][T14721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2637'. [ 793.924222][T14728] --map-set only usable from mangle table [ 794.987886][ T5888] usb 3-1: USB disconnect, device number 106 [ 795.702618][T14740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.722805][T14740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.849977][T14750] netlink: 'syz.0.2645': attribute type 5 has an invalid length. [ 795.887078][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2645'. [ 796.931475][T14756] input: syz1 as /devices/virtual/input/input53 [ 797.812501][T14767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.877178][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2649'. [ 797.897244][T14768] netlink: 'syz.0.2649': attribute type 10 has an invalid length. [ 797.933816][T14768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.965605][T14768] team0: Device bond0 failed to register rx_handler [ 798.035740][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2649'. [ 799.531081][T14770] team0 (unregistering): left promiscuous mode [ 799.539031][T14770] team_slave_0: left promiscuous mode [ 799.546872][T14770] team_slave_1: left promiscuous mode [ 799.576519][T14770] team0 (unregistering): Port device team_slave_0 removed [ 799.608963][T14770] team0 (unregistering): Port device team_slave_1 removed [ 800.200218][T14778] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 800.233063][T14778] FAULT_INJECTION: forcing a failure. [ 800.233063][T14778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.283694][T14778] CPU: 1 UID: 0 PID: 14778 Comm: syz.4.2652 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 800.283726][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 800.283738][T14778] Call Trace: [ 800.283747][T14778] [ 800.283756][T14778] dump_stack_lvl+0x189/0x250 [ 800.283793][T14778] ? __pfx____ratelimit+0x10/0x10 [ 800.283819][T14778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.283846][T14778] ? __pfx__printk+0x10/0x10 [ 800.283868][T14778] ? __might_fault+0xb0/0x130 [ 800.283900][T14778] should_fail_ex+0x414/0x560 [ 800.283932][T14778] _copy_from_user+0x2d/0xb0 [ 800.283955][T14778] __x64_sys_epoll_ctl+0x126/0x1a0 [ 800.283981][T14778] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 800.283996][T14778] ? rcu_is_watching+0x15/0xb0 [ 800.284020][T14778] ? do_syscall_64+0xbe/0x3b0 [ 800.284050][T14778] do_syscall_64+0xfa/0x3b0 [ 800.284074][T14778] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.284098][T14778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.284117][T14778] ? clear_bhb_loop+0x60/0xb0 [ 800.284141][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.284160][T14778] RIP: 0033:0x7efd23d8e929 [ 800.284178][T14778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.284195][T14778] RSP: 002b:00007efd24be6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 800.284218][T14778] RAX: ffffffffffffffda RBX: 00007efd23fb5fa0 RCX: 00007efd23d8e929 [ 800.284233][T14778] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000000000000a [ 800.284245][T14778] RBP: 00007efd24be6090 R08: 0000000000000000 R09: 0000000000000000 [ 800.284257][T14778] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 800.284269][T14778] R13: 0000000000000000 R14: 00007efd23fb5fa0 R15: 00007efd240dfa28 [ 800.284300][T14778] [ 801.507808][T14796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 801.584183][T14796] bond2: entered promiscuous mode [ 801.606947][T14796] bond2: entered allmulticast mode [ 801.629874][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2660'. [ 801.640429][T14796] bond0: (slave bond2): Enslaving as an active interface with an up link [ 801.714936][T14802] vlan0: entered promiscuous mode [ 802.106067][T14808] --map-set only usable from mangle table [ 802.583919][T14814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.138315][T14824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2668'. [ 803.204242][T14824] 8021q: VLANs not supported on gre0 [ 803.386772][T14831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2669'. [ 803.396102][T14831] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 804.005192][ T5888] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 804.016275][T14829] could not allocate digest TFM handle poly1305-simd [ 804.295326][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 804.307700][ T5888] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 804.364163][ T5888] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 804.413023][ T5888] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 804.450167][ T5888] usb 6-1: Product: syz [ 804.469922][ T5888] usb 6-1: Manufacturer: syz [ 804.489541][ T5888] usb 6-1: SerialNumber: syz [ 804.740518][ T5888] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 804.780282][ T5888] usb 6-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 804.842059][ T5888] usb 6-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 805.035193][ T5888] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 805.053717][ T5888] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 805.072746][ T5888] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 805.168837][ T5888] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 805.231957][ T5888] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 805.287141][ T5888] usb 6-1: USB disconnect, device number 25 [ 805.360115][ T5888] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 805.666125][ T5888] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 805.746904][ T5888] visor 6-1:1.0: device disconnected [ 806.422867][T14849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.478066][T14849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.529654][ T30] audit: type=1326 audit(1749173513.161:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14843 comm="syz.5.2672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4ae58e929 code=0x0 [ 806.551635][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.650973][T14846] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2672'. [ 806.652146][T14847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2672'. [ 807.365371][ T5887] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 807.525466][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 807.562624][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.576350][ T5887] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 807.599721][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.629148][ T5887] usb 1-1: config 0 descriptor?? [ 807.664484][ T5887] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 807.707029][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 807.734743][T14858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'. [ 807.774379][T14858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2677'. [ 807.885349][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 807.894277][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 807.909383][ T9] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 807.927681][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 807.943151][ T9] usb 6-1: Product: syz [ 807.948428][ T9] usb 6-1: Manufacturer: syz [ 807.953244][ T9] usb 6-1: SerialNumber: syz [ 807.989671][ T9] usb 6-1: config 0 descriptor?? [ 808.040864][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 808.074883][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.106178][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.243955][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 808.375570][ T5887] gspca_vc032x: reg_w err -110 [ 808.395346][ T5887] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 808.428838][T14394] udevd[14394]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.534252][T14868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.570539][T14868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.634282][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.685890][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.699720][T14871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.724849][T14871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.761094][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.814293][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.840005][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.850877][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.857732][ T5887] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 809.025957][ T30] audit: type=1326 audit(1749173515.661:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.2.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f318e929 code=0x7ffc0000 [ 809.482842][T14888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.492084][T14888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.527799][T14888] 8021q: VLANs not supported on nlmon0 [ 810.257157][ T5888] usb 6-1: USB disconnect, device number 26 [ 810.346642][T14899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2689'. [ 810.415338][T14899] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2689'. [ 810.563545][ T5888] usb 1-1: USB disconnect, device number 122 [ 810.739564][T14908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2690'. [ 810.749189][T14908] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 810.892837][T14906] could not allocate digest TFM handle poly1305-simd [ 811.275523][ T30] audit: type=1326 audit(1749173517.911:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f318e929 code=0x7ffc0000 [ 811.383150][ T30] audit: type=1326 audit(1749173517.911:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f318e929 code=0x7ffc0000 [ 811.595762][ T30] audit: type=1326 audit(1749173518.181:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.2696" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ce658e929 code=0x0 [ 812.159426][T14940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.206586][T14940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.932377][T14946] --map-set only usable from mangle table [ 813.145220][ T24] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 813.617298][ T24] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 813.631132][ T24] usb 6-1: config 0 has no interface number 0 [ 813.671932][ T24] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 813.736499][ T24] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 813.793625][ T24] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 813.835668][ T24] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 813.869668][ T24] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 813.913249][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.997811][ T24] usb 6-1: config 0 descriptor?? [ 814.067001][ T24] hub 6-1:0.3: bad descriptor, ignoring hub [ 814.101285][ T24] hub 6-1:0.3: probe with driver hub failed with error -5 [ 814.148981][ T24] sierra 6-1:0.3: Sierra USB modem converter detected [ 814.908767][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2707'. [ 815.456478][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2709'. [ 815.481027][T14963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2709'. [ 815.581148][T14963] vlan0: entered allmulticast mode [ 815.771414][ T24] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 815.799910][ T24] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 815.879180][T14972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2711'. [ 