last executing test programs: 5m40.579082114s ago: executing program 2 (id=1105): openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000200)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0xc100) waitid(0x300, 0x0, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m37.987195194s ago: executing program 2 (id=1116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000100)=0x7, 0x4) mq_unlink(&(0x7f0000000140)='/:-\x00') setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f00000003c0), 0x4) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[], 0x9) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x8, 0x1e, &(0x7f0000001340)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x113100, 0x4) close_range(r3, r4, 0x0) 5m37.756596765s ago: executing program 2 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYRESHEX=0x0], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYRESHEX=0x0], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) (async) 5m37.580542388s ago: executing program 2 (id=1120): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x1) link(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r2, r0, 0x0) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5m37.199765131s ago: executing program 2 (id=1123): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa", 0x30}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000", 0x4c}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6", 0x93}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c00"/215, 0xd7}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m36.768656869s ago: executing program 2 (id=1124): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xf8, 0x7ffc1ffb}]}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 5m35.946323556s ago: executing program 32 (id=1124): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xf8, 0x7ffc1ffb}]}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 9.740217019s ago: executing program 1 (id=2520): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000a40)=""/87) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000c40)={0x20, r6, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) keyctl$session_to_parent(0x12) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) unshare(0x2c020400) r10 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r10, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3}) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x4008010}, 0x4008040) 8.884517383s ago: executing program 5 (id=2524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) close(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff0000000000000000000000002001000000000000000028a46861bed7b4a114bb000000000000000000000000000400000000000000000a00ff010000000000000000000000000001ffffffff000000000000000000000000e0000002000000000000000000000000ac1e000100000000000000000000000006"], 0xec}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000006a0001"], 0x14}}, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="22000000250001002cbd7000ffdb0725050000004b1f56c522868587a94587f613669bc66fa28a5b578b0067ee355227cb454233efd84587c50f36ed920c9583c6873df9f848975a22"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) r6 = getpgid(0x0) ptrace(0x4208, r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x4, 0x35, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000545e0d20b104b76b2f680102030109022300010000c0050904970001ff70790008340201210126ff0905850308"], 0x0) 7.856657474s ago: executing program 1 (id=2529): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r10, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x28}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24084898}, 0x40000) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000140)=0x2000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.883029985s ago: executing program 0 (id=2534): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x200, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080), 0x4) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x20010122, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xe], 0xfe, [0x4, 0x2, 0xfffe, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@local, @remote, @remote, 0x4, 0x6, 0x0, 0x500, 0x9, 0x40000100, r3}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_INPUT(r4, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r5, 0x0, 0x0, 0x4040090, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.748494159s ago: executing program 0 (id=2535): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 6.654800624s ago: executing program 0 (id=2536): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = dup(r2) bind$packet(r3, &(0x7f0000000080)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @remote}, 0x14) (async) io_uring_enter(0xffffffffffffffff, 0x5fcd, 0xb76d, 0x40, &(0x7f00000000c0)={[0xe]}, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000140)={0xd2e5, 0x6, 0x5, 0x1, 0x2}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x141c83, 0x0) (async) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)={0x4bc, 0x1, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x7fffffff}, 0x6, 0x50, 0x400, 0x0, 0x5, 'syz0\x00', "365d9756feab4b2cd6a1ef2d3690d55e03f35b11bbaf933ea67ca69b710810c6", "95b2c6f143a1a2dc5d55f853ff9f724d563ad087e5fc053cea3eec549ff9b7c2", [{0x1a, 0x7ff, {0x3, 0x7}}, {0x6, 0x8, {0x3, 0x8}}, {0x8000, 0x6, {0x3, 0xffffffff}}, {0x1, 0x0, {0x1, 0xfffffffe}}, {0x100, 0x9}, {0x5, 0x8, {0x0, 0x2}}, {0x4, 0xff80, {0x2, 0x7}}, {0x400, 0x7ff, {0x3, 0x3}}, {0xb, 0xf801, {0x1, 0x3}}, {0x3, 0x7, {0x0, 0x4}}, {0x2, 0x9, {0x1, 0x6}}, {0x5551, 0x1, {0x1, 0xff}}, {0x0, 0x0, {0x228344c8ff58cb17, 0x3}}, {0xfffb, 0x400, {0x0, 0x7}}, {0xe, 0x0, {0x0, 0xffffffff}}, {0xa2ec, 0x5, {0x0, 0x8}}, {0xffff, 0x946, {0x3, 0x108c}}, {0x7, 0x7, {0x0, 0x825}}, {0x7, 0x4, {0x2}}, {0x1, 0xf68, {0x0, 0x4d57}}, {0x4, 0x4, {0x2, 0x4}}, {0xca, 0x9, {0x3, 0x8}}, {0x6, 0xe, {0x3, 0x75d}}, {0x5, 0x0, {0x0, 0x8}}, {0x3, 0x7f, {0x2, 0x100}}, {0xffff, 0x9, {0x3, 0x401}}, {0x10, 0x1, {0x1, 0x6}}, {0x3, 0xc, {0x2, 0xcbde}}, {0x10, 0x1, {0x2, 0x1}}, {0xccf, 0xfffd, {0x0, 0x7f}}, {0x100, 0x101, {0x1, 0x4}}, {0x6, 0x2, {0x3, 0x8}}, {0x6, 0x80, {0x1}}, {0xa, 0x6, {0x3, 0x80000001}}, {0xe73a, 0x1, {0x2, 0xfffffff1}}, {0x401, 0xe27a, {0x3, 0x392}}, {0x76f, 0x200, {0x2, 0x6}}, {0xa, 0x764, {0x2, 0x80000000}}, {0x2, 0x2, {0x2, 0x2}}, {0x2, 0x1, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x10, 0x2, 0x1000, 0x8, 0x1e, 'syz1\x00', "0be474560fb9dda3b78ba1041b536d37e493e518e85106d69507547d3a9f0d9c", "c4a74f59ebefaa1d05777690a5c1708ba8f55c1b21d4b038f486a743553687f7", [{0x9, 0x45, {0x3, 0x2}}, {0x7, 0x401, {0x3, 0x5}}, {0x0, 0x5d0, {0x3, 0x3}}, {0x8, 0xfc, {0x3, 0x6}}, {0x2, 0x4, {0x0, 0x5}}, {0x1, 0xd2, {0x1, 0x8}}, {0x81, 0x9, {0x2, 0x7}}, {0x7, 0x401, {0x2, 0xfffffffa}}, {0xb7a, 0x9, {0x2, 0x8}}, {0x9, 0x8, {0x1, 0xffff}}, {0xa, 0xb, {0x1}}, {0x6, 0xfffd, {0x0, 0x3}}, {0x0, 0x6, {0x1, 0x3}}, {0x8, 0x7, {0x3, 0x8}}, {0xde05, 0xe70, {0x0, 0x2}}, {0x200, 0x7fff, {0x1, 0xfffffff9}}, {0x7, 0x7, {0x1, 0xf898}}, {0x0, 0x2, {0x0, 0x8}}, {0xe2f7, 0x1, {0x0, 0x5}}, {0x2, 0xd4, {0x3, 0x7}}, {0xc9, 0x5, {0x3, 0x8}}, {0xa8b7, 0x4, {0x3, 0x6}}, {0x8001, 0xd6a4, {0x2, 0xf3c}}, {0x8, 0x0, {0x2, 0x8}}, {0x0, 0x2, {0x1, 0x7fffffff}}, {0x9, 0x7, {0x1, 0x6}}, {0x7, 0x318f, {0x3, 0x7eb}}, {0x4, 0x7, {0x3, 0x6}}, {0x3, 0x7, {0x3}}, {0x94f8, 0x7ff, {0x1, 0x9}}, {0x3, 0x800, {0x3, 0x80000000}}, {0x1, 0x8001, {0x1, 0x3}}, {0x8, 0x9, {0x0, 0x940}}, {0x0, 0x6, {0x3, 0x3}}, {0x2, 0x0, {0x3, 0x8}}, {0x9, 0xff01, {0x1, 0x1000}}, {0x5, 0x100, {0x2, 0x1}}, {0x3, 0x8, {0x3, 0x4}}, {0x8, 0x8, {0x1, 0x3}}, {0x293, 0x8}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x800}, 0x48074) (async) io_uring_setup(0x5564, &(0x7f0000000740)={0x0, 0x9e6c, 0x8, 0x3, 0x351, 0x0, r3}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000bc0)={0x0, 0x400, 0x200, &(0x7f00000007c0)=[0x5, 0x1, 0x2, 0x1, 0x200, 0x729, 0x6, 0x983d, 0x3, 0x2, 0xd3, 0x8, 0x8, 0x9, 0xfffffffffffffff7, 0x2, 0x80, 0x8001, 0x2, 0x3, 0x9, 0x1, 0x1000, 0x81, 0xff, 0x72, 0x1ff, 0xf7e4, 0x4, 0xe3c, 0x4, 0x101, 0x3, 0x10000, 0x5, 0xada, 0x3, 0x1, 0x10000, 0xfffffffffffffe00, 0x4, 0x0, 0x5, 0x1, 0x1, 0xffffffffffff6a38, 0x8, 0x9, 0x2, 0x3, 0x0, 0x6, 0x7, 0x7, 0x2, 0x3, 0xc0, 0xb2, 0x7fffffffffffffff, 0x1, 0x6f, 0xffffffff, 0x8, 0x101, 0x0, 0x2, 0x6000000, 0x2, 0x4, 0x5, 0xff, 0x9, 0x1, 0x5, 0xc00000000000000, 0xfffffffffffffff9, 0x10000, 0x7, 0x8, 0x2, 0x3, 0xff, 0x5ab7, 0x9, 0x1, 0x5, 0x9, 0x9, 0x3, 0x2, 0x2, 0x5, 0x80000001, 0x9, 0x4, 0x0, 0x10001, 0xfffffffffffffe00, 0xa, 0x5, 0x80000000, 0x8000, 0x8, 0x9, 0x9265, 0x1000, 0x200, 0x5, 0x2, 0xeef, 0x3ff, 0xe9ee, 0x5, 0xffffffffffffffc7, 0x2, 0x5f, 0x325d, 0x2, 0x50, 0x6c, 0x6, 0x8, 0x493, 0x0, 0x1, 0xfffffffffffffffc, 0x5, 0x7000000000000000]}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000c00)={'ipvlan1\x00', 0x1000}) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000c40)={0x0, 0x0}) ptrace(0x4207, r4) (async) accept$packet(r3, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000cc0)=0x14) (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000d00), 0x28100, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x8010, r5, 0xe7151000) getsockopt$netlink(r3, 0x10e, 0x1, &(0x7f0000000d40)=""/4096, &(0x7f0000001d40)=0x1000) r6 = open_tree(0xffffffffffffffff, &(0x7f0000001d80)='./file0\x00', 0x9000) socket(0x1, 0x800, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000001e40)={0x5, 0x8, {r4}, {0xee00}, 0x10, 0x1}) (async) stat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000001f40)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000001dc0), &(0x7f0000001e00)='./file0\x00', 0x3000000, &(0x7f0000002080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@pcr={'pcr', 0x3d, 0x10}}, {@fowner_gt={'fowner>', r9}}]}}, 0x1, 0x0, &(0x7f0000002180)="ea1cce26d214c83903c07b35d716b510856ab71be86db3147e69e01480d4188ef303e2943b034c1bf4b126f5ca79a429873f618dde0c78c997e0d10a6d248795a8e55f2f4b0505bf8181439cf6e7e77c7b5be82315f6a7aa20e3553f6e95fe1b7cb26e426b9256512cea17bd") r10 = fsmount(r3, 0x0, 0x88) write$binfmt_aout(r10, &(0x7f0000002200)={{0xcc, 0x1, 0x4, 0x24b, 0x38d, 0x7, 0x1c3}, "4863a8f26a5022aced56206f1e61da4aa50c6c15c194dad97375fc7cae22fe216ee2c18f1d81a6febd9fd97defdbf5a74ad396226c37cf98cc4b37f23b02e87707eb3fb508ecdd89fe4607eb51bd38fbc6f97687609c3a892d588f5d67a58cab59a649151ff4af71278e6d01ab4cd38a7b21be38c62be84e20566eb7a2844ed81441f4f7175e02f1ec1ae1fa0e723d8d0c00e526e76281101a5972b4baad846cede26820e45dea42b8f058c53357934b03b513", ['\x00']}, 0x1d3) (async) syz_usb_connect(0x6, 0x4c1, &(0x7f0000002400)={{0x12, 0x1, 0x300, 0x86, 0xc8, 0xff, 0x10, 0x19d2, 0x9, 0x761d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4af, 0x2, 0x0, 0x9, 0x80, 0x7, [{{0x9, 0x4, 0xce, 0x9, 0x5, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0xd, 0x10, 0x200, 0x0, 0x0, 0x0, [@generic={0xac, 0xf, "af339ae074792f9334741a3d9e5e4def57b95ff6a96ad1a0b708997831cc7978287e65a0bac57d17a45ca1ff1a8b639462fb8c159f834679f4bfca2194ef47ad8ba7aa70dd2eacd9491a401f0e2508ffba79c84f6b96815f8557e04368cb7769d9cc2456b52c14e9837b2c735a16907dd84482c6c47d2937b435d467cd15ca1abad7d7c4eaa757ea907ca6c35ed637af20e08606c710c1615cbe7936209fc42ad0a21b38806c4b483465"}, @generic={0x1b, 0x24, "5bdf66f8673a328e49a0781abeb068fa3da2ebd15db26a50c7"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x0, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x4, 0x7, 0x6c}}, {{0x9, 0x5, 0x5, 0x13, 0x10, 0x1, 0x1, 0x4}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x4, 0xac, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xc3}]}}]}}, {{0x9, 0x4, 0x77, 0xff, 0xa, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "6d59dc4c"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x401}, {0x6, 0x24, 0x1a, 0x3, 0x12}, [@mdlm_detail={0x86, 0x24, 0x13, 0xff, "e4e0c975106c41b306aa8e0def7bb15735ded78837f8f343904bb2b5f35afd7d70f384379d29324f358b1900d4507cd953c29846e0d6820eb00489e2d0786ad7da76d28917a369ecc366f6d56e4959b96ce8c1e9d34d5e2d8c5500948a464282afa0424dd8d7cb73c09781898b402bb54c324f9ff0e263ff50323af4cbf9ac7fadb3"}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0xd4, 0x1ff}, @dmm={0x7, 0x24, 0x14, 0xa99, 0x8}]}, @uac_control={{0xa, 0x24, 0x1, 0x5, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x5, 0x55, 0x40, 0xbd, 0x74}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x7, "72051ad6f9f4"}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x9, "f4be542b"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x2, 0x1}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x0, '<'}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x3, 0x3, [0x6, 0x1, 0x8], 0xe}]}], [{{0x9, 0x5, 0x3, 0x2, 0x10, 0x91, 0x6b, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xfff}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x3, 0x3, 0xf0}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x9, 0x1, 0x40, [@generic={0x7c, 0x9, "7f3608bbe8b12d722c11414403435e39c611c6a4061f8ec3907da9339315ba2ba7aee787ed7a5d251f2f60546b6504a11553cfd68d19f5c0cc6832da36af86c71d2e86eb2ae6559ca1c6f75b3a064bc7c709cac382b600173ecb8e58bdc5df8145e0a58371486c257a9e7329be42a9c84ea06907320901e862e6"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x9, 0x4, 0xb}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0x7f, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xfb, 0xe0}]}}, {{0x9, 0x5, 0xd, 0x20, 0x200, 0xfb, 0x0, 0x8, [@generic={0x5c, 0xb, "6e6b30e6bad828ebca82fd70baa7d0c6624a1a869d337c3498f00e1c560b54c6f32acf982791e0a308bdb42c58f4c9e22dfb1cfb365b266dee8916060d956b31621975e442b2f986e9fb16b8530c254c6bc8c9fdb312a603531e"}, @generic={0xc, 0x21, "7a3994a92465fc710ce4"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x9, 0xfb, [@generic={0xab, 0x3, "d437bfbd49322379a97176dca75fd52169f760959dc4a182fffd24d74dd674ba7c5053fd19bf1c0beb9a75eb4d784fa333d229d6b01cfee968e300b81d753c093ec0601775ea12612e81af1e66ebec8e45918a5f58985e88b3c1742f4dfde122810c272a67f444f1c32755eea79b8811cf24d549decb2fe86af9567ed51f0b067f0a91d16e9b958d9181e3da34a15c5b757ae1993a86dee3213aa108f650b7743841ca68f93fd86c5d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x68, 0x7b, 0xb, 0x7, [@generic={0x7d, 0x2a, "9f0a99f5feb690e24e51aed9a392964c14c2669bfec9880cb4da7ac1af416b001d9a01eb3c413b2136eaee2577c34b7795b663459ef46720f1250cd4fd5b9ce1e5309e03bcd284101c355c151ca9d3af0b19190e9311c1879d44a3c478e0dea5ff6e6b8220bb83f0dc1ff4ee3f1f9f0c506a020ff5b663a125e19c"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0xe, 0x1, 0xf9}}, {{0x9, 0x5, 0x8, 0x0, 0xdf6, 0x5, 0xc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x800}]}}]}}]}}]}}, &(0x7f0000002c40)={0xa, &(0x7f0000002900)={0xa, 0x6, 0x201, 0x5b, 0x4a, 0x0, 0x20, 0x3}, 0xe1, &(0x7f0000002940)={0x5, 0xf, 0xe1, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "6db26ae3f942dcd53baaf05be5a27160"}, @ptm_cap={0x3}, @generic={0xbe, 0x10, 0x3, "9852cce7aacbe07ab76576d5e4469ce75f315cbaf01175b692f1f7888f7c4e8cf22099c5f7f41311260cb3f6f069593728b40d8490cadf51d8cbdd43e50147b519a11f40b3c76965cb18be802472dc1d18c58cf613c6cdba550c0f757fad117c12c498cf93c59278739f77f2f00763ccab0056b2c468daa994b43ce8a3c7ebdbb40252357c25a5e49a0f0f3e8865ea804b42667fcc73c6bb86d1afd616cbf5e3ed67d2d1c08d1ded2837e0ea5774e41fd8f517cd9571ac6ff9cf4d"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x4}]}, 0x7, [{0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x439}}, {0x25, &(0x7f0000002a80)=@string={0x25, 0x3, "67e2d2e0d433740d44f09a77cdce2f040d737f4f02e88323a503cf51b848583cf2f5e6"}}, {0x3b, &(0x7f0000002ac0)=@string={0x3b, 0x3, "cde68011348c1d200051ce011bc8375707c82703009d941dfaaff7cc146e27abd2cd6cc0419e0f65028e0910dd9c9645411832daba4a5a9852"}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x82c}}, {0x7a, &(0x7f0000002b40)=@string={0x7a, 0x3, "5b0c1f5d4ec854a20d53dfb60f610195dc11048bca29125949742f66a4b9e6796e617ab4c46495354624880e256479e955d405bdde82e83da576c386e76ab05394e1f735ea9028045592001ba85ad8bf6ae172cf3676d5b13c3550fcf868cf2e44abf43066d7e6b4fe29ffe5411f2d58157d77687da44936"}}, {0x4, &(0x7f0000002bc0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x34, &(0x7f0000002c00)=@string={0x34, 0x3, "f34e3a91b776147d5242ee181e9557188589f6eb919020f8773f103fd32a3abad0d4fffcbfed33c567dc2556395c6975715e"}}]}) 6.300481571s ago: executing program 0 (id=2539): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.891813441s ago: executing program 1 (id=2541): syz_open_dev$vim2m(0x0, 0x40005, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583c945"], 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x11000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x1, 0xeeef0000, 0x1000, &(0x7f00002f4000/0x1000)=nil}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x20044004) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xb8) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000140)={0x5, r1, 0x1c, {0x9, 0x1}, 0x6}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)={{0x14}, [@NFT_MSG_NEWRULE={0x1a04, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x19d8, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x18d4, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18c4, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x1040, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0x1e4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x100, 0x1, "63d7b1c5672855dd0254389a2451e42fb6952a3d966586c4d64219c622c85fa67355a18df1a8256bc3a1d27d060008b6df493518cfcb822d275b9870b703c9b5efc21711d0732221cb171c3a63ec27c43165c491716ae9b038a6f04bb3f69111c78404cebcb1f062a9e96a464624de22bf668000006497869fd932d5d2adf8352c83435c33b405a4e5b5660ae02b42e79a29667527e3599ce4a782f8a136cdc7dc0d5cfd0a27448ebdc2c81cd1feac1fac295ae562b32cbca210d95800a1e2d87983755fe3eb146b15fb6a2c024ed833c46a2b796b6bd4063ca630f91014e55d67ab366d8f0eff8a15884f7afe840bd700"/252}, @NFTA_DATA_VALUE={0xa0, 0x1, "10dbee12245f8588b9b6dce79e3467edbbd5e94569f1d352f274e6571039dc1ab8bb0fd942081a86506aaad0930ba56fe941674892b4dd2f82f20888f369ca95dcf9f76c0a369a303f310f60b1fd51db14ec4e53fb9106ab45e3b1480806fe036e975d753d9c7009e9babf1b6e16edf08aba0c6c0bf7cc028fcd2f50ec7b15319e030daac06ab4234893f2cb6ba42ad61f1f9b3aca62f16185aee2c7"}]}, @NFTA_BITWISE_DATA={0x330, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xb7, 0x1, "d833a7977148e0b3e0c4aa8cbc1299abc862ff12a6fc4de24660900272b1be33b32b8187ec2aa68f52bad72d8554b9c98cd819172a7bd5b2bcee75f3fd9d69efc1a46e02005830e34f7cd727104ee4bda1c3b1f4cae239c76fdab41a7385f8b45bab6e74a7e490a64dfc571c5edf842b328a709863f2317c4c590fc43f0915c098d5aa9e3201a38a0b63b55a21e844de63041b7892c6e43af7d061a1f2b8ce64d9e77dec1849e3e2c5517f7459c38460e5e514"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "922a4c4a0c0b018996c013e085e4f0f8d4e08aecf5286fa5284a1333a1b0f1f115aa325538cd4cfa3a6043b97c195dfe77f342404723755a594b7ad60a499a3c0d7174c59ffd75aaf5aa606a80f35d944928b0b6974995ef2e708bc739f8c54185603866e8aa13950e77c1903c50bcad9c680bd261a036ad99089b9a8962e55cb89e0fb1b544a6edc6786d9bb2bba850c29c4cb5273f5f36e42fefd6031d7c3dd3dc73e495ebc4a16f8c07c920c81468c8de9c81786decf4522876edc4b519c96ddbd0884bcbf3a89efdb21522ef83ea1cb77b403a"}, @NFTA_DATA_VALUE={0x43, 0x1, "1f00542a4c07af094846728724b0f14059c826428ce1db70d4ab480e5a0a37ea66df88f223562314c4c60befadb2969764f837dc1900c2518f290048c21338"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "a8d8ccfebd2a54397647f3e4e9f5824712998edf6390dbaeedc578ea7e18be10ad6c1d1b93a06561cfce897c4ec90d81f7fb57fb19bfbc93029fca8b9ce0f8379dc6e263d9309f894025c24ff438d3c2058e4f48d07cee5c494644d0fe999c08e1a99be57042b8b658acfa2b981c39a8d3f752ef068c54c4b4f0aebcc8ef1a48f7138698625a89e9620a5f4dac3723c86c98ab2d18599f7e3bd90fca399eb880fc03354aab3d663f79a153585d849697687ac205789757edfb6a8edfc99099b71d7e84fc63580bb19139718915036659442f6ce7d489056af79ee99aee82571bb808901be5"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_BITWISE_XOR={0x1fc, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x92, 