last executing test programs: 8.583755796s ago: executing program 4 (id=555): socket$unix(0x1, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000005c0)={r2}, &(0x7f00000001c0)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000003040)={@val={0xa888, 0x800}, @val={0x0, 0x3, 0x0, 0x1, 0x600}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 7.840645121s ago: executing program 4 (id=558): get_robust_list(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x356, 0x3a, '\xf1', 0x3a, '', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000240)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b200fedea1c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0xf47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) r5 = io_uring_setup(0x7c50, &(0x7f0000000080)={0x0, 0x2000c717, 0x800, 0x1000001, 0x3a4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000100)) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 7.648083972s ago: executing program 1 (id=561): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)={0x28, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) 7.558201222s ago: executing program 1 (id=562): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x1e, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000040), 0x1, r3, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000004c0)={0x0, 0x0, r4, 0x0, 0x0, 0x8, 0x6, 0x7, {0x3, 0x80, 0x9, 0xfe00, 0x8001, 0xfc00, 0x3, 0xb57f, 0x1, 0x6, 0xffff, 0x4, 0x6, 0xfff, "6ec21ca269e9212b84f9a1313fde7bce6aa7ed325dffde30fb02ef1f4ceafdc8"}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000240)=""/182, 0xb6, 0x42, &(0x7f0000000300)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) listen(r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom(r0, &(0x7f00000000c0)=""/120, 0x78, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0xfd3a, 0x1, 0x4}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000580)=""/206) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) ptrace$getregset(0x4204, r8, 0x6, &(0x7f0000000040)={&(0x7f0000000140)=""/251, 0xfb}) 7.323235365s ago: executing program 1 (id=563): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20018804}, 0x40040) 7.260761871s ago: executing program 1 (id=564): r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb4, &(0x7f0000000000), &(0x7f0000000200)=0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.id\x00', 0x0, 0x8cff, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r2, 0x0, 0x0, 0x404477d, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0xff67) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99", 0x8e}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960", 0x7d}, {&(0x7f0000000c80)="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", 0x11c}], 0x3}}], 0x1, 0xc0) sendto$inet(r2, &(0x7f00000003c0)="012e9fda0dd5be0e974042ba5d9072db41eb5a7843fded42328933fd3cc86591962e85a4708971af342fffcb53eaad113a49dfb4adda439c49fdd828d2a2d4a7bbf0e8d435b0961bedf74d3d2b2f51b0bedf8ce5372accaa6ed2f721ed5b7d885d80ad52bc1c20563aefc60d4f4eb536e068f1657a68fa29f97a9b2aa77f7ea7a0ebe7ee207d45ba24af82665f2fcb612a505dd9f54a75268d7a8440c366b8e1e90b54668b84997ce057af40edf622c10c4419ae1ba3afb8583b758ddf770264816ce9bcdf4e", 0xc6, 0x10000, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') pread64(r6, 0x0, 0x0, 0x8000) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000001340)="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", 0xfffffffffffffdc0, 0x40040011, 0x0, 0x5a) listen(r0, 0x7) sendmmsg$inet_sctp(r0, &(0x7f0000001580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x8, 0xc, 0x0, 0x80000001, 0xa, 0x101, 0xfffeffff}}], 0x30, 0x48010}], 0x1, 0x20020004) syz_usb_connect(0x5, 0xb6, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605ffff020102092403050703020496062404029cfe09050b00400080000007250181f7090009050d0000046404050725010300bfbb0905020200000000000000003847c1db1f204200a0e453181c85293b"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5}) socket$inet_sctp(0x2, 0x5, 0x84) 6.00722714s ago: executing program 2 (id=571): syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3e080300000070002500000001907864010100ac1414aadf433e8687c3223e0089000000000000ac1414aa830b00ac14140000000000863200000000000c7c43c2605c732c60ba940012ffd11634eea26b0faffa0dea2e903528000702a20948fd0705ccf029000200"/126], 0x0) 5.756641812s ago: executing program 2 (id=572): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)={0x28, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) 5.687925357s ago: executing program 1 (id=574): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20018804}, 0x40040) 5.582139665s ago: executing program 2 (id=575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x70, 0x80) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, 0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x60840, 0xbd) fcntl$setlease(r4, 0x400, 0x0) creat(&(0x7f00000023c0)='./file0\x00', 0xe) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000140)='$[\x00', &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='\xff\xff\xff\xff\xff\xff']}, &(0x7f0000000340)={[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00']}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x80, 0x40, 0xc0, 0x4, {{0x48, 0x4, 0x1, 0x0, 0x120, 0x68, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x20, 0x1b, 0x0, 0x5, [0xc7, 0x8, 0x7392, 0x100, 0x6, 0x10000, 0x9]}, @end, @rr={0x7, 0xf, 0xec, [@multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100]}, @lsrr={0x83, 0x13, 0x55, [@private=0xa010100, @broadcast, @multicast2, @multicast2]}, @cipso={0x86, 0x40, 0x3, [{0x6, 0x5, "94dc6a"}, {0x0, 0x6, "c66246b1"}, {0x2, 0x9, "7b76c93579eebc"}, {0x5, 0x7, "ae225852d1"}, {0x2, 0x5, "26b391"}, {0x6, 0x10, "81b8eb1705402b8d4ac29e3ea10a"}, {0x5, 0xa, "b1a5c5b5fe35b18e"}]}, @ssrr={0x89, 0xf, 0x14, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0xbf, 0x3, 0x4, [{@empty, 0x4}, {@broadcast, 0x4}, {@loopback, 0x3}, {@private=0xa010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x7b}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@local, 0xa}]}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x7, 0xa, "f9ee9dda4a4c119d"}, {0x5, 0x10, "64f0ee144d8e98b8691d98071965"}]}, @timestamp={0x44, 0xc, 0x19, 0x0, 0x7, [0x0, 0xb7]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000002380)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x12400204}, 0xc, &(0x7f0000000540)={&(0x7f0000002b00)=@deltfilter={0x1d40, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xfff2, 0xfffb}, {0xa, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xa1, 0x9}}, @filter_kind_options=@f_route={{0xa}, {0x1ce4, 0x2, [@TCA_ROUTE4_POLICE={0x494, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7c}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x3, 0x1, 0x6, 0x747, {0x81, 0x1, 0x2, 0xb, 0x19, 0x80000001}, {0x0, 0x2, 0x9, 0x14, 0x5, 0xa7}, 0x2, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8, 0x2, 0x1e0, 0xc5fc20, 0x5, 0x7, 0x29, 0x80, 0x6, 0xefbc, 0x8001, 0x0, 0x10001, 0x30d8, 0x3, 0x1, 0x9, 0xa, 0xffffffff, 0x2, 0xf4e, 0x0, 0x3, 0xffffffff, 0x3, 0x5, 0x540, 0x3, 0x401, 0x14, 0x3, 0x5, 0x1, 0xffffffff, 0x9, 0x53, 0x6, 0x8001, 0x5, 0x2, 0xac, 0x4, 0x1, 0x3, 0x3, 0xfff, 0x33, 0x7, 0x7, 0xac, 0x5, 0xf6d, 0x1000, 0x4, 0x1, 0x408, 0x100, 0xb0, 0x2, 0xf, 0x9, 0x9, 0x7, 0x1ff, 0x6, 0x400, 0xffffff81, 0x4, 0x7ff, 0x4, 0x1ff, 0x6, 0x8, 0xd2, 0x7, 0x401, 0x2, 0x9, 0x2, 0x8, 0x0, 0x0, 0x8, 0x4, 0x0, 0x3, 0x7ff, 0x0, 0x5, 0xb, 0x100, 0x9, 0x3, 0x5, 0x0, 0x0, 0xdd, 0x8, 0x212, 0x3ff, 0x4, 0x40, 0x10000, 0x54, 0x424, 0x4, 0xc36, 0x0, 0xd, 0x9, 0x3, 0x3b2, 0x1, 0x9, 0x40, 0x7ff, 0x1, 0x7, 0x2, 0x7fffffff, 0xb8, 0x9b, 0x8, 0x6, 0xf4fe, 0xfffffc00, 0x101, 0x9, 0xcb73, 0x949f, 0x1, 0x7ff, 0x9, 0x7, 0x3, 0x8, 0x81, 0x6, 0xbe74, 0xb9f1a0, 0x2, 0x200, 0x1, 0xa, 0x9f1a0, 0xff, 0x7000000, 0x9, 0x5c, 0x5, 0x1, 0x1, 0x1, 0x0, 0x7, 0x7, 0xbd9e, 0x766, 0x8, 0x15c, 0x9, 0x40, 0x1, 0x10000006, 0x3, 0x772, 0x6, 0x2, 0x0, 0x80000000, 0xcb, 0x7e, 0x2, 0x4, 0x8, 0xae, 0x26, 0x4, 0xffff, 0x2, 0x8, 0x10, 0x3, 0xbc, 0x62c, 0x4, 0x6, 0x3ff, 0x2, 0x0, 0x6, 0x3ff, 0xfffffc01, 0x9, 0x6, 0x5, 0x1, 0xffffffff, 0xccb, 0x238a, 0x6, 0x0, 0x9, 0x116f4ae7, 0x10000, 0x5, 0x4, 0x10, 0x1000, 0x1, 0x9, 0xff, 0x0, 0x1, 0xa00, 0x5, 0x5a1, 0x1000, 0x3, 0x5, 0x2, 0xfffffffe, 0x7c4, 0x4d, 0x0, 0x8, 0x2, 0x80000000, 0xffffffd2, 0xe3, 0x5, 0x9, 0x0, 0x5, 0x40, 0x2, 0x1, 0x2, 0x8, 0x6, 0x9, 0x9, 0x200, 0x3, 0x2, 0x7, 0x9, 0x6, 0x5, 0x1, 0xc1, 0x7, 0x7bf004bf, 0xffffffff, 0x9c6]}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_ACT={0x13f4, 0x6, [@m_tunnel_key={0x138, 0x13, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0xa99a616e477f58f}}}}, @m_gact={0x7c, 0xb, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1371, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12b4, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9a03, 0x3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1b7c, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x6d9, 0x8}}]}, {0x7, 0x6, "a44e67"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x124, 0x2, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xbfe, 0x1, 0x6, 0xffff}}, @TCA_DEF_DATA={0x7, 0x3, '$[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x4, 0x4, 0x3, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, '\xff\xff\xff\xff\xff\xff'}]}, {0xb1, 0x6, "c1e05c437efedc1b4270548ee4555e195c7ec15dcbb83d3d6e3deb87102673685ae99e75f1857a36295d41e6b3faba9e2964e169df5e19c1d19aa5df18e7ef063d8433b536ad53914baff2282f1b351d36afadb3cf6f82b9e85be47c398e2d6e805f24c4240fe061e330354ba68d5ee225f05c3b14646d502364b4a72acfc1597e2a8fdc371610f2a69ff6b1ec7418c07525f03deca5300aa925df6095ad1c258c7990f7b57803c5c71887f6d6"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x1090, 0x5, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xf}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x5, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffffffffff, 0x46d6, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffff001, 0x7, 0x5, 0x5, 0x7}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa9a1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x88, 0x11, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x3b, 0x6, "216a302a8490649dad79fc7d3b833b65f6fbdc1df58d9b5499693d1c9705f68cbf2c7e2d0d69c7e6d9ef776422a2501f40ea731539086c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x448, 0x6, [@m_gact={0x120, 0xe, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x5, 0x8, 0x10001}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x14e1, 0x1}}]}, {0xce, 0x6, "6976c64a6b334d7f7966d085dfde6615793c62e5da59fc0ef4fb6375e0fd4df9c833314f86e88fc0b416fd9288574911654987ad2ddb8886c34e55138e6f6793bf824f28eba862100b0188a69bf78ecfdc631ca957142d30b562355573bc3cab70a61ba393081f884027df84d8b25f3cdd441b288e5d6f127e681854cc9769f28815fe8e5bc23c32c197e491f2b1b7851845dd6b4f932be8d28952c6b22f51a1ef94790f50caf93b418c3c0c9da4cbd06856340d5828950128e5f63960b8b099faaf263072eeb3477e4f"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x138, 0x1e, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8, 0x8, 0x40, 0x2}, @broadcast, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x10000, 0x1, 0x9, 0x1}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x14, 0xbc9d, 0xffffffffffffffff, 0x2, 0xf}, @multicast1, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x10, 0x3, 0x2, 0x3105}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}]}, {0x6d, 0x6, "5bf0098e27951f92f850b09436f846a88ae8fc0078007e9f46486a5f147994e96be09399594d96ae210a276930af9b4f921f4c235ad75f6380670e7bde797b1c5bd55f5b530e6fa332b10f3bc04769f07d8a10cfe6e627cff30e01db9493af19a63964a07bd7d65f6f"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x13c, 0x11, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xf, 0x5, 0x0, 0x7}, 0x87}}]}, {0xee, 0x6, "51955dc406c1627c1d547c7f5bb6d4e755a66e8e632a6672e0ed5bfdceae96db0c6463f05bd43f578232fd6cfbd627055203b9a85e61dca1600e4ef6c456d35a977c0738d76ceadb5e77ab9c3bc35e5e5156744640a4ca9d5fb51b5202bc69ad14cbcdd98d59f26a32271a50efc7472a4c9ec295332e173e012806b399f984fcb2c2faf3d96dc602ca84c578c32eb89081757dc7e5e7b3aa57a8b36c13a1c0c9569dd46f6f4bcda7208a414d4c829d789e96ec011c14dd22446b3e1c953634372d82c8f20c9371f216be8526fe731f0af14f885ec9130d9a14b25aacf46f710c4a8eb3323ef501276290"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xb0, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x6, 0x8, 0xffffffff, 0x6}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10001}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0xc99, 0x4, 0x6e3f, 0xfff}}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf001}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x23, 0x6, "bfe009c1b749e9298e8bd19de21e1fc21fa80a9c59de38633f8ea1f9159d89"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}]}, 0x1d40}, 0x1, 0x0, 0x0, 0x2}, 0x80) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x4}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {0x0, 0x0, 0xb8}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) pwritev2(r2, &(0x7f0000002a00)=[{&(0x7f0000002400)="0ddc5fb9857b9d878e6e9849d6aa8352dfdd398d177cd9becae4be14d9466710280504dcfe1c7b96a632f150676c6b54ddba53357b7662fbf0ed0c7e6a8e851031b5cf7fdc40e52c7a3bfbc3d616affe8179410c0f2c7c6b39bbf36a4547042fd10b44ccaa6d7674eae4cdfe51c46989d0cc059b48a13a280d61407d701893ef4b41247b98195be0a3b67e4a9e8896a92aac011fc55f2185", 0x98}, {&(0x7f00000024c0)="e2afd0d48c17b1c87c202c9128b5d2f0240844557a33961c8fc504326dfa2ffaebcaf4e30c43dfb5a51cc589410d655e3b511fb0a1e425cfd9248e454470be77827360b232142a3c929479437c401b839ac245a39517557761759a2c16ea63c0fbfb27c788e9c87663960f3a1968b164e49c629c0dd703de871c15085dea", 0x7e}, {&(0x7f0000002540)="fef6ea835338aaaf68511cc313d1ed5a593e69853ded569529101707f381c1216ba12e852c707dfee56b7b07f3df741367c82c2833a35fa9c3c92214f4cfa111121d1a124cd44773b1d418fccbb406041b54574ed17a12a8455dabf1cb50faa40ce19b6379892a2681c3367060a4762794f1e61d58583d7604c8c5e7458c803097acae3aabdf3afa9fc49d06515991c22d37437ff542fa27a49d531f235a8d3886593db595f27f461e51d6d04f194ebd0a73fe8066211719e5aa668356", 0xbd}, {&(0x7f0000002600)="0520bc04b099b907e05a921b7b2821a9946b4435e25249411d0a95", 0x1b}, {&(0x7f0000002640)="7205f44a9ecbeba451f7cf6bd22e5844ac3f624085bf8ae58e92396b09feb7dbabe6c0cdd776100907e28a13394436f3fe9c842fed00e3c388b8b5c8fd00127667b035fb482c8aad4c323c1afb06a9e58c996096c2e3eef5f2d9df51dfbcfacc3148fc4261390493", 0x68}, {&(0x7f00000026c0)="6050b1828d1878bc966ffaf085625ff08b92e3e189c9df4b83647f54d55611c5c1f45223", 0x24}, {&(0x7f0000002700)="117736781ecdbfa59ce4bf275e6d22e0b5190217d228d81ab6e9f54023414f574747aa30b4edeb4a271c30d6c244c3d70a3267158a3a0ea4941a123e03f058defdf0e20e829a8ec8e85879e3319096bed69d624ac18a9cb032408b0a3ad5f58da4", 0x61}, {&(0x7f0000002780)="b1b2b97e6701e086baf90ad17969f85ce6aacf696eaf334af0d88c7a494ac4d261073316fb02d8cc5d532f7733464dc89e3f8bab57c3ac16641517fd05716ebb9ce0e22c70cf57aa03ae7571fc3662022b20551d32f9443e1b96102af5d8915f82010ec2cc6930e66969e087c1271eabac645889e9196b486d5fb0cdab9850383ce31a79fa2cbd3bda554b176ea719c2329a35cbb10c4ea6b5cfe4221eb508a26caa6b8021dcc9e7d4e5de0c033ffd62e99bcba41018ebb207d28089a8e24135bb32d19be3d9feea0fc55262756159f605fb609d1f3f19fb8bc849df2b6181388f9de35402400c", 0xe7}, {&(0x7f0000002880)="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", 0xfd}, {&(0x7f0000002980)="a8946290e1d50ee6aea816f692309b2f5fa6dcf612722957525df44b462747a9886d44b2d38ee37b19b88a6d394b12e6124cd4e4838a62b136d47573dbca76a323c66a6fd27328ad85668e19ffd247fd5c0f03b7", 0x54}], 0xa, 0x0, 0xb, 0xa) close_range(r1, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000002a80), 0x20000, 0x0) r8 = dup2(r4, r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0xdb5, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304fdffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000e4130012800a000100767863616e0000000400028008000a00", @ANYRES32=r11, @ANYBLOB], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x800}, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x268}) sendto$packet(r2, &(0x7f0000000080)="ba911af243a2397fe3251d358b912e1ecc396a6986c504cc2d0a28d3bd7d144a37ee", 0x22, 0x4000012, &(0x7f00000000c0)={0x11, 0xf6, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) openat$fb0(0xffffff9c, &(0x7f0000002ac0), 0x40000, 0x0) 5.365036181s ago: executing program 1 (id=577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf0}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0x10}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x100000) 5.232903125s ago: executing program 3 (id=578): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f0000002580)={{0x6, 0x2, 0xb000000, 0xfb, '\x00', 0x5d}, 0x0, [0x2, 0x3, 0x5, 0xffff8001, 0x5, 0xdb, 0x401, 0x0, 0x0, 0xc, 0xa, 0x80000000, 0x7, 0x5, 0x7fffffff, 0x40, 0x8, 0x179ece0b, 0x80, 0x0, 0xc, 0x0, 0x8001, 0x1, 0x6, 0xf, 0xe, 0x8, 0x1, 0x8, 0x7, 0x2, 0x8, 0x5, 0x8, 0x2, 0x3, 0xf, 0x3d4, 0xe5, 0x200, 0xd, 0x1, 0xe, 0x5, 0x4, 0x8, 0x1a28bf51, 0x6, 0x7f, 0x5e, 0xed7e, 0xef4b, 0x3, 0x6, 0x5, 0x6, 0x2, 0x7, 0x93, 0x123, 0x400, 0xffffff01, 0x1, 0xc4ff, 0xff, 0x0, 0xe, 0x6, 0x6, 0x1ff, 0x8001, 0xd, 0x697, 0x189, 0x500000, 0x7ff, 0x5, 0xffffffff, 0x1d53, 0xf, 0x2, 0x6b, 0x3, 0x4, 0x4, 0x4, 0x8b7a, 0x10001, 0x20, 0xf, 0x3, 0x0, 0x10001, 0x3, 0x1, 0x4, 0x0, 0x6, 0xb, 0x2, 0x4, 0x1, 0x2, 0x4, 0x3, 0x9, 0xffffff70, 0x5, 0x1, 0x4, 0x8, 0x3a, 0x4, 0x3, 0x7d, 0x3ff, 0x1ff, 0x5, 0x7, 0x0, 0x18, 0x9, 0x0, 0x3, 0x7, 0x101]}) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r5 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x31008003, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000c, 0x1010, r5, 0x8000000) (async) r7 = syz_io_uring_setup(0x2690, &(0x7f0000002440)={0x0, 0xc3e4, 0x2, 0x3, 0x96, 0x0, r0}, &(0x7f00000024c0), &(0x7f0000002500)=0x0) syz_io_uring_submit(r6, r8, &(0x7f0000002540)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd=r5, 0x9, 0x5, 0x5, 0x8, 0x1, {0x3}}) (async) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r9}, 0x10) (async) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dma_heap(0xffffff9c, &(0x7f0000002280), 0x234340, 0x0) dup3(r10, r3, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x145042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x12, r11, 0x0) (async) close_range(r7, r3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f00000022c0)={0x0, 0x4, 0x6, 0xffff, 0x200, 0x7}, &(0x7f0000002380)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f00000023c0)={0x2, 0xfff, 0x0, 0xf6c1, 0xfafe, 0x6, 0x5, 0x3, r14}, &(0x7f0000002400)=0x20) (async) r15 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x800) ioctl$CEC_RECEIVE(r15, 0xc0386106, &(0x7f00000003c0)={0x8, 0x9943, 0x9, 0x6, 0x7, 0x7, "fa4650f991f2c1a04cf1d6597b89b4fb", 0xfa, 0x1, 0x51, 0xf7, 0x8, 0x13, 0x80}) (async) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="f400000013002f0a29bd7200fcdbdf2507006800", @ANYRES32=r1, @ANYBLOB="000000001020060024001a8009000100766c616e000000001400048010000480"], 0xf4}}, 0x4050) 4.857843539s ago: executing program 32 (id=577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf0}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0x10}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x100000) 4.852391563s ago: executing program 2 (id=580): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x1001, 0x5) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) (fail_nth: 38) 4.832460039s ago: executing program 3 (id=582): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$media(0x0, 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000002c0)={@local, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0xcf, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000400000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff00"/126]}, 0xce) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$btrfs_control(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f00000001c0)=0xec) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0000", @ANYRES32=r10, @ANYBLOB="08000100e000000208000200ffffffff08000400ac1414aa080004009d1414aa08000a000100200008000200"], 