last executing test programs: 8m36.009721512s ago: executing program 1 (id=4210): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000400)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xe2f0951bd6ef8cb2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/179, 0xb3}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f00000018c0)=""/182, 0xb6}], 0x4}}], 0x1, 0x40010122, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 8m33.959080971s ago: executing program 1 (id=4218): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000004000000410000000000800001000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000100"/28], 0x48) socket$inet(0x2, 0x4, 0x8001) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000400)=""/238, 0xee) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRESHEX=r3], 0x40}}, 0x0) syz_io_uring_setup(0x779b, &(0x7f0000000380)={0x0, 0xf5a5, 0x0, 0xffffffff, 0x2028a}, &(0x7f0000000280), &(0x7f0000000200)) 8m31.833550087s ago: executing program 1 (id=4221): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$6lowpan_enable(r2, &(0x7f0000000340)='1', 0x1) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) (async) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000300), 0x4480, 0x0) setsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000380)="67609f1bc76b660c7f522543621903dbd6dfb1322eb58ade49f7f6873e8c5b3a1e47a60fb805cbdca74d2ef9be337149a65b0c074f4b1001eff7a36fd2627258a02a3b46aba1f0f5f27cca55a28ffd26acca165107f55e8dfc020f192c7931515be26928a4af66540b951c34e67537616956b8022eaf08fef4a00257a4868b80ff3c2fcbe10ae082c9c46072d2c8e96da8a63af5cb6d56edf5d74507277a42ff37", 0xa1) (async, rerun: 64) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r3) (async, rerun: 64) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r3) (async, rerun: 32) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r6 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r6) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0xc2a10a980d0dcec8}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r10 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0xe88, 0x2c, 0xd27, 0x70bd23, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe5c, 0x2, [@TCA_FW_ACT={0xe58, 0x4, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x78869efc, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xe, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe164, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0x18000}, {0xfffffffe, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x4, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x2, 0xfff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x9}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x203, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2, 0x1000}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x8009627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x4}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x0, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x4, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc}) socket$nl_route(0x10, 0x3, 0x0) 8m31.720886191s ago: executing program 1 (id=4223): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8m28.660741748s ago: executing program 1 (id=4232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x3, 0x6805) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r6, 0x29, 0x1e, &(0x7f0000000200)=0x4, 0x4) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0x9) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7f}]}]}, 0x28}}, 0x44001) 8m28.039137786s ago: executing program 1 (id=4233): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) (async) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x80000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12"], 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) (async) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 8m13.004250602s ago: executing program 32 (id=4233): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) (async) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x80000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12"], 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) (async) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 17.396438981s ago: executing program 4 (id=6458): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0xffc, "340b32ceefd131b8e6498c25f58fad9987ffd03bbabd18cf501922de974a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5}) close_range(r3, r5, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d55d0ab9f8820efaeb3f8e965501aef3a2a22ed60f1b777b3af0df007039e022af0306693b3d25d65a55b864a61403e9744f56f6a71d", 0xc3}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0", 0xc4}, {&(0x7f0000000580)="b0e1591e8b024f6c43d140ff6d19afdf0fe19cffb6e0b7dbc3d1026ecc8d55a498615034548a3579f9bd7697e6b74cc32ea3d6cd6579b720e5253fda4ef2e350c2b2f49c6f1e52bbd5fcf0", 0x4b}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x5c}, 0x1) syz_open_dev$usbfs(0x0, 0x76, 0x101301) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440f1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000007c0), 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000040)='udf\x00', 0x0) 15.946803136s ago: executing program 4 (id=6461): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x34, 0x18, 0x400, 0x70bd28, 0x25dfdbfe, {0x2, 0x10, 0x0, 0x41, 0xff, 0x1, 0xff, 0x1}, [@RTA_TABLE={0x8, 0xf, 0xfff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_SPORT={0x6, 0x1c, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x44440}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090429000002020100052406000005240000000d240f01000000000000000000845720a0ed1e59a81ae96f2f80bafdfb6dae06763ad7abfad505f7aab055c139c097212153d7e7b582e1f7adf334763543d295686ec159deb61812b3edd2813a32d66dbc6eec24f2d6892221"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffff9c, 0x0, 0x400, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r8, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r7, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000180)="068c8b9cf95140d6ccb535c8da0600deffd53b91712960a3f263f8989179ff193d7e49e43cc8ecbf04714fe6a22c2ae1a8014b0092fd0652bdd015b5aab6aacb7fa791d3a5a53f00000000000000000d1324fdb08e23e51f25252a0355c42342c3469eb004c5ca9ef9ede491a22fa887e4d7b9d730e09fd5c6f29b51a6327ba134b898f9dfcde7ade0f040aed4a08972ffa22176cf298b6e00", 0x99, 0xfffffffffffffffd) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendto$packet(r2, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x3, r4}, 0x14) 13.958080102s ago: executing program 4 (id=6468): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x60, @local, 0x4000000}, 0x1c) 13.591145781s ago: executing program 4 (id=6469): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005c1000/0x2000)=nil, 0x400000, 0x3, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xc0}) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r5, &(0x7f0000000040)=@random={'trusted.', 'system.po\x92i\xe0\x00acl_default\x00<\xccY\x9e\xdd5\xe2\xcc\xeb\xb9\xb2\xbc\x84\x80\x03\xcf\xec\xbd\xa8P\xa5d\xd5\x19\x1a\x1f+\xc6_\xfc\x8f[\xdfWB\x9dF\xef5\bZ\xea\xf8e\xecUms\xb4l\xcf\x0e\xcc\xd3\xc7B\xbd\xa3\xe5L\x85I\x8a\x9a \xd6\xfbu\n\xf8\xd8\x88\x0fn\x8a\xbbj\xc6\x92u\x9f\xe8-\x8e\x11\xf1\xbf\tg\xb7\xea\xdc\x14\x1b6\xf0\xa2\x91CsQ\xc3r\xf5{B\xeans\xe9\x8bY5scA6D\xb0\b\x01\xd9\xbd.\x9c\xa3\x17yW\x03%\a\xe3:\xdc?\x00\xe8\v\a2Y\x9ab'}) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) execve(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) 11.789895324s ago: executing program 4 (id=6473): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2a0000000600000000000200000000000100000000000000000000000020000001000000020000000008"], 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x9, [{{0x200000000000, 0x0, 0x0, 0x9, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x800004, 0x0, 0xefd, 0x0, 0x0, 0x0, 0x6000, 0xfffffffc, 0x0, 0x0, 0x2003}}, {0x1, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 11.435055327s ago: executing program 4 (id=6475): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) r2 = add_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="fd9ec54ca50ba9aef5a9eee417b91d8fd6151d05000000000000009543fe5c1e4a83c0530914757ead3dbc92dc92a8b669050abc134e229cbf3e38dd4034d76f6d4ca77f27e5eea5f55ae9ac3243c0e87666adb9b526069f4200b09cf6b76b164ae7bfe6b613b98712246a4163d7ff7281452ec6fd9940f94eb629e7abe60dd81326fdc78c583bda5e37a38e108d40facdfd42ac302f5ae3c2c1ad8594c68883", 0xa0, 0x0) r3 = add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000340)="07269240058f340b5a6672a8774f13cc28575466bebf41a180f9ba17eb98b69c29389307b695790cb9297bab0a418f83d1f06d5eab95a2756af7205cea6b82eef190f011c353a3acea3c3b2ae198a28d7fee3ebfd60652d142217edebe5f75f5d6644f113cc456c76779ea0bae169b4c60d40e440248358a6e2266a0736fb31e7d6d5c9108df4a3bea990e3eefb675f6a1c54a9f0b8832929106299ba35aee0593c808502608b3ea38aed2524c668151", 0xb0, r2) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$clear(0x7, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xed) 10.190423924s ago: executing program 0 (id=6477): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000300), 0x4480, 0x0) setsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000380)="67609f1bc76b660c7f522543621903dbd6dfb1322eb58ade49f7f6873e8c5b3a1e47a60fb805cbdca74d2ef9be337149a65b0c074f4b1001eff7a36fd2627258a02a3b46aba1f0f5f27cca55a28ffd26acca165107f55e8dfc020f192c7931515be26928a4af66540b951c34e67537616956b8022eaf08fef4a00257a4868b80ff3c2fcbe10ae082c9c46072d2c8e96da8a63af5cb6d56edf5d74507277a42ff37", 0xa1) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0xc2a10a980d0dcec8}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xec8, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe9c, 0x2, [@TCA_FW_ACT={0xe98, 0x4, [@m_pedit={0xe94, 0x1, 0x0, 0x0, {{0xa}, {0xe68, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xe, 0xfffffefb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x2, 0xfff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x0, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x1}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x0, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x5, 0xfffffff1, 0x10, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x4, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xec8}, 0x1, 0x0, 0x0, 0x80}, 0x800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010026bd7000000000000200000000000001000000001400030073797a6b616c6ce572300000"], 0x30}}, 0x0) 7.44284495s ago: executing program 3 (id=6483): r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r2 = dup(r0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="280000000400"], 0x28) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r1, 0x0, 0x4000000053d2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$6lowpan_control(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x1000, 0x0, 0x1, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x19, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {0x40, 0x0, 0x0, '\x00', 0x4}, {0x81, 0x68, 0x5, '\x00', 0x4}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x6}, {0xff, 0x5}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {0x0, 0x0, 0x80}, {0x3, 0x0, 0x0, '\x00', 0xc4}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x80}, {0x5, 0x0, 0x0, '\x00', 0x40}, {0x20, 0x0, 0x19, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x58, 0x6, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0xff80}], 0x1}, 0x20000000) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r12, @ANYRES32=r12], 0x44}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32, @ANYBLOB="0000000000000100b706000014020100b7030000000600188500000008000000bf0900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r12, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getnexthop={0x28, 0x6a, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NHA_ID={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x2000c004) 6.851833633s ago: executing program 2 (id=6484): r0 = syz_io_uring_setup(0x6e42, &(0x7f0000000000)={0x0, 0x1344, 0x8, 0x2, 0x29d}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad000905"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x100, 0x70, 0x8, 0x1ff, 0x7, 0x100, 0xfeba, 0x3, 0x8000, 0x0, 0x100, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='+\x00'/12, @ANYBLOB="f2"], 0x20) r3 = syz_io_uring_setup(0x5c92, &(0x7f0000000100)={0x0, 0x3b2e, 0x1, 0x0, 0x3e5, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES8=0x0, @ANYRES16=r3, @ANYRESDEC=r4, @ANYRES16=r0, @ANYRES8], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x2, 0x5911, 0x2}) r7 = syz_usb_connect(0x1, 0x527, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x4f, 0x77, 0x23, 0x40, 0x46d, 0x901, 0xa0ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x515, 0x2, 0x4d, 0x8, 0x0, 0x4, [{{0x9, 0x4, 0x2a, 0x0, 0xa, 0x41, 0xbd, 0xeb, 0x2, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "34af80c7db1d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0x12, 0x9}, {0x6, 0x24, 0x1a, 0x5, 0x4}, [@dmm={0x7, 0x24, 0x14, 0xc1eb, 0xfffc}]}], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0x80, 0x20, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x0, 0x0, 0x2, [@generic={0x1d, 0x23, "0e4ce745ed8f7b00f49a04028f90cd1cd7e649db562f077f0f70e5"}]}}, {{0x9, 0x5, 0x3, 0x12, 0x200, 0x7, 0xb, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x6e}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x7, 0x3, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x3b, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0x8001}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x5, 0x4, 0x5, [@generic={0xdc, 0x5, "3c0c2420a0007e7cb5d192e0e07c0f348b7f00980e25c49e3dd6405d7d30611dfae181d9ab4fe28b318520f08e0b45e0fc7b2323af3d573b96460ef20da49b2c0f61096a5731c53c7537ff520288c145baca3377e9b3742775721284184d1db23d3ffe7f4bed76ca0ea3a3cbe363f4e185c8b5c21c53094cc7aeb6642072bdb4637b3f086b75a540f83f27c880aa31f0b36bad99a5a7be10d468041aa05e133b83e46f424e325fc40a0b4cf5e71625852c77488b8d267e35fb9d0a8bc20aa74e123a95b6885fbe1604e497f4f247114cc28afe87b363746375e1"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x7ff, 0x6e, 0x4, 0x7f, [@generic={0xb, 0x24, "836e03fffb53aa0173"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x200, 0x9, 0x7, 0x10, [@generic={0x4f, 0x1, "c6daef805fcd14cbb7dde193d62a110033a09db87ee20b68036d127fd56d4b01e6e6b530a1d908e26239fe59395d0ffb331fccd8fdf9e4155883def33953281dddbde32fe2a2cfb6b2b0a8c095"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x9, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xf0dc82e030facf08, 0x6, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xf, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xffff}, @generic={0xb1, 0xe, "17bea9be2bfe119ef1079f8d5243a2fd8c9500215d3f41553f8f494927d2f878c2e387b61e5c594680420e5f27965026ff5b9f099c027cd5755e6a85b75ba9a9c877de9cd938eb58de60108bfca3e1131cadec09620c011192d61d13438b5e6417174d9bbb89bc0e88e1e56be330ecc12a11b8f974073807c0352fd09a3610ea627f5cf203d82009e16efc0a67bd5ffedcf81737b4d1673da37e14840b4262fe8d1b6263caf5b63c31500306b9cba2"}]}}]}}, {{0x9, 0x4, 0x5, 0x5, 0xb, 0x71, 0xb5, 0x95, 0x8, [@hid_hid={0x9, 0x21, 0x1ff, 0x5, 0x1, {0x22, 0xf76}}], [{{0x9, 0x5, 0x9, 0x2, 0x40, 0x4, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x3, 0x2, 0xde, [@generic={0x7d, 0x22, "536334f0d7df6a931041783cd8f76e79f06729e4afcc84371aa6b66577543ded7a3108891925d9fdaaf2393fded6dfa86795085d6b9f1cf0095d5fac1306710ed9374ffdbc7fe078f1beb83ea4b2a1f8644f26936334e0ea7984c0ea0c0cfaafde6011ff6bc14c70bebbb6019db7990e0b9b5dfcb65adb23a0b83e"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x258, 0x7, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x43}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x0, 0x9, 0x6, [@generic={0x2c, 0xe, "d67230d6ab61b43ca08c875eed1ae7168d5bccfb0e4c669c513910ca6e4be1968969dbca2e433bedc9b0"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x1, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x5}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x5, 0xfa, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa3, 0x2d6f}]}}, {{0x9, 0x5, 0x9, 0x18, 0x200, 0x2, 0xe, 0xa3, [@generic={0x7, 0x9, "6b41e983b0"}, @generic={0x41, 0xe, "711c3b85d053b4f5d1090729d0718ec4ac78da1f164de77ab889402ba30b0c878b6a5ef2e38f3281d619de28dbbbc6d94a31003719c1be676aca3a86b552d1"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x7, 0x1, 0xfd, [@generic={0x42, 0x21, "14fa487876adcb9040c89d39073dd88c6158f68907b024110edf6d351b676195e5f0ef1cb22cb9c95061eb2747522f2c2f81809291b293d342bb4078189bde6c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0x3, [@generic={0x71, 0xc, "8a87640de3131123fe50470818e1e9f16b4155aa2aba4a1a1ac6936e9b8e4eddd7c1e865673ce112c010f5bc6fad41df6938743be16a81124960571580f36c784ee4338fdf59e83cf7ade1bd2cd23d2388edc3016c6704df2b4db16565b654db8f394700aab3595ad20177cdb89914"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x6, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x3, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x7f, 0xa3, 0x2, 0x40, 0x1}, 0x42, &(0x7f0000000340)={0x5, 0xf, 0x42, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x4, 0xff00, 0x7, [0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0xc0, 0x3, 0x2b9c, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0x6, 0xbfbe, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xf2, 0x1, 0x6, 0xff00, 0x1, [0xff0030]}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x21, &(0x7f00000003c0)=@string={0x21, 0x3, "4de0c9da795b74d449d0aac9a9766a15e60552b1e2b891a1029aed498b9cd2"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_control_io$printer(r7, &(0x7f00000004c0)={0xc, &(0x7f0000000ac0)={0x0, 0x11, 0x100, {0x100, 0x4, "6e982023e94d2cef5efe5f60a2d5ae8ea5576e078ddea2ee5b6cf3c57928542177eee0f89c5592837737713db02381051cc3e489f1acc420f053f231937aac160e85c4453c9ee303a3b6fcf43668d864485fba270bbe692fca55defa9e400f2d3c51198e5117b1be7c33ba8a7c81e350e1ffe966acb33e53ee7a52290d30b0cd5dec6b5031d2e12676ad303835fc7515ff266f560b60669f81d070c514b59acc5a211911d4bae37860b1f4f485612ea030bf191091438243390371125eca29ee7e5e04e6086e78b592ae465fb0f514ae0027a994b77eb06fc10165a73a9cdcf1292d6e5d59f907f0fa2e1934e1d0f4d4da3f54b625e6ef5bdc23ccb6d313"}}, &(0x7f0000000c00)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "01e58d334a282192887fa9a503eb2a71496430eb54fc13242ecd76be1879841ea87e81719ef638e3e9e1576fc523dbc268c5d2bef6e429d3d90ad359d07c3f04a2751cab57760add63e7290ee0dbc31f2190fd74d18341a9aaad81e51bd80774211c2e89955af295ff11e72b9cb53f646871b07eda504cadc2a42007c1447bd4e3fe14da40e435e68483f51207"}}}, &(0x7f0000000f40)={0x1c, &(0x7f0000000cc0)={0x20, 0x31, 0xaa, "bbd7b6d8b8749ddf4587c068b8e7bf896aacaa98629500d36634e57a500883659ae90ae53c9943c78025198250eda472e520fd79e59e6b85d93afb2a81ca280e32869f8f085632386e9919a3a5025a3011398e5df921bf085d1ed77a6ca131022bec33fa7e584854359014730644a033e0d4ade58b5f6f8dd81f752983f25c4f7b4468f62a065fc08cf242064af3ed0947d232edc355c87228f7dcb3dc3d359bc31001662575afb2506e"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000dc0)={0x20, 0x0, 0xf8, {0xf6, "26f0a81bb0f370b07c79fce7096fbcecd2cfe3a14c805c108b72460e01ffbe1de4024eb70e286608a38b953800be0333f512c28a5de5252524842904c690c335ca94d66779ff2f0b208dd467d21765a5460b641fa1e94e1f201692e0805b4975521547b385ff9898e9fbb1f1e7178525b11835db850549ebca0acfa246f605d31393d47afbd423b37eeae536d03e67ffb0a85ab90024844885c5ff5e62929f0d1aea146b1710cade94b0760bf679ecd57e886e61269330cb1cf2148fea8cd778c917e518a36b5dcf530be97168dd058db22470e3a252632a448fa0bebdde71fbb4436bf12d8ae538fc605b20aec17a18f20bcd101f06"}}, &(0x7f0000000ec0)={0x20, 0x1, 0x1, 0xfb}, &(0x7f0000000f00)={0x20, 0x0, 0x1, 0x1}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 