0x1, "de6b0977973fd0a15ea98a0bd4fa7c0bf1a20c2f3f675121bc7c5a63d8dede3970b0b2a6c729d597f1c2496baeeb9f072bd6f51a400dd67a593f6d08256ce09d26e0e4027521abf18e9351ec20ed73e1990182b58ed63bff6ef20a938fc8a166e4cd364bf8fa4ac3a02e59ad469c6d02bd7ddb930dda2c87ee5687e0c674ae078583d954e12fe4fed3561db9aee5"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "c01b68b3d110b98554b60a64a74c47885ecf6630cf61d90d742e77d060cf0e91027c9e01a268ec8ef08aa73b130e0fa216dfc09486acd5c9fb80b22b6623379abf7e70188eaffaf7733922ac377517362f8cd2922e2f8367cfbfcfa88e8d3dba51d801256dffee3bc4a45f0d98ac8cfd70b3837c50b41e58f5f763021fd64c2c66f9402e16cd50323b6ba369899b2d2a7738f4b635cb03801975d6288c3004da4a9d7a201b6ac5717404b5d78ab0c43ce7a97c7c6c00394688708d6babdd19b1aa5ff18daca0d13bc18a5e99454f5a1f42ff97f92618cf3c7ca241ebde2b3d89e30cbea69a5a66764afee60b30cd1a"}]}, @NFTA_BITWISE_MASK={0x160, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "033eeeccf173834fdcb5132a4d5fda86e328fce9b122346fb35135a25eb48cc4dc74de67f366d6c8808071d0a8125fe5b9f458d9a606b1012896fcfe2e06e15ec61de0f778ab1907d7dd71439f858b665dfac997b0d8f3530c2f7cef05f08be1f865b182b909cf8bb6517374288f681a36660567018dab2c64f69d70be23dfb0d95583900e98da1fa70090b6ab7142b7248c45216bfec0844027d36fb2877e6cef0d9cf7ae3ef550755e9a90b6c4b1de9d68c920b7a6a2b2749c58ecfbc770d6d570e0e40db39d27e5f215844493b7be4a9021d568bf488e50af43ae06fa80"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x99404b589df4066a}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xc0}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x7c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x78a6}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "3fd0f1"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1af8}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, r9, 0x0, 0x46) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$printer(r10, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x40, 0x24, 0x7, {0x7, 0xf, "89b8187597"}}, 0x0}, 0x0) 5.765819881s ago: executing program 4 (id=2542): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x80004700) 5.668469064s ago: executing program 5 (id=2543): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone3(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 5.579818402s ago: executing program 4 (id=2544): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f00000002c0)=0x44) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x100) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000300"/25], 0x50) unshare(0x400) socket$inet_mptcp(0x2, 0x1, 0x106) pipe2$watch_queue(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000003b000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018560000010000943048c3000000000000000000180000000900000000000000000000002815400008000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, &(0x7f00000002c0), 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0xbd4a, 0x2, 0x7eab, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r5, r6, 0xffffffffffffffff, r7], &(0x7f0000000740)=[{0x3, 0x5, 0xb, 0x1}, {0x2, 0x2, 0x9, 0x8}, {0x2, 0x2, 0xd, 0x9}, {0x0, 0x5, 0xe, 0x6}, {0x1, 0x1, 0x4, 0x4}], 0x10, 0x9, @void, @value}, 0x94) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r8, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x191c) 4.785301184s ago: executing program 3 (id=2545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = semget$private(0x0, 0x2, 0x4) semctl$SETVAL(r3, 0x2, 0x10, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c0400"]) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) 4.446536198s ago: executing program 3 (id=2546): r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10000, 0x2) io_setup(0x4, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) dup(r4) r5 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x0, 0x10711, 0x1, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x10000000000000, &(0x7f0000000400)=[{&(0x7f0000001800)=""/4110, 0x100e}], 0x1}) io_uring_enter(r5, 0x567, 0x20, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) 4.130680505s ago: executing program 3 (id=2547): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 3.959979458s ago: executing program 3 (id=2548): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x4e22, 0x4, 0x4e23, 0x101, 0x2, 0x0, 0x180, 0x21}, {0x3, 0x7dd8e330, 0x7, 0x4, 0x0, 0x9, 0x41c, 0x5}, {0xe, 0x8004, 0xe, 0x9}, 0x2, 0x6e6bb6, 0x0, 0x1, 0x3, 0x1}, {{@in6=@local, 0x4d4, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2, 0x0, 0x7, 0x7, 0x1, 0x80}}, 0xf0) (rerun: 32) r1 = syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x40187013) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 3.752502605s ago: executing program 1 (id=2549): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) 3.717701156s ago: executing program 3 (id=2550): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg(r7, &(0x7f00000014c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x1, 0x4, 0x4, {0xa, 0x4e23, 0x9f22, @remote, 0x5}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f00000010c0)="4b561ee26e1ff16618c49f8a0155c8cbc14b821a1110d2", 0x17}, {&(0x7f0000001100)="bc9341b9f8ea2fa79d9ba29a048a0faaa520d20326a2a4954b967f7b56baaedc9fe5653d6c9adeda3825bbbe0273fca141fc2018e1b4a8bd1c437c7f869976f145b8c1fbdba7f5d643b0687c59654353cf39c960360386344a75bc436cc3b4294bd69ba03b39bf59a1eea02013f05204e6bec26831fe172cab531fc632f7f9c235", 0x81}, {0x0}, {&(0x7f0000001240)="d7301b1e", 0x4}, {&(0x7f0000001280)="1337c070ecef5a", 0x7}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106edae22", 0x7f}, {&(0x7f0000001340)="d68bd8fcd2f9d41bd55f76744cd7b142b39b975699a9344ee889cc3582fea863b87b2f3db6c4ae3668ff0f81480ab236b67a9e60f149ba9cbd51ce8b476999a98538c7a5a158c2f6f6c794fcb039dccf745f15918b916e9d2fdae09ef5395fa44b1087db1ba6ff257d788f78abe8018b3204934f0e746884524b1350fb122e09655f630d17dcba91c366fcbca1b07396209f6ebe74462fd9915ab3db8cf224ae5878fdd8ead934f190ea13a5f82d26baa8b37a68f50cfbe47b772863c6c00f3175460ba4b0e7486444b11d0de07fe7fbe80c3502c3b0353f5c4b6b9b54", 0xdd}], 0x8}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) 3.637727526s ago: executing program 5 (id=2551): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg(r7, &(0x7f00000014c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x1, 0x4, 0x4, {0xa, 0x4e23, 0x9f22, @remote, 0x5}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f00000010c0)="4b561ee26e1ff16618c49f8a0155c8cbc14b821a1110d2", 0x17}, {&(0x7f0000001100)="bc9341b9f8ea2fa79d9ba29a048a0faaa520d20326a2a4954b967f7b56baaedc9fe5653d6c9adeda3825bbbe0273fca141fc2018e1b4a8bd1c437c7f869976f145b8c1fbdba7f5d643b0687c59654353cf39c960360386344a75bc436cc3b4294bd69ba03b39bf59a1eea02013f05204e6bec26831fe172cab531fc632f7f9c235", 0x81}, {&(0x7f0000001240)="d7301b1e", 0x4}, {&(0x7f0000001280)="1337c070ecef5a", 0x7}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106edae22", 0x7f}, {&(0x7f0000001340)="d68bd8fcd2f9d41bd55f76744cd7b142b39b975699a9344ee889cc3582fea863b87b2f3db6c4ae3668ff0f81480ab236b67a9e60f149ba9cbd51ce8b476999a98538c7a5a158c2f6f6c794fcb039dccf745f15918b916e9d2fdae09ef5395fa44b1087db1ba6ff257d788f78abe8018b3204934f0e746884524b1350fb122e09655f630d17dcba91c366fcbca1b07396209f6ebe74462fd9915ab3db8cf224ae5878fdd8ead934f190ea13a5f82d26baa8b37a68f50cfbe47b772863c6c00f3175460ba4b0e7486444b11d0de07fe7fbe80c3502c3b0353f5c4b6b9b54", 0xdd}], 0x7}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) 3.613560605s ago: executing program 4 (id=2552): syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setaffinity(0x0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x6, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x12041, 0x1a6) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x303, &(0x7f00000002c0)={0x0, 0x40000000, 0x10100, 0x1, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) r7 = socket$isdn(0x22, 0x2, 0x10) close(r7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}) 3.220419793s ago: executing program 0 (id=2553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) close(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff0000000000000000000000002001000000000000000028a46861bed7b4a114bb000000000000000000000000000400000000000000000a00ff010000000000000000000000000001ffffffff000000000000000000000000e0000002000000000000000000000000ac1e000100000000000000000000000006"], 0xec}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000006a0001"], 0x14}}, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="22000000250001002cbd7000ffdb0725050000004b1f56c522868587a94587f613669bc66fa28a5b578b0067ee355227cb454233efd84587c50f36ed920c9583c6873df9f848975a22"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) r6 = getpgid(0x0) ptrace(0x4208, r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x4, 0x35, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000545e0d20b104b76b2f680102030109022300010000c0050904970001ff70790008340201210126ff0905850308"], 0x0) 1.656410996s ago: executing program 3 (id=2554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80000000000b49, 0x8, 0x1000000000008, 0x0, 0x80000003}, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x3a, &(0x7f00000003c0)=ANY=[@ANYBLOB="2aeb4645835f0180c2000002810010000800464e0028006800000c2190787f00e300ac141434010000004e204e2004319078c8baf0a609"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r3 = fcntl$getown(r1, 0x9) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x2, 0x8031, r1, 0xcb2e7000) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r5 = syz_clone3(&(0x7f0000000440)={0x200240800, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), {0x1c}, &(0x7f0000000300)=""/163, 0xa3, &(0x7f0000000280)=""/1, &(0x7f0000000400)=[r3], 0x1, {r2}}, 0x58) sched_getattr(r5, &(0x7f00000000c0)={0x38}, 0x38, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x7101}) socket$inet(0x2, 0x1, 0x0) r6 = syz_open_dev$evdev(0x0, 0x32a8c0, 0x40) ioctl$EVIOCGSW(r6, 0x8040451b, 0x0) socket$tipc(0x1e, 0x2, 0x0) 1.622625948s ago: executing program 4 (id=2555): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0x80805, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b80), 0x0, 0x7ff, 0x4f) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xfff5) 1.097465665s ago: executing program 5 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ac1e010100000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000000a02000022c33614e978e6b434fd19b9750f1200000000000000e0250ad1a57a0008000100ffffffff0800"/59], 0x2c}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000f000000000000000100000e00"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0x8, 0xffffffff, 0x1, 0x3}}, {0x4}}]}]}, 0x6c}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}}, 0x0) 412.621623ms ago: executing program 4 (id=2557): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x3058c0, 0x0) syncfs(r0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x5f, &(0x7f0000000080)=""/95}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000001c0)={0x0, 0x3, 0x90}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000005c0)={0x0, 0x2, 0x5, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000009c0)={0x10, 0x5, {0x0, @struct={0x7, 0x2}, r6, 0x7fffffffffffffff, 0x8, 0xf, 0xc3ea, 0xfffffffffffffbff, 0x64b5d9285c2bad60, @usage=0x8, 0x7fffffff, 0x2, [0x3, 0xaa1, 0x400000, 0x1, 0x9]}, {0x7, @struct={0x101, 0x76}, r7, 0x8000, 0x9, 0x5, 0x80, 0x100000001, 0x1, @struct={0x5}, 0x6e, 0x8871, [0xee1, 0xdb3b, 0xf, 0x5, 0xfffffffffffffffa, 0x4]}, {0x38b5, @usage=0x2, 0x0, 0x7fffffff, 0xe89fbaa, 0x685c, 0x7, 0x8, 0x8, @usage=0x3d0, 0x8, 0x18f58ff5, [0x7ff, 0xb60f, 0x2, 0x5b19, 0x401, 0x7]}, {0x2, 0x7, 0x10}}) r8 = creat(&(0x7f0000000e00)='./file0\x00', 0x81) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000e40)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000dc0)="6fb0a65addef1ba076dfa82e503db3cd2b", 0x11, r8}, 0x68) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mkdirat(r8, &(0x7f0000000ec0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000f00), 0x400100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000f40)={'veth0_to_bridge\x00', @ifru_hwaddr=@random="360df51b4754"}) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x78, 0x2, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x2, 0x6, 0x80, 0x8000, 0x80200000, 0x7, 0xf69]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xde2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4af}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001380)={'ip_vti0\x00', &(0x7f0000001300)={'sit0\x00', 0x0, 0x8030, 0x10, 0xffff, 0xaf, {{0xb, 0x4, 0x0, 0x5, 0x2c, 0x65, 0x0, 0x1, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0x4, [{@private=0xa010100, 0x7f}]}, @rr={0x7, 0xb, 0x5e, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x21, &(0x7f00000010c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xba11}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f0000001200)='syzkaller\x00', 0xff, 0xb8, &(0x7f0000001240)=""/184, 0x40f00, 0x1, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0x8, 0xfffffff8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001440)=[r3], &(0x7f0000001480)=[{0x4, 0x5, 0xf, 0x6}], 0x10, 0x1, @void, @value}, 0x94) sendmsg$nl_route(r8, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)=@bridge_setlink={0xc4, 0x13, 0x200, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r9, 0x40008, 0x400}, [@IFLA_IFALIASn={0x4}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x42ba}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xae9e}, @IFLA_LINKMODE={0x5, 0x11, 0x37}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_PORT_SELF={0x64, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "540689ec2e6880153649ee1ed6b0ef7c"}, @IFLA_PORT_PROFILE={0x6, 0x2, '[\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f9e3e294d913f78b45e5a19e1e8fccca"}, @IFLA_PORT_VF={0x8, 0x1, 0xe}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "35ba8e78456868638fbdf2080a6539b3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "aba885f43b84a6f78554ce7fff7fe480"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000001}, 0x44000) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000001740)={0x1, 0x0, [{0x4, 0x3, 0x1, 0x0, @adapter={0x5, 0x8, 0x5, 0xffffcedb, 0x4}}]}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000001780)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000017c0)={0x48, 0x5, r11, 0x0, 0xffffffffffffffff, 0x1}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001840)={'b', ' *:* ', 'rw\x00'}, 0x9) getpeername(r5, &(0x7f0000001880)=@rc={0x1f, @fixed}, &(0x7f0000001900)=0x80) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000001940)={0x7fff, 0x3, {0xffffffffffffffff}, {}, 0x1, 0x80000001}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000019c0)={r12, r8, 0x0, 0x1, &(0x7f0000001980)='\x00'}, 0x30) 379.904012ms ago: executing program 5 (id=2558): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000900)=@chain={'key_or_keyring:', r0}) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000040)='*+((.]\x00', &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067f1cffff81004e2203213aa33fc947eae4bc0d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffe7ee0000000000000000", 0x58}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="10400000000000001a00128008001600767469000c000280080004007f000001"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 295.527304ms ago: executing program 4 (id=2559): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x9, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x26004090) 172.414484ms ago: executing program 1 (id=2560): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 87.676665ms ago: executing program 5 (id=2561): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone3(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 72.363475ms ago: executing program 0 (id=2562): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000010c0)={0xa, 0x4, 0x6, 0x8, 0x4, 0x1, 0x7, 0x9, 0x3, 0x0, 0x6, 0x69, 0x1, 0xc1}, 0xfedc) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5509, &(0x7f00000003c0)) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, 0x0) unshare(0x42040200) 0s ago: executing program 1 (id=2563): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000775) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "1cb3"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @global=@item_4={0x3, 0x1, 0xa, "9986102b"}]}}, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, 0x0) r7 = getpgrp(0x0) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r7}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xffffffec, 0x294, 0x40, 0x0, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe2, 0x1, 0x3}], "ee7188f57a7a48c0b16c6511ec9aff06384522eee5f591880d7e8a359bd321426ffe1a7527de84dc6a76a434221c198d9af29c2a9ed731ed0ca4a37ddbbb046efb2253315fe96153218b2f4f6663120b9eece508f0688b3511e7ee26d20bac310a3a51f5ebe02a95d2704d62df02"}, 0xe6) close(r0) execveat(r0, &(0x7f0000000140)='.\x00', 0x0, 0x0, 0x100) kernel console output (not intermixed with test programs): evice descriptor read/64, error -71 [ 534.971484][ T9] usb usb4-port1: attempt power cycle [ 535.011356][ T5887] usb 6-1: 0:2 : does not exist [ 535.045649][ T5887] usb 6-1: USB disconnect, device number 56 [ 535.351047][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 535.392577][ T9] usb 4-1: device descriptor read/8, error -71 [ 535.641018][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 535.661450][ T9] usb 4-1: device descriptor read/8, error -71 [ 535.771405][ T9] usb usb4-port1: unable to enumerate USB device [ 535.914729][ T30] audit: type=1326 audit(1747744299.846:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23675 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6bb8e969 code=0x7ffc0000 [ 535.963727][T23672] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 535.976872][T23672] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 536.067177][ T30] audit: type=1326 audit(1747744299.856:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23675 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6bb8e969 code=0x7ffc0000 [ 536.301027][ T30] audit: type=1326 audit(1747744299.896:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23675 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7faf6bb8e969 code=0x7ffc0000 [ 536.401063][ T30] audit: type=1326 audit(1747744299.896:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23675 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6bb8e969 code=0x7ffc0000 [ 536.452872][ T30] audit: type=1326 audit(1747744299.896:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23675 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6bb8e969 code=0x7ffc0000 [ 536.509941][ T30] audit: type=1326 audit(1747744299.896:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23675 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf6bb8e969 code=0x7ffc0000 [ 536.568736][ T30] audit: type=1326 audit(1747744299.896:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23675 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6bb8e969 code=0x7ffc0000 [ 536.622831][T23688] binder: 23610:23688 ioctl 4018620d 0 returned -22 [ 536.733385][T23688] binder: 23610:23688 ioctl c018620c 0 returned -14 [ 536.757665][ T30] audit: type=1326 audit(1747744299.896:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23675 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6bb8e969 code=0x7ffc0000 [ 537.421423][ T1223] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 537.580959][ T1223] usb 4-1: Using ep0 maxpacket: 16 [ 537.603983][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 537.637615][ T1223] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 537.706868][ T1223] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 537.719815][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.743345][ T1223] usb 4-1: config 0 descriptor?? [ 537.890143][ T5886] usb 2-1: USB disconnect, device number 9 [ 538.009368][ T1223] usbhid 4-1:0.0: can't add hid device: -71 [ 538.043364][T23736] FAULT_INJECTION: forcing a failure. [ 538.043364][T23736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.058167][T23736] CPU: 1 UID: 0 PID: 23736 Comm: syz.1.2075 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 538.058193][T23736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.058203][T23736] Call Trace: [ 538.058275][T23736] [ 538.058284][T23736] dump_stack_lvl+0x189/0x250 [ 538.058311][T23736] ? __lock_acquire+0xaac/0xd20 [ 538.058337][T23736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.058359][T23736] ? __pfx__printk+0x10/0x10 [ 538.058376][T23736] ? __might_fault+0xb0/0x130 [ 538.058410][T23736] should_fail_ex+0x414/0x560 [ 538.058435][T23736] _copy_from_user+0x2d/0xb0 [ 538.058457][T23736] input_event_from_user+0xb2/0x280 [ 538.058478][T23736] ? __pfx_input_event_from_user+0x10/0x10 [ 538.058500][T23736] ? input_inject_event+0xbc/0x320 [ 538.058525][T23736] evdev_write+0x2a6/0x480 [ 538.058548][T23736] ? __pfx_evdev_write+0x10/0x10 [ 538.058566][T23736] ? bpf_lsm_file_permission+0x9/0x20 [ 538.058586][T23736] ? security_file_permission+0x75/0x290 [ 538.058605][T23736] ? rw_verify_area+0x258/0x650 [ 538.058624][T23736] ? __pfx_evdev_write+0x10/0x10 [ 538.058642][T23736] vfs_write+0x27b/0xa90 [ 538.058670][T23736] ? __pfx_vfs_write+0x10/0x10 [ 538.058691][T23736] ? __fget_files+0x2a/0x420 [ 538.058715][T23736] ? __fget_files+0x2a/0x420 [ 538.058735][T23736] ? __fget_files+0x3a0/0x420 [ 538.058754][T23736] ? __fget_files+0x2a/0x420 [ 538.058784][T23736] ksys_write+0x145/0x250 [ 538.058802][T23736] ? rcu_is_watching+0x15/0xb0 [ 538.058820][T23736] ? __pfx_ksys_write+0x10/0x10 [ 538.058843][T23736] ? do_syscall_64+0xba/0x210 [ 538.058873][T23736] do_syscall_64+0xf6/0x210 [ 538.058893][T23736] ? clear_bhb_loop+0x60/0xb0 [ 538.058915][T23736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.058932][T23736] RIP: 0033:0x7fbc3578e969 [ 538.058948][T23736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.058963][T23736] RSP: 002b:00007fbc3662a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.058983][T23736] RAX: ffffffffffffffda RBX: 00007fbc359b5fa0 RCX: 00007fbc3578e969 [ 538.058996][T23736] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 538.059008][T23736] RBP: 00007fbc3662a090 R08: 0000000000000000 R09: 0000000000000000 [ 538.059019][T23736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.059030][T23736] R13: 0000000000000000 R14: 00007fbc359b5fa0 R15: 00007fbc35adfa28 [ 538.059059][T23736] [ 538.302925][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.311258][ T1223] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 538.378223][ T1223] usb 4-1: USB disconnect, device number 3 [ 538.514353][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2076'. [ 538.527560][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2076'. [ 538.541567][T23747] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.550577][T23747] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.559391][T23747] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.568130][T23747] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.391047][ T5894] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 539.401115][ T5886] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 539.542471][T23788] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[23788] [ 539.570407][T23788] dns_resolver: Unsupported server list version (0) [ 539.586915][ T5894] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 539.623320][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 539.643787][ T5886] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 539.675973][ T5894] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 539.708623][ T5894] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.727444][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.731199][ T24] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 539.761210][ T5886] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 539.780658][ T5886] usb 2-1: config 1 has no interface number 1 [ 539.804103][ T5886] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 539.830513][ T5894] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.873523][ T5886] usb 2-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 539.919919][ T5886] usb 2-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 539.933934][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 539.991513][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.027392][ T5894] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 540.040563][ T5886] usb 2-1: config 1 interface 2 has no altsetting 0 [ 540.054673][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 540.059199][T23769] delete_channel: no stack [ 540.091950][ T5894] usb 6-1: USB disconnect, device number 57 [ 540.169699][ T5886] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 540.190305][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 540.207593][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.221165][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.254101][ T24] usb 5-1: Product: syz [ 540.260030][ T5886] usb 2-1: Product: syz [ 540.274563][ T24] usb 5-1: Manufacturer: syz [ 540.279349][ T5886] usb 2-1: Manufacturer: syz [ 540.323440][ T24] usb 5-1: SerialNumber: syz [ 540.329007][ T5886] usb 2-1: SerialNumber: syz [ 540.418028][ T24] usb 5-1: config 0 descriptor?? [ 540.765135][T23824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.789851][T23824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.200130][ T5886] usb 2-1: 0:8 : does not exist [ 542.209458][ T9] usb 5-1: USB disconnect, device number 91 [ 542.269507][ T5886] usb 2-1: USB disconnect, device number 10 [ 542.410752][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.721104][ T5886] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 543.038369][T23912] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 543.057436][T23913] binder: BINDER_SET_CONTEXT_MGR already set [ 543.071796][T23913] binder: 23911:23913 ioctl 4018620d 200000000040 returned -16 [ 543.162888][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 543.212833][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.271095][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.335542][ T5886] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 543.350814][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.368849][ T5886] usb 2-1: config 0 descriptor?? [ 543.641173][ T5926] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 543.801081][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 543.838272][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.871253][ T5926] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 543.897170][ T5886] cherry 0003:046A:0027.001C: unknown global tag 0xe [ 543.916073][ T5926] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 543.930945][ T5886] cherry 0003:046A:0027.001C: item 0 0 1 14 parsing failed [ 543.947258][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.974163][ T5886] cherry 0003:046A:0027.001C: probe with driver cherry failed with error -22 [ 543.991606][ T5926] usb 6-1: Product: syz [ 543.995948][ T5926] usb 6-1: Manufacturer: syz [ 544.003186][ T5926] usb 6-1: SerialNumber: syz [ 544.028869][ T5926] usb 6-1: config 0 descriptor?? [ 544.102853][T23943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 544.142619][ T5926] usb 2-1: USB disconnect, device number 11 [ 545.608350][T24031] netlink: 'syz.3.2115': attribute type 27 has an invalid length. [ 545.734479][T24033] binder: 23917:24033 ioctl 4018620d 0 returned -22 [ 545.779840][T24031] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.787085][T24031] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.818579][T24035] binder: 23917:24035 ioctl c018620c 0 returned -14 [ 546.217832][T24031] batadv_slave_0: left promiscuous mode [ 546.236848][T24031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.455850][T24031] vlan0: left promiscuous mode [ 546.505000][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2117'. [ 546.762777][T24046] loop2: detected capacity change from 0 to 7 [ 546.794924][T24046] loop2: [ 546.811303][T24046] loop2: partition table partially beyond EOD, truncated [ 546.960077][ T5886] usb 6-1: USB disconnect, device number 58 [ 547.003761][T24031] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.042261][T24031] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.074061][T24031] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.090572][T24031] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.104266][T24067] netlink: 440 bytes leftover after parsing attributes in process `syz.4.2122'. [ 547.168494][T24031] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 547.289321][T24031] bridge2: left promiscuous mode [ 547.510299][T24080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2125'. [ 547.535690][T24032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.550285][T24032] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.579476][T24032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.061207][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 548.074351][T24104] input: syz0 as /devices/virtual/input/input48 [ 548.251023][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 548.264590][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 548.303598][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.334482][ T9] usb 4-1: Product: syz [ 548.356666][ T9] usb 4-1: Manufacturer: syz [ 548.405122][ T9] usb 4-1: SerialNumber: syz [ 548.452203][ T9] usb 4-1: config 0 descriptor?? [ 548.499701][ T9] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 548.503443][T24130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2133'. [ 548.694156][ T1223] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 548.702072][ T9] ssu100 4-1:0.0: probe with driver ssu100 failed with error -32 [ 548.737866][ T24] usb 4-1: USB disconnect, device number 4 [ 548.870996][ T1223] usb 6-1: Using ep0 maxpacket: 8 [ 548.887835][ T1223] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.903411][ T1223] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 548.915842][ T1223] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 548.930048][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.952527][ T1223] usb 6-1: Product: syz [ 548.962658][ T1223] usb 6-1: Manufacturer: syz [ 548.974396][ T1223] usb 6-1: SerialNumber: syz [ 548.989966][ T1223] usb 6-1: config 0 descriptor?? [ 550.071147][ T5926] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 550.231175][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 550.259105][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.287749][ T5926] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 550.304399][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.328870][ T5926] usb 5-1: Product: syz [ 550.340420][ T5926] usb 5-1: Manufacturer: syz [ 550.354392][ T5926] usb 5-1: SerialNumber: syz [ 550.402186][ T5926] usb 5-1: config 0 descriptor?? [ 550.430647][ T5926] em28xx 5-1:0.0: audio device (2040:0264): interface 0, class 1 [ 550.670708][T24194] binder: 24111:24194 ioctl 4018620d 0 returned -22 [ 550.721848][T24180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.739840][T24180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.749557][T24198] binder: 24111:24198 ioctl c018620c 0 returned -14 [ 550.807675][ T5926] usb 5-1: USB disconnect, device number 92 [ 551.866192][ T5926] usb 6-1: USB disconnect, device number 59 [ 552.201408][ T1223] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 552.360999][ T1223] usb 5-1: Using ep0 maxpacket: 16 [ 552.368343][ T1223] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 552.380517][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 552.395167][ T1223] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 552.409686][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.439727][T24275] FAULT_INJECTION: forcing a failure. [ 552.439727][T24275] name failslab, interval 1, probability 0, space 0, times 0 [ 552.462192][T24275] CPU: 0 UID: 0 PID: 24275 Comm: syz.3.2157 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 552.462216][T24275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.462226][T24275] Call Trace: [ 552.462234][T24275] [ 552.462242][T24275] dump_stack_lvl+0x189/0x250 [ 552.462273][T24275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.462296][T24275] ? __pfx__printk+0x10/0x10 [ 552.462321][T24275] ? __pfx___might_resched+0x10/0x10 [ 552.462338][T24275] ? fs_reclaim_acquire+0x7d/0x100 [ 552.462366][T24275] should_fail_ex+0x414/0x560 [ 552.462391][T24275] should_failslab+0xa8/0x100 [ 552.462415][T24275] __kmalloc_noprof+0xcb/0x4f0 [ 552.462435][T24275] ? kfree+0x4d/0x440 [ 552.462452][T24275] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 552.462479][T24275] tomoyo_realpath_from_path+0xe3/0x5d0 [ 552.462502][T24275] ? tomoyo_domain+0xda/0x130 [ 552.462530][T24275] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 552.462549][T24275] tomoyo_path_number_perm+0x1e8/0x5a0 [ 552.462571][T24275] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 552.462608][T24275] ? __lock_acquire+0xaac/0xd20 [ 552.462659][T24275] ? __fget_files+0x2a/0x420 [ 552.462684][T24275] ? __fget_files+0x3a0/0x420 [ 552.462702][T24275] ? __fget_files+0x2a/0x420 [ 552.462726][T24275] security_file_ioctl+0xcb/0x2d0 [ 552.462747][T24275] __se_sys_ioctl+0x47/0x170 [ 552.462770][T24275] do_syscall_64+0xf6/0x210 [ 552.462793][T24275] ? clear_bhb_loop+0x60/0xb0 [ 552.462816][T24275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.462833][T24275] RIP: 0033:0x7f787958e969 [ 552.462851][T24275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.462866][T24275] RSP: 002b:00007f787a3bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.462885][T24275] RAX: ffffffffffffffda RBX: 00007f78797b6160 RCX: 00007f787958e969 [ 552.462898][T24275] RDX: 00002000000000c0 RSI: 00000000400454d1 RDI: 0000000000000005 [ 552.462910][T24275] RBP: 00007f787a3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 552.462921][T24275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.462932][T24275] R13: 0000000000000000 R14: 00007f78797b6160 R15: 00007f78798dfa28 [ 552.462959][T24275] [ 552.462989][T24275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 552.692827][ T1223] usb 5-1: Product: syz [ 552.697003][ T1223] usb 5-1: Manufacturer: syz [ 552.702459][ T1223] usb 5-1: SerialNumber: syz [ 552.714545][ T1223] usb 5-1: config 0 descriptor?? [ 552.758898][ T1223] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 552.795992][ T1223] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 553.370625][ T1223] em28xx 5-1:0.0: chip ID is em2800 [ 553.421048][ T24] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 553.587282][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 553.616090][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.621021][T24248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.635117][ T24] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 553.637869][T24248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.687091][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.732124][ T24] usb 6-1: config 0 descriptor?? [ 553.850769][ T1223] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 553.877995][ T1223] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 553.889071][ T1223] em28xx 5-1:0.0: No AC97 audio processor [ 553.930662][ T1223] usb 5-1: USB disconnect, device number 93 [ 553.995847][ T1223] em28xx 5-1:0.0: Disconnecting em28xx [ 554.022453][ T1223] em28xx 5-1:0.0: Freeing device [ 554.384082][T24328] xt_TCPMSS: Only works on TCP SYN packets [ 554.441097][ T5926] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 554.547651][T24285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.558055][T24285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.611025][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 554.627358][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.640027][ T5926] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.657807][ T5926] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 554.667580][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.691497][ T5926] usb 2-1: Product: syz [ 554.718868][ T5926] usb 2-1: Manufacturer: syz [ 554.732103][ T5926] usb 2-1: SerialNumber: syz [ 554.748826][ T5926] usb 2-1: config 0 descriptor?? [ 554.777533][ T5886] hid-generic 0000:0000:0000.001D: unknown main item tag 0x7 [ 554.800727][ T5886] hid-generic 0000:0000:0000.001D: ignoring exceeding usage max [ 554.810108][ T5886] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 554.818361][ T5886] hid-generic 0000:0000:0000.001D: unknown main item tag 0x6 [ 554.827000][ T5886] hid-generic 0000:0000:0000.001D: reserved main item tag 0xd [ 554.846811][ T5886] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 554.861010][ T1223] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 555.061394][ T1223] usb 5-1: Using ep0 maxpacket: 8 [ 555.084594][ T1223] usb 5-1: config index 0 descriptor too short (expected 33930, got 45) [ 555.104416][ T1223] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 168 [ 555.128729][ T1223] usb 5-1: can't read configurations, error -22 [ 555.291122][ T1223] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 555.471021][ T1223] usb 5-1: Using ep0 maxpacket: 8 [ 555.478075][ T1223] usb 5-1: config index 0 descriptor too short (expected 33930, got 45) [ 555.486593][ T1223] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 168 [ 555.495415][ T1223] usb 5-1: can't read configurations, error -22 [ 555.512086][ T1223] usb usb5-port1: attempt power cycle [ 555.699592][T24370] netlink: 368 bytes leftover after parsing attributes in process `syz.0.2170'. [ 555.830723][T24370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.844936][T24370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.858801][T24370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.868915][T24370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.878145][ T1223] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 555.890474][T24370] geneve2: entered promiscuous mode [ 555.896917][T24370] geneve2: entered allmulticast mode [ 555.906385][ T1223] usb 5-1: Using ep0 maxpacket: 8 [ 555.913482][ T1223] usb 5-1: config index 0 descriptor too short (expected 33930, got 45) [ 555.925584][ T1223] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 168 [ 555.934521][ T1223] usb 5-1: can't read configurations, error -22 [ 556.084909][ T1223] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 556.111750][ T1223] usb 5-1: Using ep0 maxpacket: 8 [ 556.120162][ T1223] usb 5-1: config index 0 descriptor too short (expected 33930, got 45) [ 556.132551][ T1223] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 168 [ 556.146038][ T1223] usb 5-1: can't read configurations, error -22 [ 556.155097][ T1223] usb usb5-port1: unable to enumerate USB device [ 556.319709][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 556.356978][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 556.381370][ T24] usb 6-1: USB disconnect, device number 60 [ 556.462488][T24392] binder: 24314:24392 ioctl 4018620d 0 returned -22 [ 556.566245][T24393] binder: 24314:24393 ioctl c018620c 0 returned -14 [ 556.678019][T24370] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.691452][T24370] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.705495][T24370] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.719781][T24370] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.901000][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 557.051071][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 557.059124][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 557.068318][ T9] usb 4-1: can't read configurations, error -61 [ 557.130580][T24416] fuse: Unknown parameter 'root' [ 557.211096][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 557.371657][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 557.385409][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 557.406018][ T9] usb 4-1: can't read configurations, error -61 [ 557.420715][ T9] usb usb4-port1: attempt power cycle [ 557.683020][ T1223] usb 2-1: USB disconnect, device number 12 [ 557.781590][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 557.806229][T24430] loop2: detected capacity change from 0 to 7 [ 557.816478][T24430] loop2: p1 [ 557.821646][T24430] loop2: partition table partially beyond EOD, truncated [ 557.830186][T24430] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 557.836371][ T30] audit: type=1326 audit(1747744321.766:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24429 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 557.892414][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 557.906264][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 557.915592][ T9] usb 4-1: can't read configurations, error -61 [ 557.956795][ T30] audit: type=1326 audit(1747744321.766:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24429 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 557.999516][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 558.052172][ T30] audit: type=1326 audit(1747744321.786:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24429 