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.739317518s ago: executing program 4 (id=583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) 3.20949752s ago: executing program 4 (id=586): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f00000000c0)={r1, 0x8, 0x1, 0x8000000000000000}) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x2, 0xd000, 0x1000, &(0x7f0000fef000/0x1000)=nil}) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="26660f157e08363e660fc7b600000fc75f4d0f22dcf2aeb807010f00d07914b823018ed80f01c3f4", 0x28}], 0x1, 0x0, 0x0, 0xe5) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000000)={0xb2, 0x0, &(0x7f0000000500)}) 2.789458496s ago: executing program 0 (id=588): socket(0x10, 0x3, 0x0) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_ATTR(r0, &(0x7f0000000580)={0x78, 0x0, 0x0, {0x2, 0x1, 0x0, {0x0, 0x8000000000000000, 0x8, 0x0, 0x9, 0x4, 0x9, 0x7f, 0x9, 0x4000, 0x6, 0x0, 0xffffffffffffffff, 0x15d, 0x2}}}, 0x78) (async) read$FUSE(r0, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128d7acf0800", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32) shutdown(r2, 0x1) (rerun: 32) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) (async, rerun: 64) ioctl$int_out(r2, 0x2, &(0x7f0000000100)) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) ppoll(&(0x7f0000000300)=[{r2, 0x10800}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}], 0x1, 0x4004441) (async, rerun: 64) r4 = socket$packet(0x11, 0x2, 0x300) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) ioctl$CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async, rerun: 32) syz_usb_connect(0x3, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x1, 0x4b, 0xb9, 0x40, 0xf11, 0x1100, 0x2e87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xde, 0x0, 0x80, 0x9, [{{0x9, 0x4, 0xe9, 0x0, 0x2, 0xea, 0xb5, 0x8a, 0xe, [], [{{0x9, 0x5, 0x9, 0x3, 0x8, 0x3, 0x9d, 0x6}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x5, 0x0, 0x5a}}]}}]}}]}}, 0x0) (async, rerun: 32) socket$can_bcm(0x1d, 0x2, 0x2) 2.709791987s ago: executing program 4 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$dir(0xffffff9c, &(0x7f00000001c0)='./cgroup/pids.max\x00', 0x110002, 0xa8) r3 = openat(r2, &(0x7f0000000480)='./cgroup/pids.max\x00', 0x202, 0xc3) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002640), 0x802, 0x0) readv(r4, &(0x7f0000003cc0)=[{&(0x7f0000002b00)=""/4096, 0x1000}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x2, 0x40000200, 0x6, 0xfffc, 0x8, 0x7, 0x0, 0x0, 0x20, 0xf}}, 0x50) io_setup(0x81, &(0x7f0000001440)=0x0) io_submit(r6, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000405707000a000000000001090224"], 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect(0x0, 0xbea, &(0x7f00000007c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0x83c0550b, 0x0) io_getevents(r6, 0x9, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0) r8 = getpgid(0xffffffffffffffff) write$cgroup_pid(r3, &(0x7f0000000200)=r8, 0x12) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) write$char_usb(r3, &(0x7f0000000400)="e0ac0c10fdf0098d83033f4c1a293c345397441883e8524fa677cd2e23ce0ed949aeb3744536dce4e37081505b927705eb9f78b89b2de4526fac27305abc71657d80a836ef62eb65c6e612138eda04a406309fa1ef0da2ba37e7ee90faa3ea2053637f0a99d69e790fa60c4f580ad9e9", 0x70) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x0) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000390427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="3c449a0000000000000012800900011076657430980000006801028008001300", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) 2.298923594s ago: executing program 0 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$igmp(0x2, 0x3, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRES8=r2, @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0x2040000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = dup2(r3, r2) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x513883, 0x488) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) getdents(r4, &(0x7f0000000080)=""/65, 0x41) r7 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000040)={0x8}) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = socket$inet6(0xa, 0xa, 0xaf0a) bind$inet6(r8, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r8, 0x20000005) socket$inet6(0xa, 0xb, 0x0) 1.935725781s ago: executing program 0 (id=591): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0xa0, 0x8, 0x3, 0x6, 0x20, 0x41, 0x3, 0x0, 0x8, 0x0, 0xfd, 0xc0, 0x40, 0x7, 0xb}}) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d"], 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x3, 0x0, 0x5, 0x0, 0x0, 0x6b, 0x0, 0x80000001, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff], 0x1, 0x355610}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x102000}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, 0x0, 0x0) syz_pidfd_open(r3, 0x0) (async) r8 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x0, r1, 0xee01, 0xffffffffffffffff, r2, 0x24, 0x100}, 0x7, 0x6, 0x5, 0xffffff61, r3, r8, 0x7ff}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) futex(&(0x7f0000000280)=0x1, 0x1, 0x1, &(0x7f0000002340)={0x77359400}, &(0x7f0000002380)=0x2, 0x1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 1.714145389s ago: executing program 2 (id=592): socket(0x10, 0x3, 0x6) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x5, &(0x7f0000000080)={0x1f, "14a6c63d876ff44271f19ca6e4482707dab7299602aed83463604d70b41d4008e3"}}) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x5, 0xb9, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0xa, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x4, 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x1, 0x7, "2195a89fa4"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0xd3, 0xe8}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x6b, 0x3, '+'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x9, 0xfa, "3a1c15fd70"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x1, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x4, 0x24, "a0be", "a93635"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x4, 0xff, {0x7, 0x25, 0x1, 0x0, 0x1, 0xa24}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xa, 0xfd, {0x7, 0x25, 0x1, 0x80, 0x1, 0x7}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x9, 0x7, 0xa, 0xff, 0xb4}, 0x1f, &(0x7f00000001c0)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "240ec8dc7fd57bd86006ae575217d83a"}]}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xe24}}, {0x9, &(0x7f0000000240)=@string={0x9, 0x3, "fbffbe498e5d9f"}}, {0xf8, &(0x7f0000000300)=@string={0xf8, 0x3, "9f5f18fdc91d135bb85de6fcd8a27628dd0ddcb6553e1c6c68d239cef46f0388f61f39bf088de3b57e05206facd56235e8b0b35d42e966c1ef9ba914a7ccdd50aa2c93d35410da577a8385a50c7e4fcfbd838d07fb140be60328b7ee6f8d8dc9932d0cdcce677df17ea79215f54561ff7d5e4cc72f1ba78c294e718025d442cf0288650337d93f79e73687d612a5418cfc655881baffdfe7395d1e465be57a5096161ddd7f67a24202add6c89770c261dfcf0b1f87823c1f94c0323b54061f021fe93def81f1996b3e9d25479ec5409b69679998f69f89a2e4a45274f1bd001fea479a1793a9b838ba81427f35846a89d8c1f2699dcd"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x861}}, {0x1d, &(0x7f0000000440)=@string={0x1d, 0x3, "d131ac66ccf6857240c9da46b6c4bb216d43dc885a45fe5d2718d1"}}, {0x8c, &(0x7f0000000480)=@string={0x8c, 0x3, "34c0fe4cfedec0cc1c78e36719cb762dc98da934a5fc088aa639387f2d4d1f134863045473e4b09069eba68f5a727ea7ffb3dda064189bd3479fa6a35885b5d4faacf08401a736c452b11619cdcb560c43b14889e24bc5b013f7ccdbc763d2b8b87a61c49f378be93be0767128d68aea357aa3fa34d514d1ead3423e2165ee1e2a49f6d600ce292c106d"}}, {0xaf, &(0x7f0000000580)=@string={0xaf, 0x3, "f74399bd9bf04355eb39e2a99821a580b302f5ac3a314e7a9f5ae8110f2fcb005e13e1fa4a148372b35298f9a6d8af4d3d027ce21ac780579620e71b9dc80498407769ddbdf7048232c0d77b8e9da05a1f9160f8a9a070028af6e03729942fc33a956e6ebe59cfd6d9bf55e4a10ae55af10322ccdb07ae286d97f50026e8eff727bf1040d3c7d63fc77b74cbfb4053f3e1bc3ec58413507d8815f6c29164b9c93c7ab95f0412bd720d3026b057"}}, {0xe3, &(0x7f0000000640)=@string={0xe3, 0x3, "fd7dfbb3bfd1f8ba4377491a8163c3b0b1022fa16d1009fe20a5861d55c2764603bad56d97cacbd082a3a23efc4b836c15bd4b2b602727935087424e7981b67e09cfb3d58b4f975690e0c08df02371ac31440ae2e7d251e3fedcb2fe75c0eb0420682518e2c1fc7e4ed8eefa2023deffca25c7e2be78c810da0de651ffcd89c31718d4898d6ba83a28ab9fe864abb2958337e1f9afbab4b466430017199baf5d54e8445f39062f08886eec51ff802a2bb0e87ae6bf04c2bc32353e48974ead7785ef6057c40d74ff07f3aae1a64ec18a9b196b65a992ccc00ce7bd2707da3ec1d6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x401}}]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) 1.362951517s ago: executing program 3 (id=593): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') pread64(r0, &(0x7f0000000000)=""/220, 0xdc, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf258100000008000300", @ANYRES32=r4, @ANYBLOB="30003300a0180800ffffffffffff080211000000c82c7dfbc519940003008c106ce5a2a30cfdf95f2f166b2f7632063d"], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004000) 1.196744096s ago: executing program 0 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000000b01020000000000000000f4bd9b900800034000000001"], 0x34}}, 0x0) r2 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x5, 0x8, 0xed, {}, {}, {0x3}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12d25}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) 1.014293097s ago: executing program 0 (id=595): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) shmget(0x3, 0x4000, 0x400, &(0x7f0000c7b000/0x4000)=nil) (async) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f5a000/0x2000)=nil, 0x0, &(0x7f0000000040)=[{0x10800000000}], 0x1, 0xdff, 0x38, 0x0, 0x0, 0x40}) 835.229335ms ago: executing program 0 (id=596): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000}}, "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", "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"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "72686cb0"}, @global=@item_4={0x3, 0x1, 0x0, "8e6dabfd"}, @main=@item_4={0x3, 0x0, 0xb, "85837979"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r5, 0x4018480c, 0x0) ioctl$HIDIOCSUSAGES(r5, 0x501c4814, 0x0) 697.643323ms ago: executing program 3 (id=597): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) fsopen(&(0x7f0000000780)='hfsplus\x00', 0x1) (async, rerun: 32) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) syz_fuse_handle_req(r1, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xfffffffffffffffe, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x4, 0x8000, r2, r3, 0x6000, '\x00', 0x1, 0x4, 0xb4e7, 0x2, {0x8003, 0x8}, {0x6}, {0x100000000, 0xa}, {0x2, 0xa00}, 0x8000, 0xb, 0x4, 0x3}}}}) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@delpolicy={0x260, 0x14, 0x4, 0x70bd2d, 0x25dfdbfb, {{@in6=@local, @in6=@private1, 0x4e24, 0xb, 0x4e24, 0x0, 0xa, 0x80, 0xa0, 0x3c, r0, r2}, 0x6e6bb1, 0x2}, [@migrate={0x1cc, 0x11, [{@in6=@mcast2, @in=@rand_addr=0x64010102, @in=@empty, @in6=@remote, 0x6c, 0x2, 0x0, 0x3507, 0x8, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, @in=@empty, @in=@rand_addr=0x64010101, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00', @in6=@remote, @in=@broadcast, @in=@local, 0x6c, 0x2, 0x0, 0x3507, 0x2, 0xa}, {@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x0, 0x2, 0x2}, {@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@dev={0xac, 0x14, 0x14, 0x2a}, @in=@rand_addr=0x64010100, 0x33, 0x4, 0x0, 0x34ff, 0xa, 0xa}, {@in=@loopback, @in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@broadcast, 0x3c, 0x1, 0x0, 0x3506, 0xa}]}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010102, @in6=@loopback, 0x2, 0x7f, 0x1}}, @srcaddr={0x14, 0xd, @in=@private=0xa010100}, @replay_thresh={0x8, 0xb, 0x4}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000020}, 0x5) (rerun: 64) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r4, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @time={0x4, 0x4}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x1, 0xd93}, {0xbb, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) unshare(0x2a020400) (async, rerun: 64) r6 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x3c, r9, 0x1, 0x470bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0e7668d28bc7"}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) (async) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x9c, r9, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xbb}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10001}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x36c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x5095}, 0x0) (async) fgetxattr(r6, &(0x7f00000001c0)=@random={'osx.', '!-]]\x00'}, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x3, {[@local=@item_012={0x1, 0x2, 0x3, ')'}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 605.587137ms ago: executing program 3 (id=598): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x80d, 0x34325842, 0x9, 0x0, [{0x2}, {}, {0x0, 0xffffffff}, {}, {}, {0x69}, {0x0, 0xc9}, {0x0, 0x9}], 0x0, 0x0, 0x0, 0x0, 0x7}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6000000, 0x33, 0x0, &(0x7f00000000c0)) 467.164566ms ago: executing program 3 (id=599): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={0x0, 0xbf}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_setup(0x1000109, &(0x7f0000000400)={0x0, 0x43d4, 0x400, 0x3, 0x3e1}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x3, 0x31dc}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x32, 0x8, 0xffffffffffffffff, @void, @value}, 0x20) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="a6edc9dded8b6fdb1c00128009000100766c616e000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') write$UHID_INPUT2(r10, 0x0, 0xff0f) 84.377636ms ago: executing program 2 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000001c0)={0x36, 0x1, 0x1, "c8010000000a0001000012e25c2299230500", 0x4745504d}) fcntl$setsig(r3, 0xa, 0x21) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r5, 0x0, 0x0, 0x9000f3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x80010, r5, 0x5000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x2, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x80, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x40000, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x65c9, 0x3, 0x2000000a, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x891, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x47, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r10 = socket(0x10, 0x3, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x200000000000000) r12 = socket$vsock_stream(0x28, 0x1, 0x0) r13 = dup(r12) write$6lowpan_enable(r13, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002840)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x8}, {0x7, 0x3, 0x801a, 0x6, 0x1, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 4 (id=601): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) openat$audio(0xffffff9c, 0x0, 0x40000, 0x0) r2 = syz_open_dev$media(&(0x7f0000000140), 0xfffffff9, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa0, 0x0, 0x0, 0x0, 0x0, 0x0}) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100)="64738c0b4aa5f981785254a9eb", 0x0}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r4, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0405405, &(0x7f0000000240)={{0x1, 0x3, 0xfffff000, 0x0, 0x80000001}, 0x5, 0x6}) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x14c, 0x11, 0x148, 0x0, 0x10, 0x374, 0x2a8, 0x2a8, 0x374, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@local, @empty, 0xff, 0x0, '\x00', 'caif0\x00', {0xff}, {}, 0xed, 0x3, 0x3}, 0x10, 0x104, 0x14c, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_bond\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@limit={{0x3c}, {0x6, 0x8, 0x2, 0xfffffe00, 0x0, 0x7, 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1ff, 0x0, 0x2, 'snmp_trap\x00', {0xff}}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0x0, 0xff, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}, {0x91}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x3, 0x2, 0x0, 0x2, 0x3]}, {0x1, [0x3, 0x2, 0x1, 0x0, 0x3, 0x5], 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x464) close_range(r6, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000000300)="95660c99f3e8335303f0e8f77371d376cb4ca02e82e3527f65603b59ea8f117cd9d3d300fa5e737b1d20ec61dc05f8f8f16b2fbc9ec1f7aa4986e262b26c07b0ed65c2a338512d43eb97d691da805b2a24aa53f2e494c3cc8ae4448c775164034b01f3fcf3585b320714a94687532f765fc8ac52714c78fa20ce38755409cab71a118243d60b04e1be6317d576dd078f231157cbd9", 0x95, 0x8004, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) kernel console output (not intermixed with test programs): emainder of the config [ 141.893056][ T5948] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 142.807193][ T5948] usb 3-1: config index 3 descriptor too short (expected 12592, got 95) [ 142.815717][ T5948] usb 3-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 143.772291][ T5948] usb 3-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 143.809098][ T5948] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 143.876096][ T5948] usb 3-1: config index 4 descriptor too short (expected 12592, got 95) [ 143.884657][ T5948] usb 3-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 143.958168][ T5948] usb 3-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 144.063950][ T5948] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 144.244373][ T5948] usb 3-1: string descriptor 0 read error: -71 [ 144.276153][ T5948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.315753][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.443730][ T5948] usb 3-1: can't set config #55, error -71 [ 144.496221][ T5948] usb 3-1: USB disconnect, device number 14 [ 144.671965][ T6739] netlink: 'syz.4.194': attribute type 2 has an invalid length. [ 146.477606][ T6758] netlink: 64 bytes leftover after parsing attributes in process `syz.4.205'. [ 146.495564][ T6758] FAULT_INJECTION: forcing a failure. [ 146.495564][ T6758] name failslab, interval 1, probability 0, space 0, times 0 [ 146.551744][ T6758] CPU: 0 UID: 0 PID: 6758 Comm: syz.4.205 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 146.551775][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.551788][ T6758] Call Trace: [ 146.551796][ T6758] [ 146.551805][ T6758] dump_stack_lvl+0x241/0x360 [ 146.551846][ T6758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.551877][ T6758] ? __pfx__printk+0x10/0x10 [ 146.551911][ T6758] ? __pfx___might_resched+0x10/0x10 [ 146.551944][ T6758] should_fail_ex+0x424/0x570 [ 146.551971][ T6758] should_failslab+0xac/0x100 [ 146.552002][ T6758] __kmalloc_cache_noprof+0x73/0x370 [ 146.552031][ T6758] ? nfnetlink_rcv+0x1037/0x28f0 [ 146.552059][ T6758] nfnetlink_rcv+0x1037/0x28f0 [ 146.552119][ T6758] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 146.552198][ T6758] ? skb_clone+0x240/0x390 [ 146.552235][ T6758] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.552278][ T6758] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.552311][ T6758] netlink_unicast+0x7f8/0x9a0 [ 146.552346][ T6758] ? __pfx_netlink_unicast+0x10/0x10 [ 146.552375][ T6758] ? skb_put+0x114/0x1f0 [ 146.552400][ T6758] netlink_sendmsg+0x8c3/0xcd0 [ 146.552445][ T6758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.552480][ T6758] ? __import_iovec+0x585/0x830 [ 146.552508][ T6758] ? aa_sock_msg_perm+0x91/0x160 [ 146.552544][ T6758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.552572][ T6758] __sock_sendmsg+0x221/0x270 [ 146.552605][ T6758] ____sys_sendmsg+0x523/0x860 [ 146.552638][ T6758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.552680][ T6758] __sys_sendmsg+0x271/0x360 [ 146.552708][ T6758] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.552791][ T6758] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 146.552818][ T6758] ? lockdep_hardirqs_on+0x9d/0x150 [ 146.552846][ T6758] __do_fast_syscall_32+0xb4/0x110 [ 146.552873][ T6758] ? exc_page_fault+0x5f8/0x920 [ 146.552902][ T6758] do_fast_syscall_32+0x34/0x80 [ 146.552929][ T6758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.552955][ T6758] RIP: 0023:0xf748d579 [ 146.552973][ T6758] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 146.552990][ T6758] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 146.553012][ T6758] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 146.553026][ T6758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.553038][ T6758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.553050][ T6758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 146.553062][ T6758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.553093][ T6758] [ 146.777002][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 147.248872][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 147.267823][ T10] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 147.285061][ T10] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 147.323905][ T10] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 147.432419][ T10] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 147.447315][ T10] usb 4-1: config 129 has no interface number 0 [ 147.455501][ T10] usb 4-1: config 129 has no interface number 1 [ 147.474759][ T10] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 147.488407][ T5835] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.499837][ T10] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 147.513837][ T10] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 147.530301][ T10] usb 4-1: config 129 interface 135 has no altsetting 0 [ 147.537483][ T10] usb 4-1: config 129 interface 5 has no altsetting 0 [ 147.554314][ T10] usb 4-1: string descriptor 0 read error: -22 [ 147.560801][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 147.574194][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.592929][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.602685][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 147.760773][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.773224][ T5835] usb 5-1: config 0 has no interfaces? [ 147.794755][ T5835] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 147.820072][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.891811][ T5835] usb 5-1: Product: syz [ 148.045166][ T5835] usb 5-1: Manufacturer: syz [ 148.126864][ T10] usb 4-1: USB disconnect, device number 15 [ 148.170133][ T5835] usb 5-1: SerialNumber: syz [ 148.202852][ T5835] usb 5-1: config 0 descriptor?? [ 148.462518][ T5894] usb 5-1: USB disconnect, device number 6 [ 148.507258][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.706154][ T5948] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.896129][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 148.910603][ T5948] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 148.919191][ T5948] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.962671][ T5948] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.009013][ T5948] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.058771][ T5948] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.104028][ T5948] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.155313][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.182481][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 149.210867][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 149.210886][ T30] audit: type=1326 audit(1744419287.292:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 149.296253][ T30] audit: type=1326 audit(1744419287.292:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 149.365970][ T30] audit: type=1326 audit(1744419287.302:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 149.387993][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 149.435066][ T30] audit: type=1326 audit(1744419287.302:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 149.444685][ T5948] usb 2-1: usb_control_msg returned -32 [ 149.477990][ T5948] usbtmc 2-1:16.0: can't read capabilities [ 149.597217][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 149.645119][ T10] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 149.689153][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.719180][ T10] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 149.728866][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.762489][ T10] usb 4-1: config 0 descriptor?? [ 149.871038][ T5894] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.058780][ T5894] usb 5-1: config 0 has no interfaces? [ 150.068399][ T5894] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 150.086749][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.111342][ T5894] usb 5-1: Product: syz [ 150.122397][ T5894] usb 5-1: Manufacturer: syz [ 150.140038][ T5894] usb 5-1: SerialNumber: syz [ 150.213877][ T10] zydacron 0003:13EC:0006.0002: item fetching failed at offset 0/3 [ 150.231672][ T5894] usb 5-1: config 0 descriptor?? [ 150.358387][ T10] zydacron 0003:13EC:0006.0002: parse failed [ 150.376187][ T10] zydacron 0003:13EC:0006.0002: probe with driver zydacron failed with error -22 [ 151.573601][ T5835] usb 2-1: USB disconnect, device number 7 [ 152.556790][ T52] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 152.569658][ T10] usb 4-1: USB disconnect, device number 16 [ 152.635116][ T120] usb 5-1: USB disconnect, device number 7 [ 152.736389][ T52] usb 2-1: device descriptor read/64, error -71 [ 152.816363][ T6842] fuse: Bad value for 'group_id' [ 152.896986][ T6842] fuse: Bad value for 'group_id' [ 153.476335][ T120] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.486160][ T52] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.666015][ T120] usb 5-1: device descriptor read/64, error -71 [ 153.672426][ T52] usb 2-1: device descriptor read/64, error -71 [ 153.806523][ T52] usb usb2-port1: attempt power cycle [ 153.906007][ T120] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.036508][ T120] usb 5-1: device descriptor read/64, error -71 [ 154.146429][ T120] usb usb5-port1: attempt power cycle [ 154.176889][ T52] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 154.218198][ T52] usb 2-1: device descriptor read/8, error -71 [ 154.316199][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 154.456044][ T52] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 154.488010][ T52] usb 2-1: device descriptor read/8, error -71 [ 154.506017][ T120] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 154.516049][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.527132][ T120] usb 5-1: device descriptor read/8, error -71 [ 154.533658][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.542328][ T10] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 154.554306][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.562485][ T10] usb 4-1: Product: syz [ 154.569541][ T10] usb 4-1: Manufacturer: syz [ 154.579118][ T10] usb 4-1: SerialNumber: syz [ 154.596728][ T52] usb usb2-port1: unable to enumerate USB device [ 154.600330][ T10] usb 4-1: config 0 descriptor?? [ 154.621119][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 154.650941][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.667429][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 154.678645][ T10] usb 4-1: media controller created [ 154.701174][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.751514][ T10] DVB: Unable to find symbol tda10046_attach() [ 154.757919][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 154.766725][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 154.786184][ T120] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 154.797677][ T5835] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 154.806949][ T120] usb 5-1: device descriptor read/8, error -71 [ 154.917897][ T120] usb usb5-port1: unable to enumerate USB device [ 154.986377][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 154.998222][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.008506][ T5835] usb 3-1: config 239 has an invalid interface number: 255 but max is 0 [ 155.024715][ T5835] usb 3-1: config 239 has no interface number 0 [ 155.031495][ T10] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 155.049189][ T10] usb 4-1: USB disconnect, device number 17 [ 155.055419][ T5835] usb 3-1: config 239 interface 255 altsetting 99 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 155.074430][ T5835] usb 3-1: config 239 interface 255 has no altsetting 0 [ 155.093111][ T5835] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=ba.f6 [ 155.103617][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.128106][ T5835] usb 3-1: Product: syz [ 155.135797][ T5835] usb 3-1: Manufacturer: syz [ 155.144524][ T5835] usb 3-1: SerialNumber: syz [ 155.379772][ T5835] visor 3-1:239.255: Sony Clie 3.5 converter detected [ 155.407263][ T5835] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 155.422670][ T5835] visor 3-1:239.255: probe with driver visor failed with error -71 [ 155.451716][ T5835] usb 3-1: USB disconnect, device number 15 [ 155.731354][ T6876] FAULT_INJECTION: forcing a failure. [ 155.731354][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 155.746105][ T6876] CPU: 0 UID: 0 PID: 6876 Comm: syz.3.236 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 155.746135][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.746145][ T6876] Call Trace: [ 155.746151][ T6876] [ 155.746158][ T6876] dump_stack_lvl+0x241/0x360 [ 155.746187][ T6876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.746208][ T6876] ? __pfx__printk+0x10/0x10 [ 155.746232][ T6876] ? __pfx___might_resched+0x10/0x10 [ 155.746253][ T6876] should_fail_ex+0x424/0x570 [ 155.746274][ T6876] should_failslab+0xac/0x100 [ 155.746296][ T6876] kmem_cache_alloc_noprof+0x78/0x390 [ 155.746317][ T6876] ? security_inode_alloc+0x37/0x310 [ 155.746343][ T6876] security_inode_alloc+0x37/0x310 [ 155.746367][ T6876] inode_init_always_gfp+0xa0f/0xd90 [ 155.746391][ T6876] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 155.746415][ T6876] alloc_inode+0xa3/0x1b0 [ 155.746437][ T6876] new_inode+0x22/0x180 [ 155.746459][ T6876] ? start_creating+0x207/0x310 [ 155.746480][ T6876] __debugfs_create_file+0x14c/0x500 [ 155.746529][ T6876] debugfs_create_file_full+0x40/0x60 [ 155.746551][ T6876] do_blk_trace_setup+0x505/0x9c0 [ 155.746593][ T6876] blk_trace_ioctl+0x4fc/0x830 [ 155.746608][ T6876] ? tomoyo_path_number_perm+0x215/0x790 [ 155.746630][ T6876] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 155.746668][ T6876] ? file_to_blk_mode+0xcb/0x140 [ 155.746693][ T6876] compat_blkdev_ioctl+0x4a3/0x7e0 [ 155.746711][ T6876] ? __fget_files+0x2a/0x420 [ 155.746728][ T6876] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 155.746753][ T6876] ? __fget_files+0x2a/0x420 [ 155.746773][ T6876] __se_compat_sys_ioctl+0x50e/0xc30 [ 155.746794][ T6876] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 155.746813][ T6876] ? __fget_files+0x2a/0x420 [ 155.746831][ T6876] ? fput+0x9b/0xd0 [ 155.746844][ T6876] ? ksys_write+0x275/0x2d0 [ 155.746867][ T6876] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 155.746886][ T6876] ? lockdep_hardirqs_on+0x9d/0x150 [ 155.746905][ T6876] __do_fast_syscall_32+0xb4/0x110 [ 155.746924][ T6876] ? exc_page_fault+0x5f8/0x920 [ 155.746945][ T6876] do_fast_syscall_32+0x34/0x80 [ 155.746963][ T6876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.746983][ T6876] RIP: 0023:0xf744d579 [ 155.746998][ T6876] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 155.747011][ T6876] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 155.747028][ T6876] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0401273 [ 155.747039][ T6876] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.747048][ T6876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.747056][ T6876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.747064][ T6876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.747085][ T6876] [ 155.747220][ T6876] debugfs: out of free dentries, can not create file 'dropped' [ 156.180170][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 156.706877][ T5899] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 156.880696][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 156.888523][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.906554][ T5899] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.916210][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.948125][ T5899] usb 3-1: config 0 descriptor?? [ 157.196633][ T5899] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 157.256131][ T6904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.242'. [ 157.756315][ T5835] usb 3-1: USB disconnect, device number 16 [ 158.666187][ T6915] netlink: 'syz.3.245': attribute type 11 has an invalid length. [ 158.726410][ T1206] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 158.878075][ T1206] usb 3-1: config index 0 descriptor too short (expected 65215, got 72) [ 158.902691][ T1206] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 158.914252][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.925309][ T1206] usb 3-1: Product: syz [ 158.953162][ T1206] usb 3-1: Manufacturer: syz [ 158.969548][ T1206] usb 3-1: SerialNumber: syz [ 159.000269][ T1206] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.058539][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 159.236017][ T52] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 159.326193][ T5899] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 159.398063][ T52] usb 5-1: config index 0 descriptor too short (expected 65134, got 72) [ 159.415166][ T52] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.429004][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.446082][ T52] usb 5-1: Product: syz [ 159.450477][ T52] usb 5-1: Manufacturer: syz [ 159.455106][ T52] usb 5-1: SerialNumber: syz [ 159.475873][ T52] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.496730][ T120] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 159.508921][ T5899] usb 4-1: config 0 has no interfaces? [ 159.519580][ T5899] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 159.535876][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.551205][ T5899] usb 4-1: Product: syz [ 159.555724][ T5899] usb 4-1: Manufacturer: syz [ 159.562188][ T5899] usb 4-1: SerialNumber: syz [ 159.608237][ T5899] usb 4-1: config 0 descriptor?? [ 159.790862][ T1206] usb 3-1: USB disconnect, device number 17 [ 159.949808][ T6919] netlink: 108 bytes leftover after parsing attributes in process `syz.4.246'. [ 160.082806][ T5835] usb 5-1: USB disconnect, device number 12 [ 160.095991][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 160.496469][ T10] usb 3-1: Service connection timeout for: 256 [ 160.500310][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 160.527262][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 160.582940][ T120] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 160.589710][ T10] ath9k_htc: Failed to initialize the device [ 160.599684][ T120] ath9k_htc: Failed to initialize the device [ 160.612465][ T6933] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.250'. [ 160.642911][ T6934] FAULT_INJECTION: forcing a failure. [ 160.642911][ T6934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.682846][ T5835] usb 5-1: ath9k_htc: USB layer deinitialized [ 160.689151][ T1206] usb 3-1: ath9k_htc: USB layer deinitialized [ 160.696082][ T6934] CPU: 1 UID: 0 PID: 6934 Comm: syz.1.251 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 160.696110][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.696122][ T6934] Call Trace: [ 160.696131][ T6934] [ 160.696139][ T6934] dump_stack_lvl+0x241/0x360 [ 160.696178][ T6934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.696209][ T6934] ? __pfx__printk+0x10/0x10 [ 160.696252][ T6934] should_fail_ex+0x424/0x570 [ 160.696278][ T6934] _copy_from_user+0x2d/0xb0 [ 160.696311][ T6934] generic_map_update_batch+0x53b/0x8e0 [ 160.696354][ T6934] ? __pfx_generic_map_update_batch+0x10/0x10 [ 160.696381][ T6934] ? __fget_files+0x39d/0x420 [ 160.696399][ T6934] ? __fget_files+0x2a/0x420 [ 160.696431][ T6934] ? __pfx_generic_map_update_batch+0x10/0x10 [ 160.696458][ T6934] bpf_map_do_batch+0x39a/0x660 [ 160.696487][ T6934] __sys_bpf+0x3c1/0x8b0 [ 160.696511][ T6934] ? __pfx___sys_bpf+0x10/0x10 [ 160.696547][ T6934] ? ksys_write+0x275/0x2d0 [ 160.696583][ T6934] __ia32_sys_bpf+0x7c/0x90 [ 160.696615][ T6934] __do_fast_syscall_32+0xb4/0x110 [ 160.696641][ T6934] ? exc_page_fault+0x5f8/0x920 [ 160.696671][ T6934] do_fast_syscall_32+0x34/0x80 [ 160.696697][ T6934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.696721][ T6934] RIP: 0023:0xf73dd579 [ 160.696739][ T6934] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 160.696755][ T6934] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 160.696777][ T6934] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 00000000800002c0 [ 160.696791][ T6934] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.696803][ T6934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.696814][ T6934] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 160.696826][ T6934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.696856][ T6934] [ 162.003609][ T120] usb 4-1: USB disconnect, device number 18 [ 162.128157][ T30] audit: type=1326 audit(1744419300.222:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 162.338927][ T30] audit: type=1326 audit(1744419300.242:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 162.526882][ T30] audit: type=1326 audit(1744419300.242:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 162.549675][ T6966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.272'. [ 162.577012][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 162.628105][ T6966] FAULT_INJECTION: forcing a failure. [ 162.628105][ T6966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.652858][ T6966] CPU: 1 UID: 0 PID: 6966 Comm: syz.1.272 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 162.652887][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.652899][ T6966] Call Trace: [ 162.652907][ T6966] [ 162.652916][ T6966] dump_stack_lvl+0x241/0x360 [ 162.652954][ T6966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.652984][ T6966] ? __pfx__printk+0x10/0x10 [ 162.653024][ T6966] should_fail_ex+0x424/0x570 [ 162.653051][ T6966] _copy_to_user+0x31/0xb0 [ 162.653083][ T6966] simple_read_from_buffer+0xc4/0x170 [ 162.653118][ T6966] proc_fail_nth_read+0x1ef/0x260 [ 162.653143][ T6966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.653176][ T6966] ? rw_verify_area+0x246/0x630 [ 162.653215][ T6966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.653239][ T6966] vfs_read+0x21f/0xb90 [ 162.653268][ T6966] ? __pfx___mutex_lock+0x10/0x10 [ 162.653296][ T6966] ? __pfx_vfs_read+0x10/0x10 [ 162.653324][ T6966] ? __fget_files+0x2a/0x420 [ 162.653344][ T6966] ? __fget_files+0x39d/0x420 [ 162.653362][ T6966] ? __fget_files+0x2a/0x420 [ 162.653391][ T6966] ksys_read+0x19d/0x2d0 [ 162.653417][ T6966] ? __pfx_ksys_read+0x10/0x10 [ 162.653445][ T6966] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 162.653470][ T6966] ? lockdep_hardirqs_on+0x9d/0x150 [ 162.653498][ T6966] __do_fast_syscall_32+0xb4/0x110 [ 162.653528][ T6966] ? exc_page_fault+0x5f8/0x920 [ 162.653557][ T6966] do_fast_syscall_32+0x34/0x80 [ 162.653584][ T6966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.653610][ T6966] RIP: 0023:0xf73dd579 [ 162.653628][ T6966] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 162.653644][ T6966] RSP: 002b:00000000f5066590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 162.653666][ T6966] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000f5066620 [ 162.653680][ T6966] RDX: 000000000000000f RSI: 00000000f73cdff4 RDI: 0000000000000000 [ 162.653692][ T6966] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 162.653704][ T6966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 162.653716][ T6966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.653745][ T6966] [ 163.382537][ T30] audit: type=1326 audit(1744419301.462:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.265" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x0 [ 163.538042][ T120] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 163.698406][ T120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.714386][ T120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.741011][ T120] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.754887][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.780619][ T120] usb 2-1: SerialNumber: syz [ 164.041637][ T6996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.273'. [ 164.105842][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.273'. [ 164.110436][ T120] usb 2-1: 0:2 : does not exist [ 164.163477][ T120] usb 2-1: unit 5: unexpected type 0x09 [ 164.167986][ T6996] netlink: 156 bytes leftover after parsing attributes in process `syz.2.273'. [ 164.205696][ T120] usb 2-1: USB disconnect, device number 12 [ 164.447355][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.177730][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 165.396223][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 166.222025][ T7021] FAULT_INJECTION: forcing a failure. [ 166.222025][ T7021] name failslab, interval 1, probability 0, space 0, times 0 [ 166.266140][ T7021] CPU: 1 UID: 0 PID: 7021 Comm: syz.4.282 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 166.266172][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.266184][ T7021] Call Trace: [ 166.266192][ T7021] [ 166.266201][ T7021] dump_stack_lvl+0x241/0x360 [ 166.266240][ T7021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.266270][ T7021] ? __pfx__printk+0x10/0x10 [ 166.266304][ T7021] ? __pfx___might_resched+0x10/0x10 [ 166.266336][ T7021] should_fail_ex+0x424/0x570 [ 166.266364][ T7021] should_failslab+0xac/0x100 [ 166.266395][ T7021] __kmalloc_noprof+0xdf/0x4d0 [ 166.266423][ T7021] ? drm_atomic_state_init+0xff/0x2f0 [ 166.266453][ T7021] drm_atomic_state_init+0xff/0x2f0 [ 166.266481][ T7021] drm_atomic_state_alloc+0xb9/0x100 [ 166.266507][ T7021] drm_mode_atomic_ioctl+0x456/0x1420 [ 166.266540][ T7021] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 166.266592][ T7021] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 166.266647][ T7021] ? do_raw_spin_unlock+0x13c/0x8b0 [ 166.266684][ T7021] ? _raw_spin_unlock+0x28/0x50 [ 166.266710][ T7021] drm_ioctl_kernel+0x34e/0x450 [ 166.266746][ T7021] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 166.266776][ T7021] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 166.266818][ T7021] drm_ioctl+0x687/0xbb0 [ 166.266849][ T7021] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 166.266888][ T7021] ? __pfx_drm_ioctl+0x10/0x10 [ 166.266933][ T7021] ? __fget_files+0x2a/0x420 [ 166.266950][ T7021] ? drm_compat_ioctl+0xab/0x340 [ 166.266981][ T7021] __se_compat_sys_ioctl+0x50e/0xc30 [ 166.267010][ T7021] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 166.267037][ T7021] ? __fget_files+0x2a/0x420 [ 166.267062][ T7021] ? fput+0x9b/0xd0 [ 166.267080][ T7021] ? ksys_write+0x275/0x2d0 [ 166.267113][ T7021] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 166.267138][ T7021] ? lockdep_hardirqs_on+0x9d/0x150 [ 166.267165][ T7021] __do_fast_syscall_32+0xb4/0x110 [ 166.267191][ T7021] ? exc_page_fault+0x5f8/0x920 [ 166.267220][ T7021] do_fast_syscall_32+0x34/0x80 [ 166.267246][ T7021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.267271][ T7021] RIP: 0023:0xf748d579 [ 166.267289][ T7021] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 166.267306][ T7021] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 166.267328][ T7021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 166.267353][ T7021] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.267365][ T7021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.267376][ T7021] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 166.267387][ T7021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.267416][ T7021] [ 166.553024][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.848756][ T120] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.009572][ T120] usb 1-1: Using ep0 maxpacket: 16 [ 167.032170][ T120] usb 1-1: config 7 has an invalid interface number: 221 but max is 0 [ 167.051811][ T120] usb 1-1: config 7 has no interface number 0 [ 167.072008][ T120] usb 1-1: config 7 interface 221 has no altsetting 0 [ 167.099160][ T120] usb 1-1: New USB device found, idVendor=43f0, idProduct=2101, bcdDevice=f2.6a [ 167.125072][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.154457][ T120] usb 1-1: Product: syz [ 167.176216][ T120] usb 1-1: Manufacturer: syz [ 167.191119][ T120] usb 1-1: SerialNumber: syz [ 167.559266][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'. [ 167.580432][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 168.030159][ T7043] netlink: 'syz.3.286': attribute type 2 has an invalid length. [ 169.826233][ T5835] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 169.972679][ T120] usb 1-1: USB disconnect, device number 7 [ 170.008272][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 170.030761][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 170.101213][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 170.150249][ T5835] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 170.159711][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.166170][ T5899] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 170.168582][ T5835] usb 4-1: Product: syz [ 170.194336][ T5835] usb 4-1: Manufacturer: syz [ 170.205574][ T5835] usb 4-1: SerialNumber: syz [ 170.231412][ T5835] usb 4-1: config 0 descriptor?? [ 170.271637][ T7063] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.280036][ T7063] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.305429][ T5835] usb 4-1: ucan: probing device on interface #0 [ 170.331659][ T5899] usb 3-1: config 0 has no interfaces? [ 170.350434][ T5899] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 170.359908][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.373157][ T5899] usb 3-1: Product: syz [ 170.380476][ T5899] usb 3-1: Manufacturer: syz [ 170.389693][ T5899] usb 3-1: SerialNumber: syz [ 170.409416][ T5899] usb 3-1: config 0 descriptor?? [ 170.542366][ T7063] macvtap1: entered promiscuous mode [ 170.568495][ T7063] macvtap1: entered allmulticast mode [ 170.609979][ T30] audit: type=1326 audit(1744419308.702:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.3.296" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 170.657376][ T7063] vlan0: entered allmulticast mode [ 170.664871][ T7063] veth0_vlan: entered allmulticast mode [ 170.696136][ T7063] vlan0: entered promiscuous mode [ 170.740689][ T7063] team0: Device macvtap1 failed to register rx_handler [ 170.773462][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.782470][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.820708][ T5835] usb 4-1: ucan: could not read protocol version, ret=-71 [ 170.843627][ T7063] vlan0: left allmulticast mode [ 170.850314][ T5835] usb 4-1: ucan: probe failed; try to update the device firmware [ 170.872825][ T7063] veth0_vlan: left allmulticast mode [ 170.901320][ T7063] vlan0: left promiscuous mode [ 170.908111][ T5835] usb 4-1: USB disconnect, device number 20 [ 171.278042][ T7073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.331256][ T7085] tipc: Started in network mode [ 171.336326][ T7085] tipc: Node identity ac14140f, cluster identity 4711 [ 171.368803][ T7085] tipc: New replicast peer: 255.255.255.255 [ 171.410567][ T7085] tipc: Enabled bearer , priority 10 [ 171.442552][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 171.467152][ T7086] tipc: Disabling bearer [ 171.665390][ T7098] netlink: 52 bytes leftover after parsing attributes in process `syz.1.305'. [ 172.496872][ T5899] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 172.568050][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 172.673317][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.698291][ T5899] usb 5-1: not running at top speed; connect to a high speed hub [ 172.714156][ T5899] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 172.796518][ T5835] usb 3-1: USB disconnect, device number 18 [ 172.821118][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.836400][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 172.846049][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.884021][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 172.908123][ T5899] usb 5-1: Product: syz [ 172.912553][ T10] usb 2-1: config 0 has no interface number 0 [ 172.930960][ T5899] usb 5-1: Manufacturer: syz [ 172.945815][ T5899] usb 5-1: SerialNumber: syz [ 172.981825][ T10] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 173.017808][ T10] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 173.485689][ T5899] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 173.492570][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 173.511380][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 173.700430][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.705883][ T5899] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 173.733577][ T10] usb 2-1: Product: syz [ 173.748036][ T10] usb 2-1: Manufacturer: syz [ 173.754805][ T5899] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 173.819836][ T10] usb 2-1: SerialNumber: syz [ 173.862913][ T10] usb 2-1: config 0 descriptor?? [ 173.871417][ T7117] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 173.878833][ T7117] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 173.993058][ T5899] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 174.023800][ T5899] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 174.061212][ T5899] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 174.112130][ T5899] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 174.122511][ T7117] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 174.133339][ T7117] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 174.184347][ T5899] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 174.286957][ T5899] usb 5-1: USB disconnect, device number 13 [ 174.560982][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.657517][ T7146] netlink: 40 bytes leftover after parsing attributes in process `syz.0.316'. [ 175.609518][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 175.750987][ T10] usb 2-1: USB disconnect, device number 13 [ 176.334590][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 176.363483][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.323'. [ 177.140073][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 177.189597][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'. [ 177.282645][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 179.021306][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 179.041015][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 179.066499][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 179.099192][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 180.632357][ T7205] ip6erspan0: entered promiscuous mode [ 180.650571][ T7207] ip6erspan0: entered promiscuous mode [ 180.660108][ T7226] __nla_validate_parse: 29 callbacks suppressed [ 180.660127][ T7226] netlink: 48 bytes leftover after parsing attributes in process `syz.0.345'. [ 180.853813][ T7228] loop6: detected capacity change from 0 to 524287999 [ 180.879636][ T7228] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.907218][ T7228] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.927590][ T7228] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 180.937378][ T7231] netlink: 'syz.4.348': attribute type 5 has an invalid length. [ 180.960891][ T7228] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 180.984784][ T7233] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 181.004731][ T7233] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 181.033642][ T7231] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 182.626093][ T7250] netlink: 76 bytes leftover after parsing attributes in process `syz.0.352'. [ 182.954984][ T7250] netlink: 452 bytes leftover after parsing attributes in process `syz.0.352'. [ 183.010176][ T7250] netlink: 452 bytes leftover after parsing attributes in process `syz.0.352'. [ 183.131154][ T7259] FAULT_INJECTION: forcing a failure. [ 183.131154][ T7259] name failslab, interval 1, probability 0, space 0, times 0 [ 183.163108][ T7259] CPU: 1 UID: 0 PID: 7259 Comm: syz.4.355 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 183.163139][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.163152][ T7259] Call Trace: [ 183.163160][ T7259] [ 183.163168][ T7259] dump_stack_lvl+0x241/0x360 [ 183.163204][ T7259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.163232][ T7259] ? __pfx__printk+0x10/0x10 [ 183.163258][ T7259] ? __lock_acquire+0xad5/0xd80 [ 183.163289][ T7259] ? __pfx___might_resched+0x10/0x10 [ 183.163317][ T7259] should_fail_ex+0x424/0x570 [ 183.163343][ T7259] should_failslab+0xac/0x100 [ 183.163372][ T7259] __kmalloc_noprof+0xdf/0x4d0 [ 183.163416][ T7259] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 183.163448][ T7259] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 183.163484][ T7259] tomoyo_realpath_from_path+0xcf/0x5e0 [ 183.163529][ T7259] tomoyo_check_open_permission+0x25a/0x4f0 [ 183.163560][ T7259] ? tomoyo_check_open_permission+0x209/0x4f0 [ 183.163589][ T7259] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 183.163630][ T7259] ? __lock_acquire+0xad5/0xd80 [ 183.163671][ T7259] ? mnt_get_write_access+0x68/0x2b0 [ 183.163695][ T7259] ? mnt_get_write_access+0x68/0x2b0 [ 183.163717][ T7259] ? tomoyo_file_open+0x168/0x220 [ 183.163737][ T7259] ? mnt_get_write_access+0x226/0x2b0 [ 183.163763][ T7259] security_file_open+0xac/0x250 [ 183.163789][ T7259] do_dentry_open+0x320/0x1960 [ 183.163828][ T7259] ? vfs_open+0x31/0x370 [ 183.163861][ T7259] vfs_open+0x3b/0x370 [ 183.163894][ T7259] path_openat+0x2caf/0x35d0 [ 183.163942][ T7259] ? __pfx_kstrtoull+0x10/0x10 [ 183.163972][ T7259] ? stack_depot_save_flags+0x44/0x940 [ 183.164004][ T7259] ? kasan_save_track+0x51/0x80 [ 183.164032][ T7259] ? __pfx_path_openat+0x10/0x10 [ 183.164053][ T7259] ? do_fast_syscall_32+0x34/0x80 [ 183.164079][ T7259] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.164128][ T7259] do_filp_open+0x284/0x4e0 [ 183.164155][ T7259] ? __pfx_do_filp_open+0x10/0x10 [ 183.164176][ T7259] ? do_raw_spin_lock+0x151/0x370 [ 183.164248][ T7259] do_sys_openat2+0x12b/0x1d0 [ 183.164290][ T7259] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.164320][ T7259] ? __fget_files+0x2a/0x420 [ 183.164344][ T7259] ? __fget_files+0x2a/0x420 [ 183.164370][ T7259] __ia32_compat_sys_openat+0x241/0x290 [ 183.164396][ T7259] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 183.164424][ T7259] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 183.164451][ T7259] ? lockdep_hardirqs_on+0x9d/0x150 [ 183.164479][ T7259] __do_fast_syscall_32+0xb4/0x110 [ 183.164504][ T7259] ? exc_page_fault+0x5f8/0x920 [ 183.164534][ T7259] do_fast_syscall_32+0x34/0x80 [ 183.164561][ T7259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.164587][ T7259] RIP: 0023:0xf748d579 [ 183.164619][ T7259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 183.164637][ T7259] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 183.164661][ T7259] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 183.164676][ T7259] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.164688][ T7259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.164700][ T7259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.164713][ T7259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.164743][ T7259] [ 183.164753][ T7259] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.649187][ T7268] Invalid logical block size (65519) [ 183.732373][ T7269] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 184.353024][ T120] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 184.630231][ T7294] tipc: Can't bind to reserved service type 2 [ 184.741799][ T120] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 184.753602][ T120] usb 4-1: can't read configurations, error -61 [ 184.760733][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 185.096063][ T120] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 185.275139][ T120] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 185.302164][ T120] usb 4-1: can't read configurations, error -61 [ 185.346862][ T120] usb usb4-port1: attempt power cycle [ 185.370756][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 185.667147][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 185.714084][ T120] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 185.828501][ T7308] ip6gretap0: entered allmulticast mode [ 186.049664][ T120] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 186.070257][ T120] usb 4-1: can't read configurations, error -61 [ 186.226759][ T7318] netlink: 80 bytes leftover after parsing attributes in process `syz.0.372'. [ 186.236775][ T120] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 186.287912][ T7318] trusted_key: syz.0.372 sent an empty control message without MSG_MORE. [ 186.503599][ T7323] netlink: 'syz.1.373': attribute type 4 has an invalid length. [ 186.506073][ T120] usb 4-1: device descriptor read/8, error -71 [ 186.666420][ T120] usb usb4-port1: unable to enumerate USB device [ 186.915634][ T5835] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 186.923770][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 187.066024][ T10] usb 5-1: device descriptor read/64, error -71 [ 187.092503][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.123377][ T5835] usb 3-1: config 0 has no interfaces? [ 187.154408][ T5835] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 187.172449][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.187234][ T5835] usb 3-1: Product: syz [ 187.196107][ T5835] usb 3-1: Manufacturer: syz [ 187.201332][ T5835] usb 3-1: SerialNumber: syz [ 187.233401][ T5835] usb 3-1: config 0 descriptor?? [ 187.316647][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 187.376185][ T1206] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.404363][ T7344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.380'. [ 187.467908][ T10] usb 5-1: device descriptor read/64, error -71 [ 187.540840][ T1206] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.565007][ T1206] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 187.576539][ T10] usb usb5-port1: attempt power cycle [ 187.600897][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.631359][ T1206] usb 1-1: config 0 descriptor?? [ 187.648760][ T1206] pwc: Askey VC010 type 2 USB webcam detected. [ 187.936037][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 187.976997][ T10] usb 5-1: device descriptor read/8, error -71 [ 188.053626][ T1206] pwc: recv_control_msg error -32 req 02 val 2b00 [ 188.236005][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 188.269046][ T1206] pwc: recv_control_msg error -71 req 02 val 2c00 [ 188.281029][ T10] usb 5-1: device descriptor read/8, error -71 [ 188.287930][ T1206] pwc: recv_control_msg error -71 req 04 val 1000 [ 188.303484][ T1206] pwc: recv_control_msg error -71 req 04 val 1300 [ 188.313810][ T1206] pwc: recv_control_msg