6.777039018s ago: executing program 5 (id=6485): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x800) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004081) 5.86158032s ago: executing program 5 (id=6486): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x280449c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0185649, &(0x7f0000000140)={0xa30000, 0x64, 0x2, r7, 0x0, &(0x7f0000000100)={0x98092a, 0x6, '\x00', @value64=0x8000000000000000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.56928816s ago: executing program 0 (id=6487): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x3f, 0x0, 0x20000007) recvmmsg(r2, &(0x7f0000003340)=[{{&(0x7f00000004c0)=@pptp, 0x80, 0x0}, 0xfffffff9}], 0x1, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000540)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000580)=0x28) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0]) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) 5.562915825s ago: executing program 3 (id=6497): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0xffc, "340b32ceefd131b8e6498c25f58fad9987ffd03bbabd18cf501922de974a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5}) close_range(r3, r5, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d55d0ab9f8820efaeb3f8e965501aef3a2a22ed60f1b777b3af0df007039e022af0306693b3d25d65a55b864a61403e9744f56f6a71d", 0xc3}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb", 0xc7}, {&(0x7f0000000580)="b0e1591e8b024f6c43d140ff6d19afdf0fe19cffb6e0b7dbc3d1026ecc8d55a498615034548a3579f9bd7697e6b74cc32ea3d6cd6579b720e5253fda4ef2e350c2b2f49c6f1e52bbd5fcf0", 0x4b}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x5c}, 0x1) syz_open_dev$usbfs(0x0, 0x76, 0x101301) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440f1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000007c0), 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000040)='udf\x00', 0x0) 5.247116154s ago: executing program 5 (id=6488): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r1, 0x4a, 0x1) r2 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r2) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @tfcpad={0x8}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 5.081382948s ago: executing program 0 (id=6489): socket$netlink(0x10, 0x3, 0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x59e, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 4.798109594s ago: executing program 5 (id=6490): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) r3 = socket(0x10, 0x80002, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mlock2(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz0\x00', 0x6}, 0x1, 0x20000000, 0x6, r7, 0x0, 0x4, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r6, 0xc0405519, &(0x7f0000000ac0)={0x6, 0x1, 0x9, 0x10, '\x00', 0x35}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r9, 0xc02464bb, &(0x7f00000003c0)={0x2, r10, 0x9, 0x4, 0xeb0, 0x0, 0x0, 0x40, 0xffffff4f}) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c3a5300f1299f5779672a2656100000dff825ae60681ba65f94480681538b8e9e4a5e4399c21ee16e480f219c45082ec831f885aa7eacdc084f113c5a3ca1de0a9356930c897b0cec293e0ae5934c7f79416f2dd7d17d66be81f8dff9d883a9ca26f14b5ac16e22f10b308383587ee2048eaadae9aefa19626d89c1940e5d8a8038a22745716b3f1be777d982d98eb4a431f28388fe01a0919e406d990eccba56e65d7bd2d34c4b04b053ee3c7a7a060211c97e0080520331c91b66031005c30295b995a966d59770784faa75b1e9183c1a0041a81f02aa5315b006c6ffe4233c3af480dca3a9fdf9667fbf11f99318658ebe713cb4b8ea59b30f0671d881ba35db7da9a9f7582c2a02867cec853be2fb71bcb75fecdb32921a18075ff444815830e6fcce04e052661871f7ed2a1c03f93e0e5fcb736f533becfa7eb63a5d9d9cffc28c10aee742eeaea2a90f0279c316c825c027a9de62c109ea6f68ec7c643ec604bcf49b596434bd11a3ae19681c34096952078d4f0cda6b7568537b335537efb7b18fb9fc000d41d40131b4386b5b3826026c041f6d8160e6a10e264a0a8ff93a005fb0c67be9905619debb8d3de59c7c51bcfa3f92f598", @ANYRES16=r8, @ANYBLOB="020428bd7000fddbdf250900000004000680080003000400000005000500fe0000000500050001000000340006800800060006000000080003006401010005000200ff000000060005004e220000080006000100000008000700", @ANYRES32=r1, @ANYBLOB="0800030000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc0c0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000100)=[{r11, 0xde82ffa013367fe6}], 0x1, 0x0, &(0x7f0000000240)={[0x8000000000000000]}, 0x8) 4.671129962s ago: executing program 0 (id=6491): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xcf}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000600)) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/144]}, 0xe0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd607a3f0000102100fc000000000000000000000000000000ff02000000000000000001000000000401907804dba20d007a0000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x2) 3.844172109s ago: executing program 3 (id=6492): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x5, 0x1002, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="4dc07f9471", 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="c16d473d990c0180c200000400000000005800000000002f90780a010101e0000001248088640000000010000800000086dd080088be00000000100000000100000000000000080022eb00000000200000800200000010000000000000000800655800000000"], 0x0) r6 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1ef}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.567232356s ago: executing program 2 (id=6493): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000000c0)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00\x00\x00 \x00\x00\v'], 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x38, 0x1c, 0x100, 0x2, 0x0, {0x7, 0x0, 0x0, r3, 0x8, 0x64}, [@NDA_PROBES={0x8, 0x4, 0x4}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) write$P9_RRENAME(r4, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 3.442890303s ago: executing program 3 (id=6494): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x3f, 0x0, 0x20000007) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000100)="3324796612ae88", 0x7}, {&(0x7f0000000140)="b5deee6dcdb8bd37fcf596366011d303afdb8f84632ad453c4", 0x19}, {&(0x7f00000001c0)="877f81a5b343fa960473b507e8048d67e6273706deb563a9874f8fd3d47488811d0e76c74b28", 0x26}, {&(0x7f0000000280)="0f449e9650b6b8c0f3191c18c7baa7451e38f99ac78ea5d5b4307afcff", 0x1d}, {&(0x7f00000002c0)="59358ba72469a6cce6ed1a0bd7ad39594e47fb549acb6b3bf18dcedb44f2a4a5acefa74f01769058202d40e10de94dea23c882dddb62ab3f256b7e8e52df6e8daa0de1a5cd64127f5e52df29547b8d439a7865f214582e535d5abb71fc7a2ab60139b857ed1c91e1841a9fb8947158d1d21ce9c97e6a0a60429cf030bb7151e3cfd58dfaceca9ebb2e7914a799a0236a3f14fa7f327c8467d4208ee53135774c74fe5ca007ee361f282434b635c76c7664d6980489b3", 0xb6}], 0x5) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000540)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000580)=0x28) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0]) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) 3.340099811s ago: executing program 2 (id=6495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x33) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000400)={r5, 0x4, 0x1000, "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"}, 0x1008) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x9, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000801903200000000000000090000080600024088a200000900010073797a310000000004000480"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x26004090) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @local}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$WG_CMD_SET_DEVICE(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[], 0x6c}}, 0x0) 2.680246167s ago: executing program 3 (id=6496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)={0x18, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x800) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="100028bd7000fddbdf25040000001800018014000300ac1e0001000000000000000000000000080005000000000054000280080005000500000008000500ff0f0000060002004e220000140001000000000000000000000000000000000108000700090000000800060004000000140001006401010000000000000000000000000008000400000000803000028008000700c221000014000100fe88000000000000000000000000000108000600080000000800040001000000540001800c0007000000000023000000080005000300000008000b0073697000080009004e000000060004004e20000008000b0073697000080006006f76660014000300fc010000000000000000000000000001080006000100000050000380080003000100000008000500ac141444080005000a01010014000200776732000000000000000000000000000800050000000000080003000400000008000300000000000600040008000000"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004081) 1.823351938s ago: executing program 0 (id=6498): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000884, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @loopback, 0x8}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)="2c83aa84cf5fe4d7dade16ecab3739093c85dd730a67880b9a4c94d4c17f9672ff0b0d56bdff6e47f73a7040960d2b549c7700c9968bec5f17dadeffbe008db8fe7a93c101a1f774f5520b491af2a108d9681c6aadb0364e1185c93403338ef338653a4a16034eae697763e312d310c6800e4490ae7a2534ae7cdb6b063c0493aeaa3b1187", 0x85}, {&(0x7f0000000b40)="afa2eaab9c79f40d1052a81e43025e22613c372462ed44b1c73cfdde2f0812af48b363018d142cc8f939b4bb434f11c0c96a38b0e5db83538610dfc4442cc056dd258627517f498ab9d138d2b870db7929dabeaccc0654a88ce492413ee0cb6313cbc2174e677d2feffb5b33b69e01c572259107cc5c29d42619743037ca49", 0x7f}, {&(0x7f0000000c40)="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", 0xc49}], 0x3}, 0x20000000) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r6 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x0, 0x0) tkill(r6, 0x16) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r9, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r8], 0x48}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c3482, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000080)={0xa, 0x0, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x3}, 0x20) 1.750389424s ago: executing program 3 (id=6499): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0xffc, "340b32ceefd131b8e6498c25f58fad9987ffd03bbabd18cf501922de974a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5}) close_range(r3, r5, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d55d0ab9f8820efaeb3f8e965501aef3a2a22ed60f1b777b3af0df007039e022af0306693b3d25d65a55b864a61403e9744f56f6a71d", 0xc3}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb", 0xc7}, {&(0x7f0000000580)="b0e1591e8b024f6c43d140ff6d19afdf0fe19cffb6e0b7dbc3d1026ecc8d55a498615034548a3579f9bd7697e6b74cc32ea3d6cd6579b720e5253fda4ef2e350c2b2f49c6f1e52bbd5fcf0", 0x4b}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x5c}, 0x1) syz_open_dev$usbfs(0x0, 0x76, 0x101301) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440f1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000007c0), 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000040)='udf\x00', 0x0) 1.5709976s ago: executing program 5 (id=6500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000004c0012800c0001006d6163766c616e003c0002801c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb000008000300030000000e0004"], 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$PPPIOCSPASS(r2, 0x40087447, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x1ff, 0x7f, 0x7, 0x3000}, {0x3285, 0xdf, 0x1, 0x5}, {0xfff, 0x4, 0x4c, 0x5}, {0x3425, 0x1c, 0x1, 0x27}, {0x3ff, 0x0, 0x7, 0x6}, {0xf000, 0x7f, 0xff, 0x6}, {0x2, 0x7, 0x0, 0xab3}, {0x2, 0x5a, 0x7, 0x10001}]}) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) fchdir(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xad}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) close(r3) open(&(0x7f0000000100)='./file0\x00', 0x181042, 0x10a) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000003080042000068006500000f069078ac1414aaac1414aa442cc651e000000200000001ac1414bb000000076401010200000006ac14141000000001ac14140a00000000019404010000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 1.304434752s ago: executing program 2 (id=6501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x300, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x80) 1.02341574s ago: executing program 2 (id=6502): r0 = syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0xfffffffffffffff3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000056}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0xb, 0x9f}]}, &(0x7f0000000600)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x20000) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000780)={0x5, @sdr={0x41415270, 0x4}}) 311.758244ms ago: executing program 5 (id=6503): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0xffc, "340b32ceefd131b8e6498c25f58fad9987ffd03bbabd18cf501922de974a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5}) close_range(r3, r5, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d55d0ab9f8820efaeb3f8e965501aef3a2a22ed60f1b777b3af0df007039e022af0306693b3d25d65a55b864a61403e9744f56f6a71d", 0xc3}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb", 0xc7}, {&(0x7f0000000580)="b0e1591e8b024f6c43d140ff6d19afdf0fe19cffb6e0b7dbc3d1026ecc8d55a498615034548a3579f9bd7697e6b74cc32ea3d6cd6579b720e5253fda4ef2e350c2b2f49c6f1e52bbd5fcf0", 0x4b}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x5c}, 0x1) syz_open_dev$usbfs(0x0, 0x76, 0x101301) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440f1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000007c0), 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000040)='udf\x00', 0x0) 255.010368ms ago: executing program 2 (id=6504): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x3f, 0x0, 0x20000007) recvmmsg(r2, &(0x7f0000003340), 0x0, 0x2, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000100)="3324796612ae88", 0x7}, {&(0x7f0000000140)="b5deee6dcdb8bd37fcf596366011d303afdb8f84632ad453c4", 0x19}, {&(0x7f00000001c0)="877f81a5b343fa960473b507e8048d67e6273706deb563a9874f8fd3d47488811d0e76c74b28", 0x26}, {&(0x7f0000000280)="0f449e9650b6b8c0f3191c18c7baa7451e38f99ac78ea5d5b4307afcff", 0x1d}, {&(0x7f00000002c0)="59358ba72469a6cce6ed1a0bd7ad39594e47fb549acb6b3bf18dcedb44f2a4a5acefa74f01769058202d40e10de94dea23c882dddb62ab3f256b7e8e52df6e8daa0de1a5cd64127f5e52df29547b8d439a7865f214582e535d5abb71fc7a2ab60139b857ed1c91e1841a9fb8947158d1d21ce9c97e6a0a60429cf030bb7151e3cfd58dfaceca9ebb2e7914a799a0236a3f14fa7f327c8467d4208ee53135774c74fe5ca007ee361f282434b635c76c7664d6980489b3", 0xb6}], 0x5) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000540)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000580)=0x28) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0]) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) 0s ago: executing program 0 (id=6505): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x5, 0x1002, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="4dc07f9471", 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="c16d473d990c0180c200000400000000005800000000002f90780a010101e0000001248088640000000010000800000086dd080088be00000000100000000100000000000000080022eb00000000200000800200000010000000000000000800655800000000"], 0x0) r6 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1ef}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2] ? __lock_acquire+0xaac/0xd20 [ 1398.861264][T26432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1398.861289][T26432] ? __pfx__printk+0x10/0x10 [ 1398.861307][T26432] ? __might_fault+0xb0/0x130 [ 1398.861340][T26432] should_fail_ex+0x414/0x560 [ 1398.861364][T26432] _copy_from_user+0x2d/0xb0 [ 1398.861390][T26432] get_compat_msghdr+0xad/0x4a0 [ 1398.861420][T26432] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1398.861454][T26432] ___sys_sendmsg+0x193/0x2a0 [ 1398.861482][T26432] ? __pfx____sys_sendmsg+0x10/0x10 [ 1398.861540][T26432] ? __fget_files+0x2a/0x420 [ 1398.861563][T26432] ? __fget_files+0x3a0/0x420 [ 1398.861596][T26432] __sys_sendmsg+0x164/0x220 [ 1398.861622][T26432] ? __pfx___sys_sendmsg+0x10/0x10 [ 1398.861667][T26432] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1398.861692][T26432] ? lockdep_hardirqs_on+0x9c/0x150 [ 1398.861717][T26432] __do_fast_syscall_32+0xb4/0x110 [ 1398.861742][T26432] ? lockdep_hardirqs_on+0x9c/0x150 [ 1398.861768][T26432] do_fast_syscall_32+0x34/0x80 [ 1398.861792][T26432] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1398.861814][T26432] RIP: 0023:0xf7f76539 [ 1398.861829][T26432] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1398.861847][T26432] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1398.861866][T26432] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000100 [ 1398.861878][T26432] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1398.861888][T26432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1398.861899][T26432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1398.861909][T26432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1398.861932][T26432] [ 1398.956725][T26173] veth0_vlan: entered promiscuous mode [ 1398.957855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.979582][T26173] veth1_vlan: entered promiscuous mode [ 1399.116885][ T5939] usb usb6-port1: attempt power cycle [ 1399.466900][ T5939] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1399.489956][ T5939] usb 6-1: device descriptor read/8, error -71 [ 1399.546597][T26173] veth0_macvtap: entered promiscuous mode [ 1399.597402][T26173] veth1_macvtap: entered promiscuous mode [ 1399.737502][ T5939] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1399.749043][T26173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.790596][T26173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.817060][ T5939] usb 6-1: device descriptor read/8, error -71 [ 1399.866063][T26173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.896830][T26173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.916509][T26173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.927830][ T5939] usb usb6-port1: unable to enumerate USB device [ 1399.957530][T26173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.157374][ T5904] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1400.347442][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 1400.359708][ T5904] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1400.385609][ T5904] usb 5-1: config 0 has no interface number 0 [ 1400.670277][ T5904] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1400.684466][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.697625][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.705669][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.711061][ T5904] usb 5-1: Product: syz [ 1400.718024][ T5904] usb 5-1: Manufacturer: syz [ 1400.722758][ T5904] usb 5-1: SerialNumber: syz [ 1400.738619][ T5904] usb 5-1: config 0 descriptor?? [ 1400.748286][T26467] lo: entered promiscuous mode [ 1400.754900][T26467] lo: entered allmulticast mode [ 1400.758647][ T5904] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1400.777848][T26467] tunl0: entered promiscuous mode [ 1400.789816][T26467] tunl0: entered allmulticast mode [ 1400.801073][T26467] gre0: entered promiscuous mode [ 1400.806036][T26467] gre0: entered allmulticast mode [ 1400.839379][T26467] gretap0: entered promiscuous mode [ 1400.846521][T26467] gretap0: entered allmulticast mode [ 1400.867798][T26467] erspan0: entered promiscuous mode [ 1400.875154][T26467] erspan0: entered allmulticast mode [ 1400.948147][T26467] ip_vti0: entered promiscuous mode [ 1400.983118][T26467] ip_vti0: entered allmulticast mode [ 1401.011574][T26467] ip6_vti0: entered promiscuous mode [ 1401.022077][T26467] ip6_vti0: entered allmulticast mode [ 1401.040671][T26467] sit0: entered promiscuous mode [ 1401.069111][T26467] sit0: entered allmulticast mode [ 1401.117363][T26467] ip6tnl0: entered promiscuous mode [ 1401.123346][T26467] ip6tnl0: entered allmulticast mode [ 1401.217116][T26467] ip6gre0: entered promiscuous mode [ 1401.236675][T26467] ip6gre0: entered allmulticast mode [ 1401.256401][T26467] syz_tun: entered promiscuous mode [ 1401.266417][T26467] syz_tun: entered allmulticast mode [ 1401.294722][T26467] ip6gretap0: entered promiscuous mode [ 1401.302720][T26467] ip6gretap0: entered allmulticast mode [ 1401.325968][T26467] bridge0: entered promiscuous mode [ 1401.331825][T26467] bridge0: entered allmulticast mode [ 1401.366209][T26467] vcan0: entered promiscuous mode [ 1401.372380][T26467] vcan0: entered allmulticast mode [ 1401.427170][ T5939] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1401.472593][T26467] bond0: entered promiscuous mode [ 1401.480131][T26467] bond_slave_0: entered promiscuous mode [ 1401.589319][T26467] bond_slave_1: entered promiscuous mode [ 1401.616939][T26467] bond0: entered allmulticast mode [ 1401.619589][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 1401.627101][T26467] bond_slave_0: entered allmulticast mode [ 1401.634903][ T5939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.648906][ T5939] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1401.658259][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.666330][ T5939] usb 6-1: Product: syz [ 1401.667213][T26467] bond_slave_1: entered allmulticast mode [ 1401.671742][ T5939] usb 6-1: Manufacturer: syz [ 1401.682272][ T5939] usb 6-1: SerialNumber: syz [ 1401.695442][ T5939] usb 6-1: config 0 descriptor?? [ 1401.701733][T26467] team0: entered promiscuous mode [ 1401.706939][T26467] team_slave_0: entered promiscuous mode [ 1401.726989][T26467] team_slave_1: entered promiscuous mode [ 1401.778696][T26467] team0: entered allmulticast mode [ 1401.785122][T26467] team_slave_0: entered allmulticast mode [ 1401.792578][T26467] team_slave_1: entered allmulticast mode [ 1401.826435][T26467] dummy0: entered promiscuous mode [ 1401.854262][T26467] dummy0: entered allmulticast mode [ 1401.863417][T26467] nlmon0: entered promiscuous mode [ 1401.883318][T26467] nlmon0: entered allmulticast mode [ 1401.952954][ T5939] usb 6-1: USB disconnect, device number 80 [ 1401.991034][T26467] caif0: entered promiscuous mode [ 1401.996539][T26467] caif0: entered allmulticast mode [ 1402.007057][T26467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1402.112308][T25346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.129496][T25346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.615007][T26499] FAULT_INJECTION: forcing a failure. [ 1402.615007][T26499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1402.631098][T26499] CPU: 1 UID: 0 PID: 26499 Comm: syz.2.6202 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1402.631122][T26499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1402.631134][T26499] Call Trace: [ 1402.631142][T26499] [ 1402.631151][T26499] dump_stack_lvl+0x189/0x250 [ 1402.631185][T26499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1402.631211][T26499] ? __pfx__printk+0x10/0x10 [ 1402.631241][T26499] should_fail_ex+0x414/0x560 [ 1402.631266][T26499] _copy_to_user+0x31/0xb0 [ 1402.631296][T26499] simple_read_from_buffer+0xe1/0x170 [ 1402.631323][T26499] proc_fail_nth_read+0x1df/0x250 [ 1402.631361][T26499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1402.631390][T26499] ? rw_verify_area+0x258/0x650 [ 1402.631411][T26499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1402.631438][T26499] vfs_read+0x1fd/0x980 [ 1402.631464][T26499] ? __pfx___mutex_lock+0x10/0x10 [ 1402.631490][T26499] ? __pfx_vfs_read+0x10/0x10 [ 1402.631512][T26499] ? __fget_files+0x2a/0x420 [ 1402.631541][T26499] ? __fget_files+0x3a0/0x420 [ 1402.631564][T26499] ? __fget_files+0x2a/0x420 [ 1402.631596][T26499] ksys_read+0x145/0x250 [ 1402.631619][T26499] ? __pfx_ksys_read+0x10/0x10 [ 1402.631643][T26499] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1402.631670][T26499] ? lockdep_hardirqs_on+0x9c/0x150 [ 1402.631695][T26499] __do_fast_syscall_32+0xb4/0x110 [ 1402.631721][T26499] ? lockdep_hardirqs_on+0x9c/0x150 [ 1402.631747][T26499] do_fast_syscall_32+0x34/0x80 [ 1402.631772][T26499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1402.631794][T26499] RIP: 0023:0xf70be539 [ 1402.631810][T26499] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1402.631827][T26499] RSP: 002b:00000000f50ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1402.631846][T26499] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ae620 [ 1402.631859][T26499] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000 [ 1402.631870][T26499] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1402.631881][T26499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1402.631891][T26499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1402.631918][T26499] [ 1402.674819][T26500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6203'. [ 1402.675116][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.703028][T26500] netlink: 39 bytes leftover after parsing attributes in process `syz.5.6203'. [ 1402.704709][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.989547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.012013][ T5904] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1403.034361][ T5904] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 1403.083428][T26504] sctp: [Deprecated]: syz.2.6204 (pid 26504) Use of int in max_burst socket option. [ 1403.083428][T26504] Use struct sctp_assoc_value instead [ 1403.099557][ T5904] usb 5-1: USB disconnect, device number 27 [ 1403.518860][T26517] input input206: cannot allocate more than FF_MAX_EFFECTS effects [ 1404.022984][T26526] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1404.476236][T26541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6218'. [ 1404.547235][ T5886] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1404.667312][ T5939] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1404.687063][ T5886] usb 6-1: device descriptor read/64, error -71 [ 1404.701359][T26543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.846887][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 1404.858600][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.881923][ T5939] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1404.916808][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.924868][ T5939] usb 1-1: Product: syz [ 1404.929300][ T5886] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1404.974018][ T5939] usb 1-1: Manufacturer: syz [ 1404.986786][ T5939] usb 1-1: SerialNumber: syz [ 1405.024600][ T5939] usb 1-1: config 0 descriptor?? [ 1405.077008][ T5886] usb 6-1: device descriptor read/64, error -71 [ 1405.187884][ T5886] usb usb6-port1: attempt power cycle [ 1405.226987][T13198] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1405.268729][ T5939] usb 1-1: USB disconnect, device number 4 [ 1405.383440][T26562] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1405.391323][T13198] usb 5-1: Using ep0 maxpacket: 8 [ 1405.401538][T13198] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 1405.409317][T13198] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1405.420572][T13198] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1405.430543][T13198] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1405.442724][T13198] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1405.452378][T13198] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1405.477058][T13198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.485073][T13198] usb 5-1: Product: syz [ 1405.489341][T13198] usb 5-1: Manufacturer: syz [ 1405.493962][T13198] usb 5-1: SerialNumber: syz [ 1405.527031][ T5886] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1405.557737][ T5886] usb 6-1: device descriptor read/8, error -71 [ 1405.806851][ T5886] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1405.827450][ T5886] usb 6-1: device descriptor read/8, error -71 [ 1405.938750][ T5886] usb usb6-port1: unable to enumerate USB device [ 1406.106925][ T5939] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1406.577866][ T5939] usb 4-1: config 0 has no interfaces? [ 1406.618077][ T5939] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1406.653118][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.680934][ T5939] usb 4-1: Product: syz [ 1406.694284][ T5939] usb 4-1: Manufacturer: syz [ 1406.703969][ T5939] usb 4-1: SerialNumber: syz [ 1406.726229][ T5939] usb 4-1: config 0 descriptor?? [ 1407.884640][T13198] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1407.931600][T13198] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1407.962760][T13198] usb 5-1: 2:1 : invalid channels 0 [ 1408.157317][T13198] usb 5-1: USB disconnect, device number 28 [ 1408.646957][T13198] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 1408.820086][T13198] usb 5-1: config 7 has an invalid interface number: 177 but max is 0 [ 1408.829015][T13198] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.859949][T13198] usb 5-1: config 7 has no interface number 0 [ 1408.885036][T13198] usb 5-1: config 7 interface 177 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1408.921901][T13198] usb 5-1: config 7 interface 177 has no altsetting 0 [ 1409.104048][T26596] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1409.377134][ T9] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1409.496912][T15424] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1409.580269][ T5904] usb 4-1: USB disconnect, device number 44 [ 1409.609258][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1409.619198][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1409.633423][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1409.643091][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.746932][T15424] usb 1-1: Using ep0 maxpacket: 16 [ 1409.753809][T15424] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.772470][T15424] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1409.781648][T15424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.789865][T15424] usb 1-1: Product: syz [ 1409.794131][T15424] usb 1-1: Manufacturer: syz [ 1409.798970][T15424] usb 1-1: SerialNumber: syz [ 1409.806157][T15424] usb 1-1: config 0 descriptor?? [ 1409.861972][ T9] usb 6-1: usb_control_msg returned -32 [ 1409.868189][ T9] usbtmc 6-1:16.0: can't read capabilities [ 1410.017993][ T5895] usb 1-1: USB disconnect, device number 5 [ 1410.221550][T26606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.230705][T26606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.260334][T26606] bridge1: entered promiscuous mode [ 1410.265827][T26606] bridge1: entered allmulticast mode [ 1410.288217][T26606] team0: Port device bridge1 added [ 1411.071804][T13198] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff42, bcdDevice=e9.cb [ 1411.081107][T13198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.097873][ T5939] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 1411.108864][T13198] usb 5-1: can't set config #7, error -71 [ 1411.133730][T13198] usb 5-1: USB disconnect, device number 29 [ 1411.246985][ T5939] usb 1-1: device descriptor read/64, error -71 [ 1411.486881][ T5939] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 1411.616834][ T5939] usb 1-1: device descriptor read/64, error -71 [ 1412.122449][ T9] usb 6-1: USB disconnect, device number 85 [ 1412.147222][ T5939] usb usb1-port1: attempt power cycle [ 1412.600674][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1412.600691][ T30] audit: type=1326 audit(1747926460.266:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1412.700648][ T5939] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 1412.715339][T26629] tipc: Started in network mode [ 1412.722093][T26629] tipc: Node identity 4, cluster identity 4711 [ 1412.774001][T26629] tipc: Node number set to 4 [ 1412.780305][ T30] audit: type=1326 audit(1747926460.276:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1412.802354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.816906][ T5939] usb 1-1: device descriptor read/8, error -71 [ 1412.955360][ T30] audit: type=1326 audit(1747926460.276:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1413.112977][ T30] audit: type=1326 audit(1747926460.276:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1413.137443][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.155381][ T5939] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 1413.210020][ T5939] usb 1-1: device descriptor read/8, error -71 [ 1413.211525][ T30] audit: type=1326 audit(1747926460.276:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1413.348561][ T5939] usb usb1-port1: unable to enumerate USB device [ 1413.637233][T26635] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1413.672729][ T30] audit: type=1326 audit(1747926460.316:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1413.734957][ T30] audit: type=1326 audit(1747926460.396:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1413.878829][ T30] audit: type=1326 audit(1747926460.396:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1413.944236][ T30] audit: type=1326 audit(1747926460.396:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1414.001651][ T30] audit: type=1326 audit(1747926460.396:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1414.287394][ T5895] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1414.392254][T26654] netlink: 'syz.2.6251': attribute type 1 has an invalid length. [ 1414.446907][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 1414.454251][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.525529][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1414.555241][ T5895] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1414.607516][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.621593][ T5895] usb 1-1: Product: syz [ 1414.626086][ T5895] usb 1-1: Manufacturer: syz [ 1414.631180][ T5895] usb 1-1: SerialNumber: syz [ 1414.692327][ T5895] usb 1-1: config 0 descriptor?? [ 1414.699944][ T5895] hub 1-1:0.0: bad descriptor, ignoring hub [ 1414.705916][ T5895] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1415.197147][ T5895] usb 1-1: USB disconnect, device number 10 [ 1415.686984][ T5895] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1415.883522][T26675] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1415.891910][ T5895] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1415.914499][ T5895] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1415.932574][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.176622][ T5895] usb 4-1: Product: syz [ 1416.196825][ T5895] usb 4-1: Manufacturer: syz [ 1416.203755][ T5895] usb 4-1: SerialNumber: syz [ 1416.222381][ T5895] usb 4-1: config 0 descriptor?? [ 1416.241527][ T5895] hub 4-1:0.0: Invalid hub with more than one config or interface [ 1416.260147][ T5895] hub 4-1:0.0: probe with driver hub failed with error -22 [ 1416.439558][T26685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6264'. [ 1416.497240][T26671] dvmrp1: entered allmulticast mode [ 1416.502055][T26671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.502361][T26671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.199160][T26700] FAULT_INJECTION: forcing a failure. [ 1417.199160][T26700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1417.221631][T26700] CPU: 0 UID: 0 PID: 26700 Comm: syz.0.6266 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1417.221653][T26700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1417.221662][T26700] Call Trace: [ 1417.221667][T26700] [ 1417.221673][T26700] dump_stack_lvl+0x189/0x250 [ 1417.221701][T26700] ? __lock_acquire+0xaac/0xd20 [ 1417.221730][T26700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1417.221753][T26700] ? __pfx__printk+0x10/0x10 [ 1417.221770][T26700] ? __might_fault+0xb0/0x130 [ 1417.221798][T26700] should_fail_ex+0x414/0x560 [ 1417.221819][T26700] _copy_from_iter+0x1db/0x15a0 [ 1417.221845][T26700] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1417.221866][T26700] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1417.221891][T26700] ? __pfx__copy_from_iter+0x10/0x10 [ 1417.221914][T26700] ? __build_skb_around+0x257/0x3e0 [ 1417.221938][T26700] ? netlink_sendmsg+0x642/0xb30 [ 1417.221953][T26700] ? skb_put+0x11b/0x210 [ 1417.221971][T26700] netlink_sendmsg+0x6b2/0xb30 [ 1417.221997][T26700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.222022][T26700] ? __import_iovec+0x5d4/0x7f0 [ 1417.222043][T26700] ? aa_sock_msg_perm+0x94/0x160 [ 1417.222064][T26700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1417.222084][T26700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.222100][T26700] __sock_sendmsg+0x219/0x270 [ 1417.222116][T26700] ____sys_sendmsg+0x505/0x830 [ 1417.222140][T26700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1417.222180][T26700] ___sys_sendmsg+0x21f/0x2a0 [ 1417.222205][T26700] ? __pfx____sys_sendmsg+0x10/0x10 [ 1417.222251][T26700] ? __fget_files+0x2a/0x420 [ 1417.222269][T26700] ? __fget_files+0x3a0/0x420 [ 1417.222299][T26700] __sys_sendmsg+0x164/0x220 [ 1417.222326][T26700] ? __pfx___sys_sendmsg+0x10/0x10 [ 1417.222362][T26700] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1417.222384][T26700] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.222402][T26700] __do_fast_syscall_32+0xb4/0x110 [ 1417.222420][T26700] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.222444][T26700] do_fast_syscall_32+0x34/0x80 [ 1417.222469][T26700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1417.222490][T26700] RIP: 0023:0xf70be539 [ 1417.222504][T26700] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1417.222521][T26700] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1417.222534][T26700] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 1417.222544][T26700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1417.222551][T26700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1417.222559][T26700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1417.222567][T26700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1417.222590][T26700] [ 1418.502673][ T5895] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1418.573619][ T5895] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1418.611517][ T5895] dib0700: firmware download failed at 7 with -22 [ 1418.694542][ T5895] usb 4-1: USB disconnect, device number 45 [ 1419.217079][ T5939] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1419.311397][T26719] fuse: Unknown parameter 'g' [ 1419.411879][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 1419.423501][ T5939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.427095][T15424] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1419.474567][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1419.508970][T26724] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1419.557032][ T5939] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1419.597028][T15424] usb 4-1: Using ep0 maxpacket: 32 [ 1419.612982][T26727] FAULT_INJECTION: forcing a failure. [ 1419.612982][T26727] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.625989][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.636620][T15424] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1419.636911][T26727] CPU: 1 UID: 0 PID: 26727 Comm: syz.0.6275 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1419.636937][T26727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1419.636949][T26727] Call Trace: [ 1419.636957][T26727] [ 1419.636966][T26727] dump_stack_lvl+0x189/0x250 [ 