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 558.085637][ T30] audit: type=1326 audit(1747744321.786:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24429 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 558.112035][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 558.134408][ T30] audit: type=1326 audit(1747744321.786:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24429 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 558.160571][ T30] audit: type=1326 audit(1747744321.826:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24429 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 558.182968][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.190739][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 558.197923][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 558.206066][ T9] usb 4-1: can't read configurations, error -61 [ 558.213021][ T9] usb usb4-port1: unable to enumerate USB device [ 558.220760][ T30] audit: type=1326 audit(1747744321.826:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24429 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 558.247727][ T30] audit: type=1326 audit(1747744321.826:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24429 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 558.270077][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.335904][ T30] audit: type=1326 audit(1747744321.826:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24429 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 558.369144][ T30] audit: type=1326 audit(1747744321.826:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24429 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 558.602227][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 558.761990][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 558.778725][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 558.787554][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 558.797393][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.805700][ T9] usb 6-1: Product: syz [ 558.810005][ T9] usb 6-1: Manufacturer: syz [ 558.814676][ T9] usb 6-1: SerialNumber: syz [ 558.821387][ T9] usb 6-1: config 0 descriptor?? [ 559.029805][ T9] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 559.037282][ T9] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 559.171286][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 559.338834][T24482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.363722][ T24] usb 2-1: config 2 has an invalid interface number: 246 but max is 3 [ 559.395558][ T24] usb 2-1: config 2 has an invalid interface number: 139 but max is 3 [ 559.437102][T24495] FAULT_INJECTION: forcing a failure. [ 559.437102][T24495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.461244][T24495] CPU: 0 UID: 0 PID: 24495 Comm: syz.3.2189 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 559.461271][T24495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.461282][T24495] Call Trace: [ 559.461290][T24495] [ 559.461299][T24495] dump_stack_lvl+0x189/0x250 [ 559.461325][T24495] ? __lock_acquire+0xaac/0xd20 [ 559.461351][T24495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.461372][T24495] ? __pfx__printk+0x10/0x10 [ 559.461389][T24495] ? __might_fault+0xb0/0x130 [ 559.461423][T24495] should_fail_ex+0x414/0x560 [ 559.461448][T24495] _copy_from_user+0x2d/0xb0 [ 559.461472][T24495] input_event_from_user+0xb2/0x280 [ 559.461493][T24495] ? __pfx_input_event_from_user+0x10/0x10 [ 559.461515][T24495] ? input_inject_event+0xbc/0x320 [ 559.461541][T24495] evdev_write+0x2a6/0x480 [ 559.461565][T24495] ? __pfx_evdev_write+0x10/0x10 [ 559.461584][T24495] ? bpf_lsm_file_permission+0x9/0x20 [ 559.461604][T24495] ? security_file_permission+0x75/0x290 [ 559.461623][T24495] ? rw_verify_area+0x258/0x650 [ 559.461642][T24495] ? __pfx_evdev_write+0x10/0x10 [ 559.461661][T24495] vfs_write+0x27b/0xa90 [ 559.461690][T24495] ? __pfx_vfs_write+0x10/0x10 [ 559.461712][T24495] ? __fget_files+0x2a/0x420 [ 559.461735][T24495] ? __fget_files+0x2a/0x420 [ 559.461754][T24495] ? __fget_files+0x3a0/0x420 [ 559.461773][T24495] ? __fget_files+0x2a/0x420 [ 559.461806][T24495] ksys_write+0x145/0x250 [ 559.461824][T24495] ? rcu_is_watching+0x15/0xb0 [ 559.461843][T24495] ? __pfx_ksys_write+0x10/0x10 [ 559.461866][T24495] ? do_syscall_64+0xba/0x210 [ 559.461893][T24495] do_syscall_64+0xf6/0x210 [ 559.461914][T24495] ? clear_bhb_loop+0x60/0xb0 [ 559.461935][T24495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.461953][T24495] RIP: 0033:0x7f787958e969 [ 559.461969][T24495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.461989][T24495] RSP: 002b:00007f787a3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 559.462008][T24495] RAX: ffffffffffffffda RBX: 00007f78797b5fa0 RCX: 00007f787958e969 [ 559.462022][T24495] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 559.462034][T24495] RBP: 00007f787a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 559.462046][T24495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.462057][T24495] R13: 0000000000000000 R14: 00007f78797b5fa0 R15: 00007f78798dfa28 [ 559.462084][T24495] [ 559.462091][ T24] usb 2-1: config 2 has an invalid interface number: 89 but max is 3 [ 559.716287][ T24] usb 2-1: config 2 has an invalid interface number: 203 but max is 3 [ 559.728359][ T24] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 559.754036][ T24] usb 2-1: config 2 has no interface number 0 [ 559.769739][ T24] usb 2-1: config 2 has no interface number 1 [ 559.776925][ T24] usb 2-1: config 2 has no interface number 2 [ 559.783683][ T24] usb 2-1: config 2 has no interface number 3 [ 559.789944][ T24] usb 2-1: config 2 interface 246 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 559.817097][ T24] usb 2-1: config 2 interface 246 altsetting 5 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 559.832276][ T24] usb 2-1: config 2 interface 246 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 1023 [ 559.842893][ T24] usb 2-1: config 2 interface 139 altsetting 9 endpoint 0x8 has invalid maxpacket 6645, setting to 1024 [ 559.854461][ T24] usb 2-1: config 2 interface 139 altsetting 9 bulk endpoint 0x8 has invalid maxpacket 1024 [ 559.865891][ T24] usb 2-1: config 2 interface 139 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 559.877529][ T24] usb 2-1: config 2 interface 139 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 559.888826][ T24] usb 2-1: config 2 interface 139 altsetting 9 bulk endpoint 0x7 has invalid maxpacket 16 [ 559.899145][ T24] usb 2-1: config 2 interface 139 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 559.911034][ T24] usb 2-1: config 2 interface 139 altsetting 9 endpoint 0xB has invalid maxpacket 536, setting to 64 [ 559.922378][ T24] usb 2-1: config 2 interface 139 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 559.935714][ T24] usb 2-1: config 2 interface 203 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 559.949250][ T24] usb 2-1: config 2 interface 246 has no altsetting 0 [ 559.959356][ T24] usb 2-1: config 2 interface 139 has no altsetting 0 [ 559.969537][ T24] usb 2-1: config 2 interface 89 has no altsetting 0 [ 559.979579][ T24] usb 2-1: config 2 interface 203 has no altsetting 0 [ 559.993601][ T24] usb 2-1: New USB device found, idVendor=0840, idProduct=0082, bcdDevice= 0.01 [ 560.010086][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.020215][ T24] usb 2-1: Product: ࠒ [ 560.028340][ T24] usb 2-1: Manufacturer: 꿥箭❌㢶⒠婊ⳋ橙齂诿쾝䷉뽰귏쑈致ꃖ乮魙任ﲈ﯍䭁겖豍퉤펫멗ぴ☚욬 [ 560.042845][ T24] usb 2-1: SerialNumber: syz [ 560.052440][T24471] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 560.296073][ T24] usb-storage 2-1:2.246: USB Mass Storage device detected [ 560.331490][ T24] usb-storage 2-1:2.246: Quirks match for vid 0840 pid 0082: 10 [ 560.399943][T24516] loop2: detected capacity change from 0 to 7 [ 560.413841][ T24] usb-storage 2-1:2.139: USB Mass Storage device detected [ 560.418162][ T6305] loop2: p1 [ 560.431344][ T6305] loop2: partition table partially beyond EOD, truncated [ 560.443091][ T24] usb-storage 2-1:2.139: Quirks match for vid 0840 pid 0082: 10 [ 560.457833][ T6305] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 560.473534][T24516] loop2: p1 [ 560.476960][T24516] loop2: partition table partially beyond EOD, truncated [ 560.484917][T24516] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 560.519490][ T24] usb-storage 2-1:2.89: USB Mass Storage device detected [ 560.554905][ T24] usb-storage 2-1:2.89: Quirks match for vid 0840 pid 0082: 10 [ 560.647946][ T6305] udevd[6305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 560.662052][ T24] usb-storage 2-1:2.203: USB Mass Storage device detected [ 560.699307][ T24] usb-storage 2-1:2.203: Quirks match for vid 0840 pid 0082: 10 [ 560.701178][ T6305] udevd[6305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 560.742455][T24556] fuse: Bad value for 'fd' [ 560.764151][ T24] usb 2-1: USB disconnect, device number 13 [ 560.911632][ T9] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 561.071022][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 561.078111][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.089258][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.100735][ T9] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 561.112165][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.123220][ T9] usb 5-1: config 0 descriptor?? [ 561.357382][ T5894] usb 6-1: USB disconnect, device number 61 [ 561.535956][ T9] hid (null): unknown global tag 0x9c [ 561.554532][ T9] hid (null): report_id 15679 is invalid [ 561.578698][ T9] hid (null): invalid report_size 39531 [ 561.601966][ T9] hid (null): invalid report_count 16579 [ 561.611894][ T9] hid (null): unknown global tag 0xe [ 561.617320][ T9] hid (null): unknown global tag 0xe [ 561.623541][ T9] hid (null): unknown global tag 0x4c [ 561.639492][T24594] loop2: detected capacity change from 0 to 7 [ 561.652414][ T5937] loop2: [ 561.655709][ T5937] loop2: partition table partially beyond EOD, truncated [ 561.682007][T24594] loop2: [ 561.691376][T24594] loop2: partition table partially beyond EOD, truncated [ 561.925538][T24607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'. [ 561.946109][T24607] netlink: 'syz.3.2200': attribute type 2 has an invalid length. [ 562.027554][T24613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2201'. [ 562.036903][T24613] tipc: Started in network mode [ 562.042877][T24613] tipc: Node identity 2, cluster identity 4711 [ 562.050099][T24613] tipc: Node number set to 2 [ 562.394300][ T5894] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 562.540239][ T9] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 562.567267][ T9] letsketch 0003:6161:4D15.001E: probe with driver letsketch failed with error -71 [ 562.579092][ T5894] usb 4-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 562.610188][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.632166][ T9] usb 5-1: USB disconnect, device number 98 [ 562.670034][ T5894] usb 4-1: config 0 descriptor?? [ 562.703915][ T5894] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 562.745969][ T5894] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input50 [ 562.887554][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2206'. [ 563.016051][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.023710][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.117879][T24666] loop2: detected capacity change from 0 to 7 [ 563.167210][T24666] loop2: [ 563.175792][T24666] loop2: partition table partially beyond EOD, truncated [ 563.791202][ T5886] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 564.041025][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 564.099253][ T5886] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 564.194612][ T5886] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 564.243637][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.260750][ T5886] usb 5-1: Product: syz [ 564.265104][ T5886] usb 5-1: Manufacturer: syz [ 564.270635][ T5886] usb 5-1: SerialNumber: syz [ 564.298411][ T5886] usb 5-1: config 0 descriptor?? [ 564.334750][ T5886] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 564.346677][ T5886] usb 5-1: setting power ON [ 564.354039][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 564.386972][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 564.408769][ T5886] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 564.417830][ T5886] usb 5-1: media controller created [ 564.423669][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 564.478293][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 564.528290][ T5886] usb 5-1: selecting invalid altsetting 6 [ 564.537092][ T5886] usb 5-1: digital interface selection failed (-22) [ 564.553633][T24677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.589376][ T5886] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 564.606821][T24677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.607806][ T5886] usb 5-1: setting power OFF [ 564.627050][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 564.633532][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 564.639570][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 564.654063][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.664535][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.674163][ T5886] (NULL device *): no alternate interface [ 564.686277][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 564.701722][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.714170][ T24] usb 6-1: Product: syz [ 564.727368][ T24] usb 6-1: Manufacturer: syz [ 564.737192][ T24] usb 6-1: SerialNumber: syz [ 564.752815][ T24] usb 6-1: config 0 descriptor?? [ 564.787686][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 564.809707][ T5886] usb 5-1: USB disconnect, device number 99 [ 564.961965][ T24] usb 4-1: USB disconnect, device number 9 [ 565.565910][T24761] loop2: detected capacity change from 0 to 7 [ 565.575703][T24761] loop2: [ 565.578790][T24761] loop2: partition table partially beyond EOD, truncated [ 565.601765][ T24] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 565.772658][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.790682][T24777] bond2: entered promiscuous mode [ 565.796072][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.801896][T24777] bond2: entered allmulticast mode [ 565.806845][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.819331][T24777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.824811][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.840131][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.856449][ T24] usb 5-1: config 0 descriptor?? [ 565.951110][ T5894] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 566.103966][ T5894] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 566.126133][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.144214][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.161366][ T5894] usb 2-1: Product: Ф [ 566.170755][ T5894] usb 2-1: Manufacturer: 盥⚖눑䖄莐쐗鍝ꧩ簱湁㡇썹勵錭䆮༚폭食꽂枧뛾힐낵┄ﰥ㢴뾘溨轃鋥띕곭垪액昅ꪊ塕㡁೻렶謱ゔ匯즲ᴂꗄ䒨빾㾃뮰㓵塜爏鏶疖⋳龖蒰ﰙ扸㫡伤曢葠픺樉蘕噃穱캿樄쯰몫形栌⑳໨㿕㾧춘Ž乃ᅌ鍌빇஡쇭픲ᒐ퉮ㅋꉴ腕蘶蹗氹公餥厗 [ 566.247384][ T5894] usb 2-1: SerialNumber: 뒊蘅ᶀ琸ꮣ픜鉳৸믫鴞멚늫৩갠成⽠ೲ彜挀뻮퇮໾曟꛷ퟎ닉ᝣ䲜迫굦秃⭿ª觏眇䡐㬌≼撏㗁嵐ꧧ⼌呾ꍆ᧭穖崍嵰揲ἄʋऊ짔픿痿鄚ᱴ⳦紸䨽ㅖ㔬⚔拺ﳐ딱㟭湆뷖銃膌罂츇닇枔ꢊ階愥퇉읗ﱮࣣ䠊ⰾ煎 [ 566.282411][ T24] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 566.316690][ T24] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 566.408475][T24826] binder: 24688:24826 ioctl 4018620d 0 returned -22 [ 566.493133][T24827] binder: 24688:24827 ioctl c018620c 0 returned -14 [ 566.713992][T24771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.726906][T24771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.769685][ T5894] cdc_ncm 2-1:1.0: bind() failure [ 566.797650][ T5894] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 566.815371][ T5894] cdc_ncm 2-1:1.1: bind() failure [ 566.840053][ T5894] usb 2-1: USB disconnect, device number 14 [ 566.891734][ T9] usb 5-1: USB disconnect, device number 100 [ 567.486391][T24872] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2227'. [ 567.498932][T24872] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2227'. [ 567.587750][ T5894] usb 6-1: USB disconnect, device number 62 [ 567.791326][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 567.963107][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 568.156277][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.214149][ T9] usb 5-1: config 0 descriptor?? [ 568.458731][ T9] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 568.507830][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 568.659431][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 568.819015][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 568.846268][ T9] [drm] Initialized udl on minor 2 [ 568.864216][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 568.893125][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 568.941331][ T9] usb 5-1: USB disconnect, device number 101 [ 568.947797][ T1223] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 568.972934][ T1223] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 569.421274][ T1223] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 569.613954][ T1223] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 569.637709][ T1223] usb 2-1: config 0 interface 0 has no altsetting 0 [ 569.658009][ T1223] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 569.691080][ T1223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.754630][ T1223] usb 2-1: config 0 descriptor?? [ 569.774205][T24916] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 569.819370][T24934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2232'. [ 570.224407][ T1223] konepure 0003:1E7D:2DBE.0020: unknown main item tag 0x0 [ 570.259683][ T1223] konepure 0003:1E7D:2DBE.0020: unknown main item tag 0x0 [ 570.343772][ T1223] konepure 0003:1E7D:2DBE.0020: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 570.407338][T24916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.464779][T24916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.525118][ T5926] usb 2-1: USB disconnect, device number 15 [ 570.623238][T24989] fido_id[24989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 570.684876][T25013] loop2: detected capacity change from 0 to 7 [ 570.722720][T25013] loop2: [ 570.732952][T25013] loop2: partition table partially beyond EOD, truncated [ 570.781962][ T1223] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 570.941172][ T1223] usb 6-1: Using ep0 maxpacket: 8 [ 570.950400][ T1223] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.988762][ T1223] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 571.016772][ T1223] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 571.038647][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.053339][ T1223] usb 6-1: Product: syz [ 571.057688][ T1223] usb 6-1: Manufacturer: syz [ 571.062482][ T1223] usb 6-1: SerialNumber: syz [ 571.109976][ T1223] usb 6-1: config 0 descriptor?? [ 571.395660][T25049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.441421][ T5894] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 572.547769][T25080] loop2: detected capacity change from 0 to 7 [ 572.558125][ T5937] loop2: [ 572.562669][ T5937] loop2: partition table partially beyond EOD, truncated [ 572.580140][T25080] loop2: [ 572.583497][T25080] loop2: partition table partially beyond EOD, truncated [ 572.594962][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.615589][ T5894] usb 4-1: config 0 has no interfaces? [ 572.630132][ T5894] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 572.656277][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.696313][ T5894] usb 4-1: config 0 descriptor?? [ 572.773833][T25091] binder: 24986:25091 ioctl 4018620d 0 returned -22 [ 572.838747][T25092] binder: 24986:25092 ioctl c018620c 0 returned -14 [ 572.976549][ T5894] usb 4-1: USB disconnect, device number 10 [ 573.531121][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 573.701935][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 573.747690][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 573.815434][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 573.847108][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 