error -71 req 04 val 1400 [ 188.322328][ T1206] pwc: recv_control_msg error -71 req 02 val 2000 [ 188.329906][ T1206] pwc: recv_control_msg error -71 req 02 val 2100 [ 188.338909][ T1206] pwc: recv_control_msg error -71 req 04 val 1500 [ 188.345807][ T1206] pwc: recv_control_msg error -71 req 02 val 2500 [ 188.362611][ T1206] pwc: recv_control_msg error -71 req 02 val 2400 [ 188.376474][ T1206] pwc: recv_control_msg error -71 req 02 val 2600 [ 188.386709][ T1206] pwc: recv_control_msg error -71 req 02 val 2900 [ 188.404054][ T1206] pwc: recv_control_msg error -71 req 02 val 2800 [ 188.411111][ T10] usb usb5-port1: unable to enumerate USB device [ 188.426723][ T1206] pwc: recv_control_msg error -71 req 04 val 1100 [ 188.444009][ T1206] pwc: recv_control_msg error -71 req 04 val 1200 [ 188.465299][ T1206] pwc: Registered as video103. [ 188.477596][ T1206] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 188.500123][ T1206] usb 1-1: USB disconnect, device number 8 [ 188.536356][ T5899] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 188.705993][ T5899] usb 2-1: device descriptor read/64, error -71 [ 188.956201][ T5899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.997977][ T7362] FAULT_INJECTION: forcing a failure. [ 188.997977][ T7362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.051721][ T7362] CPU: 1 UID: 0 PID: 7362 Comm: syz.3.387 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 189.051753][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.051767][ T7362] Call Trace: [ 189.051775][ T7362] [ 189.051784][ T7362] dump_stack_lvl+0x241/0x360 [ 189.051822][ T7362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.051864][ T7362] ? __pfx__printk+0x10/0x10 [ 189.051905][ T7362] should_fail_ex+0x424/0x570 [ 189.051932][ T7362] _copy_from_user+0x2d/0xb0 [ 189.051962][ T7362] move_addr_to_kernel+0x7f/0x170 [ 189.051991][ T7362] get_compat_msghdr+0x4eb/0x730 [ 189.052029][ T7362] ? __pfx_get_compat_msghdr+0x10/0x10 [ 189.052072][ T7362] __sys_sendmsg+0x23b/0x360 [ 189.052101][ T7362] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.052173][ T7362] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 189.052198][ T7362] ? lockdep_hardirqs_on+0x9d/0x150 [ 189.052225][ T7362] __do_fast_syscall_32+0xb4/0x110 [ 189.052250][ T7362] ? exc_page_fault+0x5f8/0x920 [ 189.052278][ T7362] do_fast_syscall_32+0x34/0x80 [ 189.052303][ T7362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.052327][ T7362] RIP: 0023:0xf744d579 [ 189.052344][ T7362] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 189.052360][ T7362] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 189.052382][ T7362] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 189.052395][ T7362] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.052407][ T7362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.052419][ T7362] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 189.052430][ T7362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.052460][ T7362] [ 189.247666][ T5899] usb 2-1: device descriptor read/64, error -71 [ 189.356293][ T5899] usb usb2-port1: attempt power cycle [ 189.396000][ T120] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.546024][ T120] usb 1-1: Using ep0 maxpacket: 16 [ 189.553316][ T120] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.563837][ T120] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.659450][ T120] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.669361][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.681937][ T120] usb 1-1: Product: syz [ 189.686243][ T120] usb 1-1: Manufacturer: syz [ 189.690996][ T120] usb 1-1: SerialNumber: syz [ 189.696649][ T5899] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 189.717806][ T5899] usb 2-1: device descriptor read/8, error -71 [ 189.726921][ T52] usb 3-1: USB disconnect, device number 19 [ 189.866210][ T5895] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 189.966111][ T5899] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 190.014564][ T5899] usb 2-1: device descriptor read/8, error -71 [ 190.198779][ T5899] usb usb2-port1: unable to enumerate USB device [ 190.236070][ T120] usb 1-1: cannot find UAC_HEADER [ 190.400791][ T120] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 190.461220][ T5895] usb 4-1: config 0 has an invalid interface number: 223 but max is 0 [ 190.537109][ T5895] usb 4-1: config 0 has no interface number 0 [ 190.565523][ T120] usb 1-1: USB disconnect, device number 9 [ 190.660717][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.929661][ T5895] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=70.28 [ 190.952123][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.016543][ T5895] usb 4-1: Product: syz [ 191.020878][ T5895] usb 4-1: Manufacturer: syz [ 191.040589][ T5895] usb 4-1: SerialNumber: syz [ 191.064076][ T5895] usb 4-1: config 0 descriptor?? [ 191.093127][ T5895] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.223/input/input9 [ 191.146072][ T5894] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 191.348543][ T7381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'. [ 191.642813][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 191.651626][ T5894] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 191.667772][ T5894] usb 5-1: config 0 has no interface number 0 [ 191.685492][ T5894] usb 5-1: config 0 interface 12 has no altsetting 0 [ 191.718163][ T5894] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 191.731903][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.741929][ T5894] usb 5-1: Product: syz [ 191.752681][ T5894] usb 5-1: Manufacturer: syz [ 191.759266][ T5894] usb 5-1: SerialNumber: syz [ 191.788299][ T5894] usb 5-1: config 0 descriptor?? [ 192.500586][ T7395] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 192.534122][ T7395] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.799547][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 192.854339][ T5198] bcm5974 4-1:0.223: could not read from device [ 192.916437][ T5895] usb 4-1: USB disconnect, device number 25 [ 192.969934][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 193.011287][ T10] usb 3-1: Dual-Role OTG device on HNP port [ 193.019711][ T10] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 193.032127][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.041440][ T10] usb 3-1: Product: syz [ 193.046260][ T10] usb 3-1: Manufacturer: syz [ 193.051425][ T10] usb 3-1: SerialNumber: syz [ 193.070039][ T10] usb 3-1: config 0 descriptor?? [ 193.090820][ T10] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 193.107018][ T7373] dummy0: entered promiscuous mode [ 193.117278][ T7372] dummy0: left promiscuous mode [ 193.192776][ T5894] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 193.230549][ T5894] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 193.258369][ T5894] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 193.303673][ T10] usb 3-1: USB disconnect, device number 20 [ 193.316160][ T5894] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 193.355653][ T5894] usb 5-1: USB disconnect, device number 18 [ 193.482670][ T7408] FAULT_INJECTION: forcing a failure. [ 193.482670][ T7408] name failslab, interval 1, probability 0, space 0, times 0 [ 193.523203][ T7408] CPU: 1 UID: 0 PID: 7408 Comm: syz.1.399 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 193.523233][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.523245][ T7408] Call Trace: [ 193.523252][ T7408] [ 193.523261][ T7408] dump_stack_lvl+0x241/0x360 [ 193.523298][ T7408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.523331][ T7408] ? __pfx__printk+0x10/0x10 [ 193.523353][ T7408] ? __pfx___might_resched+0x10/0x10 [ 193.523374][ T7408] should_fail_ex+0x424/0x570 [ 193.523391][ T7408] should_failslab+0xac/0x100 [ 193.523412][ T7408] kmem_cache_alloc_noprof+0x78/0x390 [ 193.523431][ T7408] ? __kernfs_new_node+0xdf/0x890 [ 193.523449][ T7408] __kernfs_new_node+0xdf/0x890 [ 193.523464][ T7408] ? __lock_acquire+0xad5/0xd80 [ 193.523482][ T7408] ? __pfx___kernfs_new_node+0x10/0x10 [ 193.523522][ T7408] ? kernfs_root+0x1c/0x230 [ 193.523538][ T7408] ? kernfs_root+0x1c/0x230 [ 193.523554][ T7408] kernfs_new_node+0x114/0x220 [ 193.523573][ T7408] __kernfs_create_file+0x49/0x2e0 [ 193.523595][ T7408] sysfs_add_file_mode_ns+0x24a/0x310 [ 193.523623][ T7408] internal_create_group+0x7ea/0x1320 [ 193.523646][ T7408] ? up_write+0x1ab/0x590 [ 193.523667][ T7408] ? __pfx_internal_create_group+0x10/0x10 [ 193.523691][ T7408] sysfs_create_groups+0x56/0x120 [ 193.523708][ T7408] device_add_attrs+0x14c/0x670 [ 193.523725][ T7408] ? kernfs_put+0x3fe/0x460 [ 193.523741][ T7408] ? __pfx_device_add_attrs+0x10/0x10 [ 193.523766][ T7408] device_add+0x576/0xbf0 [ 193.523788][ T7408] input_register_device+0x9ed/0x10c0 [ 193.523817][ T7408] uinput_create_device+0x40e/0x630 [ 193.523842][ T7408] uinput_ioctl_handler+0x496/0x17f0 [ 193.523863][ T7408] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 193.523901][ T7408] __se_compat_sys_ioctl+0x50e/0xc30 [ 193.523922][ T7408] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 193.523941][ T7408] ? __fget_files+0x2a/0x420 [ 193.523976][ T7408] ? fput+0x9b/0xd0 [ 193.523990][ T7408] ? ksys_write+0x275/0x2d0 [ 193.524013][ T7408] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 193.524032][ T7408] ? lockdep_hardirqs_on+0x9d/0x150 [ 193.524052][ T7408] __do_fast_syscall_32+0xb4/0x110 [ 193.524072][ T7408] ? exc_page_fault+0x5f8/0x920 [ 193.524093][ T7408] do_fast_syscall_32+0x34/0x80 [ 193.524112][ T7408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.524131][ T7408] RIP: 0023:0xf73dd579 [ 193.524144][ T7408] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 193.524156][ T7408] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 193.524173][ T7408] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000005501 [ 193.524183][ T7408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.524191][ T7408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.524200][ T7408] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.524208][ T7408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.524232][ T7408] [ 194.262492][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268915][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.712117][ T7420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.406'. [ 194.728176][ T5894] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 194.829538][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 194.829573][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.405'. [ 194.906215][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 194.914045][ T5894] usb 3-1: config 1 has an invalid interface descriptor of length 4, skipping [ 194.914095][ T5894] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 194.914124][ T5894] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 194.914151][ T5894] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 216, changing to 7 [ 194.919676][ T5894] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.919708][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.919730][ T5894] usb 3-1: Product: Ђ [ 194.919747][ T5894] usb 3-1: Manufacturer: 嗷ඬ㙋悻尪 [ 194.919764][ T5894] usb 3-1: SerialNumber: syz [ 196.369313][ T7441] input: syz0 as /devices/virtual/input/input11 [ 196.528507][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 196.671227][ T7445] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.680274][ T7445] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.689121][ T7445] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.697922][ T7445] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.788230][ T7445] vxlan0: entered promiscuous mode [ 197.474054][ T7453] sctp: [Deprecated]: syz.4.415 (pid 7453) Use of int in max_burst socket option deprecated. [ 197.474054][ T7453] Use struct sctp_assoc_value instead [ 197.484632][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 197.525384][ T7456] bridge: RTM_NEWNEIGH with unconfigured vlan 16 on bridge0 [ 198.083583][ T7433] futex_wake_op: syz.0.408 tries to shift op by -1; fix this program [ 198.472565][ T5894] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 198.556313][ T5894] usb 3-1: USB disconnect, device number 21 [ 198.882804][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.957925][ T7477] FAULT_INJECTION: forcing a failure. [ 198.957925][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 199.041629][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.2.421 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 199.041658][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.041670][ T7477] Call Trace: [ 199.041678][ T7477] [ 199.041686][ T7477] dump_stack_lvl+0x241/0x360 [ 199.041721][ T7477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.041750][ T7477] ? __pfx__printk+0x10/0x10 [ 199.041780][ T7477] ? __pfx___might_resched+0x10/0x10 [ 199.041809][ T7477] should_fail_ex+0x424/0x570 [ 199.041841][ T7477] should_failslab+0xac/0x100 [ 199.041869][ T7477] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 199.041895][ T7477] ? __d_alloc+0x31/0x740 [ 199.041920][ T7477] __d_alloc+0x31/0x740 [ 199.041945][ T7477] d_alloc_pseudo+0x1f/0xb0 [ 199.041967][ T7477] alloc_file_pseudo+0x143/0x320 [ 199.041990][ T7477] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 199.042010][ T7477] ? security_inode_alloc+0xd2/0x310 [ 199.042049][ T7477] sock_alloc_file+0xb7/0x2e0 [ 199.042078][ T7477] do_accept+0x374/0x700 [ 199.042111][ T7477] ? __pfx_do_accept+0x10/0x10 [ 199.042161][ T7477] __sys_accept4+0x121/0x1d0 [ 199.042192][ T7477] ? __pfx___sys_accept4+0x10/0x10 [ 199.042219][ T7477] ? ksys_write+0x275/0x2d0 [ 199.042250][ T7477] __ia32_sys_accept4+0x9a/0xb0 [ 199.042282][ T7477] __do_fast_syscall_32+0xb4/0x110 [ 199.042306][ T7477] ? exc_page_fault+0x5f8/0x920 [ 199.042333][ T7477] do_fast_syscall_32+0x34/0x80 [ 199.042357][ T7477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.042380][ T7477] RIP: 0023:0xf73ed579 [ 199.042397][ T7477] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 199.042414][ T7477] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 199.042435][ T7477] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 199.042448][ T7477] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 199.042460][ T7477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.042471][ T7477] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.042481][ T7477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.042509][ T7477] [ 199.266241][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.436051][ T5894] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 199.596095][ T1206] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.646287][ T5894] usb 5-1: device descriptor read/64, error -71 [ 199.763037][ T1206] usb 1-1: config 4 has an invalid interface number: 90 but max is 2 [ 199.781763][ T1206] usb 1-1: config 4 has an invalid interface number: 236 but max is 2 [ 199.803525][ T1206] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 199.819619][ T1206] usb 1-1: config 4 has an invalid interface number: 28 but max is 2 [ 199.830331][ T1206] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 199.856824][ T1206] usb 1-1: config 4 has an invalid descriptor of length 178, skipping remainder of the config [ 199.887042][ T5894] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 199.899679][ T1206] usb 1-1: config 4 has no interface number 0 [ 199.912135][ T1206] usb 1-1: config 4 has no interface number 1 [ 199.924123][ T1206] usb 1-1: config 4 has no interface number 2 [ 199.931619][ T1206] usb 1-1: config 4 interface 90 altsetting 5 endpoint 0xF has an invalid bInterval 33, changing to 7 [ 199.951901][ T1206] usb 1-1: config 4 interface 90 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 199.976580][ T1206] usb 1-1: config 4 interface 90 altsetting 5 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 199.998862][ T1206] usb 1-1: config 4 interface 236 altsetting 5 endpoint 0xB has an invalid bInterval 128, changing to 11 [ 200.021470][ T1206] usb 1-1: config 4 interface 236 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 200.045032][ T1206] usb 1-1: config 4 interface 236 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 200.056617][ T5894] usb 5-1: device descriptor read/64, error -71 [ 200.069652][ T1206] usb 1-1: config 4 interface 236 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 200.083404][ T1206] usb 1-1: config 4 interface 236 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 200.105072][ T1206] usb 1-1: config 4 interface 236 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 200.122898][ T1206] usb 1-1: config 4 interface 236 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 200.159892][ T1206] usb 1-1: config 4 interface 236 altsetting 5 has an endpoint descriptor with address 0x24, changing to 0x4 [ 200.172037][ T5894] usb usb5-port1: attempt power cycle [ 200.201933][ T1206] usb 1-1: config 4 interface 236 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 200.221773][ T1206] usb 1-1: config 4 interface 236 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 200.245214][ T1206] usb 1-1: config 4 interface 28 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 200.265419][ T1206] usb 1-1: config 4 interface 90 has no altsetting 0 [ 200.272727][ T1206] usb 1-1: config 4 interface 236 has no altsetting 0 [ 200.285435][ T1206] usb 1-1: config 4 interface 28 has no altsetting 0 [ 200.295507][ T1206] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=24.39 [ 200.310574][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.335178][ T1206] usb 1-1: Product: 疫⧨ㄟȾ䑦娓ዡ払谩㷅쬓垷싙甚뢏籟咗䀧ᥑ๸吇橬봜⣻풕楛髅䴚먄☇委㘴䆐颬鎭㩒鐗ꕿ촅캍⚺䅥驜Ⴂ嬙芋㺐펿൦驹鞄䲔籧镤ꠋ콋挜ﳳꍍ㫔ꁜⱂ큆౜豟聯澝熉䛥駂튘㚃럓咮䳛㪄ۤ蟇깦 [ 200.415667][ T1206] usb 1-1: Manufacturer: ခ [ 200.441442][ T1206] usb 1-1: SerialNumber: ఄ [ 200.483540][ T1206] r8152-cfgselector 1-1: Unknown version 0x0000 [ 200.526063][ T5894] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 200.556858][ T5894] usb 5-1: device descriptor read/8, error -71 [ 200.593187][ T7499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.432'. [ 200.747957][ T1206] r8152-cfgselector 1-1: Unknown version 0x0000 [ 200.756434][ T1206] r8153_ecm 1-1:4.90: skipping garbage [ 200.762002][ T1206] r8152-cfgselector 1-1: bad CDC descriptors [ 200.796043][ T5894] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 200.834615][ T1206] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 200.864724][ T5894] usb 5-1: device descriptor read/8, error -71 [ 200.988067][ T5894] usb usb5-port1: unable to enumerate USB device [ 201.336503][ T120] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 201.464630][ T7511] IPVS: sync thread started: state = BACKUP, mcast_ifn = caif0, syncid = 1, id = 0 [ 201.512822][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 201.539999][ T7513] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551612) [ 201.546089][ T120] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.561387][ T7513] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 201.622656][ T120] usb 3-1: config 0 has no interfaces? [ 201.660953][ T120] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 201.674828][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.684403][ T120] usb 3-1: Product: syz [ 201.805966][ T120] usb 3-1: Manufacturer: syz [ 201.816002][ T120] usb 3-1: SerialNumber: syz [ 201.823808][ T120] usb 3-1: config 0 descriptor?? [ 201.906291][ T1206] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 201.906344][ T5899] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 202.083065][ T120] usb 3-1: USB disconnect, device number 22 [ 202.102497][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 202.120226][ T1206] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 202.122042][ T5899] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 