1419.637002][T26727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1419.637029][T26727] ? __pfx__printk+0x10/0x10 [ 1419.637053][T26727] ? __pfx___might_resched+0x10/0x10 [ 1419.637071][T26727] ? fs_reclaim_acquire+0x7d/0x100 [ 1419.637105][T26727] should_fail_ex+0x414/0x560 [ 1419.637131][T26727] should_failslab+0xa8/0x100 [ 1419.637158][T26727] __kmalloc_cache_noprof+0x70/0x3d0 [ 1419.637183][T26727] ? garp_init_applicant+0x13a/0x450 [ 1419.637206][T26727] garp_init_applicant+0x13a/0x450 [ 1419.637229][T26727] register_vlan_dev+0x225/0x800 [ 1419.637256][T26727] vlan_newlink+0x4b2/0x610 [ 1419.637281][T26727] ? __pfx_vlan_newlink+0x10/0x10 [ 1419.637305][T26727] rtnl_newlink_create+0x308/0xaf0 [ 1419.637338][T26727] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1419.637365][T26727] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1419.637387][T26727] ? rtnl_newlink+0x8db/0x1c70 [ 1419.637411][T26727] ? __pfx___mutex_lock+0x10/0x10 [ 1419.637448][T26727] ? ns_capable+0x8a/0xf0 [ 1419.637470][T26727] rtnl_newlink+0x16d6/0x1c70 [ 1419.637494][T26727] ? kasan_save_track+0x3e/0x80 [ 1419.637527][T26727] ? __pfx_rtnl_newlink+0x10/0x10 [ 1419.637579][T26727] ? kasan_quarantine_put+0xdd/0x220 [ 1419.637600][T26727] ? lockdep_hardirqs_on+0x9c/0x150 [ 1419.637629][T26727] ? nlmon_xmit+0xb0/0x100 [ 1419.637654][T26727] ? kmem_cache_free+0x192/0x3f0 [ 1419.637685][T26727] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1419.637704][T26727] ? lockdep_hardirqs_on+0x9c/0x150 [ 1419.637728][T26727] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1419.637746][T26727] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1419.637772][T26727] ? aa_get_newest_label+0xf7/0x5d0 [ 1419.637797][T26727] ? __lock_acquire+0xaac/0xd20 [ 1419.637847][T26727] ? __pfx_rtnl_newlink+0x10/0x10 [ 1419.637874][T26727] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1419.637899][T26727] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1419.637920][T26727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1419.637946][T26727] ? ref_tracker_free+0x63a/0x7d0 [ 1419.637966][T26727] ? __copy_skb_header+0xa7/0x550 [ 1419.638003][T26727] netlink_rcv_skb+0x21c/0x490 [ 1419.638027][T26727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1419.638051][T26727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1419.638094][T26727] ? netlink_deliver_tap+0x2e/0x1b0 [ 1419.638117][T26727] ? netlink_deliver_tap+0x2e/0x1b0 [ 1419.638145][T26727] netlink_unicast+0x758/0x8d0 [ 1419.638177][T26727] netlink_sendmsg+0x805/0xb30 [ 1419.638210][T26727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1419.638236][T26727] ? __import_iovec+0x5d4/0x7f0 [ 1419.638260][T26727] ? aa_sock_msg_perm+0x94/0x160 [ 1419.638284][T26727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1419.638306][T26727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1419.638330][T26727] __sock_sendmsg+0x219/0x270 [ 1419.638353][T26727] ____sys_sendmsg+0x505/0x830 [ 1419.638386][T26727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1419.638428][T26727] ___sys_sendmsg+0x21f/0x2a0 [ 1419.638457][T26727] ? __pfx____sys_sendmsg+0x10/0x10 [ 1419.638541][T26727] ? __fget_files+0x2a/0x420 [ 1419.638567][T26727] ? __fget_files+0x3a0/0x420 [ 1419.638605][T26727] __sys_sendmsg+0x164/0x220 [ 1419.638635][T26727] ? __pfx___sys_sendmsg+0x10/0x10 [ 1419.638679][T26727] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1419.638707][T26727] ? lockdep_hardirqs_on+0x9c/0x150 [ 1419.638735][T26727] __do_fast_syscall_32+0xb4/0x110 [ 1419.638782][T26727] ? lockdep_hardirqs_on+0x9c/0x150 [ 1419.638813][T26727] do_fast_syscall_32+0x34/0x80 [ 1419.638843][T26727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1419.638876][T26727] RIP: 0023:0xf70be539 [ 1419.638895][T26727] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1419.638914][T26727] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1419.638937][T26727] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000080000280 [ 1419.638952][T26727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1419.638966][T26727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1419.638978][T26727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1419.638992][T26727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1419.639024][T26727] [ 1420.132507][T15424] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1420.153748][ T5939] usb 6-1: Product: syz [ 1420.184235][ T5939] usb 6-1: Manufacturer: syz [ 1420.194368][T15424] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.215834][ T5939] usb 6-1: SerialNumber: syz [ 1420.215960][T15424] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1420.236829][T15424] usb 4-1: config 1 has no interface number 0 [ 1420.246591][T15424] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1420.300112][T15424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.322312][ T5939] usb 6-1: config 0 descriptor?? [ 1420.351150][T15424] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1420.387961][ T5939] hub 6-1:0.0: bad descriptor, ignoring hub [ 1420.393901][ T5939] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1420.548388][T26717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.591703][T26717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.601625][T15424] snd_usb_pod 4-1:1.1: set_interface failed [ 1420.629551][T15424] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1420.637245][T15424] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1420.677293][T15424] usb 4-1: USB disconnect, device number 46 [ 1420.818207][T13198] usb 6-1: USB disconnect, device number 86 [ 1420.909257][T26738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6280'. [ 1420.981990][T26738] bond1: entered promiscuous mode [ 1420.987781][T26738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1421.007448][T26748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1421.014663][T26748] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1421.030769][T26748] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 1421.264694][T26734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.417724][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6284'. [ 1421.916713][T26762] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1421.954818][T26764] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1422.087221][T26768] delete_channel: no stack [ 1422.167826][T26770] FAULT_INJECTION: forcing a failure. [ 1422.167826][T26770] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.181217][T26770] CPU: 0 UID: 0 PID: 26770 Comm: syz.4.6288 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1422.181241][T26770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1422.181253][T26770] Call Trace: [ 1422.181261][T26770] [ 1422.181269][T26770] dump_stack_lvl+0x189/0x250 [ 1422.181303][T26770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1422.181329][T26770] ? __pfx__printk+0x10/0x10 [ 1422.181353][T26770] ? __pfx___might_resched+0x10/0x10 [ 1422.181370][T26770] ? fs_reclaim_acquire+0x7d/0x100 [ 1422.181401][T26770] should_fail_ex+0x414/0x560 [ 1422.181425][T26770] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 1422.181447][T26770] should_failslab+0xa8/0x100 [ 1422.181473][T26770] __kvmalloc_node_noprof+0x168/0x5e0 [ 1422.181497][T26770] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 1422.181524][T26770] rhashtable_init_noprof+0x4ee/0xbb0 [ 1422.181553][T26770] rhltable_init_noprof+0x1e/0x60 [ 1422.181578][T26770] nf_tables_newtable+0x68f/0x1890 [ 1422.181620][T26770] nfnetlink_rcv+0x1142/0x2530 [ 1422.181682][T26770] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1422.181755][T26770] ? skb_clone+0x246/0x3a0 [ 1422.181797][T26770] ? netlink_deliver_tap+0x2e/0x1b0 [ 1422.181819][T26770] ? netlink_deliver_tap+0x2e/0x1b0 [ 1422.181846][T26770] netlink_unicast+0x758/0x8d0 [ 1422.181875][T26770] netlink_sendmsg+0x805/0xb30 [ 1422.181906][T26770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1422.181931][T26770] ? __import_iovec+0x5d4/0x7f0 [ 1422.181954][T26770] ? aa_sock_msg_perm+0x94/0x160 [ 1422.181977][T26770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1422.181998][T26770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1422.182021][T26770] __sock_sendmsg+0x219/0x270 [ 1422.182043][T26770] ____sys_sendmsg+0x505/0x830 [ 1422.182074][T26770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1422.182115][T26770] ___sys_sendmsg+0x21f/0x2a0 [ 1422.182143][T26770] ? __pfx____sys_sendmsg+0x10/0x10 [ 1422.182202][T26770] ? __fget_files+0x2a/0x420 [ 1422.182225][T26770] ? __fget_files+0x3a0/0x420 [ 1422.182259][T26770] __sys_sendmsg+0x164/0x220 [ 1422.182286][T26770] ? __pfx___sys_sendmsg+0x10/0x10 [ 1422.182325][T26770] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1422.182350][T26770] ? lockdep_hardirqs_on+0x9c/0x150 [ 1422.182375][T26770] __do_fast_syscall_32+0xb4/0x110 [ 1422.182401][T26770] ? lockdep_hardirqs_on+0x9c/0x150 [ 1422.182427][T26770] do_fast_syscall_32+0x34/0x80 [ 1422.182452][T26770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1422.182473][T26770] RIP: 0023:0xf7f76539 [ 1422.182488][T26770] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1422.182503][T26770] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1422.182522][T26770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1422.182534][T26770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1422.182544][T26770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1422.182553][T26770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1422.182563][T26770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1422.182589][T26770] [ 1422.892388][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.899015][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.672354][T26787] VFS: Mount too revealing [ 1424.016854][T15424] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1424.180813][T15424] usb 5-1: Using ep0 maxpacket: 16 [ 1424.193107][T15424] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.209933][T15424] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1424.241236][T15424] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1424.251005][T15424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.259225][T15424] usb 5-1: Product: syz [ 1424.263477][T15424] usb 5-1: Manufacturer: syz [ 1424.268320][T15424] usb 5-1: SerialNumber: syz [ 1424.297172][T15424] usb 5-1: config 0 descriptor?? [ 1424.318928][T15424] hub 5-1:0.0: bad descriptor, ignoring hub [ 1424.329371][T15424] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1424.461382][T26798] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1424.627235][ T5886] usb 5-1: USB disconnect, device number 30 [ 1425.243226][T26768] delete_channel: no stack [ 1425.459382][T26823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6305'. [ 1425.892405][T26829] loop8: detected capacity change from 0 to 8 [ 1425.930705][T26829] Dev loop8: unable to read RDB block 8 [ 1425.946183][T26829] loop8: unable to read partition table [ 1425.978731][T26829] loop8: partition table beyond EOD, truncated [ 1426.011806][T26829] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1426.322124][T26832] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6307'. [ 1426.331700][T26832] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6307'. [ 1426.437313][T26837] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1427.289269][T26861] FAULT_INJECTION: forcing a failure. [ 1427.289269][T26861] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.316775][T26861] CPU: 1 UID: 0 PID: 26861 Comm: syz.0.6316 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1427.316801][T26861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1427.316813][T26861] Call Trace: [ 1427.316821][T26861] [ 1427.316829][T26861] dump_stack_lvl+0x189/0x250 [ 1427.316862][T26861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1427.316886][T26861] ? __pfx__printk+0x10/0x10 [ 1427.316908][T26861] ? __pfx___might_resched+0x10/0x10 [ 1427.316925][T26861] ? fs_reclaim_acquire+0x7d/0x100 [ 1427.316956][T26861] should_fail_ex+0x414/0x560 [ 1427.316980][T26861] should_failslab+0xa8/0x100 [ 1427.317007][T26861] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1427.317031][T26861] ? __alloc_skb+0x112/0x2d0 [ 1427.317057][T26861] __alloc_skb+0x112/0x2d0 [ 1427.317083][T26861] netlink_ack+0x146/0xa50 [ 1427.317102][T26861] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1427.317127][T26861] ? ref_tracker_free+0x63a/0x7d0 [ 1427.317146][T26861] ? __copy_skb_header+0xa7/0x550 [ 1427.317179][T26861] netlink_rcv_skb+0x2a0/0x490 [ 1427.317209][T26861] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1427.317231][T26861] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1427.317273][T26861] ? netlink_deliver_tap+0x2e/0x1b0 [ 1427.317294][T26861] ? netlink_deliver_tap+0x2e/0x1b0 [ 1427.317320][T26861] netlink_unicast+0x758/0x8d0 [ 1427.317349][T26861] netlink_sendmsg+0x805/0xb30 [ 1427.317379][T26861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1427.317404][T26861] ? __import_iovec+0x5d4/0x7f0 [ 1427.317427][T26861] ? aa_sock_msg_perm+0x94/0x160 [ 1427.317449][T26861] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1427.317471][T26861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1427.317493][T26861] __sock_sendmsg+0x219/0x270 [ 1427.317515][T26861] ____sys_sendmsg+0x505/0x830 [ 1427.317546][T26861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1427.317587][T26861] ___sys_sendmsg+0x21f/0x2a0 [ 1427.317614][T26861] ? __pfx____sys_sendmsg+0x10/0x10 [ 1427.317671][T26861] ? __fget_files+0x2a/0x420 [ 1427.317695][T26861] ? __fget_files+0x3a0/0x420 [ 1427.317727][T26861] __sys_sendmsg+0x164/0x220 [ 1427.317755][T26861] ? __pfx___sys_sendmsg+0x10/0x10 [ 1427.317793][T26861] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1427.317818][T26861] ? lockdep_hardirqs_on+0x9c/0x150 [ 1427.317843][T26861] __do_fast_syscall_32+0xb4/0x110 [ 1427.317868][T26861] ? lockdep_hardirqs_on+0x9c/0x150 [ 1427.317894][T26861] do_fast_syscall_32+0x34/0x80 [ 1427.317918][T26861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1427.317940][T26861] RIP: 0023:0xf70be539 [ 1427.317956][T26861] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1427.317972][T26861] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1427.317990][T26861] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800003c0 [ 1427.318002][T26861] RDX: 0000000000000802 RSI: 0000000000000000 RDI: 0000000000000000 [ 1427.318013][T26861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1427.318024][T26861] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1427.318034][T26861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1427.318059][T26861] [ 1427.417574][T15424] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1427.418984][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.649986][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.746845][T15424] usb 5-1: Using ep0 maxpacket: 16 [ 1427.754359][T15424] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1427.755978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.811245][T15424] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1427.860626][T15424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.886023][T15424] usb 5-1: Product: syz [ 1427.924839][T15424] usb 5-1: Manufacturer: syz [ 1427.943126][T15424] usb 5-1: SerialNumber: syz [ 1428.009907][T15424] usb 5-1: config 0 descriptor?? [ 1428.019984][T15424] hub 5-1:0.0: bad descriptor, ignoring hub [ 1428.068848][T15424] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1428.161884][T26867] FAULT_INJECTION: forcing a failure. [ 1428.161884][T26867] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1428.176904][T26867] CPU: 1 UID: 0 PID: 26867 Comm: syz.0.6319 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1428.176926][T26867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1428.176938][T26867] Call Trace: [ 1428.176946][T26867] [ 1428.176954][T26867] dump_stack_lvl+0x189/0x250 [ 1428.176988][T26867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1428.177014][T26867] ? __pfx__printk+0x10/0x10 [ 1428.177034][T26867] ? fs_reclaim_acquire+0x7d/0x100 [ 1428.177069][T26867] should_fail_ex+0x414/0x560 [ 1428.177093][T26867] prepare_alloc_pages+0x213/0x610 [ 1428.177128][T26867] __alloc_frozen_pages_noprof+0x123/0x370 [ 1428.177150][T26867] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1428.177175][T26867] ? policy_nodemask+0x27c/0x720 [ 1428.177204][T26867] alloc_pages_mpol+0x232/0x4a0 [ 1428.177233][T26867] alloc_pages_noprof+0xa9/0x190 [ 1428.177259][T26867] af_alg_sendmsg+0x1315/0x22d0 [ 1428.177276][T26867] ? __lock_acquire+0xaac/0xd20 [ 1428.177320][T26867] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 1428.177339][T26867] ? do_raw_spin_unlock+0x122/0x240 [ 1428.177360][T26867] ? skcipher_check_key+0x173/0x1e0 [ 1428.177383][T26867] ? skcipher_check_key+0x173/0x1e0 [ 1428.177402][T26867] ? __pfx_skcipher_sendmsg_nokey+0x10/0x10 [ 1428.177425][T26867] ? skcipher_sendmsg_nokey+0x59/0x120 [ 1428.177446][T26867] ? __pfx_skcipher_sendmsg_nokey+0x10/0x10 [ 1428.177468][T26867] __sock_sendmsg+0x219/0x270 [ 1428.177491][T26867] __sys_sendto+0x3bd/0x520 [ 1428.177515][T26867] ? __pfx___sys_sendto+0x10/0x10 [ 1428.177535][T26867] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1428.177571][T26867] ? __fget_files+0x3a0/0x420 [ 1428.177604][T26867] ? ksys_write+0x1f0/0x250 [ 1428.177633][T26867] __ia32_sys_sendto+0xdd/0x100 [ 1428.177660][T26867] __do_fast_syscall_32+0xb4/0x110 [ 1428.177686][T26867] ? lockdep_hardirqs_on+0x9c/0x150 [ 1428.177713][T26867] do_fast_syscall_32+0x34/0x80 [ 1428.177736][T26867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1428.177757][T26867] RIP: 0023:0xf70be539 [ 1428.177773][T26867] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1428.177788][T26867] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1428.177806][T26867] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440 [ 1428.177818][T26867] RDX: 000000005f6742a8 RSI: 0000000000000800 RDI: 0000000000000000 [ 1428.177829][T26867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1428.177840][T26867] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1428.177850][T26867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1428.177882][T26867] [ 1428.182895][T26870] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1428.362669][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6314'. [ 1428.577525][ T5886] usb 5-1: USB disconnect, device number 31 [ 1428.668266][T26877] FAULT_INJECTION: forcing a failure. [ 1428.668266][T26877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.708007][T26877] CPU: 1 UID: 0 PID: 26877 Comm: syz.0.6322 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1428.708031][T26877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1428.708042][T26877] Call Trace: [ 1428.708050][T26877] [ 1428.708058][T26877] dump_stack_lvl+0x189/0x250 [ 1428.708085][T26877] ? __lock_acquire+0xaac/0xd20 [ 1428.708113][T26877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1428.708137][T26877] ? __pfx__printk+0x10/0x10 [ 1428.708154][T26877] ? __might_fault+0xb0/0x130 [ 1428.708186][T26877] should_fail_ex+0x414/0x560 [ 1428.708208][T26877] _copy_from_iter+0x1db/0x15a0 [ 1428.708236][T26877] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1428.708259][T26877] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1428.708283][T26877] ? __pfx__copy_from_iter+0x10/0x10 [ 1428.708308][T26877] ? __build_skb_around+0x257/0x3e0 [ 1428.708334][T26877] ? netlink_sendmsg+0x642/0xb30 [ 1428.708354][T26877] ? skb_put+0x11b/0x210 [ 1428.708379][T26877] netlink_sendmsg+0x6b2/0xb30 [ 