815.908216][T14972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2711'. [ 815.932169][ T24] usb 6-1: USB disconnect, device number 27 [ 816.042967][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 816.100111][ T24] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 816.150958][ T24] sierra 6-1:0.3: device disconnected [ 816.215578][ T7191] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 816.377922][ T7191] usb 1-1: Using ep0 maxpacket: 16 [ 816.431770][ T7191] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 816.451769][T14983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.464032][T14983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.476489][ T7191] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.504533][ T7191] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.523784][ T7191] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 816.554491][ T7191] usb 1-1: config 7 interface 0 has no altsetting 0 [ 816.574499][ T7191] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 816.625782][ T7191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.676951][T14983] program syz.4.2715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.739289][T14983] netlink: 'syz.4.2715': attribute type 1 has an invalid length. [ 817.304434][T14994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.408320][T14994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.595515][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2720'. [ 817.624625][ T7191] usbhid 1-1:7.0: can't add hid device: -71 [ 817.631064][ T7191] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 817.675651][ T7191] usb 1-1: USB disconnect, device number 123 [ 818.725913][T15004] --map-set only usable from mangle table [ 819.230424][T15008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2722'. [ 820.649542][ T7191] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 820.766947][T15019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.774229][T15019] IPv6: NLM_F_CREATE should be set when creating new route [ 820.815469][ T7191] usb 1-1: Using ep0 maxpacket: 8 [ 820.827900][ T7191] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 820.885138][ T7191] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 820.927317][ T7191] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 820.957325][T15025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.974139][ T7191] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 820.989697][T15025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.000007][ T7191] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 821.029400][ T7191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.227329][T15034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 821.382314][ T7191] usb 1-1: GET_CAPABILITIES returned 0 [ 821.390142][ T7191] usbtmc 1-1:16.0: can't read capabilities [ 821.536567][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 821.655587][ T7191] usb 1-1: USB disconnect, device number 124 [ 821.695903][T15041] netlink: 1104 bytes leftover after parsing attributes in process `syz.1.2733'. [ 821.731948][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 821.929649][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 821.959419][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 821.975331][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 821.976475][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 821.987253][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 822.079558][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 822.122704][ T24] usb 6-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 822.191858][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.222848][ T24] usb 6-1: Product: syz [ 822.234151][ T30] audit: type=1326 audit(1749173528.861:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d51f8e929 code=0x7ffc0000 [ 822.280087][ T24] usb 6-1: Manufacturer: syz [ 822.306609][ T24] usb 6-1: SerialNumber: syz [ 822.364511][ T24] usb 6-1: config 0 descriptor?? [ 822.390808][ T24] cypress_m8 6-1:0.0: HID->COM RS232 Adapter converter detected [ 822.415481][ T24] cyphidcom ttyUSB0: required endpoint is missing [ 823.394526][T15067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2744'. [ 823.434290][T15067] netlink: 'syz.1.2744': attribute type 7 has an invalid length. [ 823.498117][T15067] netlink: 'syz.1.2744': attribute type 8 has an invalid length. [ 823.519919][T15074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.529461][T15074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.553297][T15074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.573051][T15074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.592539][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 823.610960][T15074] batman_adv: batadv0: Removing interface: wlan1 [ 824.033883][ T24] usb 6-1: USB disconnect, device number 28 [ 824.043549][ T24] cypress_m8 6-1:0.0: device disconnected [ 824.646166][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075255800: rx timeout, send abort [ 824.655166][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075255800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 827.585256][ T5888] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 827.765446][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 827.787540][ T5888] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 827.805219][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 827.850712][ T5888] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 827.900184][T15110] loop2: detected capacity change from 0 to 7 [ 827.925272][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 827.955427][T15110] loop2: p1 [ 827.975821][T15110] loop2: partition table partially beyond EOD, [ 827.975816][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 827.977453][ T5888] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 828.004979][T15110] truncated [ 828.032778][T15110] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 828.114589][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 828.145225][ T5888] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 828.229743][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 828.277761][T14394] udevd[14394]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 828.285383][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 828.364881][ T5888] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 828.382789][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 828.445768][ T5888] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 828.489501][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 828.555658][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 828.627400][ T5888] usb 1-1: string descriptor 0 read error: -22 [ 828.634144][ T5888] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 828.665380][T15127] input: syz1 as /devices/virtual/input/input54 [ 828.672926][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.737779][ T5888] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 829.071040][ T5888] usb 1-1: USB disconnect, device number 125 [ 829.077589][T15133] usb 1-1: Couldn't submit interrupt_out_urb -19 [ 829.409202][ T10] usb 2-1: USB disconnect, device number 26 [ 829.415521][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 830.275640][T15150] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 830.541612][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 830.565697][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 830.577195][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 830.626907][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 830.640961][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 830.745346][ C0] ------------[ cut here ]------------ [ 830.751330][ C0] refcount_t: addition on 0; use-after-free. [ 830.757584][ C0] WARNING: CPU: 0 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 830.766724][ C0] Modules linked in: [ 830.770930][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 830.782229][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 830.792300][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 830.798475][ C0] Code: 00 00 e8 09 2d ff fc 5b 41 5e e9 d1 4a a7 06 cc e8 fb 2c ff fc c6 05 e3 ca c9 0a 01 90 48 c7 c7 c0 38 e2 8b e8 17 db c2 fc 90 <0f> 0b 90 90 eb d7 e8 db 2c ff fc c6 05 c4 ca c9 0a 01 90 48 c7 c7 [ 830.818491][ C0] RSP: 0000:ffffc90000007828 EFLAGS: 00010246 [ 830.824784][ C0] RAX: 8324765967dd7c00 RBX: 0000000000000002 RCX: ffffffff8de95280 [ 830.833104][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 830.841469][ C0] RBP: ffffc900000079b0 R08: 0000000000000003 R09: 0000000000000004 [ 830.849524][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff888078f98000 [ 830.857602][ C0] R13: dffffc0000000000 R14: ffff888078f9816c R15: ffff888056383c00 [ 830.865645][ C0] FS: 0000000000000000(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 830.874780][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.881447][ C0] CR2: 00002000003c5030 CR3: 0000000028232000 CR4: 00000000003526f0 [ 830.889579][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 830.897616][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 830.905838][ C0] Call Trace: [ 830.909248][ C0] [ 830.912135][ C0] tipc_crypto_xmit+0x1820/0x22c0 [ 830.917260][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 830.922687][ C0] tipc_bearer_xmit_skb+0x245/0x400 [ 830.927956][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 830.933336][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 830.939153][ C0] tipc_disc_timeout+0x580/0x6d0 [ 830.944591][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 830.950153][ C0] call_timer_fn+0x17b/0x5f0 [ 830.954797][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 830.960541][ C0] ? call_timer_fn+0xbe/0x5f0 [ 830.965471][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 830.970728][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.976019][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.981258][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 830.986796][ C0] __run_timer_base+0x61a/0x860 [ 830.991697][ C0] ? ktime_get+0x3e/0x1f0 [ 830.996115][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 831.001530][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 831.008118][ C0] run_timer_softirq+0xb7/0x180 [ 831.013040][ C0] handle_softirqs+0x286/0x870 [ 831.017889][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 831.022706][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 831.028073][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 831.033320][ C0] __irq_exit_rcu+0xca/0x1f0 [ 831.038087][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 831.043689][ C0] irq_exit_rcu+0x9/0x30 [ 831.048002][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 831.053680][ C0] [ 831.056668][ C0] [ 831.059633][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 831.065678][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 831.071437][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 85 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 831.091307][ C0] RSP: 0000:ffffffff8de07d80 EFLAGS: 000002c2 [ 831.097462][ C0] RAX: 8324765967dd7c00 RBX: ffffffff81976058 RCX: 8324765967dd7c00 [ 831.105512][ C0] RDX: 0000000000000001 RSI: ffffffff8d97cb85 RDI: ffffffff8be28340 [ 831.113781][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 