202.156010][ T1206] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.164927][ T1206] usb 4-1: config 1 has no interface number 0 [ 202.220874][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.241223][ T1206] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.279772][ T1206] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.300447][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.314986][ T5899] usb 1-1: config 0 descriptor?? [ 202.323477][ T1206] usb 4-1: Product: syz [ 202.332209][ T1206] usb 4-1: Manufacturer: syz [ 202.365999][ T1206] usb 4-1: SerialNumber: syz [ 202.479175][ T1206] usb 4-1: selecting invalid altsetting 1 [ 202.534825][ T5899] ath6kl: Failed to submit usb control message: -71 [ 202.544409][ T5899] ath6kl: unable to send the bmi data to the device: -71 [ 202.554520][ T5899] ath6kl: Unable to send get target info: -71 [ 202.863776][ T5899] ath6kl: Failed to init ath6kl core: -71 [ 203.019228][ T5899] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 203.248930][ T5899] usb 1-1: USB disconnect, device number 11 [ 203.334345][ T7542] veth1_macvtap: left promiscuous mode [ 203.356796][ T7542] macsec0: entered promiscuous mode [ 203.382870][ T7542] macsec0: entered allmulticast mode [ 203.525828][ T7542] veth1_macvtap: entered promiscuous mode [ 203.555511][ T7542] veth1_macvtap: entered allmulticast mode [ 203.575592][ T7542] macsec0: left promiscuous mode [ 203.603153][ T7542] macsec0: left allmulticast mode [ 203.650719][ T7542] veth1_macvtap: left allmulticast mode [ 203.815873][ T7542] fuse: Unknown parameter '0xffffffffffffffff' [ 203.840758][ T7538] delete_channel: no stack [ 204.407715][ T7561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.447'. [ 204.547815][ T7564] netlink: 996 bytes leftover after parsing attributes in process `syz.2.446'. [ 204.706157][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 204.843462][ T10] usb 1-1: device descriptor read/64, error -71 [ 205.100113][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 205.256020][ T10] usb 1-1: device descriptor read/64, error -71 [ 205.393837][ T10] usb usb1-port1: attempt power cycle [ 205.436209][ T5899] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 205.448674][ C0] Unknown status report in ack skb [ 205.616082][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 205.631244][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.657008][ T5899] usb 3-1: config 0 has no interfaces? [ 205.665538][ T5899] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 205.681863][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 205.691926][ T5899] usb 3-1: Product: syz [ 205.706623][ T5899] usb 3-1: Manufacturer: syz [ 205.737527][ T5899] usb 3-1: SerialNumber: syz [ 205.775255][ T5899] usb 3-1: config 0 descriptor?? [ 205.776027][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 205.811078][ T1206] cdc_ncm 4-1:1.1: SET_CRC_MODE failed [ 205.824132][ T5835] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 205.847898][ T1206] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 205.872212][ T10] usb 1-1: device descriptor read/8, error -71 [ 205.900603][ T1206] usb 4-1: selecting invalid altsetting 1 [ 205.910390][ T1206] cdc_ncm 4-1:1.1: bind() failure [ 205.933626][ T1206] usb 4-1: USB disconnect, device number 26 [ 205.974192][ T7583] Invalid logical block size (65295) [ 206.022506][ T5894] usb 3-1: USB disconnect, device number 23 [ 206.028934][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 206.047354][ T5835] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.068836][ T5835] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.098043][ T5835] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 206.114829][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.455'. [ 206.124113][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 206.135281][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 206.159588][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.173889][ T5835] hub 2-1:4.0: USB hub found [ 206.220725][ T10] usb 1-1: device descriptor read/8, error -71 [ 206.336509][ T10] usb usb1-port1: unable to enumerate USB device [ 206.381827][ T5835] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 206.444537][ T5835] usb 2-1: USB disconnect, device number 18 [ 207.133746][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 207.515113][ T7604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.462'. [ 207.753141][ T7610] FAULT_INJECTION: forcing a failure. [ 207.753141][ T7610] name failslab, interval 1, probability 0, space 0, times 0 [ 207.796138][ T5899] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 207.812795][ T7610] CPU: 0 UID: 0 PID: 7610 Comm: syz.0.466 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 207.812828][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.812841][ T7610] Call Trace: [ 207.812849][ T7610] [ 207.812857][ T7610] dump_stack_lvl+0x241/0x360 [ 207.812897][ T7610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.812927][ T7610] ? __pfx__printk+0x10/0x10 [ 207.812961][ T7610] ? __pfx___might_resched+0x10/0x10 [ 207.812993][ T7610] should_fail_ex+0x424/0x570 [ 207.813022][ T7610] should_failslab+0xac/0x100 [ 207.813062][ T7610] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 207.813094][ T7610] ? __alloc_skb+0x1c2/0x480 [ 207.813120][ T7610] __alloc_skb+0x1c2/0x480 [ 207.813148][ T7610] ? __pfx___alloc_skb+0x10/0x10 [ 207.813171][ T7610] ? netlink_autobind+0xd6/0x2f0 [ 207.813201][ T7610] ? netlink_autobind+0x2b0/0x2f0 [ 207.813237][ T7610] netlink_sendmsg+0x638/0xcd0 [ 207.813282][ T7610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.813318][ T7610] ? __import_iovec+0x585/0x830 [ 207.813346][ T7610] ? aa_sock_msg_perm+0x91/0x160 [ 207.813381][ T7610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.813408][ T7610] __sock_sendmsg+0x221/0x270 [ 207.813440][ T7610] ____sys_sendmsg+0x523/0x860 [ 207.813474][ T7610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.813515][ T7610] __sys_sendmsg+0x271/0x360 [ 207.813544][ T7610] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.813621][ T7610] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 207.813648][ T7610] ? lockdep_hardirqs_on+0x9d/0x150 [ 207.813677][ T7610] __do_fast_syscall_32+0xb4/0x110 [ 207.813704][ T7610] ? exc_page_fault+0x5f8/0x920 [ 207.813734][ T7610] do_fast_syscall_32+0x34/0x80 [ 207.813762][ T7610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.813788][ T7610] RIP: 0023:0xf7f93579 [ 207.813809][ T7610] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 207.813828][ T7610] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 207.813851][ T7610] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a80 [ 207.813866][ T7610] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.813879][ T7610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.813892][ T7610] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.813905][ T7610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.813935][ T7610] [ 208.206031][ T120] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 208.323298][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 208.343425][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.376277][ T120] usb 3-1: Using ep0 maxpacket: 8 [ 208.383230][ T120] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 208.401825][ T120] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.413010][ T5899] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 208.426185][ T120] usb 3-1: config 0 has no interface number 0 [ 208.432288][ T120] usb 3-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 208.443409][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.472777][ T5899] usb 4-1: config 0 descriptor?? [ 208.480262][ T120] usb 3-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 208.500215][ T5899] pxrc 4-1:0.0: Could not find endpoint [ 208.520276][ T120] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 208.532908][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.548541][ T120] usb 3-1: Product: syz [ 208.552925][ T120] usb 3-1: Manufacturer: syz [ 208.588595][ T120] usb 3-1: SerialNumber: syz [ 208.635484][ T120] usb 3-1: config 0 descriptor?? [ 208.670782][ T120] ttusb_dec_send_command: command bulk message failed: error -8 [ 208.699669][ T120] ttusb-dec 3-1:0.113: probe with driver ttusb-dec failed with error -8 [ 208.736829][ T120] usbhid 3-1:0.113: couldn't find an input interrupt endpoint [ 208.886529][ T120] usb 3-1: USB disconnect, device number 24 [ 209.173084][ T7627] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 209.222152][ T7627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.836186][ T120] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 210.215961][ T5894] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 210.478154][ T120] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 210.492971][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.586203][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 210.593559][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.595829][ T120] usb 5-1: config 0 descriptor?? [ 210.613093][ T5899] usb 4-1: USB disconnect, device number 27 [ 210.632795][ T5894] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 210.720240][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.783895][ T5894] usb 2-1: config 0 descriptor?? [ 210.811825][ T5894] gspca_main: spca501-2.14.0 probing 0000:0000 [ 210.904586][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 210.963227][ T7657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.478'. [ 211.013315][ T30] audit: type=1326 audit(1744419349.102:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 211.146179][ T30] audit: type=1326 audit(1744419349.102:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 211.181603][ T7638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.186053][ T30] audit: type=1326 audit(1744419349.102:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 211.196456][ T7638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.233505][ T5894] gspca_spca501: reg write: error -71 [ 211.302118][ T5894] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 211.318694][ T5894] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 211.356057][ T5894] usb 2-1: USB disconnect, device number 19 [ 211.386250][ T30] audit: type=1326 audit(1744419349.102:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 211.418580][ T30] audit: type=1326 audit(1744419349.102:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 211.444688][ T30] audit: type=1326 audit(1744419349.102:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 211.482590][ T120] [drm] vendor descriptor length:b9 data:02 00 00 00 00 00 00 00 00 00 00 [ 211.501540][ T120] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 211.511289][ T30] audit: type=1326 audit(1744419349.102:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 211.533307][ T120] [drm:udl_init] *ERROR* Selecting channel failed [ 211.553185][ T120] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 211.559995][ T30] audit: type=1326 audit(1744419349.322:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 211.581779][ T120] [drm] Initialized udl on minor 2 [ 211.599442][ T120] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.632676][ T120] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 211.649943][ T30] audit: type=1326 audit(1744419349.322:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 211.689281][ T5895] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.714719][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 211.721853][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 211.728348][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 211.734387][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 211.736015][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 211.744427][ T120] usb 5-1: USB disconnect, device number 23 [ 211.756373][ T5895] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 211.766123][ T30] audit: type=1326 audit(1744419349.322:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 211.846337][ T7664] netlink: 48 bytes leftover after parsing attributes in process `syz.2.481'. [ 211.855268][ T7664] netlink: 48 bytes leftover after parsing attributes in process `syz.2.481'. [ 211.951325][ T7664] netlink: 48 bytes leftover after parsing attributes in process `syz.2.481'. [ 212.170384][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 212.255959][ T1206] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 212.409988][ T1206] usb 4-1: device descriptor read/64, error -71 [ 212.496008][ T5894] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 212.628825][ T7681] netlink: 'syz.1.489': attribute type 23 has an invalid length. [ 212.666478][ T1206] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 212.678190][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.695468][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.728866][ T5894] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 212.769787][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.786665][ T5894] usb 5-1: config 0 descriptor?? [ 212.826382][ T1206] usb 4-1: device descriptor read/64, error -71 [ 212.946453][ T1206] usb usb4-port1: attempt power cycle [ 213.166037][ T5835] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 213.208850][ T5894] ortek 0003:1223:3F07.0003: Fixing up logical maximum in report descriptor (Skycable) [ 213.224102][ T5894] ortek 0003:1223:3F07.0003: unknown main item tag 0x6 [ 213.234835][ T5894] ortek 0003:1223:3F07.0003: report_id 29495 is invalid [ 213.245616][ T5894] ortek 0003:1223:3F07.0003: item 0 2 1 8 parsing failed [ 213.266454][ T5894] ortek 0003:1223:3F07.0003: probe with driver ortek failed with error -22 [ 213.286219][ T1206] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 213.317546][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 213.332751][ T1206] usb 4-1: device descriptor read/8, error -71 [ 213.350653][ T5835] usb 2-1: no configurations [ 213.363792][ T5835] usb 2-1: can't read configurations, error -22 [ 213.409681][ T120] usb 5-1: USB disconnect, device number 24 [ 213.496091][ T5835] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 213.605273][ T1206] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 213.627445][ T1206] usb 4-1: device descriptor read/8, error -71 [ 213.676219][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 213.686709][ T5835] usb 2-1: no configurations [ 213.692630][ T5835] usb 2-1: can't read configurations, error -22 [ 213.700372][ T5835] usb usb2-port1: attempt power cycle [ 213.736531][ T1206] usb usb4-port1: unable to enumerate USB device [ 214.016110][ T1206] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 214.046059][ T5835] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 214.069454][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 214.075802][ T5835] usb 2-1: no configurations [ 214.083146][ T5835] usb 2-1: can't read configurations, error -22 [ 214.156909][ T7708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.498'. [ 214.225996][ T1206] usb 3-1: device descriptor read/64, error -71 [ 214.296066][ T5835] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 214.337485][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 214.347006][ T5835] usb 2-1: no configurations [ 214.364702][ T5835] usb 2-1: can't read configurations, error -22 [ 214.372423][ T5835] usb usb2-port1: unable to enumerate USB device [ 214.516141][ T1206] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 214.716101][ T1206] usb 3-1: device descriptor read/64, error -71 [ 214.716116][ T120] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 214.878764][ T1206] usb usb3-port1: attempt power cycle [ 214.957807][ T120] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 214.995566][ T120] usb 4-1: config 0 has no interface number 0 [ 215.002250][ T120] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 215.024007][ T120] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 215.045135][ T120] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 215.068756][ T120] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 215.115942][ T120] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 215.131856][ T120] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.158068][ T120] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 215.167559][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.179551][ T120] usb 4-1: config 0 descriptor?? [ 215.185547][ T7710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.194195][ T7710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.215343][ T120] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 215.217949][ T1206] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 215.260297][ T1206] usb 3-1: device descriptor read/8, error -71 [ 215.976109][ T1206] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 216.061440][ T1206] usb 3-1: device descriptor read/8, error -71 [ 216.181459][ T1206] usb usb3-port1: unable to enumerate USB device [ 216.290617][ T7730] syz.0.505: attempt to access beyond end of device [ 216.290617][ T7730] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 216.473471][ T5895] usb 4-1: USB disconnect, device number 32 [ 216.483063][ T5895] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 216.543038][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 216.927639][ T7745] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20002 [ 217.156342][ T5894] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 217.317959][ T7755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.516'. [ 217.337806][ T7755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.516'. [ 217.373447][ T5894] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 217.388147][ T7755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.516'. [ 217.400031][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.428915][ T7755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.516'. [ 217.438325][ T5894] usb 2-1: Product: syz [ 217.455958][ T5894] usb 2-1: Manufacturer: syz [ 217.460615][ T5894] usb 2-1: SerialNumber: syz [ 217.495504][ T5894] usb 2-1: config 0 descriptor?? [ 217.539648][ T5894] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 024 [ 218.186842][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.199143][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.334918][ T5894] i2c i2c-2: failure reading functionality [ 218.348116][ T5894] i2c i2c-2: connected i2c-tiny-usb device [ 218.416468][ T5894] usb 2-1: USB disconnect, device number 24 [ 218.467275][ T7770] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 218.573717][ T7774] syzkaller0: entered promiscuous mode [ 218.606148][ T7774] syzkaller0: entered allmulticast mode [ 218.701906][ T7779] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 218.750855][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.523'. [ 218.857277][ T7787] netlink: 32 bytes leftover after parsing attributes in process `syz.4.524'. [ 219.069020][ T7793] FAULT_INJECTION: forcing a failure. [ 219.069020][ T7793] name failslab, interval 1, probability 0, space 0, times 0 [ 219.126013][ T7793] CPU: 0 UID: 0 PID: 7793 Comm: syz.2.528 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 219.126050][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.126067][ T7793] Call Trace: [ 219.126076][ T7793] [ 219.126084][ T7793] dump_stack_lvl+0x241/0x360 [ 219.126123][ T7793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.126153][ T7793] ? __pfx__printk+0x10/0x10 [ 219.126186][ T7793] ? __pfx___might_resched+0x10/0x10 [ 219.126218][ T7793] should_fail_ex+0x424/0x570 [ 219.126244][ T7793] should_failslab+0xac/0x100 [ 219.126275][ T7793] kmem_cache_alloc_noprof+0x78/0x390 [ 219.126304][ T7793] ? ep_insert+0x4fe/0x1ac0 [ 219.126335][ T7793] ep_insert+0x4fe/0x1ac0 [ 219.126378][ T7793] ? __pfx_ep_insert+0x10/0x10 [ 219.126405][ T7793] ? __pfx___mutex_lock+0x10/0x10 [ 219.126432][ T7793] ? __fget_files+0x2a/0x420 [ 219.126454][ T7793] ? __fget_files+0x2a/0x420 [ 219.126483][ T7793] do_epoll_ctl+0x8bc/0xf70 [ 219.126520][ T7793] __ia32_sys_epoll_ctl+0x162/0x1a0 [ 219.126552][ T7793] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 219.126584][ T7793] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 219.126608][ T7793] ? lockdep_hardirqs_on+0x9d/0x150 [ 219.126636][ T7793] __do_fast_syscall_32+0xb4/0x110 [ 219.126673][ T7793] ? exc_page_fault+0x5f8/0x920 [ 219.126699][ T7793] do_fast_syscall_32+0x34/0x80 [ 219.126725][ T7793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.126748][ T7793] RIP: 0023:0xf73ed579 [ 219.126764][ T7793] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 219.126780][ T7793] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 219.126801][ T7793] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 219.126814][ T7793] RDX: 0000000000000003 RSI: 0000000080000080 RDI: 0000000000000000 [ 219.126825][ T7793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.126836][ T7793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.126847][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.126875][ T7793] [ 219.349426][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.890579][ T7803] FAULT_INJECTION: forcing a failure. [ 219.890579][ T7803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.909512][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.4.532 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 219.909544][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.909558][ T7803] Call Trace: [ 219.909566][ T7803] [ 219.909575][ T7803] dump_stack_lvl+0x241/0x360 [ 219.909613][ T7803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.909644][ T7803] ? __pfx__printk+0x10/0x10 [ 219.909684][ T7803] should_fail_ex+0x424/0x570 [ 219.909721][ T7803] _copy_from_user+0x2d/0xb0 [ 219.909753][ T7803] copy_from_buffer+0x66/0xd0 [ 219.909780][ T7803] copy_uabi_to_xstate+0x339/0x9e0 [ 219.909809][ T7803] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 219.909839][ T7803] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 219.909873][ T7803] fpu__restore_sig+0xdb6/0x11d0 [ 219.909900][ T7803] ? fpu__restore_sig+0xbdc/0x11d0 [ 219.909923][ T7803] ? __lock_acquire+0xad5/0xd80 [ 219.909945][ T7803] ? __pfx_fpu__restore_sig+0x10/0x10 [ 219.910000][ T7803] ia32_restore_sigcontext+0x633/0x9d0 [ 219.910029][ T7803] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 219.910052][ T7803] ? lockdep_hardirqs_on+0x9d/0x150 [ 219.910078][ T7803] ? _raw_spin_unlock_irq+0x2e/0x50 [ 219.910107][ T7803] ? __set_current_blocked+0x312/0x380 [ 219.910141][ T7803] __do_compat_sys_rt_sigreturn+0x17d/0x250 [ 219.910166][ T7803] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 219.910192][ T7803] ? do_int80_emulation+0xe8/0x200 [ 219.910216][ T7803] do_int80_emulation+0x11f/0x200 [ 219.910236][ T7803] ? clear_bhb_loop+0x45/0xa0 [ 219.910254][ T7803] ? clear_bhb_loop+0x45/0xa0 [ 219.910273][ T7803] asm_int80_emulation+0x1a/0x20 [ 219.910289][ T7803] RIP: 0023:0xf748d579 [ 219.910303][ T7803] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 219.910317][ T7803] RSP: 002b:00000000f511655c EFLAGS: 00000206 [ 219.910333][ T7803] RAX: 00000000fffffff5 RBX: 000000008000cffc RCX: 000000000000000b [ 219.910344][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080048000 [ 219.910354][ T7803] RBP: 0000000000000300 R08: 0000000000000000 R09: 0000000000000000 [ 219.910364][ T7803] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.910374][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.910397][ T7803] [ 221.108364][ T7819] FAULT_INJECTION: forcing a failure. [ 221.108364][ T7819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.129144][ T7819] CPU: 0 UID: 0 PID: 7819 Comm: syz.2.537 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 221.129179][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.129193][ T7819] Call Trace: [ 221.129220][ T7819] [ 221.129229][ T7819] dump_stack_lvl+0x241/0x360 [ 221.129268][ T7819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.129300][ T7819] ? __pfx__printk+0x10/0x10 [ 221.129345][ T7819] should_fail_ex+0x424/0x570 [ 221.129374][ T7819] _copy_from_user+0x2d/0xb0 [ 221.129406][ T7819] drm_mode_atomic_ioctl+0x789/0x1420 [ 221.129458][ T7819] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 221.129514][ T7819] ? do_raw_spin_unlock+0x13c/0x8b0 [ 221.129554][ T7819] ? _raw_spin_unlock+0x28/0x50 [ 221.129581][ T7819] drm_ioctl_kernel+0x34e/0x450 [ 221.129617][ T7819] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 221.129656][ T7819] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 221.129701][ T7819] drm_ioctl+0x687/0xbb0 [ 221.129732][ T7819] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 221.129774][ T7819] ? __pfx_drm_ioctl+0x10/0x10 [ 221.129820][ T7819] ? __fget_files+0x2a/0x420 [ 221.129839][ T7819] ? drm_compat_ioctl+0xab/0x340 [ 221.129872][ T7819] __se_compat_sys_ioctl+0x50e/0xc30 [ 221.129907][ T7819] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 221.129936][ T7819] ? __fget_files+0x2a/0x420 [ 221.129962][ T7819] ? fput+0x9b/0xd0 [ 221.129982][ T7819] ? ksys_write+0x275/0x2d0 [ 221.130017][ T7819] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 221.130042][ T7819] ? lockdep_hardirqs_on+0x9d/0x150 [ 221.130075][ T7819] __do_fast_syscall_32+0xb4/0x110 [ 221.130102][ T7819] ? exc_page_fault+0x5f8/0x920 [ 221.130131][ T7819] do_fast_syscall_32+0x34/0x80 [ 221.130159][ T7819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.130185][ T7819] RIP: 0023:0xf73ed579 [ 221.130202][ T7819] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 221.130221][ T7819] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 221.130248][ T7819] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 221.130264][ T7819] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.130277][ T7819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.130289][ T7819] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 221.130302][ T7819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.130334][ T7819] [ 221.381086][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.826064][ T5899] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 222.865973][ T5895] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 222.897971][ T7846] netlink: 168 bytes leftover after parsing attributes in process `syz.4.545'. [ 222.921013][ T7846] netlink: 168 bytes leftover after parsing attributes in process `syz.4.545'. [ 223.033626][ T5899] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=bb.4f [ 223.043111][ T5899] usb 4-1: New USB device strings: Mfr=29, Product=2, SerialNumber=3 [ 223.075933][ T5899] usb 4-1: Product: syz [ 223.094588][ T5899] usb 4-1: Manufacturer: syz [ 223.102241][ T5895] usb 3-1: config 0 has no interfaces? [ 223.119311][ T5899] usb 4-1: SerialNumber: syz [ 223.144491][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 223.169659][ T5899] usb 4-1: config 0 descriptor?? [ 223.185103][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.272917][ T5895] usb 3-1: Product: syz [ 223.336327][ T5895] usb 3-1: Manufacturer: syz [ 223.341027][ T5895] usb 3-1: SerialNumber: syz [ 223.564582][ T5895] usb 3-1: config 0 descriptor?? [ 223.642553][ T5899] airspy 4-1:0.0: Board ID: 00 [ 223.653261][ T5899] airspy 4-1:0.0: Firmware version: Г+2k`P-q%쇝ʖ#aT{Ds%a\:B#C ]eqo pNtx [ 223.776321][ T1206] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 223.827472][ T7843] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 223.956080][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 223.979276][ T1206] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.026589][ T1206] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.038165][ T1206] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.123439][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.143819][ T1206] usb 5-1: Product: syz [ 224.156188][ T1206] usb 5-1: Manufacturer: syz [ 224.161161][ T1206] usb 5-1: SerialNumber: syz [ 224.410737][ T1206] usb 5-1: 0:2 : does not exist [ 224.431537][ T1206] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 224.484349][ T5899] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 224.506269][ T5899] airspy 4-1:0.0: Registered as swradio24 [ 224.509116][ T1206] usb 5-1: USB disconnect, device number 25 [ 224.535462][ T5899] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 224.641070][ T5899] usb 4-1: USB disconnect, device number 33 [ 224.735799][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.864580][ T7872] capability: warning: `syz.1.554' uses 32-bit capabilities (legacy support in use) [ 225.417242][ T7879] syzkaller1: entered promiscuous mode [ 225.422998][ T7879] syzkaller1: entered allmulticast mode [ 225.644811][ T7881] fuse: Unknown parameter '00000000000000000000003' [ 225.755337][ T5895] usb 3-1: USB disconnect, device number 29 [ 225.920173][ T7886] nftables ruleset with unbound set [ 226.129643][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.562'. [ 226.216062][ T1206] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 226.406262][ T1206] usb 5-1: Using ep0 maxpacket: 8 [ 226.432933][ T1206] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 226.461950][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.480273][ T1206] usb 5-1: Product: syz [ 226.499730][ T1206] usb 5-1: Manufacturer: syz [ 226.504558][ T1206] usb 5-1: SerialNumber: syz [ 226.512601][ T1206] usb 5-1: config 0 descriptor?? [ 226.520897][ T1206] gspca_main: se401-2.14.0 probing 047d:5003 [ 226.873184][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 227.005332][ T7905] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 227.256058][ T5895] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 227.370859][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 227.465996][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 227.565310][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 227.632829][ T5895] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 227.659747][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.719649][ T1206] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 227.723166][ T5895] usb 1-1: Product: syz [ 227.755987][ T5895] usb 1-1: Manufacturer: syz [ 227.760637][ T5895] usb 1-1: SerialNumber: syz [ 227.793378][ T5895] usb 1-1: config 0 descriptor?? [ 227.875535][ T1206] usb 5-1: device descriptor read/64, error -32 [ 228.033639][ T5895] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 228.051471][ T5895] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 228.108553][ T5895] usb 1-1: USB disconnect, device number 16 [ 228.140066][ T1206] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 228.393787][ T2992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.426157][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 228.426176][ T30] audit: type=1804 audit(1744419366.512:75): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.578" name="/newroot/92/file1" dev="tmpfs" ino=491 res=1 errno=0 [ 228.473344][ T30] audit: type=1804 audit(1744419366.552:76): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.578" name="/newroot/92/file1" dev="tmpfs" ino=491 res=1 errno=0 [ 228.570363][ T2992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.728367][ T2992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.982101][ T7943] FAULT_INJECTION: forcing a failure. [ 228.982101][ T7943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.003263][ T7943] CPU: 1 UID: 0 PID: 7943 Comm: syz.2.580 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 229.003293][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.003306][ T7943] Call Trace: [ 229.003315][ T7943] [ 229.003324][ T7943] dump_stack_lvl+0x241/0x360 [ 229.003363][ T7943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.003385][ T7943] ? __pfx__printk+0x10/0x10 [ 229.003413][ T7943] should_fail_ex+0x424/0x570 [ 229.003432][ T7943] prepare_alloc_pages+0x220/0x610 [ 229.003454][ T7943] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 229.003473][ T7943] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 229.003490][ T7943] ? weighted_interleave_nodes+0x2ca/0x380 [ 229.003522][ T7943] alloc_pages_mpol+0x339/0x690 [ 229.003546][ T7943] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 229.003572][ T7943] alloc_pages_noprof+0x121/0x190 [ 229.003595][ T7943] get_free_pages_noprof+0xc/0x30 [ 229.003609][ T7943] kasan_populate_vmalloc_pte+0x38/0xe0 [ 229.003627][ T7943] __apply_to_page_range+0x808/0xde0 [ 229.003652][ T7943] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 229.003673][ T7943] ? __pfx___apply_to_page_range+0x10/0x10 [ 229.003694][ T7943] ? do_raw_spin_unlock+0x13c/0x8b0 [ 229.003721][ T7943] alloc_vmap_area+0x1d48/0x2410 [ 229.003758][ T7943] ? __pfx_alloc_vmap_area+0x10/0x10 [ 229.003780][ T7943] ? __kasan_kmalloc+0x9d/0xb0 [ 229.003798][ T7943] ? __kmalloc_cache_node_noprof+0x26a/0x3c0 [ 229.003822][ T7943] ? packet_set_ring+0x6e7/0x24b0 [ 229.003842][ T7943] __get_vm_area_node+0x1c8/0x2d0 [ 229.003868][ T7943] __vmalloc_node_range_noprof+0x349/0x1390 [ 229.003883][ T7943] ? packet_set_ring+0x6e7/0x24b0 [ 229.003911][ T7943] ? weighted_interleave_nodes+0x2ca/0x380 [ 229.003968][ T7943] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.003986][ T7943] ? rcu_is_watching+0x15/0xb0 [ 229.004008][ T7943] ? packet_set_ring+0x6e7/0x24b0 [ 229.004029][ T7943] vzalloc_noprof+0x79/0x90 [ 229.004043][ T7943] ? packet_set_ring+0x6e7/0x24b0 [ 229.004063][ T7943] packet_set_ring+0x6e7/0x24b0 [ 229.004101][ T7943] ? __pfx_packet_set_ring+0x10/0x10 [ 229.004136][ T7943] ? _copy_from_user+0x95/0xb0 [ 229.004163][ T7943] packet_setsockopt+0x1024/0x1870 [ 229.004189][ T7943] ? __pfx_packet_setsockopt+0x10/0x10 [ 229.004210][ T7943] ? rcu_read_lock_any_held+0xbb/0x160 [ 229.004230][ T7943] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 229.004257][ T7943] ? aa_sk_perm+0x96f/0xac0 [ 229.004279][ T7943] ? ksys_write+0x24e/0x2d0 [ 229.004297][ T7943] ? __pfx_aa_sk_perm+0x10/0x10 [ 229.004325][ T7943] ? __lock_acquire+0xad5/0xd80 [ 229.004348][ T7943] ? aa_sock_opt_perm+0x79/0x120 [ 229.004381][ T7943] ? __pfx_packet_setsockopt+0x10/0x10 [ 229.004402][ T7943] do_sock_setsockopt+0x3b1/0x710 [ 229.004422][ T7943] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 229.004437][ T7943] ? __fget_files+0x2a/0x420 [ 229.004452][ T7943] ? __fget_files+0x39d/0x420 [ 229.004464][ T7943] ? __fget_files+0x2a/0x420 [ 229.004483][ T7943] __ia32_sys_setsockopt+0x1f2/0x280 [ 229.004504][ T7943] __do_fast_syscall_32+0xb4/0x110 [ 229.004523][ T7943] ? exc_page_fault+0x5f8/0x920 [ 229.004544][ T7943] do_fast_syscall_32+0x34/0x80 [ 229.004563][ T7943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.004582][ T7943] RIP: 0023:0xf73ed579 [ 229.004595][ T7943] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 229.004608][ T7943] RSP: 002b:00000000f505555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 229.004625][ T7943] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000107 [ 229.004635][ T7943] RDX: 0000000000000005 RSI: 00000000800000c0 RDI: 000000000000001c [ 229.004644][ T7943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.004653][ T7943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 229.004662][ T7943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.004683][ T7943] [ 229.393413][ T1206] gspca_se401: read req failed req 0x06 error -19 [ 229.411208][ T1206] usb 5-1: USB disconnect, device number 26 [ 229.417658][ T7943] syz.2.580: vmalloc error: size 16777216, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 229.447904][ T2992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.583521][ T7943] CPU: 1 UID: 0 PID: 7943 Comm: syz.2.580 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 229.583544][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.583553][ T7943] Call Trace: [ 229.583559][ T7943] [ 229.583565][ T7943] dump_stack_lvl+0x241/0x360 [ 229.583591][ T7943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.583610][ T7943] ? __pfx__printk+0x10/0x10 [ 229.583629][ T7943] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 229.583651][ T7943] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 229.583670][ T7943] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 229.583692][ T7943] warn_alloc+0x27c/0x410 [ 229.583705][ T7943] ? kasan_quarantine_put+0xdc/0x230 [ 229.583719][ T7943] ? lockdep_hardirqs_on+0x9d/0x150 [ 229.583737][ T7943] ? __pfx_warn_alloc+0x10/0x10 [ 229.583751][ T7943] ? kfree+0x198/0x430 [ 229.583767][ T7943] ? __get_vm_area_node+0x1e1/0x2d0 [ 229.583789][ T7943] ? packet_set_ring+0x6e7/0x24b0 [ 229.583808][ T7943] ? __get_vm_area_node+0x1e1/0x2d0 [ 229.583837][ T7943] __vmalloc_node_range_noprof+0x36e/0x1390 [ 229.583852][ T7943] ? weighted_interleave_nodes+0x2ca/0x380 [ 229.583888][ T7943] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.583904][ T7943] ? rcu_is_watching+0x15/0xb0 [ 229.583924][ T7943] ? packet_set_ring+0x6e7/0x24b0 [ 229.583942][ T7943] vzalloc_noprof+0x79/0x90 [ 229.583972][ T7943] ? packet_set_ring+0x6e7/0x24b0 [ 229.583993][ T7943] packet_set_ring+0x6e7/0x24b0 [ 229.584030][ T7943] ? __pfx_packet_set_ring+0x10/0x10 [ 229.584065][ T7943] ? _copy_from_user+0x95/0xb0 [ 229.584093][ T7943] packet_setsockopt+0x1024/0x1870 [ 229.584119][ T7943] ? __pfx_packet_setsockopt+0x10/0x10 [ 229.584141][ T7943] ? rcu_read_lock_any_held+0xbb/0x160 [ 229.584161][ T7943] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 229.584187][ T7943] ? aa_sk_perm+0x96f/0xac0 [ 229.584211][ T7943] ? ksys_write+0x24e/0x2d0 [ 229.584228][ T7943] ? __pfx_aa_sk_perm+0x10/0x10 [ 229.584247][ T7943] ? __lock_acquire+0xad5/0xd80 [ 229.584264][ T7943] ? aa_sock_opt_perm+0x79/0x120 [ 229.584289][ T7943] ? __pfx_packet_setsockopt+0x10/0x10 [ 229.584310][ T7943] do_sock_setsockopt+0x3b1/0x710 [ 229.584331][ T7943] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 229.584345][ T7943] ? __fget_files+0x2a/0x420 [ 229.584360][ T7943] ? __fget_files+0x39d/0x420 [ 229.584372][ T7943] ? __fget_files+0x2a/0x420 [ 229.584392][ T7943] __ia32_sys_setsockopt+0x1f2/0x280 [ 229.584412][ T7943] __do_fast_syscall_32+0xb4/0x110 [ 229.584431][ T7943] ? exc_page_fault+0x5f8/0x920 [ 229.584452][ T7943] do_fast_syscall_32+0x34/0x80 [ 229.584471][ T7943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.584490][ T7943] RIP: 0023:0xf73ed579 [ 229.584502][ T7943] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 229.584515][ T7943] RSP: 002b:00000000f505555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 229.584536][ T7943] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000107 [ 229.584551][ T7943] RDX: 0000000000000005 RSI: 00000000800000c0 RDI: 000000000000001c [ 229.584564][ T7943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.584577][ T7943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 229.584589][ T7943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.584620][ T7943] [ 229.584631][ T7943] Mem-Info: [ 229.925335][ T7943] active_anon:5063 inactive_anon:0 isolated_anon:0 [ 229.925335][ T7943] active_file:20398 inactive_file:38339 isolated_file:0 [ 229.925335][ T7943] unevictable:768 dirty:66 writeback:0 [ 229.925335][ T7943] slab_reclaimable:9964 slab_unreclaimable:98472 [ 229.925335][ T7943] mapped:30678 shmem:1443 pagetables:848 [ 229.925335][ T7943] sec_pagetables:0 bounce:0 [ 229.925335][ T7943] kernel_misc_reclaimable:0 [ 229.925335][ T7943] free:1319066 free_pcp:1001 free_cma:0 [ 229.934220][ T7948] fuse: Unknown parameter '00000000000000000006' [ 