1428.708409][T26877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1428.708432][T26877] ? __import_iovec+0x5d4/0x7f0 [ 1428.708456][T26877] ? aa_sock_msg_perm+0x94/0x160 [ 1428.708478][T26877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1428.708498][T26877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1428.708520][T26877] __sock_sendmsg+0x219/0x270 [ 1428.708541][T26877] ____sys_sendmsg+0x505/0x830 [ 1428.708570][T26877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1428.708609][T26877] ___sys_sendmsg+0x21f/0x2a0 [ 1428.708637][T26877] ? __pfx____sys_sendmsg+0x10/0x10 [ 1428.708692][T26877] ? __fget_files+0x2a/0x420 [ 1428.708715][T26877] ? __fget_files+0x3a0/0x420 [ 1428.708746][T26877] __sys_sendmsg+0x164/0x220 [ 1428.708771][T26877] ? __pfx___sys_sendmsg+0x10/0x10 [ 1428.708809][T26877] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1428.708841][T26877] ? lockdep_hardirqs_on+0x9c/0x150 [ 1428.708866][T26877] __do_fast_syscall_32+0xb4/0x110 [ 1428.708890][T26877] ? lockdep_hardirqs_on+0x9c/0x150 [ 1428.708916][T26877] do_fast_syscall_32+0x34/0x80 [ 1428.708940][T26877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1428.708962][T26877] RIP: 0023:0xf70be539 [ 1428.708977][T26877] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1428.708992][T26877] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1428.709010][T26877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1428.709022][T26877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1428.709032][T26877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1428.709042][T26877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1428.709053][T26877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1428.709078][T26877] [ 1428.991824][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.451607][T15424] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1430.608971][T15424] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1430.624352][T15424] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1430.664108][T15424] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1430.690148][T15424] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1430.722002][T26904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6330'. [ 1430.734755][T15424] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1430.764294][T15424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.803543][T15424] usb 6-1: config 0 descriptor?? [ 1430.844147][T26895] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1431.042485][T26910] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1431.226812][ T5939] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1431.380733][ T5939] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1431.410532][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.427946][ T5939] usb 1-1: Product: syz [ 1431.436057][ T5939] usb 1-1: Manufacturer: syz [ 1431.449793][ T5939] usb 1-1: SerialNumber: syz [ 1431.460864][ T5939] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1431.496662][ T5886] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1431.557209][T26923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.557799][T26923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.657077][T20682] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1431.817042][T20682] usb 5-1: Using ep0 maxpacket: 16 [ 1431.831605][T20682] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1431.837370][T20682] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1431.894241][T20682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.903346][T20682] usb 5-1: Product: syz [ 1431.903364][T20682] usb 5-1: Manufacturer: syz [ 1431.903380][T20682] usb 5-1: SerialNumber: syz [ 1431.909739][T20682] usb 5-1: config 0 descriptor?? [ 1431.930325][T13198] usb 1-1: USB disconnect, device number 11 [ 1431.948814][T20682] hub 5-1:0.0: bad descriptor, ignoring hub [ 1431.989027][T20682] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1432.243077][T15424] usbhid 6-1:0.0: can't add hid device: -71 [ 1432.276531][T15424] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1432.315650][T15424] usb 6-1: USB disconnect, device number 87 [ 1432.408517][T20682] usb 5-1: USB disconnect, device number 32 [ 1432.589614][ T5886] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1432.808402][ T5886] ath9k_htc: Failed to initialize the device [ 1432.936651][T13198] usb 1-1: ath9k_htc: USB layer deinitialized [ 1433.048180][T26945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6343'. [ 1433.056999][T26943] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 1433.057297][T26943] macvtap1: entered allmulticast mode [ 1433.147203][T26943] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 1433.460542][T26952] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1433.604908][T13198] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1433.630093][T26960] FAULT_INJECTION: forcing a failure. [ 1433.630093][T26960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.671040][T26960] CPU: 0 UID: 0 PID: 26960 Comm: syz.2.6349 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1433.671064][T26960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1433.671076][T26960] Call Trace: [ 1433.671083][T26960] [ 1433.671091][T26960] dump_stack_lvl+0x189/0x250 [ 1433.671119][T26960] ? __lock_acquire+0xaac/0xd20 [ 1433.671147][T26960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1433.671172][T26960] ? __pfx__printk+0x10/0x10 [ 1433.671189][T26960] ? __might_fault+0xb0/0x130 [ 1433.671222][T26960] should_fail_ex+0x414/0x560 [ 1433.671246][T26960] _copy_from_iter+0x1db/0x15a0 [ 1433.671275][T26960] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1433.671296][T26960] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1433.671320][T26960] ? __pfx__copy_from_iter+0x10/0x10 [ 1433.671344][T26960] ? __build_skb_around+0x257/0x3e0 [ 1433.671371][T26960] ? netlink_sendmsg+0x642/0xb30 [ 1433.671391][T26960] ? skb_put+0x11b/0x210 [ 1433.671416][T26960] netlink_sendmsg+0x6b2/0xb30 [ 1433.671447][T26960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1433.671471][T26960] ? __import_iovec+0x5d4/0x7f0 [ 1433.671495][T26960] ? aa_sock_msg_perm+0x94/0x160 [ 1433.671518][T26960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1433.671538][T26960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1433.671560][T26960] __sock_sendmsg+0x219/0x270 [ 1433.671582][T26960] ____sys_sendmsg+0x505/0x830 [ 1433.671611][T26960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1433.671658][T26960] ___sys_sendmsg+0x21f/0x2a0 [ 1433.671685][T26960] ? __pfx____sys_sendmsg+0x10/0x10 [ 1433.671740][T26960] ? __fget_files+0x2a/0x420 [ 1433.671764][T26960] ? __fget_files+0x3a0/0x420 [ 1433.671797][T26960] __sys_sendmsg+0x164/0x220 [ 1433.671824][T26960] ? __pfx___sys_sendmsg+0x10/0x10 [ 1433.671862][T26960] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1433.671887][T26960] ? lockdep_hardirqs_on+0x9c/0x150 [ 1433.671912][T26960] __do_fast_syscall_32+0xb4/0x110 [ 1433.671937][T26960] ? lockdep_hardirqs_on+0x9c/0x150 [ 1433.671962][T26960] do_fast_syscall_32+0x34/0x80 [ 1433.671986][T26960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1433.672008][T26960] RIP: 0023:0xf70be539 [ 1433.672023][T26960] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1433.672039][T26960] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1433.672057][T26960] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 1433.672070][T26960] RDX: 0000000020008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1433.672081][T26960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1433.672090][T26960] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1433.672100][T26960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1433.672126][T26960] [ 1434.216816][T13198] usb 5-1: Using ep0 maxpacket: 32 [ 1434.246483][T13198] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1434.266783][T13198] usb 5-1: config 0 has no interface number 0 [ 1434.277179][T13198] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1434.286258][T13198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.286281][T13198] usb 5-1: Product: syz [ 1434.286296][T13198] usb 5-1: Manufacturer: syz [ 1434.286310][T13198] usb 5-1: SerialNumber: syz [ 1434.289288][T13198] usb 5-1: config 0 descriptor?? [ 1434.291881][T13198] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1434.480899][T26979] FAULT_INJECTION: forcing a failure. [ 1434.480899][T26979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1434.495938][T26979] CPU: 1 UID: 0 PID: 26979 Comm: syz.0.6355 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1434.495962][T26979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1434.495973][T26979] Call Trace: [ 1434.495981][T26979] [ 1434.495989][T26979] dump_stack_lvl+0x189/0x250 [ 1434.496018][T26979] ? __lock_acquire+0xaac/0xd20 [ 1434.496046][T26979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1434.496070][T26979] ? __pfx__printk+0x10/0x10 [ 1434.496088][T26979] ? __might_fault+0xb0/0x130 [ 1434.496121][T26979] should_fail_ex+0x414/0x560 [ 1434.496145][T26979] _copy_from_user+0x2d/0xb0 [ 1434.496172][T26979] get_compat_msghdr+0xad/0x4a0 [ 1434.496202][T26979] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1434.496223][T26979] ? count_memcg_event_mm+0x92/0x3b0 [ 1434.496254][T26979] ___sys_sendmsg+0x193/0x2a0 [ 1434.496282][T26979] ? __pfx____sys_sendmsg+0x10/0x10 [ 1434.496308][T26979] ? do_user_addr_fault+0xbc1/0x1390 [ 1434.496375][T26979] __sys_sendmmsg+0x28e/0x430 [ 1434.496404][T26979] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1434.496437][T26979] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1434.496477][T26979] ? ksys_write+0x1f0/0x250 [ 1434.496507][T26979] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1434.496533][T26979] __do_fast_syscall_32+0xb4/0x110 [ 1434.496558][T26979] ? lockdep_hardirqs_on+0x9c/0x150 [ 1434.496585][T26979] do_fast_syscall_32+0x34/0x80 [ 1434.496609][T26979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1434.496629][T26979] RIP: 0023:0xf70be539 [ 1434.496645][T26979] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1434.496661][T26979] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1434.496679][T26979] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800bd000 [ 1434.496691][T26979] RDX: 0000000000000318 RSI: 0000000000000000 RDI: 0000000000000000 [ 1434.496702][T26979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1434.496712][T26979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1434.496725][T26979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1434.496751][T26979] [ 1434.501135][T13198] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1434.731827][T13198] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1434.944037][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1434.944620][ T5886] usb 5-1: USB disconnect, device number 33 [ 1434.972687][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1434.989074][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1435.005328][ T5886] quatech2 5-1:0.51: device disconnected [ 1435.330147][T26991] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1435.964668][T13198] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1436.126863][ T5895] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1436.231155][T13198] usb 5-1: Using ep0 maxpacket: 8 [ 1436.252187][T13198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1436.266127][T13198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1436.276508][T13198] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1436.278670][ T5895] usb 6-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 1436.287900][T13198] usb 5-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=43.8e [ 1436.304618][T13198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.309285][ T5895] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 35 [ 1436.316167][T13198] usb 5-1: config 0 descriptor?? [ 1436.339391][T13198] io_ti 5-1:0.0: required endpoints missing [ 1436.358924][ T5895] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1436.371803][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.407071][ T5895] usb 6-1: Product: syz [ 1436.419837][ T5895] usb 6-1: Manufacturer: syz [ 1436.434647][ T5895] usb 6-1: SerialNumber: syz [ 1436.556515][T27002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.574063][T27002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.702069][T27026] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1436.735491][ T5886] usb 6-1: USB disconnect, device number 88 [ 1437.018885][T27034] input: syz1 as /devices/virtual/input/input209 [ 1437.144661][T27034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6373'. [ 1437.176136][T13198] usb 5-1: USB disconnect, device number 34 [ 1437.481236][T27041] loop9: detected capacity change from 0 to 3 [ 1437.541087][T27041] Dev loop9: unable to read RDB block 3 [ 1437.546665][T27041] loop9: unable to read partition table [ 1437.591926][T27041] loop9: partition table beyond EOD, truncated [ 1437.627581][T27041] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1437.666179][T27046] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1437.686233][T27046] macvtap1: entered allmulticast mode [ 1437.712527][T27046] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1438.516957][T15424] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1438.913288][T15424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.136802][T15424] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1439.352603][T15424] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1439.396351][T15424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.437457][T15424] usb 4-1: config 0 descriptor?? [ 1439.826977][T15424] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1439.842742][T27081] syz.0.6385: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1439.869975][T27081] CPU: 0 UID: 0 PID: 27081 Comm: syz.0.6385 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1439.870003][T27081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1439.870028][T27081] Call Trace: [ 1439.870037][T27081] [ 1439.870046][T27081] dump_stack_lvl+0x189/0x250 [ 1439.870084][T27081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1439.870114][T27081] ? __pfx__printk+0x10/0x10 [ 1439.870135][T27081] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1439.870157][T27081] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1439.870181][T27081] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1439.870206][T27081] warn_alloc+0x214/0x310 [ 1439.870242][T27081] ? __pfx_warn_alloc+0x10/0x10 [ 1439.870269][T27081] ? policy_nodemask+0x27c/0x720 [ 1439.870303][T27081] ? alloc_pages_mpol+0x3cd/0x4a0 [ 1439.870349][T27081] __vmalloc_node_range_noprof+0xfcf/0x12c0 [ 1439.870403][T27081] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1439.870435][T27081] ? rcu_is_watching+0x15/0xb0 [ 1439.870452][T27081] ? copy_process+0x544/0x3b80 [ 1439.870471][T27081] __vmalloc_node_noprof+0x7d/0x90 [ 1439.870496][T27081] ? copy_process+0x544/0x3b80 [ 1439.870516][T27081] dup_task_struct+0x3e7/0x860 [ 1439.870540][T27081] copy_process+0x544/0x3b80 [ 1439.870586][T27081] ? __pfx_copy_process+0x10/0x10 [ 1439.870616][T27081] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1439.870637][T27081] vhost_task_create+0x1c4/0x290 [ 1439.870659][T27081] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1439.870681][T27081] ? __pfx_vhost_task_create+0x10/0x10 [ 1439.870700][T27081] ? is_bpf_text_address+0x26/0x2b0 [ 1439.870733][T27081] ? __pfx_vhost_task_fn+0x10/0x10 [ 1439.870773][T27081] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1439.870797][T27081] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1439.870831][T27081] ? __mutex_trylock_common+0x153/0x260 [ 1439.870859][T27081] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1439.870884][T27081] ? do_vfs_ioctl+0xf36/0x1eb0 [ 1439.870908][T27081] ? rcu_is_watching+0x15/0xb0 [ 1439.870925][T27081] ? trace_contention_end+0x39/0x120 [ 1439.870942][T27081] ? look_up_lock_class+0x74/0x170 [ 1439.870967][T27081] ? register_lock_class+0x51/0x320 [ 1439.870999][T27081] ? __lock_acquire+0xaac/0xd20 [ 1439.871049][T27081] kvm_vcpu_ioctl+0x95a/0xe90 [ 1439.871080][T27081] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1439.871104][T27081] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1439.871162][T27081] kvm_vcpu_compat_ioctl+0x203/0x390 [ 1439.871190][T27081] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1439.871215][T27081] ? __fget_files+0x3a0/0x420 [ 1439.871237][T27081] ? __fget_files+0x2a/0x420 [ 1439.871264][T27081] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1439.871291][T27081] __ia32_compat_sys_ioctl+0x551/0x840 [ 1439.871315][T27081] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1439.871334][T27081] ? __fget_files+0x3a0/0x420 [ 1439.871370][T27081] ? fput+0xa0/0xd0 [ 1439.871400][T27081] ? ksys_write+0x1f0/0x250 [ 1439.871428][T27081] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1439.871451][T27081] ? lockdep_hardirqs_on+0x9c/0x150 [ 1439.871476][T27081] __do_fast_syscall_32+0xb4/0x110 [ 1439.871501][T27081] ? lockdep_hardirqs_on+0x9c/0x150 [ 1439.871527][T27081] do_fast_syscall_32+0x34/0x80 [ 1439.871552][T27081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1439.871574][T27081] RIP: 0023:0xf70be539 [ 1439.871589][T27081] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1439.871605][T27081] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1439.871623][T27081] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1439.871635][T27081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1439.871645][T27081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1439.871656][T27081] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1439.871666][T27081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1439.871693][T27081] [ 1439.875565][T27081] Mem-Info: [ 1440.287048][T27081] active_anon:8865 inactive_anon:0 isolated_anon:0 [ 1440.287048][T27081] active_file:19393 inactive_file:4426 isolated_file:0 [ 1440.287048][T27081] unevictable:768 dirty:181 writeback:0 [ 1440.287048][T27081] slab_reclaimable:9638 slab_unreclaimable:129821 [ 1440.287048][T27081] mapped:31379 shmem:3441 pagetables:1198 [ 1440.287048][T27081] sec_pagetables:0 bounce:0 [ 1440.287048][T27081] kernel_misc_reclaimable:0 [ 1440.287048][T27081] free:1316265 free_pcp:3094 free_cma:0 [ 1440.332202][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.363889][T27081] Node 0 active_anon:35560kB inactive_anon:0kB active_file:77444kB inactive_file:17572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125440kB dirty:724kB writeback:0kB shmem:12228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12292kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1440.402344][T15424] usb 6-1: Using ep0 maxpacket: 16 [ 1440.410221][T27081] Node 1 active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1440.447269][T15424] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1440.487966][T15424] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1440.499828][T15424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.510406][T27081] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.537441][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.560548][T27081] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 1440.567493][T15424] usb 6-1: Product: syz [ 1440.575198][T15424] usb 6-1: Manufacturer: syz [ 1440.586827][T15424] usb 6-1: SerialNumber: syz [ 1440.589957][T27081] Node 0 DMA32 free:1350000kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:35776kB inactive_anon:0kB active_file:77444kB inactive_file:17492kB unevictable:1536kB