last executing test programs: 12.021730814s ago: executing program 1 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) close(0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e28}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) 11.04496136s ago: executing program 0 (id=302): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x17ff, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') 10.791366334s ago: executing program 0 (id=303): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x480, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}]}}, 0x0, 0x0, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) sendmsg$can_j1939(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)="83ea05cbb34782aaeeb2207d30573be6a406e9da98eedf0762c79b52fd582002c1fecf6802787e84e268c8267c76c7", 0x2f}, 0x1, 0x0, 0x0, 0x4000001}, 0xc0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.255056763s ago: executing program 0 (id=305): socket$inet(0x2, 0xa, 0x4) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x107142, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) write$uinput_user_dev(r7, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0xfffffffe, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffa], [0x0, 0xffffffff, 0xf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x200, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x400, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) 9.807529713s ago: executing program 1 (id=306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x145}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') fchmod(r5, 0xc2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) r6 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f00000007c0)="39addaf7419cdc6c614bb55b52477998e59cfe41f22c6dc89ad5d0faa74d46e499bea41b856fc07a4ffc61750c0b1c6525f2a5b96090afcb8433b34250c702e435677ba9c9af27dcee989d"}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') 8.967210417s ago: executing program 0 (id=308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) lseek(r2, 0xffffffffffffffb7, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x5, 0x4) 8.729374625s ago: executing program 1 (id=311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x66000080) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) unshare(0x10000400) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = gettid() sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r8, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r9], 0x28}}, 0x0) 7.880089409s ago: executing program 0 (id=312): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee6901020301090224000c000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f3, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="2eff10d84508d557d5c87e1836b8d944da0308722581d49839eb9d4a9eb66d7986dd0a540218f669f37f6d6869b43f17e7f4b2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40000100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000003, 0xffffffffffffffff, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0) pwritev2(r4, &(0x7f0000000280), 0x0, 0x1200, 0x30, 0x3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) dup(r5) open(&(0x7f0000000180)='./bus\x00', 0x40d00, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000001c0)=[{r6, 0x747}, {r6, 0x6160}], 0x2, 0x0, 0x0, 0x0) signalfd4(r6, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff070000d7"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d000000060000000400b93fa0aa809a73320000b7db1dca6cea3886844d67b09b7bbdbfa8879186e1949b9c69a57ea10d68eb31e06887765d4435a2578611a4d7a88c36ca8ff32285505318f387b6aa329bc950415e4498ca3bc94fd2175d531e295d7e410fe00b29e9f909", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8}, &(0x7f0000000840), &(0x7f0000000340)=r7}, 0x20) 5.523592778s ago: executing program 2 (id=321): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ptrace(0x10, r0) r1 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) fcntl$addseals(r1, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x5dc, 0x1}) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) 5.321635726s ago: executing program 1 (id=322): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x18) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x12) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) close_range(r3, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000280)={'sit0\x00', r6, 0x7800, 0x700, 0x8, 0x2, {{0x1a, 0x4, 0x3, 0x8, 0x68, 0x67, 0x0, 0x2, 0x6, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp_addr={0x44, 0x1c, 0x2a, 0x1, 0x2, [{@local, 0xff}, {@local, 0x1}, {@multicast1, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xe8, 0x3, 0xf, [{@rand_addr=0x64010102, 0x5}]}, @noop, @lsrr={0x83, 0x27, 0xb3, [@broadcast, @private=0xa010100, @rand_addr=0x64010101, @loopback, @multicast2, @remote, @local, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @end, @generic={0x89, 0x3, 'e'}]}}}}}) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) 5.224268644s ago: executing program 2 (id=323): r0 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x0, 0x8}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x78, 0x3, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "dadf3f33eca795096ce04b85fb9795e19facc630b128c0641e2ef7255583ea34", "1f5a24a92ab34f6fd109cd1ce17bdf1d", {"47fe387fdb519e704be01891191958f1", "e2b5b9fa5c2f561c278dcd17aa2df6d9"}}}}}}}, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x3, 0xf000, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x4, r3, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 4.819536882s ago: executing program 1 (id=325): r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="143cadc48100000000"]) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0x31}, 0x80, 0x0}, 0x20000814) 4.764588701s ago: executing program 2 (id=326): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x2}, {0xfffffffd}, {0x0, 0x4}, {0x0, 0x4, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x66, 0x0, 0x100, 0x3, 0x3}) 4.714931859s ago: executing program 4 (id=328): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101942, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101942, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x16, r1, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000000c0)={0x6, 0x800, 0x8020000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000001c0)={0x28, 0x6, r2, r3, 0x2, 0x1, 0x9}) read$watch_queue(r0, &(0x7f0000000200)=""/4096, 0x1000) (async) read$watch_queue(r0, &(0x7f0000000200)=""/4096, 0x1000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000012c0)={&(0x7f0000001200)=[0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xc0c0c0c0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)) close(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, &(0x7f0000001340)={0x20, 0x31, 0x24, {0x24, 0x6, "d0d16407a63b0a9bc6de15aa2cce298261498f394a29a00cc62767e13eee55d02948"}}, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f00000013c0)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x0, "85bfb051"}, @local=@item_012={0x1, 0x2, 0x1, '?'}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x8, "b8cad52d"}]}}, &(0x7f0000001400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x1cc}}}}, &(0x7f0000001700)={0x2c, &(0x7f0000001480)={0x0, 0x10, 0x92, "e782c5bcbe79ac5547fe3351bf2cf8f94493441f9c986d27ce00f6efdc6e356b8ab48cafe6d197f2f97c7326f33b509bdbc81030a275e7895679518423d2bad72d7b6901171acc590b84e56d315bb021fe607e7a8f84c84bb48aeb3d5415665cfd9e0e988fb257f5b8788e155a2e146b1143cce3c528ddbbd37e48f81de260644218cd8243e0f716e074007d7f18138a8034"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000015c0)={0x20, 0x1, 0xe1, "71c273a9a2293a69f104cca5bd6fd9ca16be5db7f621371fa9a4a980b0169da897731944bbc1ce9f5ff634f907f4cd0d2f0b247c19050ac6c1933ce9e4ccf3471bae6ea2a8f9d4d68568763344455aaa7d612d7ee01063784a49dfb3fb0b4360475668801f05eda1040642fb5bd7ae030edc602c0d1966aca19efceaee4dc6c54e34029abbbdc45e70c672e348b76eb9af0705d58e573958a6f448bb574a3e81451d84be2efd8e360cea98516bf8367cd5b9108da81599fff4483e83cb6898fa75842d3560f4c4983668fb89ef89b2219a6a7050853df06a567f906339b198fa20"}, &(0x7f00000016c0)={0x20, 0x3, 0x1, 0xb}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001840)={&(0x7f0000001740)=[0x0], &(0x7f0000001780)=[0x0], &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0], 0x1, 0x1, 0x2, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001880), 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000018c0)={0x48, 0x2, r2}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000018c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000001a40)={0x28, 0x3, r5, r3, 0x0, 0x0, 0x0, 0xc4, &(0x7f0000001940)="18cf76225637cef8af7e6de66770a4c90ebcce6633a1939b8b147b0552fb3b506279593fa4f88ac5f24c7475d6e7032876beb6587baa87e8e6cc98533f422efe5e564fb90c09299048103da19e8fdc2e99ce1d9e84655a125c9213f98f66d724393a4cf66b1bc30f0a1f537bfc399332bce3f014cc50b474367d0ffbdd19111c9a5c2ef5bb8713d630f47a3d3fd1803c08427fb964904abae1ff1579a92bc2efd5b57a0076eaeb83bfdb93d6bf1d4fa1ec6cfcf317d63a225665316695e254ab59a69932"}) syz_open_dev$radio(&(0x7f0000001a80), 0x2, 0x2) (async) r6 = syz_open_dev$radio(&(0x7f0000001a80), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000001ac0)={0x342052dbbef9f37b, 0x0, {0x8, 0x10000, 0x2011, 0x3, 0x5, 0x4, 0x2, 0x2}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000001b40)={0x48, 0xa, 0x0, 0x0, r3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000001b40)={0x48, 0xa, 0x0, 0x0, r3}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000001c00)={0xffffffffffffffff, 0x1, 0xf, r1, 0x81}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000001c00)={0xffffffffffffffff, 0x1, 0xf, r1, 0x81}, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000001c40), 0x2080, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000001c80)={0x48, 0x9, 0x0, 0x0, 0x6}) (async) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000001c80)={0x48, 0x9, 0x0, 0x0, 0x6}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000001d00)={0x8, r2}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000001d80), &(0x7f0000001dc0)=0x4) (async) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000001d80), &(0x7f0000001dc0)=0x4) io_uring_enter(0xffffffffffffffff, 0x6deb, 0x7aa8, 0x42, &(0x7f0000001e00)={[0x80]}, 0x8) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001e40)) 4.376199586s ago: executing program 2 (id=329): ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x1000000) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x9d4bb00c26c4d847, 0x0, 0x2}}, 0x10) (async) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x9, 0x800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0x10) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x400001, 0x150, 0x20}, 0x18) pread64(r2, &(0x7f00000001c0)=""/81, 0x51, 0xa00000) (async) io_uring_setup(0x766c, &(0x7f0000000240)={0x0, 0x1b2b, 0x2000, 0x0, 0x2ea}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in6={0xa, 0x4e20, 0x5, @local, 0x8}], 0x38) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x9, 0x4, {{0x28, 0x4, 0x3, 0x6, 0xa0, 0x66, 0x0, 0xcc, 0x2f, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x1b, 0xbe, [@broadcast, @loopback, @rand_addr=0x64010101, @local, @remote, @rand_addr=0x64010102]}, @lsrr={0x83, 0x27, 0x2b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @remote, @loopback, @multicast2, @loopback, @multicast2, @multicast1]}, @timestamp={0x44, 0xc, 0x89, 0x0, 0x2, [0x6, 0x1]}, @ssrr={0x89, 0xf, 0x5c, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x2}, {@empty, 0x7}, {@remote, 0x7}, {@local}]}, @ra={0x94, 0x4}, @noop, @generic={0x89, 0x4, "7e15"}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2008008}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getqdisc={0x3c, 0x26, 0x820, 0x70bd27, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xfff1, 0x7}, {0x2, 0xfff3}, {0xc, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000) (async) syz_open_dev$sndctrl(&(0x7f0000000500), 0x9, 0x420483) (async) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x103000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r5) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000680)={'erspan0\x00', &(0x7f00000005c0)={'gretap0\x00', r4, 0x1, 0x7800, 0x8, 0xffffffff, {{0x26, 0x4, 0x3, 0x9, 0x98, 0x66, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@cipso={0x86, 0x57, 0x3, [{0x6, 0x8, "eb2afe33b4a9"}, {0x0, 0x11, "edbbf5c80763851f97bc567d3b502f"}, {0x1, 0xb, "6c7ca9e0a31e99e90e"}, {0x0, 0xe, "61f881cf0381455e603616ab"}, {0x0, 0x3, "c6"}, {0x0, 0x7, "5f184dc36a"}, {0x2, 0xc, "231d14669930fe0945ea"}, {0x2, 0x9, "7ae19513810e0b"}]}, @rr={0x7, 0xf, 0x16, [@multicast1, @multicast1, @rand_addr=0x64010100]}, @timestamp={0x44, 0x1c, 0xe1, 0x0, 0xa, [0x7, 0x3, 0x80000000, 0x1, 0x9479, 0x8]}]}}}}}) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, 0x140a, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40480c0) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000880)={0x1, 0x3, 0x7, 0x2, r7}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, r8, 0xc57d9000) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000900)=',^}&}(>\x00', &(0x7f0000000940)='\\[\x00', 0x0) (async) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000980)={0x1, 0xfffffdfc, 0x4, 0xec7, 0xffffff28, 0x7}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000009c0)={0x7fff, 0x208, 0x4, 0x9, 0x0}, &(0x7f0000000a00)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000a40)=@assoc_value={r9, 0x81}, &(0x7f0000000a80)=0x8) socket$alg(0x26, 0x5, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000b00), 0x7, 0x208880) sendmsg$nl_route_sched(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@deltclass={0x7c, 0x29, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xa, 0xffff}, {0x4, 0xa}, {0x8, 0xd}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0xa, 0x7}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0xf}}, @TCA_RATE={0x6, 0x5, {0x6b, 0x9}}, @TCA_RATE={0x6, 0x5, {0x49, 0xe8}}, @TCA_RATE={0x6, 0x5, {0x80, 0xfb}}, @TCA_RATE={0x6, 0x5, {0xd}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c1}, 0x20040000) 4.311253027s ago: executing program 0 (id=330): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x3, 0x3) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x3, 0xe90, 0x19}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$clear(0x5, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=',$@\x00', 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x10, 0x0, 0x160}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) pread64(r3, &(0x7f00000002c0)=""/187, 0xbb, 0xfffffffffffffff7) keyctl$revoke(0x3, r4) syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xee) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 4.310792534s ago: executing program 4 (id=331): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x6001, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@obj_user}, {@euid_lt={'euid<', r4}}, {@permit_directio}, {@fsname={'fsname', 0x3d, 'syz2\x00'}}]}}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0xfe6d, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4.171591278s ago: executing program 2 (id=333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x2a, 0xc0, 0x5, 0x6, 0xfb, 0x6c, 0x1, 0x4, 0x3, 0x0, 0x4, 0x58, 0x91, 0x5, 0xff, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.904603579s ago: executing program 4 (id=334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66a4d3497bd9ec1f953cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd381f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c250400adf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffaf87c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x205a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000e40)={0x0, &(0x7f0000000180)={0x18, 0x0, 0xdd, {0xfffffffffffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r3, 0x100000000100, 0x4) socket$igmp(0x2, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0xffe0}, {0x0, 0xfff3}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) openat$incfs(r4, &(0x7f00000000c0)='.pending_reads\x00', 