831.121814][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa100f0 [ 831.130119][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 831.138132][ C0] ? do_idle+0x1e8/0x510 [ 831.142400][ C0] default_idle+0x13/0x20 [ 831.146751][ C0] default_idle_call+0x74/0xb0 [ 831.151532][ C0] do_idle+0x1e8/0x510 [ 831.155705][ C0] ? __pfx_do_idle+0x10/0x10 [ 831.160301][ C0] cpu_startup_entry+0x44/0x60 [ 831.165100][ C0] rest_init+0x2de/0x300 [ 831.169362][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 831.174903][ C0] start_kernel+0x47d/0x500 [ 831.179462][ C0] x86_64_start_reservations+0x24/0x30 [ 831.184986][ C0] x86_64_start_kernel+0x143/0x1c0 [ 831.190201][ C0] common_startup_64+0x13e/0x147 [ 831.195310][ C0] [ 831.198365][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 831.205673][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 831.216986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.227160][ C0] Call Trace: [ 831.230579][ C0] [ 831.233550][ C0] dump_stack_lvl+0x99/0x250 [ 831.238203][ C0] ? __asan_memcpy+0x40/0x70 [ 831.242851][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.248187][ C0] ? __pfx__printk+0x10/0x10 [ 831.252885][ C0] panic+0x2db/0x790 [ 831.256930][ C0] ? __pfx_panic+0x10/0x10 [ 831.261478][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 831.266727][ C0] ? common_startup_64+0x13e/0x147 [ 831.271884][ C0] __warn+0x31b/0x4b0 [ 831.275941][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 831.281434][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 831.286927][ C0] report_bug+0x2be/0x4f0 [ 831.291344][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 831.296885][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 831.302384][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 831.307970][ C0] handle_bug+0x84/0x160 [ 831.312348][ C0] exc_invalid_op+0x1a/0x50 [ 831.316893][ C0] asm_exc_invalid_op+0x1a/0x20 [ 831.321780][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 831.327970][ C0] Code: 00 00 e8 09 2d ff fc 5b 41 5e e9 d1 4a a7 06 cc e8 fb 2c ff fc c6 05 e3 ca c9 0a 01 90 48 c7 c7 c0 38 e2 8b e8 17 db c2 fc 90 <0f> 0b 90 90 eb d7 e8 db 2c ff fc c6 05 c4 ca c9 0a 01 90 48 c7 c7 [ 831.347631][ C0] RSP: 0000:ffffc90000007828 EFLAGS: 00010246 [ 831.353917][ C0] RAX: 8324765967dd7c00 RBX: 0000000000000002 RCX: ffffffff8de95280 [ 831.362089][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 831.370707][ C0] RBP: ffffc900000079b0 R08: 0000000000000003 R09: 0000000000000004 [ 831.378798][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff888078f98000 [ 831.386871][ C0] R13: dffffc0000000000 R14: ffff888078f9816c R15: ffff888056383c00 [ 831.394896][ C0] ? refcount_warn_saturate+0xf9/0x1d0 [ 831.400392][ C0] tipc_crypto_xmit+0x1820/0x22c0 [ 831.405563][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 831.411098][ C0] tipc_bearer_xmit_skb+0x245/0x400 [ 831.416520][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 831.421928][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 831.428136][ C0] tipc_disc_timeout+0x580/0x6d0 [ 831.433148][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 831.439027][ C0] call_timer_fn+0x17b/0x5f0 [ 831.443844][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 831.449515][ C0] ? call_timer_fn+0xbe/0x5f0 [ 831.454229][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 831.459477][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.464721][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.469951][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 831.475447][ C0] __run_timer_base+0x61a/0x860 [ 831.480333][ C0] ? ktime_get+0x3e/0x1f0 [ 831.484826][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 831.490324][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 831.496596][ C0] run_timer_softirq+0xb7/0x180 [ 831.501813][ C0] handle_softirqs+0x286/0x870 [ 831.507072][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 831.511856][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 831.517250][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 831.522474][ C0] __irq_exit_rcu+0xca/0x1f0 [ 831.527090][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 831.532487][ C0] irq_exit_rcu+0x9/0x30 [ 831.536732][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 831.542578][ C0] [ 831.545604][ C0] [ 831.548662][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 831.554775][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 831.560706][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 85 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 831.580452][ C0] RSP: 0000:ffffffff8de07d80 EFLAGS: 000002c2 [ 831.586525][ C0] RAX: 8324765967dd7c00 RBX: ffffffff81976058 RCX: 8324765967dd7c00 [ 831.594597][ C0] RDX: 0000000000000001 RSI: ffffffff8d97cb85 RDI: ffffffff8be28340 [ 831.602577][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 831.610543][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa100f0 [ 831.618508][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 831.626670][ C0] ? do_idle+0x1e8/0x510 [ 831.630927][ C0] default_idle+0x13/0x20 [ 831.635371][ C0] default_idle_call+0x74/0xb0 [ 831.640142][ C0] do_idle+0x1e8/0x510 [ 831.644208][ C0] ? __pfx_do_idle+0x10/0x10 [ 831.648818][ C0] cpu_startup_entry+0x44/0x60 [ 831.653574][ C0] rest_init+0x2de/0x300 [ 831.657898][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 831.663461][ C0] start_kernel+0x47d/0x500 [ 831.668156][ C0] x86_64_start_reservations+0x24/0x30 [ 831.673630][ C0] x86_64_start_kernel+0x143/0x1c0 [ 831.678745][ C0] common_startup_64+0x13e/0x147 [ 831.683802][ C0] [ 831.687274][ C0] Kernel Offset: disabled [ 831.691624][ C0] Rebooting in 86400 seconds..