writepending:732kB present:3129332kB managed:2564112kB mlocked:0kB bounce:0kB free_pcp:1164kB local_pcp:552kB free_cma:0kB [ 1440.594575][T15424] usb 6-1: config 0 descriptor?? [ 1440.621805][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.626848][T13198] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1440.641387][T27081] lowmem_reserve[]: 0 0 0 0 0 [ 1440.642994][T15424] hub 6-1:0.0: bad descriptor, ignoring hub [ 1440.653999][T15424] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1440.661196][T27081] [ 1440.663542][T27081] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1440.734401][T27081] lowmem_reserve[]: 0 0 0 0 0 [ 1440.741355][T27081] Node 1 Normal free:3910468kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.772363][T27081] lowmem_reserve[]: 0 0 0 0 0 [ 1440.777338][T27081] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1440.791545][T27081] Node 0 DMA32: 1699*4kB (UME) 846*8kB (UME) 621*16kB (UME) 241*32kB (UME) 143*64kB (UME) 114*128kB (UME) 99*256kB (UME) 99*512kB (UME) 44*1024kB (UM) 13*2048kB (UME) 280*4096kB (UM) = 1349548kB [ 1440.821328][T27081] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 1440.821691][T13198] usb 5-1: config 0 has too many interfaces: 249, using maximum allowed: 32 [ 1440.837957][T27081] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1440.854582][T27081] Node 1 Normal: 273*4kB (UME) 76*8kB (UME) 42*16kB (UME) 218*32kB (UME) 97*64kB (UME) 33*128kB (UME) 16*256kB (UME) 11*512kB (UME) 6*1024kB (UME) 2*2048kB (ME) 945*4096kB (UM) = 3910468kB [ 1440.927804][T13198] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 249 [ 1440.942380][T27081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1440.952784][T27081] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1441.452256][T27081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.464007][T13198] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1441.467193][T27081] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1441.483012][T13198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.501313][T13198] usb 5-1: Product: syz [ 1441.507647][T13198] usb 5-1: Manufacturer: syz [ 1441.509157][T27081] 27238 total pagecache pages [ 1441.519560][T27081] 0 pages in swap cache [ 1441.523768][T27081] Free swap = 124996kB [ 1441.524658][T13198] usb 5-1: SerialNumber: syz [ 1441.528859][T27081] Total swap = 124996kB [ 1441.539335][T27081] 2097051 pages RAM [ 1441.543163][T27081] 0 pages HighMem/MovableOnly [ 1441.562486][T27081] 424365 pages reserved [ 1441.562809][T13198] usb 5-1: config 0 descriptor?? [ 1441.571729][T27081] 0 pages cma reserved [ 1441.597299][ T5895] usb 6-1: USB disconnect, device number 89 [ 1441.653956][ T9] usb 4-1: USB disconnect, device number 47 [ 1441.931561][ T5895] usb 5-1: USB disconnect, device number 35 [ 1441.955417][T27099] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6389'. [ 1442.018320][T18946] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1442.027167][T18946] Bluetooth: hci3: Injecting HCI hardware error event [ 1442.036061][T15595] Bluetooth: hci3: hardware error 0x00 [ 1443.152658][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1443.152678][ T30] audit: type=1326 audit(1747926490.806:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27110 comm="syz.4.6393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1443.181802][T27115] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6393'. [ 1443.405034][ T30] audit: type=1326 audit(1747926490.806:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27110 comm="syz.4.6393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1443.427479][ T30] audit: type=1326 audit(1747926490.806:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27110 comm="syz.4.6393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1443.456148][ T30] audit: type=1326 audit(1747926490.806:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27110 comm="syz.4.6393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1443.478336][ T30] audit: type=1326 audit(1747926490.806:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27110 comm="syz.4.6393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1443.513476][ T30] audit: type=1326 audit(1747926490.816:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27110 comm="syz.4.6393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1443.636187][ T30] audit: type=1326 audit(1747926490.816:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27110 comm="syz.4.6393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1443.970553][ T30] audit: type=1326 audit(1747926490.816:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27110 comm="syz.4.6393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1444.084332][ T30] audit: type=1326 audit(1747926490.816:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27110 comm="syz.4.6393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1444.105482][T15595] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1444.106935][ T30] audit: type=1326 audit(1747926490.826:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27110 comm="syz.4.6393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1444.301417][T27132] lo: entered promiscuous mode [ 1444.309754][T27132] lo: entered allmulticast mode [ 1444.322982][T27132] tunl0: entered promiscuous mode [ 1444.338195][T27132] tunl0: entered allmulticast mode [ 1444.360352][T27132] gre0: entered promiscuous mode [ 1444.366285][T27132] gre0: entered allmulticast mode [ 1444.469173][T27132] gretap0: entered promiscuous mode [ 1444.498302][T27132] gretap0: entered allmulticast mode [ 1444.509411][T27132] erspan0: entered promiscuous mode [ 1444.514994][T27132] erspan0: entered allmulticast mode [ 1444.540326][T27132] ip_vti0: entered promiscuous mode [ 1444.547035][T27132] ip_vti0: entered allmulticast mode [ 1444.564946][T27132] ip6_vti0: entered promiscuous mode [ 1444.667517][T27132] ip6_vti0: entered allmulticast mode [ 1444.702910][T27132] sit0: entered promiscuous mode [ 1444.712342][T27132] sit0: entered allmulticast mode [ 1444.736232][T27132] ip6tnl0: entered promiscuous mode [ 1444.753879][T27132] ip6tnl0: entered allmulticast mode [ 1444.801285][T27132] ip6gre0: entered promiscuous mode [ 1444.810289][T27132] ip6gre0: entered allmulticast mode [ 1444.821096][T27132] syz_tun: entered promiscuous mode [ 1444.828559][T27132] syz_tun: entered allmulticast mode [ 1444.834898][T27132] ip6gretap0: entered promiscuous mode [ 1444.843266][T27132] ip6gretap0: entered allmulticast mode [ 1444.850176][T27132] bridge0: entered promiscuous mode [ 1444.855533][T27132] bridge0: entered allmulticast mode [ 1444.864559][T27132] vcan0: entered promiscuous mode [ 1444.872176][T27132] vcan0: entered allmulticast mode [ 1444.886678][T27132] bond0: entered promiscuous mode [ 1444.900184][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1444.926932][T27132] bond_slave_0: entered promiscuous mode [ 1444.982973][T27132] bond_slave_1: entered promiscuous mode [ 1445.255221][T27132] bond0: entered allmulticast mode [ 1445.265266][T27132] bond_slave_0: entered allmulticast mode [ 1445.275408][T27132] bond_slave_1: entered allmulticast mode [ 1445.354062][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1445.362359][T27132] team0: entered promiscuous mode [ 1445.369489][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1445.442974][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.454579][T15595] Bluetooth: hci1: command 0x0406 tx timeout [ 1445.472403][ T9] usb 1-1: config 0 descriptor?? [ 1445.502610][T27132] team_slave_0: entered promiscuous mode [ 1445.509620][T27132] team_slave_1: entered promiscuous mode [ 1445.515790][T27132] team0: entered allmulticast mode [ 1445.521538][T27132] team_slave_0: entered allmulticast mode [ 1445.536318][T27132] team_slave_1: entered allmulticast mode [ 1445.543468][T27132] dummy0: entered promiscuous mode [ 1445.551919][T27132] dummy0: entered allmulticast mode [ 1445.563300][T27132] nlmon0: entered promiscuous mode [ 1445.572834][T27132] nlmon0: entered allmulticast mode [ 1445.583248][T27132] caif0: entered promiscuous mode [ 1445.588674][T15424] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1445.606615][T27132] caif0: entered allmulticast mode [ 1445.613222][T27132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1445.635115][T27138] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6399'. [ 1445.698049][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1445.756852][T15424] usb 6-1: Using ep0 maxpacket: 16 [ 1445.764445][T15424] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1445.784137][T15424] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1445.796971][T15424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.807339][T15424] usb 6-1: Product: syz [ 1445.811692][T15424] usb 6-1: Manufacturer: syz [ 1445.820896][T15424] usb 6-1: SerialNumber: syz [ 1445.830534][T15424] usb 6-1: config 0 descriptor?? [ 1445.849595][T15424] hub 6-1:0.0: bad descriptor, ignoring hub [ 1445.857772][T15424] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1446.157826][T15424] usb 6-1: USB disconnect, device number 90 [ 1447.074027][T13208] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1447.267290][T13208] usb 4-1: Using ep0 maxpacket: 32 [ 1447.328510][T13208] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1447.344563][T13208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.388653][T13208] usb 4-1: config 0 descriptor?? [ 1447.402672][T13208] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1447.692978][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1447.790350][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1447.889702][ T9] usb 1-1: USB disconnect, device number 12 [ 1448.471758][T13208] gspca_sunplus: reg_w_riv err -71 [ 1448.477318][T13208] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1448.554845][T13208] usb 4-1: USB disconnect, device number 48 [ 1449.372606][T27185] macvtap2: entered allmulticast mode [ 1449.747913][T27191] macvtap3: entered allmulticast mode [ 1450.178407][ T5886] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1450.287014][T20682] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1450.376918][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 1450.426979][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1450.454110][ T5886] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1450.463496][T20682] usb 1-1: Using ep0 maxpacket: 32 [ 1450.485222][T20682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1450.495935][T20682] usb 1-1: config 120 has an invalid interface number: 86 but max is 0 [ 1450.505957][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.528155][T20682] usb 1-1: config 120 has no interface number 0 [ 1450.538518][ T5886] usb 4-1: Product: syz [ 1450.542725][ T5886] usb 4-1: Manufacturer: syz [ 1450.548794][ T5886] usb 4-1: SerialNumber: syz [ 1450.555987][T20682] usb 1-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 1450.566940][T20682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.574968][T20682] usb 1-1: Product: syz [ 1450.582818][ T5886] usb 4-1: config 0 descriptor?? [ 1450.598327][ T5886] hub 4-1:0.0: bad descriptor, ignoring hub [ 1450.605067][T20682] usb 1-1: Manufacturer: syz [ 1450.612303][ T5886] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1450.621688][T20682] usb 1-1: SerialNumber: syz [ 1450.679452][T27207] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6421'. [ 1450.871892][T20682] huawei_cdc_ncm 1-1:120.86: More than one union descriptor, skipping ... [ 1450.883521][T20682] huawei_cdc_ncm 1-1:120.86: CDC Union missing and no IAD found [ 1450.895290][T20682] huawei_cdc_ncm 1-1:120.86: bind() failure [ 1450.914151][T20682] usb 1-1: USB disconnect, device number 13 [ 1450.937673][ T5939] usb 4-1: USB disconnect, device number 49 [ 1451.536415][T27210] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1451.650810][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1451.650829][ T30] audit: type=1326 audit(1747926499.296:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27214 comm="syz.5.6425" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x0 [ 1452.536874][ T5939] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1452.688663][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.701404][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.724054][ T5939] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1452.733003][T27236] FAULT_INJECTION: forcing a failure. [ 1452.733003][T27236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1452.763450][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.771225][T27236] CPU: 0 UID: 0 PID: 27236 Comm: syz.5.6432 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1452.771254][T27236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1452.771266][T27236] Call Trace: [ 1452.771276][T27236] [ 1452.771285][T27236] dump_stack_lvl+0x189/0x250 [ 1452.771318][T27236] ? __lock_acquire+0xaac/0xd20 [ 1452.771350][T27236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1452.771378][T27236] ? __pfx__printk+0x10/0x10 [ 1452.771399][T27236] ? __might_fault+0xb0/0x130 [ 1452.771436][T27236] should_fail_ex+0x414/0x560 [ 1452.771461][T27236] _copy_from_iter+0x1db/0x15a0 [ 1452.771493][T27236] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1452.771515][T27236] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1452.771540][T27236] ? __pfx__copy_from_iter+0x10/0x10 [ 1452.771565][T27236] ? __build_skb_around+0x257/0x3e0 [ 1452.771593][T27236] ? netlink_sendmsg+0x642/0xb30 [ 1452.771614][T27236] ? skb_put+0x11b/0x210 [ 1452.771642][T27236] netlink_sendmsg+0x6b2/0xb30 [ 1452.771674][T27236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1452.771700][T27236] ? __import_iovec+0x5d4/0x7f0 [ 1452.771724][T27236] ? aa_sock_msg_perm+0x94/0x160 [ 1452.771755][T27236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1452.771777][T27236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1452.771801][T27236] __sock_sendmsg+0x219/0x270 [ 1452.771824][T27236] ____sys_sendmsg+0x505/0x830 [ 1452.771856][T27236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1452.771898][T27236] ___sys_sendmsg+0x21f/0x2a0 [ 1452.771927][T27236] ? __pfx____sys_sendmsg+0x10/0x10 [ 1452.771987][T27236] ? __fget_files+0x2a/0x420 [ 1452.772012][T27236] ? __fget_files+0x3a0/0x420 [ 1452.772047][T27236] __sys_sendmsg+0x164/0x220 [ 1452.772076][T27236] ? __pfx___sys_sendmsg+0x10/0x10 [ 1452.772116][T27236] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1452.772144][T27236] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.772189][T27236] __do_fast_syscall_32+0xb4/0x110 [ 1452.772220][T27236] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.772252][T27236] do_fast_syscall_32+0x34/0x80 [ 1452.772287][T27236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1452.772313][T27236] RIP: 0023:0xf708e539 [ 1452.772332][T27236] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1452.772352][T27236] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1452.772375][T27236] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 1452.772390][T27236] RDX: 0000000020008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1452.772404][T27236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1452.772417][T27236] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1452.772431][T27236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1452.772461][T27236] [ 1453.475000][ T5939] usb 1-1: config 0 descriptor?? [ 1453.609438][T13208] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1453.781376][ T5939] usbhid 1-1:0.0: can't add hid device: -71 [ 1453.785162][T13208] usb 6-1: Using ep0 maxpacket: 16 [ 1453.796839][T20682] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1453.806102][T13208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1453.811669][ T5939] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1453.819830][T13208] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1453.842188][T13208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.860565][T13208] usb 6-1: Product: syz [ 1453.861659][ T5939] usb 1-1: USB disconnect, device number 14 [ 1453.864734][T13208] usb 6-1: Manufacturer: syz [ 1453.895762][T13208] usb 6-1: SerialNumber: syz [ 1453.908397][T13208] usb 6-1: config 0 descriptor?? [ 1453.920932][T13208] hub 6-1:0.0: bad descriptor, ignoring hub [ 1453.927249][T13208] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1453.938817][T13208] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input212 [ 1453.958392][T20682] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 1453.977198][T20682] usb 4-1: config 0 has no interface number 0 [ 1453.983573][T20682] usb 4-1: config 0 interface 93 has no altsetting 0 [ 1454.027739][T20682] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1454.041435][T20682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.049713][T20682] usb 4-1: Product: syz [ 1454.053963][T20682] usb 4-1: Manufacturer: syz [ 1454.064093][T20682] usb 4-1: SerialNumber: syz [ 1454.077652][T20682] usb 4-1: config 0 descriptor?? [ 1454.305682][T20682] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 1454.326114][T20682] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1454.334668][T20682] dib0700: firmware download failed at 7 with -22 [ 1454.355821][T20682] usb 4-1: USB disconnect, device number 50 [ 1454.797846][T27250] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1454.958984][ T5895] usb 6-1: USB disconnect, device number 91 [ 1455.059976][ T30] audit: type=1326 audit(1747926502.736:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27251 comm="syz.3.6438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1455.086023][T27256] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1455.092548][ T30] audit: type=1326 audit(1747926502.736:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27251 comm="syz.3.6438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1455.125056][ T30] audit: type=1326 audit(1747926502.766:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27251 comm="syz.3.6438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1455.153414][ T30] audit: type=1326 audit(1747926502.766:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27251 comm="syz.3.6438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1455.182216][ T30] audit: type=1326 audit(1747926502.766:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27251 comm="syz.3.6438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1455.212722][ T30] audit: type=1326 audit(1747926502.766:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27251 comm="syz.3.6438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1455.296882][ T30] audit: type=1326 audit(1747926502.766:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27251 comm="syz.3.6438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1455.322646][ T30] audit: type=1326 audit(1747926502.766:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27251 comm="syz.3.6438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1455.431784][ T30] audit: type=1326 audit(1747926502.766:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27251 comm="syz.3.6438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1456.436325][T27266] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1456.442885][T27266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1456.475907][T27266] vhci_hcd vhci_hcd.0: Device attached [ 1456.716916][T13198] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 1456.717191][T20682] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1456.846238][T27275] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1456.890223][T20682] usb 