0x80080, 0x0) 3.698614275s ago: executing program 2 (id=335): r0 = socket(0x21, 0x5, 0xffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)}, {&(0x7f0000000280)="a66028b17d16da26b2b831c01d364f54f9117853fe461180e3318243249ef6e9b83250c55027cc0a68fd3eb3170b80a5483ed95286fd59420e4875b71a500d70cbeb076faa2a09e8b504432d18c3fe6d74e74ab5cb86cc0fb1242c4c5308e725cf8b1623d200558a67793a8eeb86dac6b233612a04cb2b0f0ef29e4255d6336f206cafbb476d1cccfa9ff1f85510a8514f0a35d9a2cdddd7f9a94be98a4fed1a187b2aa30ef3ffc79bddff6887d298b096d553349605223ca41e27145dd7", 0xbe}, {&(0x7f00000004c0)="af1166f27415fb634dcb7bb4b99c2aa77bd31fe349dd9024c2938e7e96206be35f9ff3c1439b76c68acf919af9b1ce56d405a5eb6b5cbd00f46944e2181055c76481f8802ab5a11ebbbf3d5752df0a91c751932550fd6f075be7de14d28378939d7e216c6634995bb0bf37fe8d563739b754ce30239d9c586bfbbdc76ecb6c53ec48fa8307e90b2cf7e9e4c1d631bbd943799c61ff7e0808d99fe07eac2661d9793dd359631d2417ba6acfe6df0d2404cdef404c4ea9c13fb96d8bb0df05f0f0c8ba5f728833bc982a1d3176ce3378fe06d116662b67fad4b4d8841c4c144c2e82d90b6ec5f3fac3fe8d9c327628744d7136cd8b45", 0xf5}, {&(0x7f0000000340)="cc17d5b53514c4d604da7bcc54b24f65506af85681a3a7d4ad6a6caddf6c70dec8901e9359d10406564341eb162894c87eab68", 0x33}, {&(0x7f0000000400)="3a91c68a0df89a3fd9bc62a86c3c48c9174f0c17fafa37c6d0188da0e15d7fa7999087857ef6169cf93bb2e050fe81f90532f2bfdf57e2c0e1578394ea027bfe913aa0cd87e55e63900711233fdde98c0fa4cc22ca612421c4904724191abd0893", 0x61}, {&(0x7f00000005c0)="0aa316bc3946f341e9728795d71c01f5f6b33b2630c03a99bd", 0x19}, {&(0x7f0000000600)}, {&(0x7f0000001700)="cd3b196ae301569afe8f6eddc8c55754924067195911be7e6c849730854d2fc91b405ccccb41040de23882833ffe6305767c4070131dfe18e1f1481ab988347838a4913bd4a41fef4be1a41a9cf8ff649509cee0d049596d5b035b8ffbc6f8382ede46f764c0410492bfcf89f1c4138369b2d9caab6710cfc1e62f3bab200e3c2fe50ec8ed213d136735b802267ab6bb699800f761dbb7bccb303fd4f85feca340aeff1c736bee3fa1fdb93a889d48a2ed77f20b12ff46062e940a9aaca0800611a2283572e4a4eb11138123e6e1f1d9938eca81d5291bd7a2be398eb8e3e3aa720e35bde121b8f98c07322a13d0f78fd1993559b8dbf40530993c5192269f6d941a47b1ab2d8ba718ae8f994694bdf1733aa14e043fb215d1fc1cc414027cac23c36304b5b17cba3c33f3629dd83a77c39f4745d8f739edf1a30fb33e1842dca1d77cbf781cf79ef85f9d6f7b9202714c9208af60ec5f89bf31c1b23ea0c5eea4e15877a21002c6f80be36180ec8fb298a16779b3fceb5f35098e0202efcbe59acfde41c5801be953dd324387daa3e7479eaa02c2b120cbb09aabe07674ecec88f4dee2d894a8cf9180665398cf64c71e0c03b16bd9bb5838f87e5ce15d4ab30e9b575f7cf0c7d725c1eedc9fb2f7c448fdb850c93a634f542620e35d77a77be78b290a5a918cc343de0602a607effba46c45fc8df9ae59dbe986d9c3a3587c0dc7b0d153f38dd5562f1a3557c4185e4decfd079203b01f911b298d2b81348b78589805de0b50d655aee6a9d4b8cf9f7684e784c945f8a1d456f1fbf5abb1538267b5047f1eeb7ad7632aa48b5a1938d35513a2ef3857905b0f2e9e8feee3cfad66fdebb1b6865d182d0e8a7896f5582f0cfbb189608f6f4b8f3c68aeb0b5abf2f56d32bbb809cd97b88ccd0165f44161db3ff15ec498fdda9cf7ebccbc53dc8cd9d97fa6e1a16bad55b447d976d981f657d5af2c310204d2ed10621a900892a565036772addd4e1808827020f5e1b366e86602c78cbf89bd54fd9afdadee27a957c5a671074dcb840c29475e13331114e8838be6124e58f483b2ff6292ab30aaa489b9687c39505794240f770c4645f400d3c2d09af9bc6a61c9c7d6d7cb2a0075216fec36eec233133e106e1d5bc81a43da6d2ff9e2f2948e3d9e8db76341adac42c8a5813f84a9068004cced3b82edb7c06ddf74241b1314b5bccb2ac8ae521a06bed07be06f3feaa875324de0570a4fb4012a64cc575935f2238cf542181b9210b162061acca23ef2da41e828794a3a3b462af4a6fa70a66ccbe543429619dd9bb80e5562915c770b737ece2e9f6e9489396b056b609d6f07f3e79e657d634ece77bf2ff8fb0fb54e914eaa42a0330ddfb7635d0c1358a60a845febda7b8344292b82e3751366ef978474a19536c55459885892d3fe652fec9fbb4a00bc06f2cb5b208ee1e0d85ad64bcec659ca3cad55f49223d57249d6f1066dc1c055e14b604fb298711f7d583d6879cd9c1427b9c6eba94f8542e953f69c8716994254434d34ffbcbd26d19b90e3a67cb307adf3a8d0c254db1a6e30e044a82469494a9d8913606d4a7b4b2e4a0c81e488169b502298c1819b728b6877d4f666d859b0a255930c7b3a210540dec6db5b94b99c0316daf75ba7ee22943ae885f23cabe0003ebb64156f7e5e9b4bf726ff7b16eb2c808af065e6bea08b159a62629edb056b803bf0f162848eacf97f8addf794895eff57d84f9e448b4c1efd4203553595a1409a706c2aa4cce5740be9532d3b57c23688ef1be04faf5eda6341c77d21109ed4ff6af9fd80531a77c61695cbf713dca2f78d2292b4cee9bdf1dcd658ff2f4015c8a27072ee7acb4612fb4e75263d474e28dc72212e737af23b1668f4456bed6038f3f71a094e129a54b0ba28ad2bd7ce33474e14b1a9849af27651ac5eab36ac104cfca532ae933f5750ee6a5e4a1d5f59ad5a29b4dc15f520e44d0e898cbdbf0ecfb044ce85ca78e6f1512ff29c8a10848def6dcfb042df6b7e3f9c4165dfccbc5c36e051f5a39807d5c1752963a16d1e2f8931839214581622efaece30f1eb5006d0d525a8490047e842b9a82bba6cab9fbc49bcb981cf8674cdf512269a0f615df21b41837d265fe66a7ca06fd1e76a8f16679b4a38b05a4f2cea4619f27b45de52ac3dc7bbd159326f67ecb69ad83f05d5599aef5a0e5f647b122e45e1536226861da2691d7a0b9b1f778c0d0ff77825ae84ca95854fa5fed6caf86b6772d00b5186871d0aff67dcab9fba99c475b8cac6f580393bb2569eb1762ea0f633eec2282eec0c80cf69b8cf1be90c012b3f34226fee09a099ad1911444ba9aa6d12f21f79a70c1a7e6fee8062364352a8685e54f22e217b6600fc8a948336eabf0f404b163e6b402685e832474a340eaf8e1137504e81d5e7402b3f0abfc6ecb5ce8b79047cb1dc20dafaab05491e528aacd2a143618d201ef6aec09c694b804e7926dadd4efd9847abe2098692163d7406bd05e13ed5bd66ac5222165da0ae8c4b80fe94c5379530d759cb42d573997d6babc4104dc8dc5634bbd04a6d5837d5c831685ae846e9da983c5b0f9c8c45392bb1c5caa8ee881abc0ff0540d2d4da967e5505250af099139f92b1221bba2ef62eceba136e6f86e402e5acdb0586ec4dfb1c747489bb101c9eb6aa8890a42edc11155dcfcd6c971ac4011cf4b2921cacdb0a710e9b94fb295fb8e388292f7d24984134dec22ff5594d8e3c6cd23a38a9b60795e4140bcd017bb2438bf5b041d065d54fdbfc206339cd79590f281e11ffb8bb66affe2c12c382f969d54dd26466329b52ee091a6fd052809349206de61595c1770c82b06070f48deb338f45b05db6994a98e91dc04c6ea7f4bec71e2fad03c9d56d6e16dc43b6dc74c79fe0eccbcd5b18126da90ac52c6089a72c75fea833c81e9b997c8243e7674787627c4e274857a251369156f4f66326e36379ca7961ecc064e2614e701278b91c3de14b7397e4cec9d886063e165e3722c1436e7cdb5982869f1b751a0b09646844a31adcab50b6237a3a9116644fe98ee6b5ea414472ff7461950d50ccbb79ddc5a219aef7c3472a56f08f5b06cc587a3e905c8de9b0b9b6bf721663240779d6091995c556256f9987df3126ec83253d9b68ff3e02f8c410940926fec6cf37e9cf4ac21541efaa5739f7c6e454974e147ff4b383882a25c3bfa0f16ec868a3f78e4af47bfae4f4591439206039add61e922b36b45267fd215ceb861ecf831c980fa20710b088cecd7abc9aef07b78871265b4dd5836d92e3303fb6aa6fecc51b9c5510cbd257fe277dab5bfd3ff13dec3f6753e084f63c922acb1c05258ecc48574aca2649c000adb0b8dc03a243de932716a60383712122333b938bdaca7b9e6c592a29292c6e6f14647eb0c71fb039ebb1ffadf320ff4a8207e424ec2549a2533a48a56da12d7e5ce340de4fd1fc4cb2904897f40cf8422ae0041eedb7ee74345d968b4c93d4181636662958c0e28f6ce56780e1ca99e944a7fbcfdd971bc5e1ca45005350c8817d3b13faffd3c3ea8bebe7ad1fb2ee45ec3511169d481f6743fd294bd4bd08f7e3a50a4eecf4c57631c6f4ba7380d91854e14a9c128d39dbdee40b9c99a233f951b0254388289244b611a1cfcc2728cce98d802de8719cc6538ab17060d64b9bfda000093af335e589726aa69d495480d7ee1c507b1b24bd21ffb51a79df9f15afeb077abd1a4d936676f7dde01f3d7ec49d0c92e0170b7e7413e2735e9b939ecb3df0cffc5461a8045b016df137c7f7db96b856281ea712b639d947f5958235dbe90cda880318bd2c1da3ba923e060fefab635346f8fe3a2dfe13d07cc2c6c0d8312e1a7d24eaafc792da71d4df2a63239b507122bd39272287b202e1a7ee0423e5be501fb715f27bdc0b998342c52a268a8be0a669b1899c958aef7056dd35367b8017e2f5b25df7a08b030c8e73b87a0a182e4666dace9fc78c4adfd32a50e79608272f47bac534ce220e955dc2d7f288aeec02b002619f7826e3af767e62b4a071d4b526860ccb070e499a9699fb4cff0ec871deeab4307dee659b819278ca084e560e5139c6e868a417826700ebf12609d70dc9b24d357d87b856bedca82b5f8c144a689821c9b1e965d0e18ec3ce71e850acb17ffe0d1516d3b5ff6f45a32793e857560ae68a1a2a6e3e2237acf0f7ee2269545b6ff7e643ed7aa2dbc6c8bbbf0597259c1550d4019751ade509fc6bbd08e4f8b34708e1cc039e333e4ed7925c2780e2e724d92225b523d0e2701c081a9a855969792cc471793aa0b1221d6758cbc2a2b66429e53d8eec68a908254a9a7ddfd179e6bb9e3bc7a6e09689fee03360ef28e647a3f7586e1569cc7ef8d365e5be4b0dac8f79de755f5def30131673aecfd6aa9e4d772536969dcc6aa7c5c70f1cd48dda09f452e2f6a38e8da0474dfbcd37552c7b252851f66499f75a04a460e3382d18aaf4053db9c660629c267991ff900e686ed74d53df8f7bc635bb7d6485d73eebbc8b325a3c1c8d8c73de8b1353d2a6f97077cba42d1a704723cf781f037c132cd64f24a43dcd37d79808729b4ca6f7b1d6efb433fca811a063c54e9f2ca294103933575032f53cb037fd2ba95d5690b7921a5fcd4b563b09e58ff8743627f59d6eb27a2b5aa616ce5918d2a2ad9e068596d07f13a740b0a0dd70caafc4b0dce4624dc5ba41b339713953650792ba713189860010a6d153ba254f51662e285018cf65fa3a16037de054b733759cd44d79789b1351b8248815ca9f072a0871504723d866959d73d302e627edaa04cf32858a84f76f617a5c0887c87584529805e4e4077ff83510b5818d523bd3a89e0d61e6dd029a9b7cae52eb4b028c4201f19de085caecda5df23066a780328b1be3f9f2cac4dce0d617ca7b72a6fcf23e96e7675edd6735bf833a4f721576604d430b958a56b70b3eb9390da1df7064fee42d3f6e981ae2d9504d0fefe998f7b4d46dc212992841b1c90b32204dd86acd54addcb8ee05bcaa9bee3179784fda410e8fb78910b84d825317b6474b4bf6f90e0e7bdabdf9b68317796c8c8661c550d62dc863d5275836bd35ece65c4a0046018a2355899e43d5102b5c7166e249054d293af51b2e1af87389e86f51b8cf065d7a3dfa044df27946957d136ac9cccee58a2c6157430e367bf84d70a5bd7b7eb5ee13b65cae4ff7f44ae8bb3954bd38efb9ec3c758561f18fbe54e347ea1eb64a9cebb54251e87abcb1796ee9d252fc904f1505cc518a96c899f63db6ad1718f5edee45adcb707f53c811b96e6434575b021c9fb0c3cbdfa6dd4ee3d2f8be9d65fe0f9ac8107d7b91455f8733df10635743047cc277aa6e9f95f87d446f6026a080e9047cd544cf3e3ce9cd4391ab11c6c515a86d0b103ce1bfadb9888bcbfd6de4cedc2d5e858569fb1028e287e2eebae4ee300eba91c8237b4ebb1ba30459610f611fc4181c94e6e523088fb990a10da3948312c4f48eef05ab44f5ad1a3ea2abdbb51065d421b6dca2cb01ff46d58be44abd0dbb9eb31a241647c32f7aa9a357c7e21ba90637b7a55bb2883877fcb03f7413c6f38f93b2298a4a11578d0d51af1fd6768b98efe1d4758868d4ce6c3fb337ff16fa86608087407088f253b333c4177bab59d55d99aec1d3d7cb7c599e7062e5a50f45cc87db80874db10c3a3c4f098c87e5d48151343f7ac78b96cbff4ccb0225539d1bde8c80620385d1120137d8cf699cd5ac9f064d88bfdf8b4420934", 0x1000}], 0x8, &(0x7f00000006c0)=[{0x18, 0x104, 0x1, "1f92e13e"}, {0xa0, 0x114, 0x2, "f08f36f2593389d3ece679cffa94776c71bea43864af193f215236b28440367d8b73321fa3805c9e5a0291570e0ea76f54eda5c8288cf7f807d207f1394dfee18be5a24fc6d5df837497d23ee0708f844d3f7cf08a6c43ea62c86a09cb9888050c76bbbad0973dfb36d949bb7fc888e7986e3950da21ad8afbf0e9af12c5a6cca368c943b0481740c69da43c73137eb2"}, {0x70, 0x110, 0x0, "daaab4a55b1393d50257ecea9904155e72f6791534a2237b226bf93f5073a076096b9ec0af9ebf4287b7f11f9e7644fb6277764e641d158db020d640dde59cd47fb7a3466727151264da520e4339e3695340425d6f871321ee8e98951dcff24b"}, {0x80, 0x117, 0x70000000, "b626180b62514bbee862efd089e274600a42e842dfec0ceb9bade1a2057160df56023980da0bf97b43a0869a0479edf8cd5081289e669028bfc3dba5482b99da90c51401ad9f7af60cd5c0d8d36525af2e3522259a60665f9f7a329c227ddc3489c52217b31bc4fcde1e1603"}, {0xe8, 0x10e, 0x6, "b619d298c1d1b66a7c296a9c7a56a53809e36991f661241a4a0d8b33ae90ca555b6880d6710112acaf7dbcc8df11c556ddab4ff549105424117c4d147f6a199a79009500a61bbc5fdb31388b96391aaa81169184b9b03fef20aaae9c948b53e805c2342719480ca18f7ea7e6ed11dc8746c8819a6357891e90ef631cd3d08791bcf922096e1a4f49df8cf1e54dab532b0def138d98a5d9245ba9b5cb3a5b020ec9052aa757bb80ab38ad32c72bb148ff256afcbcc05f2ffc0b2d391ff39d586608f12f85a9ba56e18fc7ae97eb1c20aa0a"}, {0x48, 0x6, 0x3ff, "271de09e0686fd65f6ca2c98ae821a1c9cf594f5decc1139d7d5872cf574aa1858c9375cfa79699248222a3858f0ba8efbdf18e05e882786"}], 0x2d8}}], 0x1, 0x20008384) recvmmsg(r3, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/19, 0x13}, 0xd6f}], 0x1, 0x45833af92e4b39ff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000081) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xeeeeeeee}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20040001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3.624788208s ago: executing program 3 (id=336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="05000000040000000020000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x188}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0x114, 0xa, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xfd}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '+-6$\x00'}]}, @IPSET_ATTR_ADT={0x90, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_virt_wifi\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x9d}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xa8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000004) r2 = socket$tipc(0x1e, 0x5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffffffffffe00]}, 0x8, 0xc0800) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @mcast1, 0x800000, 0xa, 0x0, 0x100, 0x7ffffffe, 0x140192}) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000180000000204000000030000000000000801000000002e2e002e613061300000000000000000000000000000000000e1940f24c9790b382f32599db8f65e58e103512cfef2fae18d482070e155b70b1a8a228fcdcef597cd6432e5085b39668e5bdc3379d6b6a3c251b06ad9077c50caa3ba854c07fb9c4500"], &(0x7f0000000540)=""/181, 0x3a, 0xb5, 0x1, 0xffff, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x7ff, 0x0}, 0x8) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x111403, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r9, &(0x7f0000000000)=""/95, 0x5f) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000300000000000000030000001801002020207025000000f109d246a101000000000007010000f8ffffffb702000008000000b7030000fbffffff85100000060000009500000000000000867c848d998dc9010b01be7535b2f6b633ec1af5f65857cb171ccf00"/115], &(0x7f00000002c0)='GPL\x00', 0x9, 0x5b, &(0x7f0000000380)=""/91, 0x41000, 0x59, '\x00', r5, @fallback=0x28, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x0, 0x80, 0x4, 0x6}, 0x10, r7, r8, 0x1, &(0x7f0000000700)=[r0, r0, r0, r9, r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x5, 0x4, 0x4, 0x9}], 0x10, 0x9}, 0x94) userfaultfd(0x100000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x94) socket(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r10, 0x29, 0x6, 0x0, &(0x7f0000000040)=0x4c) socket(0x2a, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0xd4043f9e78e97721}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x24000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xb6}}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfbfffffc}, 0x94) 3.382277162s ago: executing program 3 (id=337): r0 = syz_io_uring_setup(0x2abc, &(0x7f0000000380)={0x0, 0x8000004, 0x400, 0x1, 0x2f7}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x7, 0x0, 0x8, 0x5}, 0x48) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x20, 0x0, 0x0) 3.011507986s ago: executing program 3 (id=338): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x9, [{0x8f, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x7fffffff, 0xffffff78}, {0x5, 0xfdfd}, {0xfffffffb, 0x10}, {0xffff, 0x400003}], 0x9, 0x2, 0x2, 0x1}}) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x182) syz_open_dev$sndmidi(&(0x7f0000000200), 0x8000000000000000, 0x200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @remote}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000000)=@ccm_128={{0x304}, "be83b9f417f0b7d7", "84971ed901dd7f3b479a9c95963d7478", "3bea88cc", "ca047c92e2681ef2"}, 0x28) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) 2.850098657s ago: executing program 3 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xbb15}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a00010000000000010000000a80002000f8"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="5d616f5f378b7efce6a9e7ae3a411d2b4d5a1a7c5019342e542ecb7f51c606e368eaf515ed5e5f423cee7fd367f7f93925dd7dbd9a481f21bfff772371ac0f81480a53a60032fa6206bec45b90957aae4affa6ad5a7dadea030a9a1d82ac28926d46bfafd88e3d01792641373ed0f6fbb19b24730a1f6539c570fd6bdddf476ec7390277028c445a241ad6ca26b4bf83c943a69632bd28ec64e7f563dc3d915abff84d762c853dc43cb5d3113a1f5f7f84689f2be3953cb266f22b43feccdb374c49cd6a14fe80cd5c200dc7f1f779407a84d4723ec07f", 0xd7}, {&(0x7f0000000200)="8e7ce27678130daa52207d93d80250b6211fa116dee780436fcfc5c6ad9b94a0b6b3ed46015f807fa4d454611eab494b700b7c892b6edcb893247c8656d3d2defc32cad4e1a8052e10d0c0f7c3be0c67dcc6fc39c1df97dedf8a6d38a88a21f4480aa0661b1088f15db4d9d500df949361b6946d4e2cf3adc8fc4dbbcd5c316abe5b6fd9529ddc26b0f4819818ca0b3ca95bea9b24816b4b2f298b55916a99ad74e9a11e86e874a4e6d42d2d12d7810ce98d2651ba4ae7926ae15064bed446d4a68fb07afcae33f85dd7df1172e68de8499af16c40b0df6ec9e6c149564bd62d6139922f6ea7d460f59ed69803", 