573.901278][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.930373][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.947295][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.027021][ T1223] usb 6-1: USB disconnect, device number 63 [ 574.343074][T25132] syzkaller1: entered promiscuous mode [ 574.356581][T25132] syzkaller1: entered allmulticast mode [ 574.455843][ T24] usb 2-1: usb_control_msg returned -71 [ 574.493180][ T24] usbtmc 2-1:16.0: can't read capabilities [ 574.530110][ T24] usb 2-1: USB disconnect, device number 16 [ 574.713739][T25173] loop2: detected capacity change from 0 to 7 [ 574.725689][T25173] loop2: [ 574.728700][T25173] loop2: partition table partially beyond EOD, truncated [ 575.183589][T25202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2270'. [ 575.203191][T25202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2270'. [ 575.501287][ T5894] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 575.711002][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 575.722735][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.751792][ T5894] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 575.764669][ T5894] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 575.804567][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.831123][ T5894] usb 4-1: Product: syz [ 575.835415][ T5894] usb 4-1: Manufacturer: syz [ 575.845547][ T5894] usb 4-1: SerialNumber: syz [ 575.856845][ T5894] usb 4-1: config 0 descriptor?? [ 575.937649][T25225] ptrace attach of "./syz-executor exec"[8897] was attempted by "./syz-executor exec"[25225] [ 575.963666][T25225] dns_resolver: Unsupported server list version (0) [ 576.104400][T25235] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[25235] [ 576.117245][T25235] dns_resolver: Unsupported server list version (0) [ 576.819802][T25240] loop2: detected capacity change from 0 to 7 [ 576.826918][T25240] loop2: [ 576.830155][T25240] loop2: partition table partially beyond EOD, truncated [ 576.968072][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2277'. [ 577.505367][T25287] binder: 25195:25287 ioctl 4018620d 0 returned -22 [ 577.570718][T25288] binder: 25195:25288 ioctl c018620c 0 returned -14 [ 578.584520][T25296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'. [ 578.616755][T25296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2282'. [ 578.672016][ T1223] usb 4-1: USB disconnect, device number 11 [ 579.134982][T25330] loop2: detected capacity change from 0 to 7 [ 579.205643][ T5937] loop2: [ 579.213721][ T5937] loop2: partition table partially beyond EOD, truncated [ 579.235055][T25330] loop2: [ 579.321093][T25330] loop2: partition table partially beyond EOD, truncated [ 579.763937][T25351] fuse: Unknown parameter '' [ 579.769448][T25350] fuse: Unknown parameter 'user_/dev/fuse' [ 580.241073][ T1223] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 580.503566][ T1223] usb 5-1: Using ep0 maxpacket: 16 [ 580.518451][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.558353][ T1223] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 580.585605][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.602752][ T1223] usb 5-1: config 0 descriptor?? [ 580.637334][T25391] netlink: 'syz.5.2296': attribute type 1 has an invalid length. [ 580.651113][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 580.690211][T25391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.770098][T25407] bond0: (slave gretap1): making interface the new active one [ 580.780424][T25407] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 580.811081][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 580.818854][ T24] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 580.827380][ T24] usb 2-1: config 1 has no interface number 0 [ 580.833777][ T24] usb 2-1: config 1 interface 242 has no altsetting 0 [ 580.843659][ T24] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 580.853605][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.866191][ T24] usb 2-1: Product: syz [ 580.870497][ T24] usb 2-1: Manufacturer: syz [ 580.876233][ T24] usb 2-1: SerialNumber: syz [ 580.999168][T25441] input: syz0 as /devices/virtual/input/input51 [ 581.042379][ T1223] aquacomputer_d5next 0003:0C70:F003.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0 [ 581.271816][ T1223] usb 5-1: USB disconnect, device number 102 [ 581.453954][T25472] netlink: 368 bytes leftover after parsing attributes in process `syz.3.2300'. [ 581.762857][T25474] program syz.5.2301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.774782][T25475] tipc: Started in network mode [ 581.786912][T25475] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 581.816634][T25475] tipc: Enabled bearer , priority 0 [ 582.031148][ T1223] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 582.137629][ T24] aqc111 2-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 582.158907][ T24] aqc111 2-1:1.242 eth5: register 'aqc111' at usb-dummy_hcd.1-1, Aquantia AQtion USB to 5GbE Controller, 4e:d7:06:bb:b5:1a [ 582.375849][ T24] usb 2-1: USB disconnect, device number 17 [ 582.437663][ T24] aqc111 2-1:1.242 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, Aquantia AQtion USB to 5GbE Controller [ 582.525260][ T1223] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 582.539815][ T1223] usb 6-1: config 0 has no interface number 0 [ 582.553064][ T1223] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 23328, setting to 64 [ 582.569453][ T1223] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 582.585395][ T24] aqc111 2-1:1.242 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 582.601315][ T24] aqc111 2-1:1.242 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 582.605063][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.621056][T25506] bridge_slave_1: left allmulticast mode [ 582.631503][ T24] aqc111 2-1:1.242 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 582.639234][ T1223] usb 6-1: Product: syz [ 582.651093][T25506] bridge_slave_1: left promiscuous mode [ 582.651826][ T1223] usb 6-1: Manufacturer: syz [ 582.659183][T25506] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.687435][ T1223] usb 6-1: SerialNumber: syz [ 582.708655][ T1223] usb 6-1: config 0 descriptor?? [ 582.817587][T25517] netlink: 440 bytes leftover after parsing attributes in process `syz.3.2304'. [ 582.935496][ T24] tipc: Node number set to 11578026 [ 583.082051][T25476] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 583.297590][ T24] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 583.473052][ T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 583.537443][ T24] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 583.567703][ T1223] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 583.597834][ T1223] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 583.628443][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.667963][ T24] usb 5-1: Product: syz [ 583.676894][ T1223] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 583.697886][ T1223] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 583.711636][ T24] usb 5-1: Manufacturer: syz [ 583.729615][ T24] usb 5-1: SerialNumber: syz [ 583.773818][ T1223] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 583.833203][ T1223] usb 6-1: USB disconnect, device number 64 [ 583.901385][ T1223] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 583.947501][ T1223] keyspan 6-1:0.133: device disconnected [ 583.954643][ T24] usb 5-1: selecting invalid altsetting 1 [ 584.025884][ T24] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 584.026002][ T24] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 584.072646][ T24] usb 5-1: USB disconnect, device number 103 [ 584.905341][T25614] loop2: detected capacity change from 0 to 7 [ 584.930217][T25614] loop2: [ 584.948247][T25614] loop2: partition table partially beyond EOD, truncated [ 585.141119][T25624] netlink: 368 bytes leftover after parsing attributes in process `syz.3.2313'. [ 585.251061][ T1223] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 585.418071][ T1223] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 585.434987][ T1223] usb 2-1: config 0 has no interface number 0 [ 585.449771][ T1223] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 585.508630][ T1223] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 585.538526][ T1223] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 585.559743][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.585436][ T1223] usb 2-1: Product: syz [ 585.596004][ T1223] usb 2-1: Manufacturer: syz [ 585.606318][ T1223] usb 2-1: SerialNumber: syz [ 585.626436][ T1223] usb 2-1: config 0 descriptor?? [ 585.761222][ T5894] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 585.913858][T25621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.923484][T25621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.938922][ T5894] usb 6-1: New USB device found, idVendor=270c, idProduct=930c, bcdDevice=8d.6a [ 585.953763][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.963749][ T5894] usb 6-1: Product: syz [ 585.968032][ T5894] usb 6-1: Manufacturer: syz [ 585.973712][ T5894] usb 6-1: SerialNumber: syz [ 585.992739][ T5894] usb 6-1: config 0 descriptor?? [ 586.012967][ T1223] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 586.046294][ T1223] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 586.085484][ T1223] usb 2-1: USB disconnect, device number 18 [ 586.451021][ T5886] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 586.616828][ T5886] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 586.626218][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.634587][ T5886] usb 5-1: Product: syz [ 586.640775][ T5886] usb 5-1: Manufacturer: syz [ 586.657753][ T5886] usb 5-1: SerialNumber: syz [ 586.681086][ T5886] usb 5-1: config 0 descriptor?? [ 586.777162][ T5835] Bluetooth: hci5: urb ffff8880313b1d00 submission failed (2) [ 586.844586][T25679] input: syz1 as /devices/virtual/input/input53 [ 586.919056][T25698] loop2: detected capacity change from 0 to 7 [ 586.933491][ T5937] loop2: p1 [ 586.937345][ T5937] loop2: partition table partially beyond EOD, truncated [ 586.954236][ T1223] usb 5-1: USB disconnect, device number 104 [ 586.960139][ T5937] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 587.027058][T25698] loop2: p1 [ 587.035434][T25698] loop2: partition table partially beyond EOD, truncated [ 587.045362][T25698] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 587.149223][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 587.193084][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 588.199491][T25774] netlink: 368 bytes leftover after parsing attributes in process `syz.4.2329'. [ 588.720622][T25774] geneve2: entered promiscuous mode [ 588.730486][T25774] geneve2: entered allmulticast mode [ 588.994371][ T5886] usb 6-1: USB disconnect, device number 65 [ 589.249557][T25808] FAULT_INJECTION: forcing a failure. [ 589.249557][T25808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.263613][T25808] CPU: 0 UID: 0 PID: 25808 Comm: syz.3.2334 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 589.263639][T25808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 589.263650][T25808] Call Trace: [ 589.263658][T25808] [ 589.263667][T25808] dump_stack_lvl+0x189/0x250 [ 589.263694][T25808] ? __lock_acquire+0xaac/0xd20 [ 589.263721][T25808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.263744][T25808] ? __pfx__printk+0x10/0x10 [ 589.263762][T25808] ? __might_fault+0xb0/0x130 [ 589.263794][T25808] should_fail_ex+0x414/0x560 [ 589.263819][T25808] _copy_from_user+0x2d/0xb0 [ 589.263842][T25808] ___sys_sendmsg+0x158/0x2a0 [ 589.263866][T25808] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.263917][T25808] ? __fget_files+0x2a/0x420 [ 589.263935][T25808] ? __fget_files+0x3a0/0x420 [ 589.263958][T25808] __sys_sendmmsg+0x227/0x430 [ 589.263980][T25808] ? __pfx___sys_sendmmsg+0x10/0x10 [ 589.264004][T25808] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 589.264035][T25808] ? ksys_write+0x1f0/0x250 [ 589.264050][T25808] ? rcu_is_watching+0x15/0xb0 [ 589.264070][T25808] __x64_sys_sendmmsg+0xa0/0xc0 [ 589.264089][T25808] do_syscall_64+0xf6/0x210 [ 589.264107][T25808] ? clear_bhb_loop+0x60/0xb0 [ 589.264124][T25808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.264137][T25808] RIP: 0033:0x7f787958e969 [ 589.264149][T25808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.264161][T25808] RSP: 002b:00007f787a3bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 589.264176][T25808] RAX: ffffffffffffffda RBX: 00007f78797b6160 RCX: 00007f787958e969 [ 589.264185][T25808] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 589.264195][T25808] RBP: 00007f787a3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 589.264203][T25808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.264212][T25808] R13: 0000000000000000 R14: 00007f78797b6160 R15: 00007f78798dfa28 [ 589.264233][T25808] [ 589.470186][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.478280][ T5886] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 589.731168][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 589.738518][ T5886] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 589.747592][ T5886] usb 6-1: config 0 has no interface number 0 [ 589.754658][ T5886] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 589.765669][ T5886] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 589.776280][ T5886] usb 6-1: config 0 interface 126 has no altsetting 0 [ 589.787637][ T5886] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 589.805944][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.814794][ T5886] usb 6-1: Product: syz [ 589.819170][ T5886] usb 6-1: Manufacturer: syz [ 589.824243][ T5886] usb 6-1: SerialNumber: syz [ 589.834351][ T5886] usb 6-1: config 0 descriptor?? [ 589.844532][T25798] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 589.852989][T25798] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 589.945141][T25823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2337'. [ 590.073961][ T5886] ir_usb 6-1:0.126: IR Dongle converter detected [ 590.091605][ T5886] usb 6-1: IRDA class descriptor not found, device not bound [ 590.109593][ T5886] usb 6-1: USB disconnect, device number 66 [ 590.232466][T25841] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 590.581121][ T5886] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 590.751893][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 590.760123][ T5886] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 590.770611][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.778833][ T5886] usb 5-1: Product: syz [ 590.783296][ T5886] usb 5-1: Manufacturer: syz [ 590.787909][ T5886] usb 5-1: SerialNumber: syz [ 590.796172][ T5886] usb 5-1: config 0 descriptor?? [ 590.881153][ T5887] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 591.004798][ T5886] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 591.073014][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 591.088634][ T5887] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 591.099211][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.112740][ T5887] usb 6-1: config 0 descriptor?? [ 591.118561][T25851] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 591.632596][ T5887] usbhid 6-1:0.0: can't add hid device: -71 [ 591.658580][ T5887] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 591.711072][ T5887] usb 6-1: USB disconnect, device number 67 [ 592.212075][ T5886] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 592.292705][ T5887] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 592.463139][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.478796][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.489263][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.509253][ T5887] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.518940][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.540108][ T5887] usb 4-1: config 0 descriptor?? [ 593.015092][ T5887] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 593.058823][ T5887] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 593.332528][T25927] FAULT_INJECTION: forcing a failure. [ 593.332528][T25927] name failslab, interval 1, probability 0, space 0, times 0 [ 593.348718][T25927] CPU: 1 UID: 0 PID: 25927 Comm: syz.1.2348 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 593.348744][T25927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 593.348755][T25927] Call Trace: [ 593.348764][T25927] [ 593.348772][T25927] dump_stack_lvl+0x189/0x250 [ 593.348804][T25927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.348830][T25927] ? __pfx__printk+0x10/0x10 [ 593.348856][T25927] ? __ip_dev_find+0x444/0x4e0 [ 593.348879][T25927] should_fail_ex+0x414/0x560 [ 593.348905][T25927] should_failslab+0xa8/0x100 [ 593.348929][T25927] kmem_cache_alloc_noprof+0x73/0x3c0 [ 593.348950][T25927] ? dst_alloc+0x105/0x170 [ 593.348976][T25927] dst_alloc+0x105/0x170 [ 593.348996][T25927] ? ip_check_mc_rcu+0x4c7/0x680 [ 593.349019][T25927] ip_route_output_key_hash_rcu+0x140d/0x2330 [ 593.349048][T25927] ? ip_route_output_key_hash+0xde/0x2e0 [ 593.349067][T25927] ip_route_output_key_hash+0x1b9/0x2e0 [ 593.349087][T25927] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 593.349125][T25927] ip_route_output_flow+0x2a/0x150 [ 593.349141][T25927] ? security_sk_classify_flow+0x70/0x180 [ 593.349163][T25927] udp_sendmsg+0x13dd/0x22e0 [ 593.349176][T25927] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 593.349200][T25927] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 593.349219][T25927] ? __pfx_udp_sendmsg+0x10/0x10 [ 593.349234][T25927] ? __lock_acquire+0xaac/0xd20 [ 593.349258][T25927] ? __lock_acquire+0xaac/0xd20 [ 593.349285][T25927] ? __pfx_aa_sk_perm+0x10/0x10 [ 593.349298][T25927] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 593.349318][T25927] ? sock_rps_record_flow+0x19/0x400 [ 593.349339][T25927] ? inet_sendmsg+0x29c/0x370 [ 593.349356][T25927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 593.349374][T25927] __sock_sendmsg+0x19c/0x270 [ 593.349392][T25927] ____sys_sendmsg+0x52d/0x830 [ 593.349414][T25927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.349439][T25927] ? import_iovec+0x74/0xa0 [ 593.349460][T25927] ___sys_sendmsg+0x21f/0x2a0 [ 593.349480][T25927] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.349525][T25927] ? __fget_files+0x2a/0x420 [ 593.349542][T25927] ? __fget_files+0x3a0/0x420 [ 593.349567][T25927] __sys_sendmmsg+0x227/0x430 [ 593.349589][T25927] ? __pfx___sys_sendmmsg+0x10/0x10 [ 593.349614][T25927] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 593.349649][T25927] ? ksys_write+0x1f0/0x250 [ 593.349673][T25927] __x64_sys_sendmmsg+0xa0/0xc0 [ 593.349692][T25927] do_syscall_64+0xf6/0x210 [ 593.349711][T25927] ? clear_bhb_loop+0x60/0xb0 [ 593.349728][T25927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.349741][T25927] RIP: 0033:0x7fbc3578e969 [ 593.349755][T25927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.349767][T25927] RSP: 002b:00007fbc365e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 593.349782][T25927] RAX: ffffffffffffffda RBX: 00007fbc359b6160 RCX: 00007fbc3578e969 [ 593.349793][T25927] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 593.349802][T25927] RBP: 00007fbc365e8090 R08: 0000000000000000 R09: 0000000000000000 [ 593.349811][T25927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.349819][T25927] R13: 0000000000000000 R14: 00007fbc359b6160 R15: 00007fbc35adfa28 [ 593.349842][T25927] [ 594.066889][ T5887] usb 5-1: USB disconnect, device number 105 [ 594.289059][T25940] usb usb8: usbfs: process 25940 (syz.4.2352) did not claim interface 0 before use [ 594.346976][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 594.346990][ T30] audit: type=1326 audit(1747744358.286:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0c352ab39 code=0x7ffc0000 [ 594.461234][ T30] audit: type=1326 audit(1747744358.336:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0c352ab39 code=0x7ffc0000 [ 594.536832][ T30] audit: type=1326 audit(1747744358.336:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0c352ab39 code=0x7ffc0000 [ 594.611075][ T30] audit: type=1326 audit(1747744358.336:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0c352ab39 code=0x7ffc0000 [ 