6-1: Using ep0 maxpacket: 32 [ 1456.910144][T27275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.919129][T20682] usb 6-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 1456.965026][T20682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.994380][T20682] usb 6-1: config 0 descriptor?? [ 1457.004257][T20682] usb 6-1: dvb_usb_v2: found a 'Anysee' in warm state [ 1457.024919][T20682] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1457.041768][T20682] dvb_usb_anysee 6-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 1457.460616][T27267] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1457.473003][ T1011] vhci_hcd: stop threads [ 1457.481707][ T1011] vhci_hcd: release socket [ 1457.486305][ T1011] vhci_hcd: disconnect device [ 1458.159424][T27289] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6446'. [ 1458.407164][ T5886] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1458.426965][T13208] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1458.556913][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 1458.564240][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1458.577037][T13208] usb 4-1: Using ep0 maxpacket: 8 [ 1458.584160][T13208] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1458.606869][T13208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.632173][ T5886] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1458.639087][T13208] usb 4-1: config 0 descriptor?? [ 1458.661412][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.672980][ T5886] usb 1-1: Product: syz [ 1458.689769][ T5886] usb 1-1: Manufacturer: syz [ 1458.777566][ T5886] usb 1-1: SerialNumber: syz [ 1458.799505][ T5886] usb 1-1: config 0 descriptor?? [ 1458.821372][ T5886] hub 1-1:0.0: bad descriptor, ignoring hub [ 1458.832250][ T5886] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1458.865740][T13208] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1458.884091][ T5886] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input213 [ 1459.283037][T27296] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1459.499830][T20682] usb 6-1: USB disconnect, device number 92 [ 1459.585830][T27298] netlink: 'syz.4.6450': attribute type 1 has an invalid length. [ 1459.725958][T27302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1459.774373][T27305] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1459.788036][T27305] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1459.886871][ T5187] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 1459.967025][T20682] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1460.050731][ T5187] usb 1-1: device firmware changed [ 1460.066598][ T5886] usb 1-1: USB disconnect, device number 15 [ 1460.121002][T20682] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1460.149505][T20682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.185806][T20682] usb 6-1: config 0 descriptor?? [ 1460.267224][ T5886] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1460.431628][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 1460.466296][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.533594][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1460.533609][ T30] audit: type=1326 audit(1747926508.176:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27313 comm="syz.2.6457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1460.563433][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1460.574492][ T5886] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1460.624373][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.634248][ T30] audit: type=1326 audit(1747926508.176:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27313 comm="syz.2.6457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1460.660264][ T5886] usb 1-1: config 0 descriptor?? [ 1460.669183][ T30] audit: type=1326 audit(1747926508.176:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27313 comm="syz.2.6457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1460.695361][T27320] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1460.771906][ T30] audit: type=1326 audit(1747926508.186:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27313 comm="syz.2.6457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1460.914439][ T30] audit: type=1326 audit(1747926508.186:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27313 comm="syz.2.6457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1461.051320][T13208] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1461.108376][T13208] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1461.168837][T13208] usb 4-1: USB disconnect, device number 51 [ 1461.365141][ T30] audit: type=1326 audit(1747926508.186:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27313 comm="syz.2.6457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1461.419269][ T30] audit: type=1326 audit(1747926508.186:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27313 comm="syz.2.6457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1461.486977][ T30] audit: type=1326 audit(1747926508.186:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27313 comm="syz.2.6457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1461.512813][ T30] audit: type=1326 audit(1747926508.186:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27313 comm="syz.2.6457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1461.535269][ T30] audit: type=1326 audit(1747926508.256:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27313 comm="syz.2.6457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1461.594759][ T5886] letsketch 0003:6161:4D15.0072: Device info: ဉ [ 1461.847062][T13198] vhci_hcd: vhci_device speed not set [ 1461.968087][ T5886] letsketch 0003:6161:4D15.0072: Device info: 豧 [ 1462.006914][ T5895] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1462.158541][ T5895] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1462.167330][ T5895] usb 5-1: config 0 has no interface number 0 [ 1462.174380][ T5886] letsketch 0003:6161:4D15.0072: Device info: ࠾ [ 1462.183709][ T5895] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1462.196612][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.206331][ T5895] usb 5-1: Product: syz [ 1462.210665][ T5895] usb 5-1: Manufacturer: syz [ 1462.215363][ T5895] usb 5-1: SerialNumber: syz [ 1462.223181][ T5895] usb 5-1: config 0 descriptor?? [ 1462.235803][ T5895] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 1462.422934][ T5886] usb 1-1: Max retries (5) exceeded reading string descriptor 1 [ 1462.435234][ T5886] letsketch 0003:6161:4D15.0072: probe with driver letsketch failed with error -71 [ 1462.458424][ T5886] usb 1-1: USB disconnect, device number 16 [ 1462.526123][T27340] Option '%%*U' to dns_resolver key: bad/missing value [ 1462.647039][ T5895] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1462.807100][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 1462.834719][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.864111][ T5895] usb 4-1: config 0 has no interfaces? [ 1462.871847][T13198] usb 5-1: USB disconnect, device number 36 [ 1462.873825][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1462.889492][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.911165][ T5895] usb 4-1: Product: syz [ 1462.915529][ T5895] usb 4-1: Manufacturer: syz [ 1462.927559][ T5895] usb 4-1: SerialNumber: syz [ 1462.953640][ T5895] usb 4-1: config 0 descriptor?? [ 1462.969457][T20682] pegasus 6-1:0.0: setup Pegasus II specific registers [ 1463.092095][T20682] pegasus 6-1:0.0: can't locate MII phy, using default [ 1463.114194][T20682] pegasus 6-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, a6:5c:6a:f3:67:27 [ 1463.182067][T27338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.197557][T27338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.224299][T13198] usb 4-1: USB disconnect, device number 52 [ 1463.276589][T15424] usb 6-1: USB disconnect, device number 93 [ 1463.278304][ T5895] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1463.544128][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 1463.579197][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1463.635776][ T5895] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1463.681072][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.702832][ T5895] usb 1-1: Product: syz [ 1463.715517][ T5895] usb 1-1: Manufacturer: syz [ 1463.764534][ T5895] usb 1-1: SerialNumber: syz [ 1463.817447][ T5895] usb 1-1: config 0 descriptor?? [ 1463.845271][ T5895] hub 1-1:0.0: bad descriptor, ignoring hub [ 1464.003893][ T5895] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1464.051796][ T5895] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input214 [ 1464.496890][T20682] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1464.523773][T27382] FAULT_INJECTION: forcing a failure. [ 1464.523773][T27382] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.565036][T27382] CPU: 0 UID: 0 PID: 27382 Comm: syz.2.6470 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1464.565061][T27382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1464.565073][T27382] Call Trace: [ 1464.565079][T27382] [ 1464.565085][T27382] dump_stack_lvl+0x189/0x250 [ 1464.565110][T27382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1464.565128][T27382] ? __pfx__printk+0x10/0x10 [ 1464.565144][T27382] ? __pfx___might_resched+0x10/0x10 [ 1464.565157][T27382] ? fs_reclaim_acquire+0x7d/0x100 [ 1464.565179][T27382] should_fail_ex+0x414/0x560 [ 1464.565196][T27382] should_failslab+0xa8/0x100 [ 1464.565215][T27382] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1464.565232][T27382] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1464.565247][T27382] ? __alloc_skb+0x112/0x2d0 [ 1464.565266][T27382] __alloc_skb+0x112/0x2d0 [ 1464.565289][T27382] sock_omalloc+0xd8/0x1e0 [ 1464.565318][T27382] msg_zerocopy_realloc+0x97/0x800 [ 1464.565353][T27382] __ip_append_data+0x93d/0x40f0 [ 1464.565387][T27382] ? do_raw_spin_unlock+0x122/0x240 [ 1464.565415][T27382] ? __lock_acquire+0xaac/0xd20 [ 1464.565434][T27382] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1464.565461][T27382] ? ipv4_mtu+0x23/0x5c0 [ 1464.565479][T27382] ? __pfx___ip_append_data+0x10/0x10 [ 1464.565497][T27382] ? ipv4_mtu+0x23/0x5c0 [ 1464.565514][T27382] ? ip_setup_cork+0x579/0x9b0 [ 1464.565534][T27382] ip_append_data+0x10e/0x190 [ 1464.565554][T27382] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1464.565574][T27382] udp_sendmsg+0x3e7/0x22e0 [ 1464.565597][T27382] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1464.565614][T27382] ? tomoyo_write_log2+0x250/0x910 [ 1464.565631][T27382] ? __pfx_udp_sendmsg+0x10/0x10 [ 1464.565645][T27382] ? __lock_acquire+0xaac/0xd20 [ 1464.565667][T27382] ? register_lock_class+0x51/0x320 [ 1464.565692][T27382] ? look_up_lock_class+0x74/0x170 [ 1464.565710][T27382] ? register_lock_class+0x51/0x320 [ 1464.565727][T27382] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1464.565748][T27382] udpv6_sendmsg+0xc52/0x2700 [ 1464.565764][T27382] ? lockdep_hardirqs_on+0x9c/0x150 [ 1464.565789][T27382] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1464.565820][T27382] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1464.565832][T27382] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1464.565849][T27382] ? inet_send_prepare+0x1b9/0x270 [ 1464.565869][T27382] ? inet_send_prepare+0x1b9/0x270 [ 1464.565890][T27382] ? inet6_sendmsg+0xe4/0x120 [ 1464.565904][T27382] __sock_sendmsg+0xe5/0x270 [ 1464.565920][T27382] __sys_sendto+0x3bd/0x520 [ 1464.565937][T27382] ? __pfx___sys_sendto+0x10/0x10 [ 1464.565952][T27382] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1464.565983][T27382] ? __fget_files+0x3a0/0x420 [ 1464.566007][T27382] ? ksys_write+0x1f0/0x250 [ 1464.566028][T27382] __ia32_sys_sendto+0xdd/0x100 [ 1464.566047][T27382] __do_fast_syscall_32+0xb4/0x110 [ 1464.566065][T27382] ? lockdep_hardirqs_on+0x9c/0x150 [ 1464.566083][T27382] do_fast_syscall_32+0x34/0x80 [ 1464.566100][T27382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1464.566116][T27382] RIP: 0023:0xf70be539 [ 1464.566127][T27382] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1464.566138][T27382] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1464.566152][T27382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1464.566161][T27382] RDX: 00000000000005c4 RSI: 000000000404c844 RDI: 0000000080000540 [ 1464.566169][T27382] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1464.566177][T27382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1464.566184][T27382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1464.566202][T27382] [ 1464.925197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1464.932597][T20682] usb 4-1: Using ep0 maxpacket: 32 [ 1464.939958][T20682] usb 4-1: config index 0 descriptor too short (expected 243, got 36) [ 1464.953152][T20682] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1465.052354][T20682] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.157299][T20682] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 9 [ 1465.232053][T20682] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1465.371827][T20682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.479302][T20682] usb 4-1: Product: syz [ 1465.502825][T20682] usb 4-1: Manufacturer: syz [ 1465.527332][T20682] usb 4-1: SerialNumber: syz [ 1466.369004][T27409] FAULT_INJECTION: forcing a failure. [ 1466.369004][T27409] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.442466][T27409] CPU: 1 UID: 0 PID: 27409 Comm: syz.5.6474 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1466.442494][T27409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1466.442505][T27409] Call Trace: [ 1466.442513][T27409] [ 1466.442523][T27409] dump_stack_lvl+0x189/0x250 [ 1466.442561][T27409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1466.442587][T27409] ? __pfx__printk+0x10/0x10 [ 1466.442607][T27409] ? __pfx___might_resched+0x10/0x10 [ 1466.442624][T27409] ? fs_reclaim_acquire+0x7d/0x100 [ 1466.442655][T27409] should_fail_ex+0x414/0x560 [ 1466.442680][T27409] should_failslab+0xa8/0x100 [ 1466.442706][T27409] __kmalloc_noprof+0xcb/0x4f0 [ 1466.442728][T27409] ? tomoyo_encode+0x28b/0x550 [ 1466.442755][T27409] tomoyo_encode+0x28b/0x550 [ 1466.442784][T27409] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1466.442824][T27409] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1466.442844][T27409] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1466.442866][T27409] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1466.442922][T27409] ? __fget_files+0x2a/0x420 [ 1466.442951][T27409] ? __fget_files+0x3a0/0x420 [ 1466.442973][T27409] ? __fget_files+0x2a/0x420 [ 1466.443001][T27409] security_file_ioctl_compat+0xcb/0x2d0 [ 1466.443021][T27409] __ia32_compat_sys_ioctl+0x128/0x840 [ 1466.443045][T27409] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1466.443066][T27409] ? __fget_files+0x3a0/0x420 [ 1466.443096][T27409] ? fput+0xa0/0xd0 [ 1466.443123][T27409] ? ksys_write+0x1f0/0x250 [ 1466.443152][T27409] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1466.443177][T27409] ? lockdep_hardirqs_on+0x9c/0x150 [ 1466.443201][T27409] __do_fast_syscall_32+0xb4/0x110 [ 1466.443226][T27409] ? lockdep_hardirqs_on+0x9c/0x150 [ 1466.443252][T27409] do_fast_syscall_32+0x34/0x80 [ 1466.443277][T27409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1466.443298][T27409] RIP: 0023:0xf708e539 [ 1466.443313][T27409] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1466.443329][T27409] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1466.443347][T27409] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c [ 1466.443360][T27409] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1466.443371][T27409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1466.443381][T27409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1466.443392][T27409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1466.443418][T27409] [ 1466.443514][T27409] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1466.592149][T27415] kernel read not supported for file / 7â`)s{Tr)rO2:"T+͟vpղDvc6xc@QX: (pid: 27415 comm: syz.0.6476) [ 1466.772487][T15126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.790295][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1466.790310][ T30] audit: type=1800 audit(1747926514.446:1711): pid=27415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6476" name=20019C1437B3CFFCC3A26029EB737B548772D22972A7D6084F9A98F4323A22F412C0542BCD9F76708DD5B24476638E93D8C536D278E36391E787405158F91B3A dev="mqueue" ino=126188 res=0 errno=0 [ 1467.011380][T15126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.127521][T20682] usb 4-1: USB disconnect, device number 53 [ 1467.398834][T15126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.806261][T15126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.866837][T13198] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1467.866847][ T5187] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 1467.890406][ T5187] usb 1-1: device reset changed ep0 maxpacket size! [ 1467.918501][ T5895] usb 1-1: USB disconnect, device number 17 [ 1468.106781][T13198] usb 4-1: Using ep0 maxpacket: 32 [ 1468.118412][T13198] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1468.145162][T27437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1468.170865][T13198] usb 4-1: config 0 has no interface number 0 [ 1468.203809][T13198] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1468.249732][T13198] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1468.268335][ T5895] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1468.296819][T13198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.358317][T13198] usb 4-1: Product: syz [ 1468.381433][T13198] usb 4-1: Manufacturer: syz [ 1468.412330][T13198] usb 4-1: SerialNumber: syz [ 1468.459617][T15126] bridge_slave_1: left allmulticast mode [ 1468.467180][T13198] usb 4-1: config 0 descriptor?? [ 1468.479723][T15126] bridge_slave_1: left promiscuous mode [ 1468.505103][T13198] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1468.525977][T15126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.559941][T13198] em28xx 4-1:0.132: Video interface 132 found: [ 1468.580350][T15126] bridge_slave_0: left allmulticast mode [ 1468.605405][T15126] bridge_slave_0: left promiscuous mode [ 1468.633500][T15126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.647183][T15595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1468.656700][T15595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1468.665525][T15595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1468.675092][T15595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1468.691697][T15595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1468.699719][ T5895] usb 1-1: config 0 has no interfaces? [ 1468.884017][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1468.893228][T13198] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1468.920866][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.932837][ T5895] usb 1-1: Product: syz [ 1468.937151][ T5895] usb 1-1: Manufacturer: syz [ 1468.941887][ T5895] usb 1-1: SerialNumber: syz [ 1468.971306][ T5895] usb 1-1: config 0 descriptor?? [ 1469.302820][T13198] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1469.315803][T13198] em28xx 4-1:0.132: board has no eeprom [ 1469.508953][T15126] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1469.518642][T15126] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1469.534909][T15126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.544269][T15126] bond_slave_0: left promiscuous mode [ 