229.979310][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.001035][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.010009][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.018250][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.025714][ T7943] Node 0 active_anon:20404kB inactive_anon:0kB active_file:81592kB inactive_file:153284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122772kB dirty:268kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11180kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.033394][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.068676][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.211368][ T7943] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.249868][ T7943] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.279330][ T7943] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 230.332968][ T7943] Node 0 DMA32 free:1357348kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:20496kB inactive_anon:0kB active_file:81592kB inactive_file:153192kB unevictable:1536kB writepending:268kB present:3129332kB managed:2547236kB mlocked:0kB bounce:0kB free_pcp:1520kB local_pcp:912kB free_cma:0kB [ 230.381738][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.427444][ T7943] lowmem_reserve[]: 0 0 0 0 0 [ 230.436313][ T7943] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 230.508016][ T7943] lowmem_reserve[]: 0 0 0 0 0 [ 230.538083][ T7943] Node 1 Normal free:3904184kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:96kB free_cma:0kB [ 230.571721][ T7943] lowmem_reserve[]: 0 0 0 0 0 [ 230.585506][ T7943] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.630706][ T7943] Node 0 DMA32: 813*4kB (UM) 970*8kB (UME) 844*16kB (ME) 738*32kB (UME) 543*64kB (UME) 172*128kB (UME) 64*256kB (UME) 25*512kB (UME) 12*1024kB (UM) 7*2048kB (UME) 292*4096kB (UM) = 1356740kB [ 230.703576][ T7943] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 230.735663][ T7943] Node 1 Normal: 198*4kB (UE) 48*8kB (UME) 32*16kB (UME) 205*32kB (UME) 96*64kB (UME) 33*128kB (UME) 16*256kB (UME) 9*512kB (UM) 2*1024kB (ME) 2*2048kB (ME) 945*4096kB (M) = 3904184kB [ 230.764474][ T7943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.774815][ T7943] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 230.784957][ T7943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.795489][ T7943] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 230.809755][ T7943] 60155 total pagecache pages [ 230.814555][ T7943] 0 pages in swap cache [ 230.819987][ T7943] Free swap = 124996kB [ 230.826211][ T7943] Total swap = 124996kB [ 230.834560][ T7943] 2097051 pages RAM [ 230.838866][ T7943] 0 pages HighMem/MovableOnly [ 230.843753][ T7943] 428584 pages reserved [ 230.853904][ T7943] 0 pages cma reserved [ 231.035224][ T7952] chnl_net:caif_netlink_parms(): no params data found [ 231.257198][ T5894] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 231.418134][ T2992] bridge_slave_1: left allmulticast mode [ 231.424459][ T2992] bridge_slave_1: left promiscuous mode [ 231.433379][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.442556][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.455603][ T5894] usb 5-1: config 0 has no interfaces? [ 231.462011][ T5894] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 231.475685][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.487438][ T7975] fuse: Unknown parameter ' [ 231.487438][ T7975] 0x0000000000000003' [ 231.500706][ T2992] bridge_slave_0: left allmulticast mode [ 231.525234][ T5894] usb 5-1: config 0 descriptor?? [ 231.530324][ T2992] bridge_slave_0: left promiscuous mode [ 231.554283][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.968284][ T7966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.999167][ T7966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.106052][ T5845] Bluetooth: hci4: command tx timeout [ 232.196437][ T5899] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 232.236519][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.589'. [ 232.385714][ T5899] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 232.398111][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.407477][ T5899] usb 3-1: Product: syz [ 232.412070][ T5899] usb 3-1: Manufacturer: syz [ 232.417959][ T5899] usb 3-1: SerialNumber: syz [ 232.433001][ T5899] usb 3-1: config 0 descriptor?? [ 232.580698][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.612719][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.639030][ T2992] bond0 (unregistering): Released all slaves [ 232.664668][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.681952][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.832035][ T5897] usb 5-1: USB disconnect, device number 27 [ 232.836079][ T120] usb 3-1: USB disconnect, device number 30 [ 233.021136][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.028763][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.038213][ T7952] bridge_slave_0: entered allmulticast mode [ 233.046712][ T7952] bridge_slave_0: entered promiscuous mode [ 233.055726][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.069325][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.081004][ T7952] bridge_slave_1: entered allmulticast mode [ 233.093778][ T7952] bridge_slave_1: entered promiscuous mode [ 233.110087][ T5835] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 233.203446][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.219288][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.278964][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.314000][ T7952] team0: Port device team_slave_0 added [ 233.320555][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.336111][ T8013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.599'. [ 233.345106][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 233.439931][ T7952] team0: Port device team_slave_1 added [ 233.445972][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.462719][ T5835] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.474051][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.500827][ T5835] usb 1-1: config 0 descriptor?? [ 233.511638][ T2992] hsr_slave_0: left promiscuous mode [ 233.561540][ T2992] hsr_slave_1: left promiscuous mode [ 233.570254][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.578852][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.633879][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.654297][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.682244][ T2992] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 233.690225][ T2992] batman_adv: batadv0: Removing interface: virt_wifi0 [ 233.703022][ T2992] [ 233.705363][ T2992] ====================================================== [ 233.712385][ T2992] WARNING: possible circular locking dependency detected [ 233.719421][ T2992] 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 Not tainted [ 233.726544][ T2992] ------------------------------------------------------ [ 233.733581][ T2992] kworker/u8:9/2992 is trying to acquire lock: [ 233.739752][ T2992] ffff888027e88768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 233.750436][ T2992] [ 233.750436][ T2992] but task is already holding lock: [ 233.757819][ T2992] ffff88805e306d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 233.769469][ T2992] [ 233.769469][ T2992] which lock already depends on the new lock. [ 233.769469][ T2992] [ 233.779896][ T2992] [ 233.779896][ T2992] the existing dependency chain (in reverse order) is: [ 233.788929][ T2992] [ 233.788929][ T2992] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 233.797412][ T2992] lock_acquire+0x116/0x2f0 [ 233.802471][ T2992] __mutex_lock+0x1a5/0x10c0 [ 233.807611][ T2992] xsk_bind+0x2fd/0xfb0 [ 233.812308][ T2992] __sys_bind+0x1de/0x290 [ 233.817187][ T2992] __ia32_sys_bind+0x7a/0x90 [ 233.822320][ T2992] __do_fast_syscall_32+0xb4/0x110 [ 233.827961][ T2992] do_fast_syscall_32+0x34/0x80 [ 233.833336][ T2992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.840194][ T2992] [ 233.840194][ T2992] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 233.847418][ T2992] lock_acquire+0x116/0x2f0 [ 233.852451][ T2992] __mutex_lock+0x1a5/0x10c0 [ 233.857570][ T2992] xsk_notifier+0xcf/0x230 [ 233.862522][ T2992] notifier_call_chain+0x1a5/0x3f0 [ 233.868171][ T2992] unregister_netdevice_many_notify+0x1572/0x2510 [ 233.875117][ T2992] rtnl_newlink_create+0x951/0xcb0 [ 233.880953][ T2992] rtnl_newlink+0x18b0/0x1fe0 [ 233.886169][ T2992] rtnetlink_rcv_msg+0x80f/0xd70 [ 233.891645][ T2992] netlink_rcv_skb+0x208/0x480 [ 233.896938][ T2992] netlink_unicast+0x7f8/0x9a0 [ 233.902223][ T2992] netlink_sendmsg+0x8c3/0xcd0 [ 233.907517][ T2992] __sock_sendmsg+0x221/0x270 [ 233.912725][ T2992] ____sys_sendmsg+0x523/0x860 [ 233.918010][ T2992] __sys_sendmsg+0x271/0x360 [ 233.923121][ T2992] __do_fast_syscall_32+0xb4/0x110 [ 233.928846][ T2992] do_fast_syscall_32+0x34/0x80 [ 233.934229][ T2992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.941097][ T2992] [ 233.941097][ T2992] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 233.948681][ T2992] lock_acquire+0x116/0x2f0 [ 233.953716][ T2992] __mutex_lock+0x1a5/0x10c0 [ 233.958826][ T2992] xsk_notifier+0x8b/0x230 [ 233.963759][ T2992] notifier_call_chain+0x1a5/0x3f0 [ 233.969395][ T2992] unregister_netdevice_many_notify+0x1572/0x2510 [ 233.976349][ T2992] unregister_netdevice_queue+0x383/0x400 [ 233.982597][ T2992] _cfg80211_unregister_wdev+0x163/0x590 [ 233.988759][ T2992] ieee80211_remove_interfaces+0x4f1/0x700 [ 233.995094][ T2992] ieee80211_unregister_hw+0x5d/0x2c0 [ 234.001004][ T2992] mac80211_hwsim_del_radio+0x2c6/0x4c0 [ 234.007077][ T2992] hwsim_exit_net+0x5c3/0x670 [ 234.012269][ T2992] cleanup_net+0x814/0xd60 [ 234.017211][ T2992] process_scheduled_works+0xac3/0x18e0 [ 234.023278][ T2992] worker_thread+0x870/0xd50 [ 234.028386][ T2992] kthread+0x7b7/0x940 [ 234.032986][ T2992] ret_from_fork+0x4b/0x80 [ 234.037927][ T2992] ret_from_fork_asm+0x1a/0x30 [ 234.043211][ T2992] [ 234.043211][ T2992] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 234.050968][ T2992] validate_chain+0xa69/0x24e0 [ 234.056259][ T2992] __lock_acquire+0xad5/0xd80 [ 234.061462][ T2992] lock_acquire+0x116/0x2f0 [ 234.066490][ T2992] __mutex_lock+0x1a5/0x10c0 [ 234.071629][ T2992] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 234.078219][ T2992] notifier_call_chain+0x1a5/0x3f0 [ 234.083876][ T2992] __dev_close_many+0x15d/0x760 [ 234.089256][ T2992] dev_close_many+0x250/0x4c0 [ 234.094461][ T2992] unregister_netdevice_many_notify+0x628/0x2510 [ 234.101315][ T2992] default_device_exit_batch+0x7ff/0x880 [ 234.107476][ T2992] cleanup_net+0x8af/0xd60 [ 234.112415][ T2992] process_scheduled_works+0xac3/0x18e0 [ 234.118483][ T2992] worker_thread+0x870/0xd50 [ 234.123595][ T2992] kthread+0x7b7/0x940 [ 234.128203][ T2992] ret_from_fork+0x4b/0x80 [ 234.133166][ T2992] ret_from_fork_asm+0x1a/0x30 [ 234.138459][ T2992] [ 234.138459][ T2992] other info that might help us debug this: [ 234.138459][ T2992] [ 234.148690][ T2992] Chain exists of: [ 234.148690][ T2992] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 234.148690][ T2992] [ 234.162208][ T2992] Possible unsafe locking scenario: [ 234.162208][ T2992] [ 234.169652][ T2992] CPU0 CPU1 [ 234.175021][ T2992] ---- ---- [ 234.180386][ T2992] lock(&dev_instance_lock_key#3); [ 234.185597][ T2992] lock(&xs->mutex); [ 234.192106][ T2992] lock(&dev_instance_lock_key#3); [ 234.199837][ T2992] lock(&rdev->wiphy.mtx); [ 234.204345][ T2992] [ 234.204345][ T2992] *** DEADLOCK *** [ 234.204345][ T2992] [ 234.212488][ T2992] 5 locks held by kworker/u8:9/2992: [ 234.217768][ T2992] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 234.228659][ T2992] #1: ffffc9000b837c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 234.239226][ T2992] #2: ffffffff900f0890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 234.248693][ T2992] #3: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 234.258737][ T2992] #4: ffff88805e306d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 234.270775][ T2992] [ 234.270775][ T2992] stack backtrace: [ 234.276671][ T2992] CPU: 0 UID: 0 PID: 2992 Comm: kworker/u8:9 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 234.276694][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.276706][ T2992] Workqueue: netns cleanup_net [ 234.276734][ T2992] Call Trace: [ 234.276742][ T2992] [ 234.276750][ T2992] dump_stack_lvl+0x241/0x360 [ 234.276785][ T2992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.276813][ T2992] ? __pfx__printk+0x10/0x10 [ 234.276837][ T2992] ? print_lock+0x171/0x1a0 [ 234.276858][ T2992] print_circular_bug+0x2e1/0x300 [ 234.276882][ T2992] check_noncircular+0x142/0x160 [ 234.276907][ T2992] validate_chain+0xa69/0x24e0 [ 234.276931][ T2992] ? __pfx___switch_to+0x10/0x10 [ 234.276961][ T2992] __lock_acquire+0xad5/0xd80 [ 234.276981][ T2992] lock_acquire+0x116/0x2f0 [ 234.276998][ T2992] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 234.277020][ T2992] __mutex_lock+0x1a5/0x10c0 [ 234.277041][ T2992] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 234.277058][ T2992] ? validate_chain+0x8a7/0x24e0 [ 234.277082][ T2992] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 234.277098][ T2992] ? __pfx___mutex_lock+0x10/0x10 [ 234.277126][ T2992] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 234.277146][ T2992] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 234.277164][ T2992] ? __lock_acquire+0xad5/0xd80 [ 234.277182][ T2992] ? do_raw_spin_lock+0x151/0x370 [ 234.277215][ T2992] ? inetdev_event+0x4fb/0x1740 [ 234.277235][ T2992] ? igmp_netdev_event+0x7c/0x770 [ 234.277252][ T2992] notifier_call_chain+0x1a5/0x3f0 [ 234.277277][ T2992] __dev_close_many+0x15d/0x760 [ 234.277300][ T2992] ? __mutex_lock+0x380/0x10c0 [ 234.277320][ T2992] ? trace_irq_disable+0x3b/0x120 [ 234.277335][ T2992] ? preempt_schedule_irq+0x145/0x1c0 [ 234.277366][ T2992] ? __pfx___dev_close_many+0x10/0x10 [ 234.277392][ T2992] dev_close_many+0x250/0x4c0 [ 234.277416][ T2992] ? __pfx_dev_close_many+0x10/0x10 [ 234.277448][ T2992] unregister_netdevice_many_notify+0x628/0x2510 [ 234.277472][ T2992] ? lockdep_hardirqs_on+0x9d/0x150 [ 234.277491][ T2992] ? __local_bh_enable_ip+0x168/0x200 [ 234.277508][ T2992] ? batadv_tt_local_remove+0x119/0x230 [ 234.277525][ T2992] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 234.277541][ T2992] ? batadv_tt_local_remove+0x119/0x230 [ 234.277557][ T2992] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 234.277582][ T2992] ? unregister_netdevice_queue+0x2c4/0x400 [ 234.277603][ T2992] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 234.277628][ T2992] default_device_exit_batch+0x7ff/0x880 [ 234.277656][ T2992] ? __pfx_default_device_exit_batch+0x10/0x10 [ 234.277683][ T2992] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 234.277706][ T2992] ? cfg802154_pernet_exit+0xc3/0xe0 [ 234.277720][ T2992] ? __pfx_default_device_exit_batch+0x10/0x10 [ 234.277746][ T2992] cleanup_net+0x8af/0xd60 [ 234.277772][ T2992] ? __pfx_cleanup_net+0x10/0x10 [ 234.277813][ T2992] ? process_scheduled_works+0x9cb/0x18e0 [ 234.277830][ T2992] process_scheduled_works+0xac3/0x18e0 [ 234.277859][ T2992] ? __pfx_process_scheduled_works+0x10/0x10 [ 234.277881][ T2992] ? assign_work+0x367/0x3d0 [ 234.277899][ T2992] worker_thread+0x870/0xd50 [ 234.277924][ T2992] ? __kthread_parkme+0x1a8/0x200 [ 234.277944][ T2992] ? __pfx_worker_thread+0x10/0x10 [ 234.277964][ T2992] kthread+0x7b7/0x940 [ 234.277986][ T2992] ? __pfx_worker_thread+0x10/0x10 [ 234.278006][ T2992] ? __pfx_kthread+0x10/0x10 [ 234.278026][ T2992] ? __pfx_kthread+0x10/0x10 [ 234.278048][ T2992] ? __pfx_kthread+0x10/0x10 [ 234.278070][ T2992] ? __pfx_kthread+0x10/0x10 [ 234.278091][ T2992] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.278107][ T2992] ? lockdep_hardirqs_on+0x9d/0x150 [ 234.278125][ T2992] ? __pfx_kthread+0x10/0x10 [ 234.278147][ T2992] ret_from_fork+0x4b/0x80 [ 234.278164][ T2992] ? __pfx_kthread+0x10/0x10 [ 234.278185][ T2992] ret_from_fork_asm+0x1a/0x30 [ 234.278206][ T2992] [ 234.651061][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.680192][ T5845] Bluetooth: hci4: command tx timeout [ 234.688309][ T8018] Cannot find add_set index 3 as target [ 234.701593][ T2992] veth0_macvtap: left promiscuous mode [ 234.707933][ T2992] veth1_vlan: left promiscuous mode [ 234.713315][ T2992] veth0_vlan: left promiscuous mode [ 234.953808][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 234.965340][ T5835] usbhid 1-1:0.0: can't add hid device: -71 [ 234.971521][ T5835] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 234.982422][ T5835] usb 1-1: USB disconnect, device number 17 [ 235.023315][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 235.184770][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.195386][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.221320][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.229579][ T7952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.286364][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.293324][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.322556][ T7952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.371453][ T7952] hsr_slave_0: entered promiscuous mode [ 235.396340][ T7952] hsr_slave_1: entered promiscuous mode [ 235.575806][ T7952] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.594427][ T7952] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.608225][ T7952] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.620711][ T7952] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.695474][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.720038][ T7952] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.747578][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.754819][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.773860][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.780999][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.843826][ T7952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.885450][ T7952] veth0_vlan: entered promiscuous mode [ 235.899282][ T7952] veth1_vlan: entered promiscuous mode [ 235.927213][ T7952] veth0_macvtap: entered promiscuous mode [ 235.950167][ T7952] veth1_macvtap: entered promiscuous mode [ 235.970989][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.987823][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.999604][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.011764][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.022929][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.035148][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.052111][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.065001][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.078281][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.090243][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.101107][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.110979][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.121525][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.132490][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.150984][ T7952] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.160387][ T7952] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.169614][ T7952] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.179198][ T7952] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.227874][ T7952] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 236.252159][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.258933][ T7952] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 236.265942][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.288280][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.300148][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.736295][ T5845] Bluetooth: hci4: command tx timeout [ 238.816260][ T5845] Bluetooth: hci4: command tx timeout