594.711193][ T30] audit: type=1326 audit(1747744358.336:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0c352ab39 code=0x7ffc0000 [ 594.761276][ T30] audit: type=1326 audit(1747744358.336:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0c352ab39 code=0x7ffc0000 [ 594.859190][ T30] audit: type=1326 audit(1747744358.336:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0c352ab39 code=0x7ffc0000 [ 594.909825][ T30] audit: type=1326 audit(1747744358.336:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0c352ab39 code=0x7ffc0000 [ 595.036886][ T30] audit: type=1326 audit(1747744358.336:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0c352ab39 code=0x7ffc0000 [ 595.149418][ T30] audit: type=1326 audit(1747744358.336:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0c352ab39 code=0x7ffc0000 [ 595.208795][T25961] netlink: 440 bytes leftover after parsing attributes in process `syz.1.2357'. [ 595.301421][ T5887] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 595.323787][ T5887] usb 4-1: device reset changed ep0 maxpacket size! [ 595.389415][ T5886] usb 4-1: USB disconnect, device number 12 [ 595.571015][ T5886] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 595.740991][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 595.748327][ T5886] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 595.757448][ T5886] usb 4-1: config 0 has no interface number 0 [ 595.763998][ T5886] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 595.776883][ T5886] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 595.793641][ T5886] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 595.802809][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.810803][ T5886] usb 4-1: Product: syz [ 595.815058][ T5886] usb 4-1: Manufacturer: syz [ 595.819892][ T5886] usb 4-1: SerialNumber: syz [ 595.827227][ T5886] usb 4-1: config 0 descriptor?? [ 595.833520][T25954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 595.840742][T25954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 595.861720][ T5886] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3e:b9:8d:19:fe:87 [ 596.438141][T26030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 596.562229][ T9] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 596.732722][ T9] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 596.762029][ T9] usb 6-1: config 6 has no interface number 0 [ 596.771914][ T9] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 596.789654][T26049] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 596.806987][ T9] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 596.828303][ T9] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 596.896994][ T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 596.921792][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.974627][ T9] usb 6-1: Product: syz [ 596.985776][ T9] usb 6-1: Manufacturer: syz [ 596.995648][ T9] usb 6-1: SerialNumber: syz [ 597.014721][ T9] hso 6-1:6.2: Failed to find INT IN ep [ 597.219013][ T9] usb 6-1: USB disconnect, device number 68 [ 597.821551][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 597.891566][ T5887] usb 4-1: USB disconnect, device number 13 [ 597.920274][ T5887] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 598.031675][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.074899][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.105402][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 598.143615][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 598.199310][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.241083][ T9] usb 2-1: config 0 descriptor?? [ 598.681377][ T9] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 598.769554][ T9] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 598.995785][ T9] usb 2-1: USB disconnect, device number 19 [ 599.026239][T26095] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2369'. [ 599.726061][T26172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 600.063159][ T5894] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 600.292974][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 600.302384][ T5894] usb 2-1: not running at top speed; connect to a high speed hub [ 600.313400][ T5894] usb 2-1: config 2 has an invalid interface number: 27 but max is 1 [ 600.322965][ T5894] usb 2-1: config 2 has an invalid interface number: 235 but max is 1 [ 600.350451][ T5894] usb 2-1: config 2 has no interface number 0 [ 600.361805][ T5894] usb 2-1: config 2 has no interface number 1 [ 600.390200][ T5894] usb 2-1: config 2 interface 235 altsetting 13 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 600.526159][ T5894] usb 2-1: config 2 interface 235 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 600.572590][ T5894] usb 2-1: config 2 interface 27 has no altsetting 0 [ 600.601183][ T5894] usb 2-1: config 2 interface 235 has no altsetting 0 [ 600.658926][ T5894] usb 2-1: New USB device found, idVendor=0878, idProduct=1400, bcdDevice=b8.9b [ 600.707078][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.744463][ T5894] usb 2-1: Product: syz [ 600.757947][ T5894] usb 2-1: Manufacturer: syz [ 600.778803][ T5894] usb 2-1: SerialNumber: syz [ 601.031754][ T5894] smsc95xx v2.0.0 [ 601.035449][ T5894] smsc95xx 2-1:2.27 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 601.121521][ T5894] smsc95xx 2-1:2.27: probe with driver smsc95xx failed with error -22 [ 601.177046][ T5894] smsc95xx v2.0.0 [ 601.184512][ T5894] smsc95xx 2-1:2.235 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 601.213160][ T5894] smsc95xx 2-1:2.235: probe with driver smsc95xx failed with error -22 [ 601.309343][ T5894] usb 2-1: USB disconnect, device number 20 [ 601.763164][ T1223] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 601.941123][ T1223] usb 6-1: device descriptor read/64, error -71 [ 602.181017][ T1223] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 602.216479][T26276] FAULT_INJECTION: forcing a failure. [ 602.216479][T26276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.270966][T26276] CPU: 0 UID: 0 PID: 26276 Comm: syz.3.2386 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 602.270991][T26276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 602.271002][T26276] Call Trace: [ 602.271010][T26276] [ 602.271017][T26276] dump_stack_lvl+0x189/0x250 [ 602.271047][T26276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.271069][T26276] ? __pfx__printk+0x10/0x10 [ 602.271097][T26276] should_fail_ex+0x414/0x560 [ 602.271120][T26276] _copy_to_user+0x31/0xb0 [ 602.271149][T26276] simple_read_from_buffer+0xe1/0x170 [ 602.271174][T26276] proc_fail_nth_read+0x1df/0x250 [ 602.271200][T26276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 602.271226][T26276] ? rw_verify_area+0x258/0x650 [ 602.271245][T26276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 602.271268][T26276] vfs_read+0x1fd/0x980 [ 602.271293][T26276] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 602.271314][T26276] ? __pfx_vfs_read+0x10/0x10 [ 602.271339][T26276] ? __wake_up_common_lock+0x190/0x1f0 [ 602.271375][T26276] ksys_read+0x145/0x250 [ 602.271392][T26276] ? rcu_is_watching+0x15/0xb0 [ 602.271410][T26276] ? __pfx_ksys_read+0x10/0x10 [ 602.271433][T26276] ? do_syscall_64+0xba/0x210 [ 602.271458][T26276] do_syscall_64+0xf6/0x210 [ 602.271480][T26276] ? clear_bhb_loop+0x60/0xb0 [ 602.271501][T26276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.271517][T26276] RIP: 0033:0x7f787958d37c [ 602.271532][T26276] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 602.271547][T26276] RSP: 002b:00007f787a3ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 602.271563][T26276] RAX: ffffffffffffffda RBX: 00007f78797b5fa0 RCX: 00007f787958d37c [ 602.271575][T26276] RDX: 000000000000000f RSI: 00007f787a3ff0a0 RDI: 0000000000000004 [ 602.271585][T26276] RBP: 00007f787a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 602.271594][T26276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.271603][T26276] R13: 0000000000000000 R14: 00007f78797b5fa0 R15: 00007f78798dfa28 [ 602.271629][T26276] [ 602.480996][ T5926] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 602.691693][ T1223] usb 6-1: device descriptor read/64, error -71 [ 602.693464][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.775121][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.811502][ T1223] usb usb6-port1: attempt power cycle [ 602.861028][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 602.941118][ T5926] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.051302][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.153937][T26297] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2387'. [ 603.171201][ T5926] usb 2-1: config 0 descriptor?? [ 603.173488][ T1223] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 603.277605][ T1223] usb 6-1: device descriptor read/8, error -71 [ 603.541369][ T1223] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 603.606230][ T5926] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 603.625286][ T1223] usb 6-1: device descriptor read/8, error -71 [ 603.732984][ T5926] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 603.751285][ T1223] usb usb6-port1: unable to enumerate USB device [ 603.902531][T26321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.913631][ T5926] usb 2-1: USB disconnect, device number 21 [ 603.964683][T26322] fido_id[26322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 604.597829][T26354] usb usb8: usbfs: process 26354 (syz.0.2393) did not claim interface 0 before use [ 605.247801][T26391] program syz.3.2395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.718161][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 606.751207][ T5926] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 606.924739][ T5926] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 606.949584][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.994927][ T5926] usb 2-1: config 0 descriptor?? [ 607.011062][ T5887] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 607.034850][ T5926] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 607.161143][ T5887] usb 4-1: device descriptor read/64, error -71 [ 607.421219][ T5887] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 607.455076][T26424] fuse: Invalid gid '0000000000000000000000000000000000000005' [ 607.577266][ T5926] gspca_sunplus: reg_w_riv err -71 [ 607.582651][ T5887] usb 4-1: device descriptor read/64, error -71 [ 607.597612][ T5926] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 607.634772][ T5926] usb 2-1: USB disconnect, device number 22 [ 607.702198][ T5887] usb usb4-port1: attempt power cycle [ 608.071045][ T5887] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 608.092674][ T5887] usb 4-1: device descriptor read/8, error -71 [ 608.205278][ T30] kauditd_printk_skb: 417 callbacks suppressed [ 608.205295][ T30] audit: type=1326 audit(1747744372.146:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.0.2409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f427758e969 code=0x0 [ 608.261074][ T1223] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 608.401039][ T5887] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 608.411212][ T1223] usb 6-1: Using ep0 maxpacket: 8 [ 608.421827][ T5887] usb 4-1: device descriptor read/8, error -71 [ 608.429726][ T1223] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.434598][T26473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 608.469870][ T1223] usb 6-1: config 0 has no interfaces? [ 608.476477][ T1223] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.495663][ T1223] usb 6-1: config 0 has no interfaces? [ 608.531564][ T5887] usb usb4-port1: unable to enumerate USB device [ 608.548221][ T1223] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.553824][T26470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'. [ 608.574066][ T1223] usb 6-1: config 0 has no interfaces? [ 608.589407][ T1223] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 608.609164][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.629282][ T1223] usb 6-1: Product: syz [ 608.637531][ T1223] usb 6-1: Manufacturer: syz [ 608.648170][ T1223] usb 6-1: SerialNumber: syz [ 608.664367][ T1223] usb 6-1: config 0 descriptor?? [ 608.934731][ T1223] usb 6-1: USB disconnect, device number 73 [ 610.829923][T26513] FAULT_INJECTION: forcing a failure. [ 610.829923][T26513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.843332][T26513] CPU: 1 UID: 0 PID: 26513 Comm: syz.1.2414 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 610.843349][T26513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 610.843355][T26513] Call Trace: [ 610.843361][T26513] [ 610.843366][T26513] dump_stack_lvl+0x189/0x250 [ 610.843384][T26513] ? __lock_acquire+0xaac/0xd20 [ 610.843400][T26513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.843414][T26513] ? __pfx__printk+0x10/0x10 [ 610.843424][T26513] ? __might_fault+0xb0/0x130 [ 610.843443][T26513] should_fail_ex+0x414/0x560 [ 610.843457][T26513] _copy_from_user+0x2d/0xb0 [ 610.843472][T26513] ___sys_recvmsg+0x12e/0x510 [ 610.843490][T26513] ? __pfx____sys_recvmsg+0x10/0x10 [ 610.843517][T26513] ? __fget_files+0x3a0/0x420 [ 610.843537][T26513] __x64_sys_recvmsg+0x198/0x260 [ 610.843553][T26513] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 610.843576][T26513] ? do_syscall_64+0xba/0x210 [ 610.843592][T26513] do_syscall_64+0xf6/0x210 [ 610.843606][T26513] ? clear_bhb_loop+0x60/0xb0 [ 610.843621][T26513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.843631][T26513] RIP: 0033:0x7fbc3578e969 [ 610.843641][T26513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.843649][T26513] RSP: 002b:00007fbc3662a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 610.843661][T26513] RAX: ffffffffffffffda RBX: 00007fbc359b5fa0 RCX: 00007fbc3578e969 [ 610.843668][T26513] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000004 [ 610.843675][T26513] RBP: 00007fbc3662a090 R08: 0000000000000000 R09: 0000000000000000 [ 610.843681][T26513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.843687][T26513] R13: 0000000000000000 R14: 00007fbc359b5fa0 R15: 00007fbc35adfa28 [ 610.843702][T26513] [ 610.844879][T26502] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2412'. [ 611.041302][T26502] netlink: zone id is out of range [ 611.046712][T26502] netlink: get zone limit has 8 unknown bytes [ 611.451126][ T1223] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 611.612841][ T1223] usb 4-1: config 0 has no interfaces? [ 611.620727][ T1223] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 611.636382][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.670343][ T1223] usb 4-1: Product: syz [ 611.679032][ T1223] usb 4-1: Manufacturer: syz [ 611.689256][ T1223] usb 4-1: SerialNumber: syz [ 611.704534][ T1223] usb 4-1: config 0 descriptor?? [ 611.753200][T26544] netlink: 440 bytes leftover after parsing attributes in process `syz.5.2419'. [ 611.901077][ T5887] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 612.041934][ T5887] usb 5-1: device descriptor read/64, error -71 [ 612.297788][T26555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.306176][ T5887] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 612.319801][ T30] audit: type=1326 audit(1747744376.256:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26558 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 612.384338][ T30] audit: type=1326 audit(1747744376.286:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26558 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 612.407311][ T30] audit: type=1326 audit(1747744376.286:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26558 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 612.429705][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.447529][ T30] audit: type=1326 audit(1747744376.286:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26558 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 612.470721][ T5887] usb 5-1: device descriptor read/64, error -71 [ 612.475075][ T30] audit: type=1326 audit(1747744376.296:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26558 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 612.499293][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.512156][ T30] audit: type=1326 audit(1747744376.296:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26558 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 612.534659][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.545058][T26562] FAULT_INJECTION: forcing a failure. [ 612.545058][T26562] name failslab, interval 1, probability 0, space 0, times 0 [ 612.558098][ T30] audit: type=1326 audit(1747744376.296:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26558 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 612.580508][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.585349][T26562] CPU: 1 UID: 0 PID: 26562 Comm: syz.1.2425 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 612.585374][T26562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 612.585385][T26562] Call Trace: [ 612.585392][T26562] [ 612.585401][T26562] dump_stack_lvl+0x189/0x250 [ 612.585432][T26562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.585454][T26562] ? __pfx__printk+0x10/0x10 [ 612.585478][T26562] ? __pfx___might_resched+0x10/0x10 [ 612.585500][T26562] should_fail_ex+0x414/0x560 [ 612.585524][T26562] should_failslab+0xa8/0x100 [ 612.585547][T26562] __kmalloc_noprof+0xcb/0x4f0 [ 612.585568][T26562] ? sock_kmalloc+0xd6/0x160 [ 612.585595][T26562] sock_kmalloc+0xd6/0x160 [ 612.585620][T26562] af_alg_alloc_areq+0x8d/0x260 [ 612.585641][T26562] skcipher_recvmsg+0x356/0x11c0 [ 612.585664][T26562] ? aa_sk_perm+0x81e/0x950 [ 612.585764][T26562] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 612.585799][T26562] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 612.585817][T26562] ? security_socket_recvmsg+0x7e/0x2e0 [ 612.585840][T26562] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 612.585858][T26562] sock_recvmsg+0x229/0x270 [ 612.585894][T26562] ____sys_recvmsg+0x1c9/0x460 [ 612.585926][T26562] ? __pfx_____sys_recvmsg+0x10/0x10 [ 612.585964][T26562] ? import_iovec+0x74/0xa0 [ 612.585990][T26562] ___sys_recvmsg+0x1b5/0x510 [ 612.586019][T26562] ? __pfx____sys_recvmsg+0x10/0x10 [ 612.586065][T26562] ? __fget_files+0x3a0/0x420 [ 612.586097][T26562] __x64_sys_recvmsg+0x198/0x260 [ 612.586123][T26562] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 612.586161][T26562] ? do_syscall_64+0xba/0x210 [ 612.586187][T26562] do_syscall_64+0xf6/0x210 [ 612.586209][T26562] ? clear_bhb_loop+0x60/0xb0 [ 612.586229][T26562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.586246][T26562] RIP: 0033:0x7fbc3578e969 [ 612.586263][T26562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.586278][T26562] RSP: 002b:00007fbc3662a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 612.586296][T26562] RAX: ffffffffffffffda RBX: 00007fbc359b5fa0 RCX: 00007fbc3578e969 [ 612.586309][T26562] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000004 [ 612.586319][T26562] RBP: 00007fbc3662a090 R08: 0000000000000000 R09: 0000000000000000 [ 612.586330][T26562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.586341][T26562] R13: 0000000000000000 R14: 00007fbc359b5fa0 R15: 00007fbc35adfa28 [ 612.586369][T26562] [ 612.613760][ T5887] usb usb5-port1: attempt power cycle [ 612.863736][ T30] audit: type=1326 audit(1747744376.296:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26558 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 613.016879][ T30] audit: type=1326 audit(1747744376.296:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26558 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3578e969 code=0x7ffc0000 [ 613.075504][T26569] picdev_read: 4 callbacks suppressed [ 613.075517][T26569] kvm: pic: non byte read [ 613.111176][T26569] kvm: pic: non byte read [ 613.115877][T26569] kvm: pic: single mode not supported [ 613.130486][T26569] kvm: pic: non byte read [ 613.156523][T26569] kvm: pic: single mode not supported [ 613.156574][T26569] kvm: pic: non byte read [ 613.175737][T26569] kvm: pic: non byte read [ 613.221880][T26569] kvm: pic: level sensitive irq not supported [ 613.221930][T26569] kvm: pic: non byte read [ 613.249655][T26569] kvm: pic: single mode not supported [ 613.249670][T26569] kvm: pic: level sensitive irq not supported [ 613.264822][T26569] kvm: pic: non byte read [ 613.282153][T26569] kvm: pic: non byte read [ 613.287865][T26569] kvm: pic: single mode not supported [ 613.287910][T26569] kvm: pic: non byte read [ 613.361041][ T1223] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 613.536576][ T1223] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 613.546561][ T1223] usb 2-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 613.584445][ T1223] usb 2-1: config 0 has no interface number 0 [ 613.590783][ T1223] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 613.602524][ T1223] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.613476][ T1223] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 613.627421][ T1223] usb 2-1: New USB device found, idVendor=abcd, idProduct=ddee, bcdDevice= 5.b9 [ 613.636909][ T1223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.654147][ T1223] usb 2-1: config 0 descriptor?? [ 613.671009][ T5887] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 613.701864][ T1223] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 613.704233][ T5887] usb 5-1: device descriptor read/8, error -71 [ 613.708875][ T1223] usb 2-1: MIDIStreaming interface descriptor not found [ 613.912352][ T1223] usb 2-1: USB disconnect, device number 23 [ 614.051231][ T5887] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 614.071994][ T5887] usb 5-1: device descriptor read/8, error -71 [ 614.111884][ T24] usb 4-1: USB disconnect, device number 18 [ 614.194694][ T5887] usb usb5-port1: unable to enumerate USB device [ 615.090986][ T1223] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 615.141970][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 615.159692][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 615.291065][ T24] usb 4-1: device descriptor read/64, error -32 [ 615.292838][ T1223] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 615.320807][ T1223] usb 5-1: config 0 has no interface number 0 [ 615.334413][ T1223] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.361099][ T1223] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.385082][ T1223] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 615.403669][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.427774][ T1223] usb 5-1: config 0 descriptor?? [ 615.447513][T26678] FAULT_INJECTION: forcing a failure. [ 615.447513][T26678] name failslab, interval 1, probability 0, space 0, times 0 [ 615.460211][T26678] CPU: 0 UID: 0 PID: 26678 Comm: syz.5.2437 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 615.460232][T26678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.460242][T26678] Call Trace: [ 615.460250][T26678] [ 615.460257][T26678] dump_stack_lvl+0x189/0x250 [ 615.460278][T26678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.460295][T26678] ? __pfx__printk+0x10/0x10 [ 615.460312][T26678] ? __pfx___might_resched+0x10/0x10 [ 615.460322][T26678] ? fs_reclaim_acquire+0x7d/0x100 [ 615.460339][T26678] should_fail_ex+0x414/0x560 [ 615.460353][T26678] should_failslab+0xa8/0x100 [ 615.460373][T26678] __kmalloc_noprof+0xcb/0x4f0 [ 615.460394][T26678] ? sock_kmalloc+0xd6/0x160 [ 615.460421][T26678] sock_kmalloc+0xd6/0x160 [ 615.460446][T26678] skcipher_recvmsg+0x55c/0x11c0 [ 615.460482][T26678] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 615.460496][T26678] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 615.460507][T26678] ? security_socket_recvmsg+0x7e/0x2e0 [ 615.460521][T26678] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 615.460532][T26678] sock_recvmsg+0x229/0x270 [ 615.460546][T26678] ____sys_recvmsg+0x1c9/0x460 [ 615.460567][T26678] ? __pfx_____sys_recvmsg+0x10/0x10 [ 615.460589][T26678] ? import_iovec+0x74/0xa0 [ 615.460605][T26678] ___sys_recvmsg+0x1b5/0x510 [ 615.460623][T26678] ? __pfx____sys_recvmsg+0x10/0x10 [ 615.460651][T26678] ? __fget_files+0x3a0/0x420 [ 615.460670][T26678] __x64_sys_recvmsg+0x198/0x260 [ 615.460685][T26678] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 615.460708][T26678] ? do_syscall_64+0xba/0x210 [ 615.460724][T26678] do_syscall_64+0xf6/0x210 [ 615.460737][T26678] ? clear_bhb_loop+0x60/0xb0 [ 615.460750][T26678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.460759][T26678] RIP: 0033:0x7faf6bb8e969 [ 615.460769][T26678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.460777][T26678] RSP: 002b:00007faf6cabd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 615.460788][T26678] RAX: ffffffffffffffda RBX: 00007faf6bdb5fa0 RCX: 00007faf6bb8e969 [ 615.460795][T26678] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000004 [ 615.460802][T26678] RBP: 00007faf6cabd090 R08: 0000000000000000 R09: 0000000000000000 [ 615.460807][T26678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.460813][T26678] R13: 0000000000000000 R14: 00007faf6bdb5fa0 R15: 00007faf6bedfa28 [ 615.460829][T26678] [ 615.700671][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 615.930693][ T1223] uclogic 0003:256C:006D.0025: No inputs registered, leaving [ 615.931167][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 615.949248][ T1223] uclogic 0003:256C:006D.0025: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input1 [ 615.968990][ T24] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 615.977688][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.996837][ T24] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 616.006275][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.020050][ T24] usb 4-1: Product: syz [ 616.043221][ T5926] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 616.060492][ T24] usb 4-1: Manufacturer: syz [ 616.071058][ T24] usb 4-1: SerialNumber: syz [ 616.082192][ T24] usb 4-1: config 0 descriptor?? [ 616.098221][ T24] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 616.134462][ T1223] usb 5-1: USB disconnect, device number 110 [ 616.209490][T26683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.222585][T26683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.239368][ T5926] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 616.247615][ T5926] usb 6-1: can't read configurations, error -71 [ 616.309751][T26714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.811324][ T24] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 616.819696][ T24] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 616.961967][ T1223] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 617.160596][ T1223] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 617.191207][ T1223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.241436][ T1223] usb 2-1: config 0 descriptor?? [ 617.279303][ T1223] cp210x 2-1:0.0: cp210x converter detected [ 617.291429][ T5926] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 617.453204][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 617.474238][ T5926] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 617.500606][ T5886] usb 4-1: USB disconnect, device number 20 [ 617.506961][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.521527][ T5926] usb 6-1: Product: syz [ 617.525764][ T5926] usb 6-1: Manufacturer: syz [ 617.536292][ T5926] usb 6-1: SerialNumber: syz [ 617.544811][ T5926] usb 6-1: config 0 descriptor?? [ 617.618998][T26766] FAULT_INJECTION: forcing a failure. [ 617.618998][T26766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.632533][T26766] CPU: 0 UID: 0 PID: 26766 Comm: syz.4.2449 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 617.632558][T26766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 617.632568][T26766] Call Trace: [ 617.632576][T26766] [ 617.632588][T26766] dump_stack_lvl+0x189/0x250 [ 617.632619][T26766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.632642][T26766] ? __pfx__printk+0x10/0x10 [ 617.632673][T26766] should_fail_ex+0x414/0x560 [ 617.632698][T26766] _copy_to_user+0x31/0xb0 [ 617.632723][T26766] simple_read_from_buffer+0xe1/0x170 [ 617.632749][T26766] proc_fail_nth_read+0x1df/0x250 [ 617.632776][T26766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 617.632802][T26766] ? rw_verify_area+0x258/0x650 [ 617.632821][T26766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 617.632845][T26766] vfs_read+0x1fd/0x980 [ 617.632870][T26766] ? __pfx___mutex_lock+0x10/0x10 [ 617.632892][T26766] ? __pfx_vfs_read+0x10/0x10 [ 617.632914][T26766] ? __fget_files+0x2a/0x420 [ 617.632940][T26766] ? __fget_files+0x3a0/0x420 [ 617.632960][T26766] ? __fget_files+0x2a/0x420 [ 617.632990][T26766] ksys_read+0x145/0x250 [ 617.633012][T26766] ? __pfx_ksys_read+0x10/0x10 [ 617.633035][T26766] ? do_syscall_64+0xba/0x210 [ 617.633070][T26766] do_syscall_64+0xf6/0x210 [ 617.633092][T26766] ? clear_bhb_loop+0x60/0xb0 [ 617.633113][T26766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.633130][T26766] RIP: 0033:0x7fc0c358d37c [ 617.633146][T26766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 617.633161][T26766] RSP: 002b:00007fc0c13f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 617.633180][T26766] RAX: ffffffffffffffda RBX: 00007fc0c37b5fa0 RCX: 00007fc0c358d37c [ 617.633193][T26766] RDX: 000000000000000f RSI: 00007fc0c13f60a0 RDI: 0000000000000005 [ 617.633205][T26766] RBP: 00007fc0c13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 617.633216][T26766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.633227][T26766] R13: 0000000000000000 R14: 00007fc0c37b5fa0 R15: 00007fc0c38dfa28 [ 617.633257][T26766] [ 617.849672][ T1223] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 617.866497][ T5926] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 617.871243][ T1223] usb 2-1: cp210x converter now attached to ttyUSB0 [ 618.082412][ T24] usb 2-1: USB disconnect, device number 24 [ 618.135887][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 618.192380][ T24] cp210x 2-1:0.0: device disconnected [ 618.923557][T26843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 619.153810][ T5926] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 619.174241][ T5926] usb 6-1: USB disconnect, device number 75 [ 620.287986][T26904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2462'. [ 620.353913][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 620.353929][ T30] audit: type=1326 audit(1747744384.296:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26891 comm="syz.5.2462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf6bb8e969 code=0x0 [ 620.511578][ T5886] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 620.691444][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 620.698577][ T5886] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 620.773180][ T5886] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 620.794660][ T5886] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 620.838953][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.939036][ T5886] usb 2-1: config 0 descriptor?? [ 621.204244][T26898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.213756][T26898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.368413][T26946] loop2: detected capacity change from 0 to 7 [ 621.406824][T26946] loop2: p1 [ 621.410083][T26946] loop2: partition table partially beyond EOD, truncated [ 621.432747][T26946] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 621.583120][ T5887] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 621.606505][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 621.771175][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 621.784899][ T5887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 621.801593][ T5887] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 621.811336][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.829040][ T5887] usb 6-1: config 0 descriptor?? [ 622.255649][ T5887] cypress 0003:04B4:BCA1.0026: unknown main item tag 0x0 [ 622.268294][ T5887] cypress 0003:04B4:BCA1.0026: unknown main item tag 0x0 [ 622.285585][ T5887] cypress 0003:04B4:BCA1.0026: hidraw0: USB HID v0.01 Device [HID 04b4:bca1] on usb-dummy_hcd.5-1/input0 [ 622.451342][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 622.466939][ T30] audit: type=1326 audit(1747744386.406:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.5.2470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf6bb8e969 code=0x0 [ 622.571690][ T5887] usb 6-1: USB disconnect, device number 76 [ 622.618139][ T9] usb 4-1: config 255 has an invalid interface number: 86 but max is 3 [ 622.648124][T27003] vivid-007: ================= START STATUS ================= [ 622.658492][ T9] usb 4-1: config 255 has an invalid descriptor of length 212, skipping remainder of the config [ 622.680190][T27003] vivid-007: Enable Output Cropping: true [ 622.687399][ T9] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 4 [ 622.696894][T27003] vivid-007: Enable Output Composing: true [ 622.726736][T27003] vivid-007: Enable Output Scaler: true [ 622.732756][ T9] usb 4-1: config 255 has no interface number 0 [ 622.739107][T27003] vivid-007: Tx RGB Quantization Range: Automatic [ 622.745822][ T9] usb 4-1: config 255 interface 86 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 622.759558][T27003] vivid-007: Transmit Mode: HDMI [ 622.767068][T27003] vivid-007: Hotplug Present: 0x00000000 [ 622.776382][ T9] usb 4-1: config 255 interface 86 has no altsetting 0 [ 622.784557][T27003] vivid-007: RxSense Present: 0x00000000 [ 622.790540][T27003] vivid-007: EDID Present: 0x00000000 [ 622.805615][ T9] usb 4-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=35.3a [ 622.815099][T27003] vivid-007: ================== END STATUS ================== [ 622.826549][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.854234][ T9] usb 4-1: Product: 됓촽犖䏨✞飼猈⽭⽑撅ᶨ믢곅቏嵢鍾Ꜥ暇ဦ帬Í駹⦚펡黒ꗅę倆쯺䵄ࠂ㌗倹蹥鴦竜ᤀꈤ밡搬팫涋┶쏖㮣冭ⱛ䴁跦ꗲ舘㵖棈虲﫮懛⏩옔쳓㦥䈌ր쎄䮷읾粗톜⽁튤䅨⿯ᷪ厦뗜㖋䚗᜷珿贒墉ϕУŢ닍ࢰ颾兀邸⚠쿢湊ჵ詍눍v嫭蝔伤䇪｢蔐ⶰ蕡፴屾阔阌묣驹 [ 622.901875][ T9] usb 4-1: Manufacturer: 庥洞꫔ꠤߖ䡬靅ྑ놵訔绥䳟䍈ꦜ౏竛다福況鷧蚢䀿쩵넯콘⎞莯溣켸펶쐓ਖ퐲ㄾ껯ⷽ稺滑㝶瀵뿉⺤ኾᐓġ [ 622.920253][ T9] usb 4-1: SerialNumber: ఊ [ 623.110535][ T5894] usb 2-1: USB disconnect, device number 25 [ 623.177398][T26987] tc_dump_action: action bad kind [ 624.456230][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.463192][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.543339][ T9] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 625.700976][ T5894] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 625.823221][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 625.832179][ T9] dib0700: firmware download failed at 7 with -22 [ 625.848851][ T5889] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 625.867878][ T9] usb 4-1: USB disconnect, device number 21 [ 626.043041][ T5889] usb 5-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config [ 626.066385][ T5894] usb 6-1: config 0 has no interfaces? [ 626.141824][ T5889] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 626.177019][ T5894] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 626.208875][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.222520][ T5894] usb 6-1: Product: syz [ 626.227714][ T5889] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.236941][ T5894] usb 6-1: Manufacturer: syz [ 626.242089][ T5894] usb 6-1: SerialNumber: syz [ 626.248462][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 626.270959][ T5889] usb 5-1: SerialNumber: syz [ 626.292223][ T5894] usb 6-1: config 0 descriptor?? [ 626.312396][ T5889] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 626.493568][T27089] dns_resolver: Unsupported server list version (0) [ 626.576744][T27065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2484'. [ 626.588667][ T30] audit: type=1800 audit(1747744390.506:997): pid=27065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2484" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 626.968570][T27110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2483'. [ 628.921178][ T5889] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 629.081231][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 629.091960][ T5889] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 629.108083][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.124192][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 629.139173][ T5889] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 629.154267][T27138] loop2: detected capacity change from 0 to 7 [ 629.161030][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.176929][T27138] loop2: p1 [ 629.180627][T27138] loop2: partition table partially beyond EOD, truncated [ 629.198118][ T5889] usb 2-1: Product: syz [ 629.206151][T27138] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 629.216148][ T24] usb 5-1: USB disconnect, device number 111 [ 629.217358][ T5889] usb 2-1: Manufacturer: syz [ 629.228028][ T5889] usb 2-1: SerialNumber: syz [ 629.333924][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 629.475866][T27124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.499618][T27124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.730022][ T5889] usb 2-1: 0:2 : does not exist [ 630.451176][ T5886] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 630.607238][ T5886] usb 5-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config [ 630.640049][ T5886] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 630.669184][ T5886] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.679170][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 630.693250][ T5889] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 630.693634][ T5886] usb 5-1: SerialNumber: syz [ 630.720179][ T5886] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 630.871030][ T5889] usb 2-1: USB disconnect, device number 26 [ 630.996931][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.013430][ T30] audit: type=1800 audit(1747744394.936:998): pid=27177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2500" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 631.345461][ T5889] usb 5-1: USB disconnect, device number 112 [ 632.072161][ T5889] usb 6-1: USB disconnect, device number 77 [ 632.139641][T27245] FAULT_INJECTION: forcing a failure. [ 632.139641][T27245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.175874][T27245] CPU: 1 UID: 0 PID: 27245 Comm: syz.5.2506 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 632.175901][T27245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.175912][T27245] Call Trace: [ 632.175920][T27245] [ 632.175928][T27245] dump_stack_lvl+0x189/0x250 [ 632.175955][T27245] ? __lock_acquire+0xaac/0xd20 [ 632.175981][T27245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.176003][T27245] ? __pfx__printk+0x10/0x10 [ 632.176019][T27245] ? __might_fault+0xb0/0x130 [ 632.176049][T27245] should_fail_ex+0x414/0x560 [ 632.176073][T27245] _copy_from_user+0x2d/0xb0 [ 632.176096][T27245] input_event_from_user+0xb2/0x280 [ 632.176116][T27245] ? __pfx_input_event_from_user+0x10/0x10 [ 632.176135][T27245] ? input_inject_event+0xbc/0x320 [ 632.176159][T27245] evdev_write+0x2a6/0x480 [ 632.176179][T27245] ? __pfx_evdev_write+0x10/0x10 [ 632.176198][T27245] ? bpf_lsm_file_permission+0x9/0x20 [ 632.176216][T27245] ? security_file_permission+0x75/0x290 [ 632.176233][T27245] ? rw_verify_area+0x258/0x650 [ 632.176250][T27245] ? __pfx_evdev_write+0x10/0x10 [ 632.176266][T27245] vfs_write+0x27b/0xa90 [ 632.176290][T27245] ? __pfx_vfs_write+0x10/0x10 [ 632.176308][T27245] ? __fget_files+0x2a/0x420 [ 632.176331][T27245] ? __fget_files+0x2a/0x420 [ 632.176348][T27245] ? __fget_files+0x3a0/0x420 [ 632.176366][T27245] ? __fget_files+0x2a/0x420 [ 632.176393][T27245] ksys_write+0x145/0x250 [ 632.176421][T27245] ? rcu_is_watching+0x15/0xb0 [ 632.176438][T27245] ? __pfx_ksys_write+0x10/0x10 [ 632.176458][T27245] ? do_syscall_64+0xba/0x210 [ 632.176482][T27245] do_syscall_64+0xf6/0x210 [ 632.176504][T27245] ? clear_bhb_loop+0x60/0xb0 [ 632.176523][T27245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.176539][T27245] RIP: 0033:0x7faf6bb8e969 [ 632.176555][T27245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.176570][T27245] RSP: 002b:00007faf6cabd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 632.176589][T27245] RAX: ffffffffffffffda RBX: 00007faf6bdb5fa0 RCX: 00007faf6bb8e969 [ 632.176600][T27245] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 632.176612][T27245] RBP: 00007faf6cabd090 R08: 0000000000000000 R09: 0000000000000000 [ 632.176623][T27245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 632.176633][T27245] R13: 