1469.550113][T15126] bond_slave_0: left allmulticast mode [ 1469.563252][T15126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.573436][T15126] bond_slave_1: left promiscuous mode [ 1469.579559][T15126] bond_slave_1: left allmulticast mode [ 1469.585859][T15126] bond0 (unregistering): Released all slaves [ 1469.596911][T13198] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1469.607875][T13198] em28xx 4-1:0.132: analog set to bulk mode. [ 1469.614850][T13208] em28xx 4-1:0.132: Registering V4L2 extension [ 1469.705467][ T5895] usb 4-1: USB disconnect, device number 54 [ 1469.715358][ T5895] em28xx 4-1:0.132: Disconnecting em28xx [ 1469.723332][T13208] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1469.835689][T13208] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1469.836106][T15126] bond1 (unregistering): Released all slaves [ 1469.842893][T13208] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1469.866243][T13208] em28xx 4-1:0.132: No AC97 audio processor [ 1469.881973][T13208] usb 4-1: Decoder not found [ 1469.894106][T13208] em28xx 4-1:0.132: failed to create media graph [ 1469.901392][T13208] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1469.915147][T13208] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1469.926691][ T5895] em28xx 4-1:0.132: Closing input extension [ 1469.975572][ T5895] em28xx 4-1:0.132: Freeing device [ 1469.994605][T15126] ave_0: left promiscuous mode [ 1470.510372][T15126] hsr_slave_0: left promiscuous mode [ 1470.530576][T15126] hsr_slave_1: left promiscuous mode [ 1470.542136][T15126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1470.559346][T15126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1470.581688][T15126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1470.596671][T15126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.633998][T15126] veth1_macvtap: left promiscuous mode [ 1470.643893][T15126] veth0_macvtap: left promiscuous mode [ 1470.653321][T15126] veth1_vlan: left promiscuous mode [ 1470.661232][T15126] veth0_vlan: left promiscuous mode [ 1470.727343][T18946] Bluetooth: hci1: command tx timeout [ 1471.442184][T15126] team_slave_1 (unregistering): left promiscuous mode [ 1471.449301][T15126] team_slave_1 (unregistering): left allmulticast mode [ 1471.463405][T15126] team0 (unregistering): Port device team_slave_1 removed [ 1471.502494][T15126] team_slave_0 (unregistering): left promiscuous mode [ 1471.511917][T15126] team_slave_0 (unregistering): left allmulticast mode [ 1471.521190][T15126] team0 (unregistering): Port device team_slave_0 removed [ 1472.102029][ T5886] usb 1-1: USB disconnect, device number 18 [ 1472.118039][T27440] chnl_net:caif_netlink_parms(): no params data found [ 1472.286375][T27478] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1472.582095][T27440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.666905][T27440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.674175][T27440] bridge_slave_0: entered allmulticast mode [ 1472.705060][T27494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6488'. [ 1472.731694][T27440] bridge_slave_0: entered promiscuous mode [ 1472.787428][T27440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.794587][T27440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.809135][T18946] Bluetooth: hci1: command tx timeout [ 1472.841533][T27440] bridge_slave_1: entered allmulticast mode [ 1472.948431][T27440] bridge_slave_1: entered promiscuous mode [ 1473.262512][T27440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.314490][T27440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.436827][ T5886] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 1473.611727][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.636909][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1473.667928][T27440] team0: Port device team_slave_0 added [ 1473.676402][ T5886] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1473.717677][T27440] team0: Port device team_slave_1 added [ 1473.719451][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.771519][ T5886] usb 6-1: config 0 descriptor?? [ 1473.799218][ T5886] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1473.844278][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 1473.877590][ T5886] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1473.915694][ T5886] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1473.944811][ T5886] usb 6-1: media controller created [ 1473.954759][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1473.991820][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 1474.028754][ T5886] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1474.070395][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input215 [ 1474.158406][ T5886] dvb-usb: schedule remote query interval to 150 msecs. [ 1474.177022][T27503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6490'. [ 1474.196763][ T5886] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1474.367464][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 1474.382045][ T5886] dvb-usb: error while querying for an remote control event. [ 1474.485071][T27440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.508654][T27440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.536972][T27440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.556818][T16038] dvb-usb: bulk message failed: -22 (1/0) [ 1474.565665][T16038] dvb-usb: error while querying for an remote control event. [ 1474.600281][T27440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.628075][T27440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.709101][T27524] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1474.718714][T27440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.729685][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 1474.738527][ T5886] dvb-usb: error while querying for an remote control event. [ 1474.897229][T18946] Bluetooth: hci1: command tx timeout [ 1474.906821][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 1474.912625][ T5886] dvb-usb: error while querying for an remote control event. [ 1475.076986][T16038] dvb-usb: bulk message failed: -22 (1/0) [ 1475.083788][T16038] dvb-usb: error while querying for an remote control event. [ 1475.098529][T27440] hsr_slave_0: entered promiscuous mode [ 1475.110479][T27440] hsr_slave_1: entered promiscuous mode [ 1475.122209][T27440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1475.135080][T27440] Cannot create hsr debugfs directory [ 1475.271513][T16038] dvb-usb: bulk message failed: -22 (1/0) [ 1475.277454][T16038] dvb-usb: error while querying for an remote control event. [ 1475.756983][T16038] dvb-usb: bulk message failed: -22 (1/0) [ 1475.794028][T16038] dvb-usb: error while querying for an remote control event. [ 1476.007011][T16038] dvb-usb: bulk message failed: -22 (1/0) [ 1476.018254][T16038] dvb-usb: error while querying for an remote control event. [ 1476.102018][T16038] usb 6-1: USB disconnect, device number 94 [ 1476.307460][ T30] audit: type=1326 audit(1747926523.986:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27540 comm="syz.0.6498" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1476.366174][T27550] tipc: Started in network mode [ 1476.412621][T27550] tipc: Node identity 4, cluster identity 4711 [ 1476.438248][T16038] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1476.446860][T27550] tipc: Node number set to 4 [ 1476.506811][ T30] audit: type=1326 audit(1747926523.986:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27540 comm="syz.0.6498" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1476.556170][ T30] audit: type=1326 audit(1747926523.986:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27540 comm="syz.0.6498" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1476.616029][T27553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6500'. [ 1476.633340][ T30] audit: type=1326 audit(1747926523.986:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27540 comm="syz.0.6498" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1476.666862][T27553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6500'. [ 1476.741515][T27559] tun0: tun_chr_ioctl cmd 1074025672 [ 1476.770369][ T30] audit: type=1326 audit(1747926523.986:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27540 comm="syz.0.6498" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1476.785036][T27559] tun0: ignored: set checksum disabled [ 1476.792447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.849181][ T30] audit: type=1326 audit(1747926523.986:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27540 comm="syz.0.6498" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1476.873658][ T30] audit: type=1326 audit(1747926523.986:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27540 comm="syz.0.6498" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1477.051136][T18946] Bluetooth: hci1: command tx timeout [ 1477.106812][ T30] audit: type=1326 audit(1747926523.986:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27540 comm="syz.0.6498" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1477.225196][ T30] audit: type=1326 audit(1747926523.986:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27540 comm="syz.0.6498" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1477.283039][ T30] audit: type=1326 audit(1747926523.986:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27540 comm="syz.0.6498" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1477.691461][T27577] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1477.930636][T27572] ================================================================== [ 1477.938733][T27572] BUG: KASAN: global-out-of-bounds in fib6_clean_node+0x35d/0x590 [ 1477.946547][T27572] Read of size 8 at addr ffffffff99d1d8a8 by task syz.2.6504/27572 [ 1477.954436][T27572] [ 1477.956768][T27572] CPU: 1 UID: 0 PID: 27572 Comm: syz.2.6504 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1477.956789][T27572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1477.956801][T27572] Call Trace: [ 1477.956809][T27572] [ 1477.956816][T27572] dump_stack_lvl+0x189/0x250 [ 1477.956849][T27572] ? __virt_addr_valid+0x18c/0x540 [ 1477.956872][T27572] ? rcu_is_watching+0x15/0xb0 [ 1477.956887][T27572] ? __kasan_check_byte+0x12/0x40 [ 1477.956910][T27572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1477.956934][T27572] ? rcu_is_watching+0x15/0xb0 [ 1477.956949][T27572] ? lock_release+0x4b/0x3e0 [ 1477.956976][T27572] ? __virt_addr_valid+0x18c/0x540 [ 1477.956998][T27572] ? __virt_addr_valid+0x469/0x540 [ 1477.957022][T27572] print_report+0xb4/0x290 [ 1477.957043][T27572] ? fib6_clean_node+0x35d/0x590 [ 1477.957063][T27572] kasan_report+0x118/0x150 [ 1477.957086][T27572] ? fib6_clean_node+0x35d/0x590 [ 1477.957110][T27572] fib6_clean_node+0x35d/0x590 [ 1477.957133][T27572] ? __pfx_fib6_clean_node+0x10/0x10 [ 1477.957157][T27572] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1477.957175][T27572] fib6_walk_continue+0x67b/0x910 [ 1477.957202][T27572] fib6_walk+0x149/0x290 [ 1477.957224][T27572] __fib6_clean_all+0x234/0x380 [ 1477.957243][T27572] ? __fib6_clean_all+0x9b/0x380 [ 1477.957263][T27572] ? __pfx_fib6_ifdown+0x10/0x10 [ 1477.957285][T27572] ? __pfx___fib6_clean_all+0x10/0x10 [ 1477.957305][T27572] ? __pfx_fib6_clean_node+0x10/0x10 [ 1477.957321][T27572] ? __pfx_fib6_ifdown+0x10/0x10 [ 1477.957339][T27572] ? __lock_acquire+0xaac/0xd20 [ 1477.957362][T27572] rt6_disable_ip+0x120/0x720 [ 1477.957381][T27572] ? rcu_is_watching+0x15/0xb0 [ 1477.957394][T27572] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1477.957415][T27572] addrconf_ifdown+0x15d/0x1880 [ 1477.957429][T27572] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1477.957450][T27572] ? __pfx___mutex_lock+0x10/0x10 [ 1477.957469][T27572] ? tls_dev_event+0x717/0xec0 [ 1477.957489][T27572] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1477.957509][T27572] addrconf_notify+0x1bc/0x1010 [ 1477.957528][T27572] notifier_call_chain+0x1b6/0x3e0 [ 1477.957545][T27572] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1477.957565][T27572] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1477.957581][T27572] ? stack_depot_save_flags+0x40/0x910 [ 1477.957596][T27572] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1477.957620][T27572] ? lockdep_hardirqs_on+0x9c/0x150 [ 1477.957640][T27572] unregister_netdevice_queue+0x33c/0x380 [ 1477.957662][T27572] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 1477.957678][T27572] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1477.957698][T27572] ? linkwatch_urgent_event+0x62/0x3a0 [ 1477.957722][T27572] __tun_detach+0xda4/0x1560 [ 1477.957739][T27572] ? __pfx_tun_chr_close+0x10/0x10 [ 1477.957759][T27572] tun_chr_close+0x10a/0x1c0 [ 1477.957780][T27572] __fput+0x44c/0xa70 [ 1477.957795][T27572] task_work_run+0x1d1/0x260 [ 1477.957815][T27572] ? __pfx_task_work_run+0x10/0x10 [ 1477.957843][T27572] resume_user_mode_work+0x5e/0x80 [ 1477.957863][T27572] syscall_exit_to_user_mode+0x9a/0x120 [ 1477.957882][T27572] __do_fast_syscall_32+0xc1/0x110 [ 1477.957901][T27572] ? lockdep_hardirqs_on+0x9c/0x150 [ 1477.957919][T27572] do_fast_syscall_32+0x34/0x80 [ 1477.957938][T27572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1477.957955][T27572] RIP: 0023:0xf70be539 [ 1477.957967][T27572] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1477.957979][T27572] RSP: 002b:00000000f757fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1477.957994][T27572] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1477.958003][T27572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1477.958012][T27572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1477.958020][T27572] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1477.958029][T27572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1477.958043][T27572] [ 1477.958048][T27572] [ 1478.347930][T27572] The buggy address belongs to the variable: [ 1478.353897][T27572] binder_devices+0x8/0x20 [ 1478.358316][T27572] [ 1478.360631][T27572] The buggy address belongs to the physical page: [ 1478.367041][T27572] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19d1d [ 1478.375799][T27572] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1478.383703][T27572] raw: 00fff00000002000 ffffea0000674748 ffffea0000674748 0000000000000000 [ 1478.392281][T27572] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1478.400846][T27572] page dumped because: kasan: bad access detected [ 1478.407248][T27572] page_owner info is not present (never set?) [ 1478.413293][T27572] [ 1478.415602][T27572] Memory state around the buggy address: [ 1478.421214][T27572] ffffffff99d1d780: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 1478.429350][T27572] ffffffff99d1d800: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 1478.437399][T27572] >ffffffff99d1d880: f9 f9 f9 f9 00 f9 f9 f9 00 00 f9 f9 00 00 00 00 [ 1478.445442][T27572] ^ [ 1478.450800][T27572] ffffffff99d1d900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1478.458846][T27572] ffffffff99d1d980: 00 00 00 00 00 00 00 00 00 00 04 f9 f9 f9 f9 f9 [ 1478.466889][T27572] ================================================================== [ 1478.475050][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.481096][T27572] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1478.488292][T27572] CPU: 1 UID: 0 PID: 27572 Comm: syz.2.6504 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1478.500335][T27572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1478.510375][T27572] Call Trace: [ 1478.513640][T27572] [ 1478.516558][T27572] dump_stack_lvl+0x99/0x250 [ 1478.521138][T27572] ? __asan_memcpy+0x40/0x70 [ 1478.525711][T27572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1478.530897][T27572] ? __pfx__printk+0x10/0x10 [ 1478.535471][T27572] panic+0x2db/0x790 [ 1478.539357][T27572] ? __pfx_panic+0x10/0x10 [ 1478.543769][T27572] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1478.549662][T27572] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1478.555544][T27572] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1478.561854][T27572] ? print_memory_metadata+0x314/0x400 [ 1478.567298][T27572] ? fib6_clean_node+0x35d/0x590 [ 1478.572224][T27572] check_panic_on_warn+0x89/0xb0 [ 1478.577154][T27572] ? fib6_clean_node+0x35d/0x590 [ 1478.582074][T27572] end_report+0x78/0x160 [ 1478.586300][T27572] kasan_report+0x129/0x150 [ 1478.590793][T27572] ? fib6_clean_node+0x35d/0x590 [ 1478.595719][T27572] fib6_clean_node+0x35d/0x590 [ 1478.600469][T27572] ? __pfx_fib6_clean_node+0x10/0x10 [ 1478.605740][T27572] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1478.611095][T27572] fib6_walk_continue+0x67b/0x910 [ 1478.616109][T27572] fib6_walk+0x149/0x290 [ 1478.620339][T27572] __fib6_clean_all+0x234/0x380 [ 1478.625173][T27572] ? __fib6_clean_all+0x9b/0x380 [ 1478.630095][T27572] ? __pfx_fib6_ifdown+0x10/0x10 [ 1478.635038][T27572] ? __pfx___fib6_clean_all+0x10/0x10 [ 1478.640394][T27572] ? __pfx_fib6_clean_node+0x10/0x10 [ 1478.645664][T27572] ? __pfx_fib6_ifdown+0x10/0x10 [ 1478.650593][T27572] ? __lock_acquire+0xaac/0xd20 [ 1478.655432][T27572] rt6_disable_ip+0x120/0x720 [ 1478.660099][T27572] ? rcu_is_watching+0x15/0xb0 [ 1478.664848][T27572] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1478.670056][T27572] addrconf_ifdown+0x15d/0x1880 [ 1478.674916][T27572] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1478.680543][T27572] ? __pfx___mutex_lock+0x10/0x10 [ 1478.685557][T27572] ? tls_dev_event+0x717/0xec0 [ 1478.690312][T27572] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1478.695593][T27572] addrconf_notify+0x1bc/0x1010 [ 1478.700443][T27572] notifier_call_chain+0x1b6/0x3e0 [ 1478.705545][T27572] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1478.711948][T27572] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1478.718694][T27572] ? stack_depot_save_flags+0x40/0x910 [ 1478.724143][T27572] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1478.729693][T27572] ? lockdep_hardirqs_on+0x9c/0x150 [ 1478.734900][T27572] unregister_netdevice_queue+0x33c/0x380 [ 1478.740632][T27572] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 1478.746431][T27572] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1478.752669][T27572] ? linkwatch_urgent_event+0x62/0x3a0 [ 1478.758127][T27572] __tun_detach+0xda4/0x1560 [ 1478.762706][T27572] ? __pfx_tun_chr_close+0x10/0x10 [ 1478.767810][T27572] tun_chr_close+0x10a/0x1c0 [ 1478.772392][T27572] __fput+0x44c/0xa70 [ 1478.776370][T27572] task_work_run+0x1d1/0x260 [ 1478.780969][T27572] ? __pfx_task_work_run+0x10/0x10 [ 1478.786071][T27572] resume_user_mode_work+0x5e/0x80 [ 1478.791169][T27572] syscall_exit_to_user_mode+0x9a/0x120 [ 1478.796706][T27572] __do_fast_syscall_32+0xc1/0x110 [ 1478.801829][T27572] ? lockdep_hardirqs_on+0x9c/0x150 [ 1478.807015][T27572] do_fast_syscall_32+0x34/0x80 [ 1478.811854][T27572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1478.818165][T27572] RIP: 0023:0xf70be539 [ 1478.822214][T27572] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1478.841809][T27572] RSP: 002b:00000000f757fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1478.850210][T27572] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1478.858170][T27572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1478.866133][T27572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1478.874096][T27572] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1478.882061][T27572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1478.890024][T27572] [ 1478.893377][T27572] Kernel Offset: disabled [ 1478.897692][T27572] Rebooting in 86400 seconds..