0xed}, {&(0x7f0000000140)="808ee6547981f8cc148b1906d3d812da1e978a06067cf924", 0x18}, {&(0x7f0000000180)="7543032d1d64317d1f4df21b106fb9fc6d7496704a507207be305854d96524ac28bc76735a", 0x25}], 0x4, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8f}}], 0x18}}, {{&(0x7f0000000440)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="618253e0767253e6b39dcd2b25cd81c93ba91d265a1981662e158fd6afb8b97e547258a7707d354d3e641fa7ac90cdb36c3b45ab8d620d0088ccb7b4051919f89c8c059ff8f6a2010db5c76df9d6bcfa21f17f8d6b61611d87ea98ce591880dbe09a58acc5f1", 0x66}, {&(0x7f0000000500)="4d4ed1d7f82f5a3935d303543b396a134bc6c5920a3037242b2946adda", 0x1d}, {&(0x7f0000000540)="8cfb76f12705cb461afeaef79e1da274fe4bcf711864a00a882a1f42f9d4ffbe3bd2c9de11845e6d2dc241bbfa4417185d61f8f3e8a5444b498ad0bf9fbb23354d61a8eb2281416e0f790ceb69879c3f3932b14b44", 0x55}, {&(0x7f00000005c0)="673db5c1f30548b9e9da22699f9e60cb966e182a25651816f21217df24c4628290a1904e516ccf282ed804b1241a69dcda95608bc992d1798ca01ee147ec22e019919e6ac9e9472ddcb02376656ca7c456d1d826145289af5c0f69f31d9c493d97a9226321868987de9f8a92024be3cd7e340ace09c763f8d173d3d5d59db833e2d0166c4aebce562f75bac2a2232041fcaa", 0x92}, {&(0x7f0000000680)="a63c571e2de36438aec3c88762c6b01d388625e1a7f8305065a01076c9056c5dce2750", 0x23}, {&(0x7f00000006c0)="b39a82ef676b9b", 0x7}, {&(0x7f0000000700)="c7a9f80669e47ce50106be90709ec429ce012cd01353d5c89eabaf2777aad325dc957bd731a8cd", 0x27}], 0x7, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x30}}], 0x2, 0x800) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040000) 2.571277101s ago: executing program 3 (id=340): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) unshare(0x2040400) signalfd4(r2, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008840, &(0x7f0000000180)={0xa, 0x2, 0x80200, @private2, 0x9}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.311445403s ago: executing program 4 (id=341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001980), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0c0) 1.219255077s ago: executing program 1 (id=342): syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000200)={0x8, 0x4, [0x7]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x240001, 0x0) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x11, 0x0, 0xfffffffffffffebc}, 0x4}], 0x2, 0x60, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016000000000062ad0ca650af8e0cf5dd875e16e7d330cf59fed3455d495c2214d7313cf2c5c7b78efbb5cf0bd1762736cd0a76f2ea7ca230fd5831c59b9397d3c94b9d47c4a387ce5cbfdc74da4b2b21d9dbb786e44b642e960ba1cbe2918594fe96f26f7c1e27dc63937ff0924bc0060a8d6db9ff504a"], 0x68}, 0x1, 0x7}, 0x0) 973.378953ms ago: executing program 4 (id=343): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) unshare(0x20000400) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0xfffffffffffffe6d) ioctl$USBDEVFS_RESET(r0, 0x5514) 755.416014ms ago: executing program 3 (id=344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendto$inet6(r0, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) readv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xee, 0x5, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x0, 0x31, 0x26, {0x26, 0x3, "9665f5747ad6f037670dfd8d227ce9ee2ad403af82465c3369a5905173f1e9434b928603"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = getpgrp(0xffffffffffffffff) tkill(r5, 0x1b) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000010900020073797a32000000000900010073797a300000000008000540000000020c00098008000140000020800800084000000001"], 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 0s ago: executing program 4 (id=345): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000080), 0x0}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f00000000c0)=0x20000003, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0xfc, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) r6 = dup3(r0, r2, 0x0) read$watch_queue(r6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$TIOCCONS(r6, 0x541d) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x13, 0x0, 0x0) kernel console output (not intermixed with test programs): ridge_slave_1) entered forwarding state [ 74.120633][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.131322][ T5863] veth0_vlan: entered promiscuous mode [ 74.158114][ T5863] veth1_vlan: entered promiscuous mode [ 74.197894][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.226949][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.234070][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.257980][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.282267][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.289442][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.343625][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.358396][ T5863] veth0_macvtap: entered promiscuous mode [ 74.384870][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.394271][ T5863] veth1_macvtap: entered promiscuous mode [ 74.418143][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.425343][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.464873][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.479329][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.486530][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.500424][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.524672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.531758][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.544951][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.554498][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.590054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.597235][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.614889][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.625288][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.634379][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.643531][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.757429][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.791359][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.894535][ T5860] veth0_vlan: entered promiscuous mode [ 74.937205][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.944632][ T5860] veth1_vlan: entered promiscuous mode [ 74.964631][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.994706][ T5865] veth0_vlan: entered promiscuous mode [ 75.016133][ T5864] veth0_vlan: entered promiscuous mode [ 75.025306][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.049485][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.054928][ T5860] veth0_macvtap: entered promiscuous mode [ 75.068380][ T5860] veth1_macvtap: entered promiscuous mode [ 75.074495][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.079640][ T5865] veth1_vlan: entered promiscuous mode [ 75.101724][ T5864] veth1_vlan: entered promiscuous mode [ 75.147875][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.190666][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.260321][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.314982][ T5865] veth0_macvtap: entered promiscuous mode [ 75.334348][ T5860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.352402][ T5860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.361129][ T5860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.392418][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.413515][ T5864] veth0_macvtap: entered promiscuous mode [ 75.424961][ T5865] veth1_macvtap: entered promiscuous mode [ 75.450327][ T5864] veth1_macvtap: entered promiscuous mode [ 75.475690][ T5862] veth0_vlan: entered promiscuous mode [ 75.511227][ T5862] veth1_vlan: entered promiscuous mode [ 75.565716][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.577308][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.608802][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.626694][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.644070][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.646358][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.676223][ T5865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.690295][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.701564][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.715577][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.744863][ T5864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.756313][ T5859] Bluetooth: hci0: command tx timeout [ 75.762012][ T5864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.771469][ T5864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.780579][ T5864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.850404][ T5862] veth0_macvtap: entered promiscuous mode [ 75.889479][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.908045][ T5862] veth1_macvtap: entered promiscuous mode [ 75.913641][ T5859] Bluetooth: hci1: command tx timeout [ 75.918136][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.919175][ T5859] Bluetooth: hci4: command tx timeout [ 75.926587][ T5850] Bluetooth: hci2: command tx timeout [ 75.926708][ T5856] Bluetooth: hci3: command tx timeout [ 76.020532][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.048662][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.050294][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.067469][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.113387][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.149820][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.151666][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.167744][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.239535][ T5862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.249076][ T5862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.271620][ T5862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.280789][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.293110][ T5862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.323066][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.330923][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.427881][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.441529][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.476355][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.493336][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.498514][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.542253][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.574714][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.662533][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 76.686114][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.692402][ T10] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 76.715930][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.720100][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.732776][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 76.755763][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 76.773168][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.815458][ T10] usb 1-1: config 0 descriptor?? [ 76.822266][ T5946] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 76.982534][ T2150] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 77.069870][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.082854][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.107278][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 77.121135][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 77.147358][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.150125][ T10] usb 1-1: USB disconnect, device number 2 [ 77.169490][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.185551][ T2150] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 77.209623][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.229490][ T2150] usb 2-1: config 0 descriptor?? [ 77.496915][ T2150] usbhid 2-1:0.0: can't add hid device: -71 [ 77.525277][ T2150] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 77.589669][ T2150] usb 2-1: USB disconnect, device number 2 [ 77.633035][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.728331][ T30] audit: type=1326 audit(1752311253.478:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ce98e929 code=0x7ffc0000 [ 77.733415][ T5972] capability: warning: `syz.2.9' uses deprecated v2 capabilities in a way that may be insecure [ 77.780655][ T30] audit: type=1326 audit(1752311253.478:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ce98e929 code=0x7ffc0000 [ 77.805961][ T30] audit: type=1326 audit(1752311253.478:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ce98e929 code=0x7ffc0000 [ 77.841771][ T5856] Bluetooth: hci0: command tx timeout [ 77.845655][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 77.859816][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 77.883163][ T10] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 77.883778][ T30] audit: type=1326 audit(1752311253.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ce98e929 code=0x7ffc0000 [ 77.925067][ T30] audit: type=1326 audit(1752311253.478:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff4ce98e929 code=0x7ffc0000 [ 77.947802][ T30] audit: type=1326 audit(1752311253.478:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ce98e929 code=0x7ffc0000 [ 77.972216][ T30] audit: type=1326 audit(1752311253.478:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff4ce98e929 code=0x7ffc0000 [ 77.987290][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.004529][ T5856] Bluetooth: hci4: command tx timeout [ 78.010789][ T5856] Bluetooth: hci3: command tx timeout [ 78.016969][ T5856] Bluetooth: hci2: command tx timeout [ 78.022880][ T2150] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 78.031288][ T5856] Bluetooth: hci1: command tx timeout [ 78.038253][ T30] audit: type=1326 audit(1752311253.478:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ce98e929 code=0x7ffc0000 [ 78.062588][ T30] audit: type=1326 audit(1752311253.478:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ce98e929 code=0x7ffc0000 [ 78.111955][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 78.113284][ T30] audit: type=1326 audit(1752311253.528:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff4ce98e929 code=0x7ffc0000 [ 78.160663][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.198427][ T2150] usb 2-1: config 32 has an invalid interface number: 72 but max is 0 [ 78.207335][ T2150] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 78.214586][ T10] usb 1-1: config 0 descriptor?? [ 78.264787][ T2150] usb 2-1: config 32 has no interface number 0 [ 78.275269][ T2150] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=5d.bf [ 78.294418][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 78.312512][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.331904][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 78.463159][ T5955] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.546802][ T5966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.556942][ T5966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.578163][ T2150] usb 2-1: USB disconnect, device number 3 [ 78.622470][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 78.643939][ T5955] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.658303][ T5955] usb 3-1: config index 0 descriptor too short (expected 274, got 18) [ 78.682693][ T5955] usb 3-1: config 4 interface 0 has no altsetting 0 [ 78.702666][ T5955] usb 3-1: string descriptor 0 read error: -22 [ 78.709001][ T5955] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 78.741767][ T10] plantronics 0003:047F:C055.