0000000000000000 R14: 00007faf6bdb5fa0 R15: 00007faf6bedfa28 [ 632.176659][T27245] [ 632.422598][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.421010][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 635.707107][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 635.758320][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.811078][ T9] usb 4-1: Product: syz [ 635.828287][ T9] usb 4-1: Manufacturer: syz [ 635.850039][ T9] usb 4-1: SerialNumber: syz [ 635.923173][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 635.959507][T27352] netlink: 440 bytes leftover after parsing attributes in process `syz.0.2523'. [ 636.107830][ T5894] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 636.195721][T27365] syzkaller1: entered allmulticast mode [ 636.209482][T27364] tap0: tun_chr_ioctl cmd 1074025677 [ 636.233786][T27364] tap0: linktype set to 780 [ 637.094931][T27377] dns_resolver: Unsupported server list version (0) [ 637.348855][ T5894] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 637.363476][ T5894] ath9k_htc: Failed to initialize the device [ 637.411707][ T5894] usb 4-1: ath9k_htc: USB layer deinitialized [ 637.662786][ T9] usb 4-1: USB disconnect, device number 22 [ 637.948379][T27419] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2533'. [ 638.151960][T27423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.604344][T27475] netlink: 'syz.3.2538': attribute type 10 has an invalid length. [ 638.717239][T27475] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2538'. [ 638.733939][T27475] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 639.251398][ T5889] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 639.441062][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 639.459788][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 639.499189][ T5889] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 639.543900][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.632021][ T5889] usb 2-1: Product: syz [ 639.638439][ T5889] usb 2-1: Manufacturer: syz [ 639.671450][ T5889] usb 2-1: SerialNumber: syz [ 639.717699][ T5889] usb 2-1: config 0 descriptor?? [ 639.921610][ T5889] hub 2-1:0.0: bad descriptor, ignoring hub [ 639.929283][ T5889] hub 2-1:0.0: probe with driver hub failed with error -5 [ 639.944424][ T5889] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54 [ 640.941296][ T5889] usb 2-1: USB disconnect, device number 27 [ 641.043332][T27549] netlink: 'syz.3.2548': attribute type 58 has an invalid length. [ 641.066613][T27549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2548'. [ 641.391011][ T5889] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 641.553385][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 641.657801][ T5889] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 641.702829][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.773697][ T5889] usb 2-1: Product: syz [ 641.777897][ T5889] usb 2-1: Manufacturer: syz [ 641.873060][ T5889] usb 2-1: SerialNumber: syz [ 641.904271][ T5889] usb 2-1: config 0 descriptor?? [ 642.161071][ T5889] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 642.335123][T27593] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[27593] [ 642.376870][T27593] dns_resolver: Unsupported server list version (0) [ 642.791095][T27602] delete_channel: no stack [ 644.161236][ T5889] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 644.224124][ T5889] usb 2-1: USB disconnect, device number 28 [ 644.622836][T27657] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2558'. [ 645.155482][T27671] [ 645.157833][T27671] ===================================================== [ 645.164757][T27671] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 645.172206][T27671] 6.15.0-rc7-syzkaller #0 Not tainted [ 645.177559][T27671] ----------------------------------------------------- [ 645.184479][T27671] syz.1.2563/27671 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 645.192188][T27671] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 645.200877][T27671] [ 645.200877][T27671] and this task is already holding: [ 645.208248][T27671] ffff88805777baa0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 645.216948][T27671] which would create a new lock dependency: [ 645.222827][T27671] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 645.230393][T27671] [ 645.230393][T27671] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 645.239850][T27671] (&client->buffer_lock){..-.}-{3:3} [ 645.239872][T27671] [ 645.239872][T27671] ... which became SOFTIRQ-irq-safe at: [ 645.252922][T27671] lock_acquire+0x120/0x360 [ 645.257596][T27671] _raw_spin_lock+0x2e/0x40 [ 645.262178][T27671] evdev_pass_values+0xb9/0xbd0 [ 645.267108][T27671] evdev_events+0x1e6/0x340 [ 645.271683][T27671] input_pass_values+0x285/0x890 [ 645.276712][T27671] input_event_dispose+0x3e5/0x6b0 [ 645.281928][T27671] input_inject_event+0x1fe/0x320 [ 645.287032][T27671] kd_sound_helper+0x19f/0x210 [ 645.291870][T27671] input_handler_for_each_handle+0xfe/0x1c0 [ 645.297845][T27671] call_timer_fn+0x17b/0x5f0 [ 645.302514][T27671] __run_timer_base+0x61a/0x860 [ 645.307448][T27671] run_timer_softirq+0xb7/0x180 [ 645.312377][T27671] handle_softirqs+0x286/0x870 [ 645.317215][T27671] __irq_exit_rcu+0xca/0x1f0 [ 645.321886][T27671] irq_exit_rcu+0x9/0x30 [ 645.326214][T27671] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 645.331936][T27671] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 645.337998][T27671] pv_native_safe_halt+0x13/0x20 [ 645.343016][T27671] default_idle+0x13/0x20 [ 645.347449][T27671] default_idle_call+0x74/0xb0 [ 645.352293][T27671] do_idle+0x1e8/0x510 [ 645.356439][T27671] cpu_startup_entry+0x44/0x60 [ 645.361292][T27671] rest_init+0x2de/0x300 [ 645.365605][T27671] start_kernel+0x470/0x4f0 [ 645.370185][T27671] x86_64_start_reservations+0x2a/0x30 [ 645.375716][T27671] x86_64_start_kernel+0x66/0x70 [ 645.380820][T27671] common_startup_64+0x13e/0x147 [ 645.385871][T27671] [ 645.385871][T27671] to a SOFTIRQ-irq-unsafe lock: [ 645.392881][T27671] (tasklist_lock){.+.+}-{3:3} [ 645.392909][T27671] [ 645.392909][T27671] ... which became SOFTIRQ-irq-unsafe at: [ 645.405532][T27671] ... [ 645.405540][T27671] lock_acquire+0x120/0x360 [ 645.412708][T27671] _raw_read_lock+0x36/0x50 [ 645.417289][T27671] __do_wait+0xde/0x740 [ 645.421527][T27671] do_wait+0x1f8/0x520 [ 645.425670][T27671] kernel_wait+0xab/0x170 [ 645.430088][T27671] call_usermodehelper_exec_work+0xbe/0x230 [ 645.436175][T27671] process_scheduled_works+0xadb/0x17a0 [ 645.441798][T27671] worker_thread+0x8a0/0xda0 [ 645.446474][T27671] kthread+0x70e/0x8a0 [ 645.450627][T27671] ret_from_fork+0x4b/0x80 [ 645.455133][T27671] ret_from_fork_asm+0x1a/0x30 [ 645.460006][T27671] [ 645.460006][T27671] other info that might help us debug this: [ 645.460006][T27671] [ 645.470225][T27671] Chain exists of: [ 645.470225][T27671] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 645.470225][T27671] [ 645.483418][T27671] Possible interrupt unsafe locking scenario: [ 645.483418][T27671] [ 645.491724][T27671] CPU0 CPU1 [ 645.497081][T27671] ---- ---- [ 645.502434][T27671] lock(tasklist_lock); [ 645.506665][T27671] local_irq_disable(); [ 645.513423][T27671] lock(&client->buffer_lock); [ 645.520806][T27671] lock(&f_owner->lock); [ 645.527658][T27671] [ 645.531108][T27671] lock(&client->buffer_lock); [ 645.536137][T27671] [ 645.536137][T27671] *** DEADLOCK *** [ 645.536137][T27671] [ 645.544311][T27671] 2 locks held by syz.1.2563/27671: [ 645.549508][T27671] #0: ffff88807ba4d940 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1d7/0x4e0 [ 645.558022][T27671] #1: ffff88805777baa0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 645.567147][T27671] [ 645.567147][T27671] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 645.577537][T27671] -> (&client->buffer_lock){..-.}-{3:3} { [ 645.583427][T27671] IN-SOFTIRQ-W at: [ 645.588094][T27671] lock_acquire+0x120/0x360 [ 645.594587][T27671] _raw_spin_lock+0x2e/0x40 [ 645.601173][T27671] evdev_pass_values+0xb9/0xbd0 [ 645.608008][T27671] evdev_events+0x1e6/0x340 [ 645.614494][T27671] input_pass_values+0x285/0x890 [ 645.621420][T27671] input_event_dispose+0x3e5/0x6b0 [ 645.628514][T27671] input_inject_event+0x1fe/0x320 [ 645.635559][T27671] kd_sound_helper+0x19f/0x210 [ 645.642320][T27671] input_handler_for_each_handle+0xfe/0x1c0 [ 645.650198][T27671] call_timer_fn+0x17b/0x5f0 [ 645.657038][T27671] __run_timer_base+0x61a/0x860 [ 645.663879][T27671] run_timer_softirq+0xb7/0x180 [ 645.670717][T27671] handle_softirqs+0x286/0x870 [ 645.677464][T27671] __irq_exit_rcu+0xca/0x1f0 [ 645.684037][T27671] irq_exit_rcu+0x9/0x30 [ 645.690260][T27671] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 645.697975][T27671] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 645.706202][T27671] pv_native_safe_halt+0x13/0x20 [ 645.713126][T27671] default_idle+0x13/0x20 [ 645.719443][T27671] default_idle_call+0x74/0xb0 [ 645.726194][T27671] do_idle+0x1e8/0x510 [ 645.732245][T27671] cpu_startup_entry+0x44/0x60 [ 645.738996][T27671] rest_init+0x2de/0x300 [ 645.745225][T27671] start_kernel+0x470/0x4f0 [ 645.751714][T27671] x86_64_start_reservations+0x2a/0x30 [ 645.759152][T27671] x86_64_start_kernel+0x66/0x70 [ 645.766069][T27671] common_startup_64+0x13e/0x147 [ 645.772993][T27671] INITIAL USE at: [ 645.777051][T27671] lock_acquire+0x120/0x360 [ 645.783455][T27671] _raw_spin_lock+0x2e/0x40 [ 645.789856][T27671] evdev_pass_values+0xb9/0xbd0 [ 645.796599][T27671] evdev_events+0x1e6/0x340 [ 645.803008][T27671] input_pass_values+0x285/0x890 [ 645.809870][T27671] input_event_dispose+0x330/0x6b0 [ 645.816894][T27671] input_inject_event+0x1fe/0x320 [ 645.823825][T27671] evdev_write+0x2fc/0x480 [ 645.830142][T27671] vfs_write+0x27b/0xa90 [ 645.836284][T27671] ksys_write+0x145/0x250 [ 645.842510][T27671] do_syscall_64+0xf6/0x210 [ 645.848923][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.856722][T27671] } [ 645.859428][T27671] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 645.867744][T27671] -> (&new->fa_lock){....}-{3:3} { [ 645.873062][T27671] INITIAL USE at: [ 645.877028][T27671] lock_acquire+0x120/0x360 [ 645.883259][T27671] _raw_write_lock_irq+0xa2/0xf0 [ 645.889918][T27671] fasync_remove_entry+0xf1/0x1c0 [ 645.896665][T27671] sock_fasync+0x85/0xf0 [ 645.902628][T27671] __fput+0x8a2/0xa70 [ 645.908327][T27671] task_work_run+0x1d1/0x260 [ 645.914678][T27671] resume_user_mode_work+0x5e/0x80 [ 645.921525][T27671] syscall_exit_to_user_mode+0x9a/0x120 [ 645.928791][T27671] do_syscall_64+0x103/0x210 [ 645.935103][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.942719][T27671] INITIAL READ USE at: [ 645.947125][T27671] lock_acquire+0x120/0x360 [ 645.953790][T27671] _raw_read_lock_irqsave+0xaf/0x100 [ 645.961236][T27671] kill_fasync+0x199/0x4d0 [ 645.967806][T27671] sock_wake_async+0x137/0x160 [ 645.974734][T27671] sk_wake_async+0x184/0x280 [ 645.981487][T27671] unix_release_sock+0x6d4/0xc60 [ 645.988663][T27671] unix_release+0x92/0xd0 [ 645.995144][T27671] sock_close+0xc3/0x240 [ 646.001538][T27671] __fput+0x44c/0xa70 [ 646.007668][T27671] task_work_run+0x1d1/0x260 [ 646.014416][T27671] get_signal+0x11c5/0x1310 [ 646.021076][T27671] arch_do_signal_or_restart+0x95/0x780 [ 646.028772][T27671] syscall_exit_to_user_mode+0x8b/0x120 [ 646.036474][T27671] do_syscall_64+0x103/0x210 [ 646.043220][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.051264][T27671] } [ 646.053830][T27671] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 646.062574][T27671] ... acquired at: [ 646.066440][T27671] lock_acquire+0x120/0x360 [ 646.071103][T27671] _raw_read_lock_irqsave+0xaf/0x100 [ 646.076560][T27671] kill_fasync+0x199/0x4d0 [ 646.081144][T27671] evdev_pass_values+0x627/0xbd0 [ 646.086255][T27671] evdev_events+0x1e6/0x340 [ 646.090923][T27671] input_pass_values+0x285/0x890 [ 646.096044][T27671] input_event_dispose+0x330/0x6b0 [ 646.101315][T27671] input_inject_event+0x1fe/0x320 [ 646.106513][T27671] evdev_write+0x2fc/0x480 [ 646.111083][T27671] vfs_write+0x27b/0xa90 [ 646.115483][T27671] ksys_write+0x145/0x250 [ 646.119972][T27671] do_syscall_64+0xf6/0x210 [ 646.124659][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.130736][T27671] [ 646.133046][T27671] -> (&f_owner->lock){....}-{3:3} { [ 646.138239][T27671] INITIAL USE at: [ 646.142117][T27671] lock_acquire+0x120/0x360 [ 646.148170][T27671] _raw_write_lock_irq+0xa2/0xf0 [ 646.154657][T27671] __f_setown+0x67/0x370 [ 646.160448][T27671] fcntl_dirnotify+0x3d6/0x690 [ 646.166760][T27671] do_fcntl+0x6c7/0x1910 [ 646.172545][T27671] __se_sys_fcntl+0xc8/0x150 [ 646.178677][T27671] do_syscall_64+0xf6/0x210 [ 646.184869][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.192315][T27671] INITIAL READ USE at: [ 646.196637][T27671] lock_acquire+0x120/0x360 [ 646.203143][T27671] _raw_read_lock_irqsave+0xaf/0x100 [ 646.210417][T27671] send_sigio+0x38/0x370 [ 646.216649][T27671] dnotify_handle_event+0x169/0x440 [ 646.223840][T27671] fsnotify+0x1814/0x1a80 [ 646.230163][T27671] vfs_symlink+0x291/0x2f0 [ 646.236566][T27671] do_symlinkat+0x1b1/0x3f0 [ 646.243057][T27671] __x64_sys_symlinkat+0x95/0xb0 [ 646.250014][T27671] do_syscall_64+0xf6/0x210 [ 646.256591][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.264479][T27671] } [ 646.266965][T27671] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 646.275804][T27671] ... acquired at: [ 646.279589][T27671] lock_acquire+0x120/0x360 [ 646.284253][T27671] _raw_read_lock_irqsave+0xaf/0x100 [ 646.289699][T27671] send_sigio+0x38/0x370 [ 646.294104][T27671] kill_fasync+0x24d/0x4d0 [ 646.298677][T27671] sock_wake_async+0x137/0x160 [ 646.303598][T27671] sk_wake_async+0x184/0x280 [ 646.308357][T27671] unix_release_sock+0x6d4/0xc60 [ 646.313457][T27671] unix_release+0x92/0xd0 [ 646.317944][T27671] sock_close+0xc3/0x240 [ 646.322350][T27671] __fput+0x44c/0xa70 [ 646.326490][T27671] task_work_run+0x1d1/0x260 [ 646.331241][T27671] get_signal+0x11c5/0x1310 [ 646.335902][T27671] arch_do_signal_or_restart+0x95/0x780 [ 646.341602][T27671] syscall_exit_to_user_mode+0x8b/0x120 [ 646.347304][T27671] do_syscall_64+0x103/0x210 [ 646.352062][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.358114][T27671] [ 646.360425][T27671] [ 646.360425][T27671] the dependencies between the lock to be acquired [ 646.360433][T27671] and SOFTIRQ-irq-unsafe lock: [ 646.373914][T27671] -> (tasklist_lock){.+.+}-{3:3} { [ 646.379021][T27671] HARDIRQ-ON-R at: [ 646.382984][T27671] lock_acquire+0x120/0x360 [ 646.389127][T27671] _raw_read_lock+0x36/0x50 [ 646.395275][T27671] __do_wait+0xde/0x740 [ 646.401064][T27671] do_wait+0x1f8/0x520 [ 646.406765][T27671] kernel_wait+0xab/0x170 [ 646.412730][T27671] call_usermodehelper_exec_work+0xbe/0x230 [ 646.420268][T27671] process_scheduled_works+0xadb/0x17a0 [ 646.427450][T27671] worker_thread+0x8a0/0xda0 [ 646.433672][T27671] kthread+0x70e/0x8a0 [ 646.439377][T27671] ret_from_fork+0x4b/0x80 [ 646.445424][T27671] ret_from_fork_asm+0x1a/0x30 [ 646.451830][T27671] SOFTIRQ-ON-R at: [ 646.455802][T27671] lock_acquire+0x120/0x360 [ 646.461943][T27671] _raw_read_lock+0x36/0x50 [ 646.468085][T27671] __do_wait+0xde/0x740 [ 646.473883][T27671] do_wait+0x1f8/0x520 [ 646.479585][T27671] kernel_wait+0xab/0x170 [ 646.485545][T27671] call_usermodehelper_exec_work+0xbe/0x230 [ 646.493096][T27671] process_scheduled_works+0xadb/0x17a0 [ 646.500273][T27671] worker_thread+0x8a0/0xda0 [ 646.506493][T27671] kthread+0x70e/0x8a0 [ 646.512261][T27671] ret_from_fork+0x4b/0x80 [ 646.518310][T27671] ret_from_fork_asm+0x1a/0x30 [ 646.524702][T27671] INITIAL USE at: [ 646.528577][T27671] lock_acquire+0x120/0x360 [ 646.534629][T27671] _raw_write_lock_irq+0xa2/0xf0 [ 646.541126][T27671] copy_process+0x21d5/0x3b80 [ 646.547359][T27671] kernel_clone+0x21e/0x870 [ 646.553443][T27671] user_mode_thread+0xdd/0x140 [ 646.559754][T27671] rest_init+0x23/0x300 [ 646.565454][T27671] start_kernel+0x470/0x4f0 [ 646.571507][T27671] x86_64_start_reservations+0x2a/0x30 [ 646.578515][T27671] x86_64_start_kernel+0x66/0x70 [ 646.584998][T27671] common_startup_64+0x13e/0x147 [ 646.591490][T27671] INITIAL READ USE at: [ 646.595800][T27671] lock_acquire+0x120/0x360 [ 646.602288][T27671] _raw_read_lock+0x36/0x50 [ 646.608774][T27671] __do_wait+0xde/0x740 [ 646.615003][T27671] do_wait+0x1f8/0x520 [ 646.621083][T27671] kernel_wait+0xab/0x170 [ 646.627395][T27671] call_usermodehelper_exec_work+0xbe/0x230 [ 646.635276][T27671] process_scheduled_works+0xadb/0x17a0 [ 646.642804][T27671] worker_thread+0x8a0/0xda0 [ 646.649374][T27671] kthread+0x70e/0x8a0 [ 646.655422][T27671] ret_from_fork+0x4b/0x80 [ 646.661816][T27671] ret_from_fork_asm+0x1a/0x30 [ 646.668558][T27671] } [ 646.671039][T27671] ... key at: [] tasklist_lock+0x18/0x40 [ 646.678741][T27671] ... acquired at: [ 646.682522][T27671] lock_acquire+0x120/0x360 [ 646.687184][T27671] _raw_read_lock+0x36/0x50 [ 646.691850][T27671] send_sigurg+0x12b/0x420 [ 646.696423][T27671] sk_send_sigurg+0x6c/0x2e0 [ 646.701188][T27671] queue_oob+0x3d9/0x4e0 [ 646.705593][T27671] unix_stream_sendmsg+0xa41/0xb60 [ 646.710859][T27671] __sock_sendmsg+0x219/0x270 [ 646.715697][T27671] ____sys_sendmsg+0x505/0x830 [ 646.720617][T27671] ___sys_sendmsg+0x21f/0x2a0 [ 646.725451][T27671] __x64_sys_sendmsg+0x19b/0x260 [ 646.730552][T27671] do_syscall_64+0xf6/0x210 [ 646.735214][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.741263][T27671] [ 646.743567][T27671] [ 646.743567][T27671] stack backtrace: [ 646.749533][T27671] CPU: 0 UID: 0 PID: 27671 Comm: syz.1.2563 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 646.749552][T27671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 646.749559][T27671] Call Trace: [ 646.749567][T27671] [ 646.749572][T27671] dump_stack_lvl+0x189/0x250 [ 646.749591][T27671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.749605][T27671] ? __pfx__printk+0x10/0x10 [ 646.749617][T27671] validate_chain+0x1f05/0x2140 [ 646.749632][T27671] __lock_acquire+0xaac/0xd20 [ 646.749647][T27671] ? send_sigurg+0x12b/0x420 [ 646.749656][T27671] lock_acquire+0x120/0x360 [ 646.749669][T27671] ? send_sigurg+0x12b/0x420 [ 646.749682][T27671] ? _raw_read_lock_irqsave+0xbb/0x100 [ 646.749696][T27671] _raw_read_lock+0x36/0x50 [ 646.749707][T27671] ? send_sigurg+0x12b/0x420 [ 646.749715][T27671] send_sigurg+0x12b/0x420 [ 646.749724][T27671] sk_send_sigurg+0x6c/0x2e0 [ 646.749735][T27671] queue_oob+0x3d9/0x4e0 [ 646.749748][T27671] ? __pfx_queue_oob+0x10/0x10 [ 646.749759][T27671] ? __schedule+0x1700/0x4cd0 [ 646.749770][T27671] ? __pfx___might_resched+0x10/0x10 [ 646.749780][T27671] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 646.749794][T27671] unix_stream_sendmsg+0xa41/0xb60 [ 646.749808][T27671] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 646.749820][T27671] ? aa_sock_msg_perm+0x94/0x160 [ 646.749832][T27671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.749843][T27671] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 646.749854][T27671] __sock_sendmsg+0x219/0x270 [ 646.749865][T27671] ____sys_sendmsg+0x505/0x830 [ 646.749880][T27671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.749896][T27671] ? import_iovec+0x74/0xa0 [ 646.749911][T27671] ___sys_sendmsg+0x21f/0x2a0 [ 646.749930][T27671] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.749951][T27671] ? __fget_files+0x2a/0x420 [ 646.749964][T27671] ? __fget_files+0x3a0/0x420 [ 646.749978][T27671] __x64_sys_sendmsg+0x19b/0x260 [ 646.749992][T27671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.750009][T27671] ? do_syscall_64+0xba/0x210 [ 646.750024][T27671] do_syscall_64+0xf6/0x210 [ 646.750037][T27671] ? clear_bhb_loop+0x60/0xb0 [ 646.750049][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.750058][T27671] RIP: 0033:0x7fbc3578e969 [ 646.750069][T27671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.750077][T27671] RSP: 002b:00007fbc3662a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.750088][T27671] RAX: ffffffffffffffda RBX: 00007fbc359b5fa0 RCX: 00007fbc3578e969 [ 646.750096][T27671] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000006 [ 646.750103][T27671] RBP: 00007fbc35810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 646.750109][T27671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.750115][T27671] R13: 0000000000000000 R14: 00007fbc359b5fa0 R15: 00007fbc35adfa28 [ 646.750125][T27671]