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.0-1/input0 [ 78.761767][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.823319][ T5955] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 78.878990][ T5955] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 78.925173][ T5955] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 78.957602][ T5955] usb 3-1: media controller created [ 79.017980][ T5980] usb 3-1: dvb_usb_au6610: wlen=132, aborting [ 79.048416][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.083373][ T5925] usb 1-1: USB disconnect, device number 3 [ 79.122194][ T5996] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15'. [ 79.148056][ T5996] tipc: Started in network mode [ 79.172311][ T5996] tipc: Node identity fe800000000000000080fe000000002a, cluster identity 4711 [ 79.198450][ T5955] zl10353_read_register: readreg error (reg=127, ret==0) [ 79.213700][ T5996] tipc: Enabling of bearer rejected, failed to enable media [ 79.331364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.341286][ T5955] usb 3-1: USB disconnect, device number 3 [ 79.347344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.489849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.642578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.650820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.750972][ T5947] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.751150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.823019][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.842807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.851128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.859824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.868597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.892540][ T5955] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.936954][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 79.952822][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 79.969486][ T5947] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 80.005019][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 80.048896][ T10] usb 5-1: config 26 has an invalid interface number: 34 but max is 0 [ 80.062427][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 80.068860][ T10] usb 5-1: config 26 has no interface number 0 [ 80.077194][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.085921][ T5955] usb 1-1: config 252 has an invalid interface number: 165 but max is 0 [ 80.089273][ T5947] usb 4-1: config 0 descriptor?? [ 80.100174][ T5955] usb 1-1: config 252 has no interface number 0 [ 80.124566][ T5955] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 80.166090][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.166115][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 80.184168][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.192450][ T10] usb 5-1: Product: syz [ 80.196649][ T10] usb 5-1: Manufacturer: syz [ 80.201354][ T10] usb 5-1: SerialNumber: syz [ 80.260746][ T5955] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 80.314289][ T5955] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 80.359246][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.369521][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.432547][ T2150] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.446468][ T5955] usb 1-1: USB disconnect, device number 4 [ 80.479246][ T6005] loop2: detected capacity change from 0 to 7 [ 80.491180][ T5942] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.500711][ T5942] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.512218][ T5942] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.523962][ T5942] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.532056][ T5942] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.540773][ T5942] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.550342][ T5942] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.562838][ T6014] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.644169][ T2150] usb 3-1: Using ep0 maxpacket: 16 [ 80.652555][ T5942] ldm_validate_partition_table(): Disk read failed. [ 80.661053][ T5947] corsair 0003:1B1C:1B09.0002: unbalanced delimiter at end of report description [ 80.676872][ T5947] corsair 0003:1B1C:1B09.0002: parse failed [ 80.677730][ T2150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.683348][ T5947] corsair 0003:1B1C:1B09.0002: probe with driver corsair failed with error -22 [ 80.693939][ T5942] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.710490][ T2150] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.760658][ T5942] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.769362][ T2150] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 80.788807][ T5942] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.800123][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.808479][ T5942] Dev loop2: unable to read RDB block 0 [ 80.817370][ T2150] usb 3-1: config 0 descriptor?? [ 80.833776][ T5942] loop2: unable to read partition table [ 80.840014][ T5942] loop2: partition table beyond EOD, truncated [ 80.861603][ T6005] ldm_validate_partition_table(): Disk read failed. [ 80.869266][ T6005] Dev loop2: unable to read RDB block 0 [ 80.877644][ T6005] loop2: unable to read partition table [ 80.883688][ T6005] loop2: partition table beyond EOD, truncated [ 80.889969][ T6005] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 80.927458][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.944234][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.969239][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.042116][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.148813][ T6011] syz.2.19 uses obsolete (PF_INET,SOCK_PACKET) [ 81.164680][ T6009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.185794][ T5918] usb 4-1: USB disconnect, device number 2 [ 81.266564][ T2150] usb 3-1: string descriptor 0 read error: -71 [ 81.304348][ T2150] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 81.355733][ T2150] usb 3-1: USB disconnect, device number 4 [ 81.950323][ T5218] ldm_validate_partition_table(): Disk read failed. [ 81.995398][ T5218] Dev loop2: unable to read RDB block 0 [ 82.023606][ T5218] loop2: unable to read partition table [ 82.046684][ T5218] loop2: partition table beyond EOD, truncated [ 82.055928][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.366917][ T6044] netlink: 152 bytes leftover after parsing attributes in process `syz.2.27'. [ 82.448468][ T6044] tipc: Started in network mode [ 82.457653][ T6035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.468973][ T6035] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.483062][ T6044] tipc: Node identity fe8000000000000000f5ff000000002a, cluster identity 4711 [ 82.695562][ T6044] tipc: Enabling of bearer rejected, failed to enable media [ 82.705122][ T6045] TCP: TCP_TX_DELAY enabled [ 82.719140][ T6035] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.809096][ T6035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.825336][ T6035] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.895357][ T6035] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.937163][ T6035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.947487][ T5218] ldm_validate_partition_table(): Disk read failed. [ 82.972553][ T6035] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 82.983691][ T6035] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.110135][ T5218] Dev loop2: unable to read RDB block 0 [ 83.126382][ T5218] loop2: unable to read partition table [ 83.142644][ T5218] loop2: partition table beyond EOD, truncated [ 83.183640][ T6035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.198662][ T6035] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.319054][ T6035] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.345510][ T6035] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.378585][ T6035] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.403746][ T6035] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.722454][ T10] smsc95xx v2.0.0 [ 83.773407][ T6022] block device autoloading is deprecated and will be removed. [ 83.802625][ T10] smsc95xx 5-1:26.34 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 83.814598][ T6022] syz.1.21: attempt to access beyond end of device [ 83.814598][ T6022] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 83.912690][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.212755][ T10] smsc95xx 5-1:26.34: probe with driver smsc95xx failed with error -22 [ 84.251822][ T10] usb 5-1: USB disconnect, device number 2 [ 84.872938][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.962521][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.194559][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.369162][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 85.572095][ T2150] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.872887][ T2150] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.892383][ T2150] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.914737][ T2150] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.958256][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.003297][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.008046][ T6077] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 86.072708][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.085080][ T2150] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.232718][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 86.278185][ T24] usb 2-1: config 6 has an invalid interface number: 113 but max is 0 [ 86.305242][ T24] usb 2-1: config 6 has no interface number 0 [ 86.354194][ T24] usb 2-1: config 6 interface 113 has no altsetting 0 [ 86.418584][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 86.419194][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.436452][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.449716][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.505623][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.523655][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.536123][ T24] usb 2-1: Product: syz [ 86.540349][ T24] usb 2-1: Manufacturer: syz [ 86.559368][ T24] usb 2-1: SerialNumber: syz [ 86.731371][ T43] cfg80211: failed to load regulatory.db [ 86.810129][ T24] usb-storage 2-1:6.113: USB Mass Storage device detected [ 86.929127][ T24] usb-storage 2-1:6.113: Quirks match for vid 03f0 pid 070c: 8000 [ 86.962595][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.047059][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.075943][ T24] usb 2-1: USB disconnect, device number 4 [ 87.092492][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.263295][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 87.278375][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.287633][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.304868][ T43] usb 1-1: config 1 has no interfaces? [ 87.319099][ T43] usb 1-1: New USB device found, idVendor=0df6, idProduct=0076, bcdDevice=38.ff [ 87.332113][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.341080][ T43] usb 1-1: Product: syz [ 87.345780][ T43] usb 1-1: Manufacturer: syz [ 87.350940][ T43] usb 1-1: SerialNumber: syz [ 87.485345][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.637151][ T6109] Zero length message leads to an empty skb [ 87.666652][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 87.701537][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.710489][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.722692][ T43] usb 1-1: USB disconnect, device number 5 [ 88.072659][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.215888][ T6108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.036320][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.112674][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.382715][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.392103][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.552437][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.588066][ T5918] usb 3-1: USB disconnect, device number 5 [ 89.622556][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 89.630483][ T43] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 89.638835][ T43] usb 5-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 89.649634][ T43] usb 5-1: config 0 has no interface number 0 [ 89.659527][ T43] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0006, bcdDevice=69.26 [ 89.670256][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.682906][ T43] usb 5-1: Product: syz [ 89.780277][ T43] usb 5-1: Manufacturer: syz [ 89.800386][ T43] usb 5-1: SerialNumber: syz [ 89.823069][ T43] usb 5-1: config 0 descriptor?? [ 89.854823][ T43] ati_remote 5-1:0.164: ati_remote_probe: Unexpected desc.bNumEndpoints [ 90.058634][ T43] usb 5-1: USB disconnect, device number 3 [ 90.276785][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.42'. [ 90.588505][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.597116][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.174871][ T2150] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.395369][ T2150] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.404193][ T2150] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 91.422385][ T2150] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 91.488610][ T6158] netlink: 'syz.0.53': attribute type 27 has an invalid length. [ 91.506062][ T2150] usb 2-1: config 63 has no interface number 0 [ 91.548026][ T2150] usb 2-1: config 63 interface 66 has no altsetting 0 [ 91.595804][ T2150] usb 2-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 91.628925][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.721889][ T2150] usb 2-1: Product: syz [ 91.726653][ T2150] usb 2-1: Manufacturer: syz [ 91.735623][ T2150] usb 2-1: SerialNumber: syz [ 92.185990][ T6167] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.188324][ T2150] usb 2-1: Found UVC 0.07 device syz (174f:8a31) [ 92.271618][ T2150] usb 2-1: No valid video chain found. [ 92.404416][ T2150] usb 2-1: USB disconnect, device number 5 [ 92.508875][ T6172] netlink: 'syz.3.59': attribute type 13 has an invalid length. [ 92.522639][ T6172] netlink: 164 bytes leftover after parsing attributes in process `syz.3.59'. [ 92.819997][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.835587][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.976944][ T6158] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.992514][ T6158] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.008920][ T6158] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.021890][ T6158] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.180794][ T6172] syz_tun: refused to change device tx_queue_len [ 93.208960][ T6175] netlink: 'syz.2.61': attribute type 29 has an invalid length. [ 93.299670][ T6177] netlink: 'syz.2.61': attribute type 29 has an invalid length. [ 93.308784][ T6181] netlink: 'syz.2.61': attribute type 29 has an invalid length. [ 93.336364][ T6182] netlink: 'syz.2.61': attribute type 29 has an invalid length. [ 93.580149][ T6195] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 93.700424][ T6195] team0: Device dummy0 is up. Set it down before adding it as a team port [ 93.979633][ T6215] netlink: 14 bytes leftover after parsing attributes in process `syz.2.76'. [ 94.217469][ T6228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.82'. [ 94.273481][ T6225] netlink: 60 bytes leftover after parsing attributes in process `syz.1.82'. [ 94.308248][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 94.338589][ T6230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.83'. [ 94.351147][ T6233] netlink: 830 bytes leftover after parsing attributes in process `syz.2.84'. [ 94.382639][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 94.424559][ T6227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.83'. [ 94.443944][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 94.690298][ T6246] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.90'. [ 95.259964][ T6272] @: renamed from syz_tun [ 95.462432][ T5955] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.582467][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.676440][ T5955] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 95.689002][ T5955] usb 5-1: config 0 has no interface number 0 [ 95.695299][ T5955] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 95.709795][ T5955] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 95.743285][ T5955] usb 5-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 95.754923][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 95.760571][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.772409][ T5955] usb 5-1: Product: syz [ 95.782829][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.814552][ T5955] usb 5-1: Manufacturer: syz [ 95.829683][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 95.862417][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.875861][ T5955] usb 5-1: SerialNumber: syz [ 95.911928][ T5955] usb 5-1: config 0 descriptor?? [ 95.922869][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 95.947859][ T5955] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 95.966280][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.036167][ T43] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 96.117180][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.130941][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.151674][ T43] usb 4-1: Product: syz [ 96.172198][ T43] usb 4-1: Manufacturer: syz [ 96.179051][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.192134][ T43] usb 4-1: SerialNumber: syz [ 96.210733][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 96.220139][ T43] usb 4-1: config 0 descriptor?? [ 96.225485][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.236944][ T43] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 96.267730][ T24] usb 2-1: config 0 descriptor?? [ 96.402442][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.441295][ T6274] netlink: 'syz.3.103': attribute type 5 has an invalid length. [ 96.451514][ T43] usb 4-1: USB disconnect, device number 3 [ 96.542580][ T10] usb 3-1: device descriptor read/64, error -71 [ 96.694958][ T24] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 96.718731][ T24] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 96.894464][ T24] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 96.922555][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.938825][ T5955] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 96.948375][ T5955] gspca_pac7302 5-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 96.962123][ T5955] usb 5-1: USB disconnect, device number 4 [ 97.062542][ T10] usb 3-1: device descriptor read/64, error -71 [ 97.177151][ T10] usb usb3-port1: attempt power cycle [ 97.368649][ T6316] loop6: detected capacity change from 0 to 63 [ 97.382785][ T5944] buffer_io_error: 76 callbacks suppressed [ 97.382800][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.402040][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.412111][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.424362][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.433986][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.526776][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 97.527547][ T6320] FAULT_INJECTION: forcing a failure. [ 97.527547][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.558035][ T6320] CPU: 1 UID: 0 PID: 6320 Comm: syz.4.113 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 97.558061][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.558080][ T6320] Call Trace: [ 97.558088][ T6320] [ 97.558095][ T6320] dump_stack_lvl+0x189/0x250 [ 97.558127][ T6320] ? __pfx____ratelimit+0x10/0x10 [ 97.558155][ T6320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.558177][ T6320] ? __pfx__printk+0x10/0x10 [ 97.558205][ T6320] ? __might_fault+0xb0/0x130 [ 97.558239][ T6320] should_fail_ex+0x414/0x560 [ 97.558269][ T6320] _copy_from_user+0x2d/0xb0 [ 97.558292][ T6320] ___sys_sendmsg+0x158/0x2a0 [ 97.558320][ T6320] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.558379][ T6320] ? __fget_files+0x2a/0x420 [ 97.558402][ T6320] ? __fget_files+0x3a0/0x420 [ 97.558434][ T6320] __x64_sys_sendmsg+0x19b/0x260 [ 97.558461][ T6320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.558494][ T6320] ? __pfx_ksys_write+0x10/0x10 [ 97.558512][ T6320] ? rcu_is_watching+0x15/0xb0 [ 97.558539][ T6320] ? do_syscall_64+0xbe/0x3b0 [ 97.558561][ T6320] do_syscall_64+0xfa/0x3b0 [ 97.558578][ T6320] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.558604][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.558620][ T6320] ? clear_bhb_loop+0x60/0xb0 [ 97.558642][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.558660][ T6320] RIP: 0033:0x7f8f77f8e929 [ 97.558683][ T6320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.558715][ T6320] RSP: 002b:00007f8f78ddc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.558733][ T6320] RAX: ffffffffffffffda RBX: 00007f8f781b5fa0 RCX: 00007f8f77f8e929 [ 97.558745][ T6320] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 97.558755][ T6320] RBP: 00007f8f78ddc090 R08: 0000000000000000 R09: 0000000000000000 [ 97.558765][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.558775][ T6320] R13: 0000000000000000 R14: 00007f8f781b5fa0 R15: 00007f8f782dfa28 [ 97.558801][ T6320] [ 97.776872][ T10] usb 3-1: device descriptor read/8, error -71 [ 98.022810][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 98.134261][ T10] usb 3-1: device descriptor read/8, error -71 [ 98.172737][ T24] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 98.255780][ T6098] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.266715][ T10] usb usb3-port1: unable to enumerate USB device [ 98.288001][ T6098] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.325877][ T6098] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.356248][ T6098] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.365938][ T6098] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.482455][ T5918] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.644638][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.655890][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.670128][ T5918] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 98.671359][ T6342] process 'syz.0.119' launched './file0' with NULL argv: empty string added [ 98.679784][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.700777][ T5918] usb 5-1: config 0 descriptor?? [ 98.706158][ T5955] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.870544][ T5955] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.900939][ T5955] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.933777][ T5955] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.949889][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.978400][ T6339] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 99.001490][ T5955] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.159205][ T5918] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 99.186177][ T5918] cp2112 0003:10C4:EA90.0004: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 99.341471][ T5918] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 99.692925][ T888] usb 4-1: USB disconnect, device number 4 [ 99.847372][ T5925] usb 2-1: USB disconnect, device number 6 [ 101.164689][ T6384] fuse: Bad value for 'fd' [ 101.169339][ T6383] fuse: Bad value for 'fd' [ 101.469116][ T5918] cp2112 0003:10C4:EA90.0004: error setting SMBus config [ 101.509335][ T5918] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -71 [ 101.577968][ T5918] usb 5-1: USB disconnect, device number 5 [ 101.954349][ T5925] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 101.961807][ T6399] __nla_validate_parse: 6 callbacks suppressed [ 101.961823][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.133'. [ 102.053274][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.112447][ T5918] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.231381][ T5925] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.244280][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.252843][ T5925] usb 3-1: config 0 has no interface number 0 [ 102.262180][ T5925] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 102.285020][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 102.294157][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.823516][ T5925] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 102.845141][ T5925] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.857421][ T10] usb 4-1: config 0 descriptor?? [ 102.867422][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.871894][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 102.910126][ T5925] usb 3-1: config 0 descriptor?? [ 102.964089][ T6390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.008069][ T5925] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 103.301429][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 103.671729][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 103.707368][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 103.726475][ T6387] bridge1: entered allmulticast mode [ 103.736521][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 103.752214][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 103.786169][ T5933] usb 3-1: USB disconnect, device number 10 [ 103.795709][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 103.808193][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.818145][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 103.843910][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.006680][ T6418] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.059067][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 104.078265][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 104.085544][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 104.098459][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 104.165737][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 104.190254][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 104.262578][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 104.523742][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 104.538916][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 104.551994][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 104.744182][ T10] pwc: Registered as video103. [ 104.889568][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 104.929621][ T6425] bridge_slave_1: left allmulticast mode [ 105.024061][ T6431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.042532][ T6425] bridge_slave_1: left promiscuous mode [ 105.049329][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.186373][ T10] usb 4-1: USB disconnect, device number 5 [ 105.643514][ T6425] bridge_slave_0: left allmulticast mode [ 105.649220][ T6425] bridge_slave_0: left promiscuous mode [ 105.686829][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 105.686840][ T30] audit: type=1326 audit(1752311281.438:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00eb8e929 code=0x7ffc0000 [ 105.758979][ T30] audit: type=1326 audit(1752311281.468:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00eb8e929 code=0x7ffc0000 [ 105.815380][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.932585][ T30] audit: type=1326 audit(1752311281.478:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fe00eb8e929 code=0x7ffc0000 [ 105.954583][ T30] audit: type=1326 audit(1752311281.478:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00eb8e929 code=0x7ffc0000 [ 105.981697][ T30] audit: type=1326 audit(1752311281.478:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00eb8e929 code=0x7ffc0000 [ 106.028266][ T30] audit: type=1326 audit(1752311281.478:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe00eb8e929 code=0x7ffc0000 [ 106.168537][ T6454] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 106.179133][ T30] audit: type=1326 audit(1752311281.478:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00eb8e929 code=0x7ffc0000 [ 106.203594][ T30] audit: type=1326 audit(1752311281.478:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe00eb8e929 code=0x7ffc0000 [ 106.228766][ T30] audit: type=1326 audit(1752311281.478:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00eb8e929 code=0x7ffc0000 [ 106.252050][ T30] audit: type=1326 audit(1752311281.478:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe00eb8e929 code=0x7ffc0000 [ 106.663190][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.148'. [ 106.722526][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 107.785151][ T6481] vivid-007: ================= START STATUS ================= [ 107.793068][ T6481] vivid-007: Enable Output Cropping: true [ 107.799495][ T6481] vivid-007: Enable Output Composing: true [ 107.805415][ T6481] vivid-007: Enable Output Scaler: true [ 107.811076][ T6481] vivid-007: Tx RGB Quantization Range: Automatic [ 107.817652][ T6481] vivid-007: Transmit Mode: HDMI [ 107.822666][ T6481] vivid-007: Hotplug Present: 0x00000000 [ 107.828385][ T6481] vivid-007: RxSense Present: 0x00000000 [ 107.834317][ T6481] vivid-007: EDID Present: 0x00000000 [ 107.839770][ T6481] vivid-007: ================== END STATUS ================== [ 108.502861][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.502866][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.745469][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 108.753517][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 108.761925][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.786638][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.836328][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.929437][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.949006][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.959776][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.368577][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.388118][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.396440][ T10] usb 4-1: usb_control_msg returned -32 [ 109.402063][ T10] usbtmc 4-1:16.0: can't read capabilities [ 109.592466][ T5955] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.642516][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.160'. [ 109.655300][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 109.768224][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 109.790388][ T5955] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 109.805892][ T5955] usb 1-1: config 0 has no interface number 0 [ 109.851631][ T5955] usb 1-1: config 0 interface 184 has no altsetting 0 [ 109.887392][ T5955] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 109.909701][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.919980][ T5955] usb 1-1: Product: syz [ 109.934973][ T5955] usb 1-1: Manufacturer: syz [ 109.939776][ T5955] usb 1-1: SerialNumber: syz [ 109.951969][ T5955] usb 1-1: config 0 descriptor?? [ 109.966353][ T5955] smsc75xx v1.0.0 [ 109.985945][ T6510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.169384][ T5955] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 110.200106][ T5955] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 110.218795][ T6515] netlink: 152 bytes leftover after parsing attributes in process `syz.2.162'. [ 110.228711][ T5955] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 110.240081][ T6515] tipc: Enabling of bearer rejected, failed to enable media [ 110.249735][ T5955] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 110.527163][ T6520] netlink: 56 bytes leftover after parsing attributes in process `syz.2.163'. [ 111.137976][ T6530] input: syz1 as /devices/virtual/input/input6 [ 111.372484][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.763463][ T10] usb 5-1: config 0 has no interfaces? [ 111.863456][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 111.942572][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.031927][ T10] usb 5-1: Product: syz [ 112.119649][ T10] usb 5-1: Manufacturer: syz [ 112.138304][ T10] usb 5-1: SerialNumber: syz [ 112.240493][ T10] usb 5-1: config 0 descriptor?? [ 112.839855][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.848855][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.001878][ T10] usb 4-1: USB disconnect, device number 6 [ 113.081547][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'. [ 113.096908][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 113.602583][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.662066][ T6561] vivid-000: disconnect [ 113.882599][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 113.899509][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.937600][ T10] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 96 [ 114.030641][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 114.066622][ T5955] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 114.191059][ T10] usb 2-1: string descriptor 0 read error: -22 [ 114.212460][ T5955] usb 3-1: device descriptor read/64, error -71 [ 114.218921][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 114.235473][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.275954][ T6556] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 114.407834][ T5925] usb 5-1: USB disconnect, device number 7 [ 114.523012][ T5955] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 114.692783][ T5955] usb 3-1: device descriptor read/64, error -71 [ 114.886784][ T5955] usb usb3-port1: attempt power cycle [ 115.092503][ T5925] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.234511][ T5955] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 115.276639][ T5955] usb 3-1: device descriptor read/8, error -71 [ 115.532951][ T5955] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 115.562913][ T5955] usb 3-1: device descriptor read/8, error -71 [ 115.675892][ T5955] usb usb3-port1: unable to enumerate USB device [ 116.338276][ T5918] usb 2-1: USB disconnect, device number 8 [ 116.502014][ T6573] random: crng reseeded on system resumption [ 116.947450][ T6557] vivid-000: reconnect [ 118.049357][ T6588] FAULT_INJECTION: forcing a failure. [ 118.049357][ T6588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.063079][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.2.181 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 118.063113][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.063126][ T6588] Call Trace: [ 118.063133][ T6588] [ 118.063140][ T6588] dump_stack_lvl+0x189/0x250 [ 118.063171][ T6588] ? __pfx____ratelimit+0x10/0x10 [ 118.063196][ T6588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.063216][ T6588] ? __pfx__printk+0x10/0x10 [ 118.063238][ T6588] ? __might_fault+0xb0/0x130 [ 118.063269][ T6588] should_fail_ex+0x414/0x560 [ 118.063294][ T6588] _copy_from_iter+0x1db/0x16f0 [ 118.063312][ T6588] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 118.063328][ T6588] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 118.063353][ T6588] ? __pfx__copy_from_iter+0x10/0x10 [ 118.063369][ T6588] ? alloc_pages_noprof+0xbe/0x190 [ 118.063391][ T6588] ? skb_page_frag_refill+0x199/0x320 [ 118.063422][ T6588] tcp_sendmsg_locked+0x1ec4/0x5710 [ 118.063495][ T6588] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 118.063510][ T6588] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.063533][ T6588] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.063565][ T6588] tcp_sendmsg+0x2f/0x50 [ 118.063583][ T6588] __sock_sendmsg+0xe5/0x270 [ 118.063603][ T6588] __sys_sendto+0x3bd/0x520 [ 118.063625][ T6588] ? __pfx___sys_sendto+0x10/0x10 [ 118.063657][ T6588] ? count_memcg_event_mm+0x21/0x260 [ 118.063686][ T6588] ? exc_page_fault+0x76/0xf0 [ 118.063713][ T6588] ? do_user_addr_fault+0xc8a/0x1390 [ 118.063733][ T6588] __x64_sys_sendto+0xde/0x100 [ 118.063755][ T6588] do_syscall_64+0xfa/0x3b0 [ 118.063779][ T6588] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.063803][ T6588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.063820][ T6588] ? clear_bhb_loop+0x60/0xb0 [ 118.063841][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.063857][ T6588] RIP: 0033:0x7ff4ce9907bc [ 118.063878][ T6588] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 118.063892][ T6588] RSP: 002b:00007ff4cf77eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 118.063914][ T6588] RAX: ffffffffffffffda RBX: 00007ff4cf77efc0 RCX: 00007ff4ce9907bc [ 118.063926][ T6588] RDX: 0000000000000020 RSI: 00007ff4cf77f010 RDI: 0000000000000003 [ 118.063936][ T6588] RBP: 0000000000000000 R08: 00007ff4cf77ef14 R09: 000000000000000c [ 118.063946][ T6588] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 118.063954][ T6588] R13: 00007ff4cf77ef68 R14: 00007ff4cf77f010 R15: 0000000000000000 [ 118.063979][ T6588] [ 118.734890][ T6592] input: syz0 as /devices/virtual/input/input7 [ 118.825508][ T6594] FAULT_INJECTION: forcing a failure. [ 118.825508][ T6594] name failslab, interval 1, probability 0, space 0, times 1 [ 118.841488][ T6594] CPU: 0 UID: 0 PID: 6594 Comm: syz.2.184 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 118.841512][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.841521][ T6594] Call Trace: [ 118.841526][ T6594] [ 118.841531][ T6594] dump_stack_lvl+0x189/0x250 [ 118.841547][ T6594] ? __pfx____ratelimit+0x10/0x10 [ 118.841563][ T6594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.841574][ T6594] ? __pfx__printk+0x10/0x10 [ 118.841590][ T6594] ? __pfx___might_resched+0x10/0x10 [ 118.841604][ T6594] should_fail_ex+0x414/0x560 [ 118.841621][ T6594] should_failslab+0xa8/0x100 [ 118.841635][ T6594] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 118.841648][ T6594] ? __alloc_skb+0x112/0x2d0 [ 118.841658][ T6594] ? __pfx___mutex_trylock_common+0x10/0x10 [ 118.841673][ T6594] __alloc_skb+0x112/0x2d0 [ 118.841686][ T6594] netlink_dump+0x1b1/0xe60 [ 118.841702][ T6594] ? __netlink_lookup+0xbd/0x810 [ 118.841717][ T6594] ? __pfx_netlink_dump+0x10/0x10 [ 118.841735][ T6594] ? netlink_lookup+0x30/0x200 [ 118.841745][ T6594] ? netlink_lookup+0x30/0x200 [ 118.841754][ T6594] ? netlink_lookup+0x30/0x200 [ 118.841767][ T6594] __netlink_dump_start+0x5cb/0x7e0 [ 118.841783][ T6594] rtnetlink_rcv_msg+0x9eb/0xb70 [ 118.841795][ T6594] ? __pfx_br_vlan_rtm_dump+0x10/0x10 [ 118.841806][ T6594] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 118.841816][ T6594] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.841825][ T6594] ? ref_tracker_free+0x63a/0x7d0 [ 118.841838][ T6594] ? __pfx_rtnl_dumpit+0x10/0x10 [ 118.841848][ T6594] ? __pfx_br_vlan_rtm_dump+0x10/0x10 [ 118.841859][ T6594] ? __skb_clone+0x63/0x7a0 [ 118.841875][ T6594] netlink_rcv_skb+0x208/0x470 [ 118.841887][ T6594] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.841898][ T6594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.841917][ T6594] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.841927][ T6594] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.841947][ T6594] netlink_unicast+0x759/0x8e0 [ 118.841963][ T6594] netlink_sendmsg+0x805/0xb30 [ 118.841980][ T6594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.841993][ T6594] ? aa_sock_msg_perm+0x94/0x160 [ 118.842009][ T6594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.842023][ T6594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.842035][ T6594] __sock_sendmsg+0x219/0x270 [ 118.842046][ T6594] ____sys_sendmsg+0x505/0x830 [ 118.842062][ T6594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.842079][ T6594] ? import_iovec+0x74/0xa0 [ 118.842092][ T6594] ___sys_sendmsg+0x21f/0x2a0 [ 118.842106][ T6594] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.842137][ T6594] ? __fget_files+0x2a/0x420 [ 118.842150][ T6594] ? __fget_files+0x3a0/0x420 [ 118.842167][ T6594] __x64_sys_sendmsg+0x19b/0x260 [ 118.842181][ T6594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.842199][ T6594] ? __pfx_ksys_write+0x10/0x10 [ 118.842208][ T6594] ? rcu_is_watching+0x15/0xb0 [ 118.842223][ T6594] ? do_syscall_64+0xbe/0x3b0 [ 118.842234][ T6594] do_syscall_64+0xfa/0x3b0 [ 118.842243][ T6594] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.842257][ T6594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.842267][ T6594] ? clear_bhb_loop+0x60/0xb0 [ 118.842279][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.842288][ T6594] RIP: 0033:0x7ff4ce98e929 [ 118.842298][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.842305][ T6594] RSP: 002b:00007ff4cf780038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.842316][ T6594] RAX: ffffffffffffffda RBX: 00007ff4cebb5fa0 RCX: 00007ff4ce98e929 [ 118.842323][ T6594] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 118.842335][ T6594] RBP: 00007ff4cf780090 R08: 0000000000000000 R09: 0000000000000000 [ 118.842344][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.842353][ T6594] R13: 0000000000000000 R14: 00007ff4cebb5fa0 R15: 00007ff4cecdfa28 [ 118.842379][ T6594] [ 119.282598][ T5925] usb 5-1: device descriptor read/64, error -71 [ 119.294489][ T5918] usb 1-1: USB disconnect, device number 6 [ 119.532437][ T5925] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.727295][ T6600] warning: `syz.0.187' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.813526][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 119.820081][ T5925] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 119.829631][ T5925] usb 5-1: config 0 has no interface number 0 [ 119.838589][ T5925] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.860178][ T5925] usb 5-1: config 0 interface 2 has no altsetting 0 [ 119.879013][ T10] IPVS: starting estimator thread 0... [ 119.884815][ T5925] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 119.895337][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.915119][ T5925] usb 5-1: Product: syz [ 119.925098][ T5925] usb 5-1: Manufacturer: syz [ 119.929692][ T5925] usb 5-1: SerialNumber: syz [ 119.966337][ T5925] usb 5-1: config 0 descriptor?? [ 119.982548][ T6606] IPVS: using max 50 ests per chain, 120000 per kthread [ 120.209731][ T5925] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.292631][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.313331][ T6584] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 120.422643][ T5925] usb 5-1: USB disconnect, device number 9 [ 120.472550][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 120.487945][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.496795][ T10] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 120.527325][ T10] usb 1-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.703280][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 120.852105][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 120.884921][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.920113][ T6617] syz.2.191 (6617): attempted to duplicate a private mapping with mremap. This is not supported. [ 120.944186][ T10] usb 1-1: Product: syz [ 120.972410][ T10] usb 1-1: Manufacturer: syz [ 120.996055][ T10] usb 1-1: SerialNumber: syz [ 121.157930][ T6619] FAULT_INJECTION: forcing a failure. [ 121.157930][ T6619] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 121.251087][ T6619] CPU: 0 UID: 0 PID: 6619 Comm: syz.4.192 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 121.251116][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.251126][ T6619] Call Trace: [ 121.251133][ T6619] [ 121.251140][ T6619] dump_stack_lvl+0x189/0x250 [ 121.251165][ T6619] ? __pfx____ratelimit+0x10/0x10 [ 121.251191][ T6619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.251211][ T6619] ? __pfx__printk+0x10/0x10 [ 121.251235][ T6619] ? fs_reclaim_acquire+0x7d/0x100 [ 121.251267][ T6619] should_fail_ex+0x414/0x560 [ 121.251296][ T6619] prepare_alloc_pages+0x213/0x610 [ 121.251328][ T6619] __alloc_frozen_pages_noprof+0x123/0x370 [ 121.251356][ T6619] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 121.251389][ T6619] ? policy_nodemask+0x27c/0x720 [ 121.251415][ T6619] alloc_pages_mpol+0x232/0x4a0 [ 121.251442][ T6619] vma_alloc_folio_noprof+0xe4/0x200 [ 121.251463][ T6619] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 121.251483][ T6619] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 121.251517][ T6619] folio_prealloc+0x30/0x180 [ 121.251544][ T6619] do_wp_page+0x1231/0x5800 [ 121.251586][ T6619] ? __pfx_do_wp_page+0x10/0x10 [ 121.251601][ T6619] ? do_raw_spin_lock+0x121/0x290 [ 121.251631][ T6619] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.251664][ T6619] __handle_mm_fault+0x1144/0x5620 [ 121.251682][ T6619] ? __lock_acquire+0xab9/0xd20 [ 121.251723][ T6619] ? __pfx___handle_mm_fault+0x10/0x10 [ 121.251743][ T6619] ? lock_vma_under_rcu+0xf8/0x710 [ 121.251774][ T6619] ? lock_vma_under_rcu+0xf8/0x710 [ 121.251794][ T6619] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 121.251823][ T6619] handle_mm_fault+0x40a/0x8e0 [ 121.251853][ T6619] do_user_addr_fault+0xa81/0x1390 [ 121.251878][ T6619] ? rcu_is_watching+0x15/0xb0 [ 121.251899][ T6619] ? trace_page_fault_user+0x84/0x1e0 [ 121.251918][ T6619] exc_page_fault+0x76/0xf0 [ 121.251945][ T6619] asm_exc_page_fault+0x26/0x30 [ 121.251961][ T6619] RIP: 0033:0x7f8f77f48475 [ 121.251977][ T6619] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 121.251990][ T6619] RSP: 002b:00007f8f78ddade0 EFLAGS: 00010293 [ 121.252006][ T6619] RAX: 0000000000000008 RBX: 00007f8f78ce7d60 RCX: 0000000000000000 [ 121.252017][ T6619] RDX: 0000000000000000 RSI: 00007f8f7804e3e9 RDI: 00007f8f78ce7d60 [ 121.252029][ T6619] RBP: 00007f8f78ddaf00 R08: 0000000000000000 R09: 0000000000000005 [ 121.252039][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f7804dee0 [ 121.252050][ T6619] R13: 0000000000000020 R14: 00007f8f78185440 R15: 0000000000000000 [ 121.252079][ T6619] [ 121.512404][ T6619] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 121.892852][ T5918] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.003740][ T6636] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 122.055933][ T5918] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 122.075681][ T5918] usb 4-1: config 0 has no interface number 0 [ 122.092906][ T5933] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.105239][ T5918] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.125872][ T5918] usb 4-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 122.146300][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.209011][ T5918] usb 4-1: Product: syz [ 122.213333][ T5918] usb 4-1: Manufacturer: syz [ 122.243259][ T5918] usb 4-1: SerialNumber: syz [ 122.257361][ T5918] usb 4-1: config 0 descriptor?? [ 122.274451][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.286484][ T5918] cdc_ncm 4-1:0.47: CDC Union missing and no IAD found [ 122.294355][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.305732][ T5918] cdc_ncm 4-1:0.47: bind() failure [ 122.335864][ T5933] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 122.349670][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.374587][ T5933] usb 2-1: config 0 descriptor?? [ 122.433068][ T5947] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 122.468115][ T5955] usb 4-1: USB disconnect, device number 7 [ 122.656485][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.685763][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.703872][ T5947] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 122.723735][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.791950][ T6626] netlink: 'syz.1.195': attribute type 1 has an invalid length. [ 122.792328][ T5947] usb 5-1: config 0 descriptor?? [ 123.012653][ T10] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 123.087958][ T5933] usbhid 2-1:0.0: can't add hid device: -71 [ 123.095363][ T10] usb 1-1: USB disconnect, device number 7 [ 123.125914][ T5933] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 123.167103][ T5933] usb 2-1: USB disconnect, device number 9 [ 123.235455][ T5947] glorious 0003:258A:0036.0005: item fetching failed at offset 0/2 [ 123.317333][ T5947] glorious 0003:258A:0036.0005: probe with driver glorious failed with error -22 [ 123.675427][ T6658] netlink: 'syz.3.201': attribute type 13 has an invalid length. [ 123.726768][ T6660] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 123.879761][ T6662] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 123.902279][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.912473][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.017478][ T6658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.037471][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'. [ 124.498726][ T6669] fuse: Unknown parameter 'rotmode' [ 124.549655][ T6671] random: crng reseeded on system resumption [ 124.802967][ T6674] FAULT_INJECTION: forcing a failure. [ 124.802967][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 124.835990][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.1.207 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 124.836016][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.836025][ T6674] Call Trace: [ 124.836032][ T6674] [ 124.836039][ T6674] dump_stack_lvl+0x189/0x250 [ 124.836064][ T6674] ? __pfx____ratelimit+0x10/0x10 [ 124.836090][ T6674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.836124][ T6674] ? __pfx__printk+0x10/0x10 [ 124.836147][ T6674] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 124.836168][ T6674] ? ref_tracker_alloc+0x318/0x460 [ 124.836196][ T6674] should_fail_ex+0x414/0x560 [ 124.836224][ T6674] should_failslab+0xa8/0x100 [ 124.836246][ T6674] kmem_cache_alloc_noprof+0x73/0x3c0 [ 124.836263][ T6674] ? skb_clone+0x212/0x3a0 [ 124.836289][ T6674] skb_clone+0x212/0x3a0 [ 124.836313][ T6674] __netlink_deliver_tap+0x404/0x850 [ 124.836346][ T6674] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.836373][ T6674] netlink_deliver_tap+0x19c/0x1b0 [ 124.836395][ T6674] __netlink_sendskb+0x47/0x90 [ 124.836414][ T6674] netlink_dump+0xa62/0xe60 [ 124.836447][ T6674] ? __pfx_netlink_dump+0x10/0x10 [ 124.836480][ T6674] ? netlink_lookup+0x30/0x200 [ 124.836497][ T6674] ? netlink_lookup+0x30/0x200 [ 124.836512][ T6674] ? netlink_lookup+0x30/0x200 [ 124.836535][ T6674] __netlink_dump_start+0x5cb/0x7e0 [ 124.836564][ T6674] rtnetlink_rcv_msg+0x9eb/0xb70 [ 124.836584][ T6674] ? __pfx_br_vlan_rtm_dump+0x10/0x10 [ 124.836601][ T6674] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 124.836618][ T6674] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.836634][ T6674] ? ref_tracker_free+0x63a/0x7d0 [ 124.836656][ T6674] ? __pfx_rtnl_dumpit+0x10/0x10 [ 124.836674][ T6674] ? __pfx_br_vlan_rtm_dump+0x10/0x10 [ 124.836694][ T6674] ? __skb_clone+0x63/0x7a0 [ 124.836723][ T6674] netlink_rcv_skb+0x208/0x470 [ 124.836743][ T6674] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.836763][ T6674] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.836797][ T6674] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.836817][ T6674] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.836843][ T6674] netlink_unicast+0x759/0x8e0 [ 124.836872][ T6674] netlink_sendmsg+0x805/0xb30 [ 124.836902][ T6674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.836925][ T6674] ? aa_sock_msg_perm+0x94/0x160 [ 124.836951][ T6674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 124.836974][ T6674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.836993][ T6674] __sock_sendmsg+0x219/0x270 [ 124.837012][ T6674] ____sys_sendmsg+0x505/0x830 [ 124.837040][ T6674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.837069][ T6674] ? import_iovec+0x74/0xa0 [ 124.837091][ T6674] ___sys_sendmsg+0x21f/0x2a0 [ 124.837114][ T6674] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.837168][ T6674] ? __fget_files+0x2a/0x420 [ 124.837188][ T6674] ? __fget_files+0x3a0/0x420 [ 124.837220][ T6674] __x64_sys_sendmsg+0x19b/0x260 [ 124.837244][ T6674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.837276][ T6674] ? __pfx_ksys_write+0x10/0x10 [ 124.837293][ T6674] ? rcu_is_watching+0x15/0xb0 [ 124.837323][ T6674] ? do_syscall_64+0xbe/0x3b0 [ 124.837345][ T6674] do_syscall_64+0xfa/0x3b0 [ 124.837367][ T6674] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.837391][ T6674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.837407][ T6674] ? clear_bhb_loop+0x60/0xb0 [ 124.837428][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.837444][ T6674] RIP: 0033:0x7f25d678e929 [ 124.837460][ T6674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.837474][ T6674] RSP: 002b:00007f25d763b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.837492][ T6674] RAX: ffffffffffffffda RBX: 00007f25d69b5fa0 RCX: 00007f25d678e929 [ 124.837505][ T6674] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 124.837516][ T6674] RBP: 00007f25d763b090 R08: 0000000000000000 R09: 0000000000000000 [ 124.837526][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.837536][ T6674] R13: 0000000000000000 R14: 00007f25d69b5fa0 R15: 00007f25d6adfa28 [ 124.837566][ T6674] [ 125.288244][ T6678] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 125.303597][ T5947] usb 5-1: USB disconnect, device number 10 [ 125.992652][ T5933] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.102585][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 126.154035][ T5933] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.169667][ T5933] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.205236][ T5933] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.228134][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.246803][ T6680] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.252475][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 126.269752][ T24] usb 2-1: config 0 has no interfaces? [ 126.276699][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 126.290190][ T5933] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.307325][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.483241][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.494070][ T24] usb 2-1: config 0 descriptor?? [ 126.494828][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.821385][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 126.832955][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.843842][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.901898][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.917100][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.935757][ T24] usb 2-1: USB disconnect, device number 10 [ 127.017089][ T5933] usb 1-1: USB disconnect, device number 8 [ 127.115402][ T6696] FAULT_INJECTION: forcing a failure. [ 127.115402][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 127.194429][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.4.213 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 127.194455][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.194465][ T6696] Call Trace: [ 127.194472][ T6696] [ 127.194479][ T6696] dump_stack_lvl+0x189/0x250 [ 127.194504][ T6696] ? __pfx____ratelimit+0x10/0x10 [ 127.194530][ T6696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.194549][ T6696] ? __pfx__printk+0x10/0x10 [ 127.194577][ T6696] ? __pfx___might_resched+0x10/0x10 [ 127.194601][ T6696] should_fail_ex+0x414/0x560 [ 127.194628][ T6696] should_failslab+0xa8/0x100 [ 127.194651][ T6696] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 127.194672][ T6696] ? __alloc_skb+0x112/0x2d0 [ 127.194696][ T6696] __alloc_skb+0x112/0x2d0 [ 127.194719][ T6696] netlink_sendmsg+0x5c6/0xb30 [ 127.194749][ T6696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.194772][ T6696] ? aa_sock_msg_perm+0x94/0x160 [ 127.194798][ T6696] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.194821][ T6696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.194842][ T6696] __sock_sendmsg+0x219/0x270 [ 127.194862][ T6696] ____sys_sendmsg+0x505/0x830 [ 127.194890][ T6696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.194921][ T6696] ? import_iovec+0x74/0xa0 [ 127.194950][ T6696] ___sys_sendmsg+0x21f/0x2a0 [ 127.194974][ T6696] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.195033][ T6696] ? __fget_files+0x2a/0x420 [ 127.195053][ T6696] ? __fget_files+0x3a0/0x420 [ 127.195085][ T6696] __x64_sys_sendmsg+0x19b/0x260 [ 127.195108][ T6696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.195139][ T6696] ? __pfx_ksys_write+0x10/0x10 [ 127.195156][ T6696] ? rcu_is_watching+0x15/0xb0 [ 127.195181][ T6696] ? do_syscall_64+0xbe/0x3b0 [ 127.195202][ T6696] do_syscall_64+0xfa/0x3b0 [ 127.195217][ T6696] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.195240][ T6696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.195257][ T6696] ? clear_bhb_loop+0x60/0xb0 [ 127.195277][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.195293][ T6696] RIP: 0033:0x7f8f77f8e929 [ 127.195308][ T6696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.195321][ T6696] RSP: 002b:00007f8f78ddc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.195340][ T6696] RAX: ffffffffffffffda RBX: 00007f8f781b5fa0 RCX: 00007f8f77f8e929 [ 127.195352][ T6696] RDX: 0000000000000840 RSI: 0000200000000140 RDI: 000000000000000d [ 127.195363][ T6696] RBP: 00007f8f78ddc090 R08: 0000000000000000 R09: 0000000000000000 [ 127.195373][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.195383][ T6696] R13: 0000000000000000 R14: 00007f8f781b5fa0 R15: 00007f8f782dfa28 [ 127.195412][ T6696] [ 127.469752][ T5933] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.781283][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.839468][ T5933] usb 1-1: config 0 interface 0 has no altsetting 1 [ 127.863232][ T5933] usb 1-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 127.880786][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 127.908609][ T5933] usb 1-1: Product: syz [ 127.927167][ T5933] usb 1-1: Manufacturer: syz [ 127.960513][ T5933] usb 1-1: SerialNumber: syz [ 128.026965][ T5933] usb 1-1: config 0 descriptor?? [ 128.200381][ T6708] syzkaller1: entered promiscuous mode [ 128.210582][ T6708] syzkaller1: entered allmulticast mode [ 128.439073][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 128.522769][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.555649][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.746323][ T6722] syz_tun: entered allmulticast mode [ 128.762807][ T6722] netlink: 102 bytes leftover after parsing attributes in process `syz.1.221'. [ 128.833342][ T6720] syz_tun: left allmulticast mode [ 128.864715][ T6724] @: renamed from syz_tun (while UP) [ 129.173473][ T5933] usb 1-1: USB disconnect, device number 9 [ 129.449908][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.492021][ T6730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.223'. [ 131.533856][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 131.757829][ T10] usb 1-1: config 0 has no interfaces? [ 131.767259][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 131.776451][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.050035][ T10] usb 1-1: Product: syz [ 132.106830][ T10] usb 1-1: Manufacturer: syz [ 132.135752][ T10] usb 1-1: SerialNumber: syz [ 132.216354][ T5955] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.233788][ T10] usb 1-1: config 0 descriptor?? [ 132.372047][ T6768] sctp: [Deprecated]: syz.2.234 (pid 6768) Use of int in max_burst socket option. [ 132.372047][ T6768] Use struct sctp_assoc_value instead [ 132.387699][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 132.392954][ T6767] netlink: 96 bytes leftover after parsing attributes in process `syz.1.233'. [ 132.437493][ T5955] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.458078][ T5955] usb 5-1: config 0 has no interface number 0 [ 132.472905][ T5955] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 132.485771][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 132.498274][ T6758] fuse: Bad value for 'fd' [ 132.504576][ T5955] usb 5-1: config 0 interface 1 has no altsetting 0 [ 132.521914][ T5955] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 132.554550][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.670789][ T5955] usb 5-1: Product: syz [ 132.691405][ T5955] usb 5-1: Manufacturer: syz [ 132.701797][ T5955] usb 5-1: SerialNumber: syz [ 132.718867][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.725315][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.768321][ T5955] usb 5-1: config 0 descriptor?? [ 133.202590][ T24] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 133.384594][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.408722][ T24] usb 2-1: config 0 has no interface number 0 [ 133.440593][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 133.517864][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 133.563268][ T6786] FAULT_INJECTION: forcing a failure. [ 133.563268][ T6786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.603432][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.3.238 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 133.603458][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.603470][ T6786] Call Trace: [ 133.603477][ T6786] [ 133.603484][ T6786] dump_stack_lvl+0x189/0x250 [ 133.603509][ T6786] ? __pfx____ratelimit+0x10/0x10 [ 133.603530][ T6786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.603541][ T6786] ? __pfx__printk+0x10/0x10 [ 133.603556][ T6786] ? __might_fault+0xb0/0x130 [ 133.603574][ T6786] should_fail_ex+0x414/0x560 [ 133.603599][ T6786] _copy_from_iter+0x1db/0x16f0 [ 133.603621][ T6786] ? rcu_is_watching+0x15/0xb0 [ 133.603643][ T6786] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 133.603664][ T6786] ? __pfx__copy_from_iter+0x10/0x10 [ 133.603681][ T6786] ? __build_skb_around+0x257/0x3e0 [ 133.603694][ T6786] ? netlink_sendmsg+0x642/0xb30 [ 133.603705][ T6786] ? skb_put+0x11b/0x210 [ 133.603718][ T6786] netlink_sendmsg+0x6b2/0xb30 [ 133.603736][ T6786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.603759][ T6786] ? aa_sock_msg_perm+0x94/0x160 [ 133.603786][ T6786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.603809][ T6786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.603827][ T6786] __sock_sendmsg+0x219/0x270 [ 133.603839][ T6786] ____sys_sendmsg+0x505/0x830 [ 133.603854][ T6786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.603871][ T6786] ? import_iovec+0x74/0xa0 [ 133.603885][ T6786] ___sys_sendmsg+0x21f/0x2a0 [ 133.603908][ T6786] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.603967][ T6786] ? __fget_files+0x2a/0x420 [ 133.603981][ T6786] ? __fget_files+0x3a0/0x420 [ 133.603998][ T6786] __x64_sys_sendmsg+0x19b/0x260 [ 133.604012][ T6786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.604029][ T6786] ? __pfx_ksys_write+0x10/0x10 [ 133.604045][ T6786] ? rcu_is_watching+0x15/0xb0 [ 133.604069][ T6786] ? do_syscall_64+0xbe/0x3b0 [ 133.604090][ T6786] do_syscall_64+0xfa/0x3b0 [ 133.604105][ T6786] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.604125][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.604135][ T6786] ? clear_bhb_loop+0x60/0xb0 [ 133.604146][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.604155][ T6786] RIP: 0033:0x7fb0eb78e929 [ 133.604164][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.604172][ T6786] RSP: 002b:00007fb0ec673038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.604186][ T6786] RAX: ffffffffffffffda RBX: 00007fb0eb9b5fa0 RCX: 00007fb0eb78e929 [ 133.604202][ T6786] RDX: 0000000000000840 RSI: 0000200000000140 RDI: 000000000000000d [ 133.604213][ T6786] RBP: 00007fb0ec673090 R08: 0000000000000000 R09: 0000000000000000 [ 133.604224][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.604234][ T6786] R13: 0000000000000000 R14: 00007fb0eb9b5fa0 R15: 00007fb0ebadfa28 [ 133.604262][ T6786] [ 133.893784][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.900919][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.922414][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.992173][ T10] usb 1-1: USB disconnect, device number 10 [ 134.083775][ T24] usb 2-1: config 0 descriptor?? [ 134.089699][ T6777] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 134.130403][ T24] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 134.532966][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 134.545722][ T6804] random: crng reseeded on system resumption [ 134.683550][ T10] usb 1-1: device descriptor read/64, error -71 [ 134.753837][ T888] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.907740][ T5955] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 134.917043][ T5955] cx231xx 5-1:0.1: Not found matching IAD interface [ 134.920239][ T888] usb 4-1: device descriptor read/64, error -71 [ 134.929244][ T5955] usb 5-1: USB disconnect, device number 11 [ 134.946286][ T5944] udevd[5944]: setting owner of /dev/bus/usb/005/011 to uid=0, gid=0 failed: No such file or directory [ 134.948125][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 135.251246][ T24] usb 2-1: USB disconnect, device number 11 [ 135.333961][ T888] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.342939][ T10] usb 1-1: device descriptor read/64, error -71 [ 135.452625][ T10] usb usb1-port1: attempt power cycle [ 135.472485][ T888] usb 4-1: device descriptor read/64, error -71 [ 135.584303][ T888] usb usb4-port1: attempt power cycle [ 135.620217][ T5947] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 135.810959][ T5947] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 135.878387][ T5947] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.892469][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 135.923422][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.939417][ T10] usb 1-1: device descriptor read/8, error -71 [ 135.968964][ T5947] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.992631][ T888] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.056089][ T888] usb 4-1: device descriptor read/8, error -71 [ 136.209171][ T5947] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 136.227901][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.246564][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 136.290058][ T10] usb 1-1: device descriptor read/8, error -71 [ 136.392611][ T888] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.402790][ T10] usb usb1-port1: unable to enumerate USB device [ 136.464505][ T888] usb 4-1: device descriptor read/8, error -71 [ 136.605061][ T888] usb usb4-port1: unable to enumerate USB device [ 137.061671][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 137.061682][ T30] audit: type=1326 audit(1752311312.808:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d678e929 code=0x7ffc0000 [ 137.131862][ T30] audit: type=1326 audit(1752311312.808:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d678e929 code=0x7ffc0000 [ 137.189846][ T30] audit: type=1326 audit(1752311312.908:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f25d678e929 code=0x7ffc0000 [ 137.219542][ T30] audit: type=1326 audit(1752311312.908:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d678e929 code=0x7ffc0000 [ 137.247269][ T30] audit: type=1326 audit(1752311312.908:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d678e929 code=0x7ffc0000 [ 137.292057][ T30] audit: type=1326 audit(1752311312.908:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f25d678e929 code=0x7ffc0000 [ 137.314436][ T30] audit: type=1326 audit(1752311312.908:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d678e929 code=0x7ffc0000 [ 137.382517][ T30] audit: type=1326 audit(1752311312.908:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d678e929 code=0x7ffc0000 [ 137.409062][ T30] audit: type=1326 audit(1752311312.908:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25d678d290 code=0x7ffc0000 [ 137.431464][ T30] audit: type=1326 audit(1752311312.908:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d678e929 code=0x7ffc0000 [ 137.702441][ T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 137.955762][ T24] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 137.964826][ T24] usb 2-1: config 0 has no interface number 0 [ 137.970958][ T24] usb 2-1: config 0 interface 29 has no altsetting 0 [ 138.216488][ T24] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 138.252671][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.262432][ T24] usb 2-1: Product: syz [ 138.271004][ T24] usb 2-1: Manufacturer: syz [ 138.275972][ T24] usb 2-1: SerialNumber: syz [ 138.287773][ T24] usb 2-1: config 0 descriptor?? [ 138.634926][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 138.657684][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'. [ 138.736477][ T5955] usb 5-1: USB disconnect, device number 12 [ 138.845324][ T6849] FAULT_INJECTION: forcing a failure. [ 138.845324][ T6849] name failslab, interval 1, probability 0, space 0, times 0 [ 138.864020][ T24] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 138.974926][ T6849] CPU: 0 UID: 0 PID: 6849 Comm: syz.0.253 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 138.974953][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.974962][ T6849] Call Trace: [ 138.974969][ T6849] [ 138.974976][ T6849] dump_stack_lvl+0x189/0x250 [ 138.975000][ T6849] ? __pfx____ratelimit+0x10/0x10 [ 138.975031][ T6849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.975051][ T6849] ? __pfx__printk+0x10/0x10 [ 138.975077][ T6849] ? __pfx___might_resched+0x10/0x10 [ 138.975093][ T6849] ? fs_reclaim_acquire+0x7d/0x100 [ 138.975119][ T6849] should_fail_ex+0x414/0x560 [ 138.975145][ T6849] should_failslab+0xa8/0x100 [ 138.975165][ T6849] __kmalloc_cache_noprof+0x70/0x3d0 [ 138.975184][ T6849] ? rtnl_newlink+0xed/0x1c70 [ 138.975200][ T6849] ? __lock_acquire+0xab9/0xd20 [ 138.975219][ T6849] rtnl_newlink+0xed/0x1c70 [ 138.975246][ T6849] ? __pfx_rtnl_newlink+0x10/0x10 [ 138.975261][ T6849] ? is_bpf_text_address+0x26/0x2b0 [ 138.975285][ T6849] ? __lock_acquire+0xab9/0xd20 [ 138.975313][ T6849] ? __lock_acquire+0xab9/0xd20 [ 138.975349][ T6849] ? is_bpf_text_address+0x26/0x2b0 [ 138.975369][ T6849] ? is_bpf_text_address+0x292/0x2b0 [ 138.975384][ T6849] ? is_bpf_text_address+0x26/0x2b0 [ 138.975403][ T6849] ? kernel_text_address+0xa5/0xe0 [ 138.975429][ T6849] ? __lock_acquire+0xab9/0xd20 [ 138.975466][ T6849] ? __pfx_rtnl_newlink+0x10/0x10 [ 138.975483][ T6849] rtnetlink_rcv_msg+0x7cf/0xb70 [ 138.975503][ T6849] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 138.975519][ T6849] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.975550][ T6849] netlink_rcv_skb+0x208/0x470 [ 138.975570][ T6849] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.975588][ T6849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.975619][ T6849] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.975637][ T6849] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.975660][ T6849] netlink_unicast+0x759/0x8e0 [ 138.975687][ T6849] netlink_sendmsg+0x805/0xb30 [ 138.975715][ T6849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.975733][ T6849] ? aa_sock_msg_perm+0x94/0x160 [ 138.975753][ T6849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.975773][ T6849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.975789][ T6849] __sock_sendmsg+0x219/0x270 [ 138.975804][ T6849] ____sys_sendmsg+0x505/0x830 [ 138.975825][ T6849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.975848][ T6849] ? import_iovec+0x74/0xa0 [ 138.975866][ T6849] ___sys_sendmsg+0x21f/0x2a0 [ 138.975884][ T6849] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.975929][ T6849] ? __fget_files+0x2a/0x420 [ 138.975949][ T6849] ? __fget_files+0x3a0/0x420 [ 138.975974][ T6849] __x64_sys_sendmsg+0x19b/0x260 [ 138.975992][ T6849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.976022][ T6849] ? __pfx_ksys_write+0x10/0x10 [ 138.976036][ T6849] ? rcu_is_watching+0x15/0xb0 [ 138.976057][ T6849] ? do_syscall_64+0xbe/0x3b0 [ 138.976074][ T6849] do_syscall_64+0xfa/0x3b0 [ 138.976089][ T6849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.976103][ T6849] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 138.976117][ T6849] ? clear_bhb_loop+0x60/0xb0 [ 138.976133][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.976146][ T6849] RIP: 0033:0x7fe00eb8e929 [ 138.976160][ T6849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.976171][ T6849] RSP: 002b:00007fe00fa64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.976186][ T6849] RAX: ffffffffffffffda RBX: 00007fe00edb5fa0 RCX: 00007fe00eb8e929 [ 138.976196][ T6849] RDX: 0000000000000840 RSI: 0000200000000140 RDI: 000000000000000d [ 138.976205][ T6849] RBP: 00007fe00fa64090 R08: 0000000000000000 R09: 0000000000000000 [ 138.976213][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.976220][ T6849] R13: 0000000000000000 R14: 00007fe00edb5fa0 R15: 00007fe00eedfa28 [ 138.976243][ T6849] [ 139.381582][ T6847] IPVS: Unknown mcast interface: nr0 [ 140.780923][ T24] peak_usb 2-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 140.789443][ T888] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.891751][ T6869] capability: warning: `syz.3.260' uses 32-bit capabilities (legacy support in use) [ 140.918701][ T24] peak_usb 2-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 140.942879][ T10] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 140.955382][ T888] usb 5-1: Using ep0 maxpacket: 16 [ 140.974707][ T888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 140.988125][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 141.004308][ T888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 141.078168][ T888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 141.098264][ T10] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 141.110034][ T24] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 141.128499][ T10] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 141.154500][ T24] usb 2-1: USB disconnect, device number 12 [ 141.161935][ T888] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 141.171219][ T5933] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 141.180808][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 141.190926][ T888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.264211][ T888] usb 5-1: Product: syz [ 141.292131][ T888] usb 5-1: Manufacturer: syz [ 141.392511][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 141.438438][ T888] usb 5-1: SerialNumber: syz [ 141.458636][ T5933] usb 4-1: config 255 has an invalid interface number: 47 but max is 0 [ 141.496255][ T888] usb 5-1: config 0 descriptor?? [ 141.546865][ T5933] usb 4-1: config 255 has no interface number 0 [ 141.568551][ T6864] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 141.581885][ T5933] usb 4-1: config 255 interface 47 has no altsetting 0 [ 141.606034][ T5933] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 141.616460][ T888] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 141.638835][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.669429][ T888] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 141.678262][ T5933] usb 4-1: Product: syz [ 141.682917][ T888] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 141.688940][ T5933] usb 4-1: Manufacturer: syz [ 141.693861][ T888] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 141.700339][ T5933] usb 4-1: SerialNumber: syz [ 141.706147][ T888] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 141.928018][ T5933] legousbtower 4-1:255.47: interrupt endpoints not found [ 141.966640][ T5933] usb 4-1: USB disconnect, device number 12 [ 142.793527][ T5955] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 142.822624][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 142.994331][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 143.004200][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.026499][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.048023][ T24] usb 4-1: Product: syz [ 143.062266][ T24] usb 4-1: Manufacturer: syz [ 143.074662][ T24] usb 4-1: SerialNumber: syz [ 143.115914][ T24] usb 4-1: config 0 descriptor?? [ 143.229938][ T2150] usb 5-1: USB disconnect, device number 13 [ 143.303061][ T2150] mcba_usb 5-1:0.0 can0: device disconnected [ 143.347393][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.463385][ T6904] FAULT_INJECTION: forcing a failure. [ 143.463385][ T6904] name failslab, interval 1, probability 0, space 0, times 0 [ 143.528622][ T6904] CPU: 0 UID: 0 PID: 6904 Comm: syz.4.266 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 143.528650][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.528661][ T6904] Call Trace: [ 143.528668][ T6904] [ 143.528678][ T6904] dump_stack_lvl+0x189/0x250 [ 143.528707][ T6904] ? __pfx____ratelimit+0x10/0x10 [ 143.528734][ T6904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.528755][ T6904] ? __pfx__printk+0x10/0x10 [ 143.528783][ T6904] ? __pfx___might_resched+0x10/0x10 [ 143.528802][ T6904] ? fs_reclaim_acquire+0x7d/0x100 [ 143.528830][ T6904] should_fail_ex+0x414/0x560 [ 143.528859][ T6904] should_failslab+0xa8/0x100 [ 143.528883][ T6904] __kmalloc_cache_noprof+0x70/0x3d0 [ 143.528904][ T6904] ? rtnl_newlink+0xed/0x1c70 [ 143.528921][ T6904] ? kasan_save_free_info+0x46/0x50 [ 143.528949][ T6904] rtnl_newlink+0xed/0x1c70 [ 143.528966][ T6904] ? netlink_sendmsg+0x805/0xb30 [ 143.528986][ T6904] ? __sock_sendmsg+0x219/0x270 [ 143.529001][ T6904] ? ____sys_sendmsg+0x505/0x830 [ 143.529020][ T6904] ? ___sys_sendmsg+0x21f/0x2a0 [ 143.529039][ T6904] ? __x64_sys_sendmsg+0x19b/0x260 [ 143.529058][ T6904] ? do_syscall_64+0xfa/0x3b0 [ 143.529074][ T6904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.529099][ T6904] ? __pfx_rtnl_newlink+0x10/0x10 [ 143.529142][ T6904] ? kasan_quarantine_put+0xdd/0x220 [ 143.529161][ T6904] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.529193][ T6904] ? __pfx_do_softirq+0x10/0x10 [ 143.529220][ T6904] ? __local_bh_enable_ip+0x12d/0x1c0 [ 143.529239][ T6904] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.529265][ T6904] ? __local_bh_enable_ip+0x12d/0x1c0 [ 143.529284][ T6904] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 143.529307][ T6904] ? __dev_queue_xmit+0x27e/0x3a70 [ 143.529343][ T6904] ? __lock_acquire+0xab9/0xd20 [ 143.529386][ T6904] ? __pfx_rtnl_newlink+0x10/0x10 [ 143.529405][ T6904] rtnetlink_rcv_msg+0x7cf/0xb70 [ 143.529428][ T6904] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 143.529445][ T6904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.529462][ T6904] ? ref_tracker_free+0x63a/0x7d0 [ 143.529484][ T6904] ? __copy_skb_header+0xa7/0x550 [ 143.529508][ T6904] ? __pfx_ref_tracker_free+0x10/0x10 [ 143.529532][ T6904] ? __skb_clone+0x63/0x7a0 [ 143.529562][ T6904] netlink_rcv_skb+0x208/0x470 [ 143.529584][ T6904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.529604][ T6904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.529644][ T6904] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.529664][ T6904] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.529690][ T6904] netlink_unicast+0x759/0x8e0 [ 143.529721][ T6904] netlink_sendmsg+0x805/0xb30 [ 143.529751][ T6904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.529776][ T6904] ? aa_sock_msg_perm+0x94/0x160 [ 143.529801][ T6904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.529825][ T6904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.529847][ T6904] __sock_sendmsg+0x219/0x270 [ 143.529868][ T6904] ____sys_sendmsg+0x505/0x830 [ 143.529895][ T6904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.529927][ T6904] ? import_iovec+0x74/0xa0 [ 143.529950][ T6904] ___sys_sendmsg+0x21f/0x2a0 [ 143.529975][ T6904] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.530034][ T6904] ? __fget_files+0x2a/0x420 [ 143.530055][ T6904] ? __fget_files+0x3a0/0x420 [ 143.530087][ T6904] __x64_sys_sendmsg+0x19b/0x260 [ 143.530112][ T6904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.530144][ T6904] ? __pfx_ksys_write+0x10/0x10 [ 143.530161][ T6904] ? rcu_is_watching+0x15/0xb0 [ 143.530187][ T6904] ? do_syscall_64+0xbe/0x3b0 [ 143.530208][ T6904] do_syscall_64+0xfa/0x3b0 [ 143.530224][ T6904] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.530248][ T6904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.530265][ T6904] ? clear_bhb_loop+0x60/0xb0 [ 143.530286][ T6904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.530303][ T6904] RIP: 0033:0x7f8f77f8e929 [ 143.530319][ T6904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.530333][ T6904] RSP: 002b:00007f8f78ddc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.530352][ T6904] RAX: ffffffffffffffda RBX: 00007f8f781b5fa0 RCX: 00007f8f77f8e929 [ 143.530366][ T6904] RDX: 0000000000000840 RSI: 0000200000000140 RDI: 000000000000000d [ 143.530377][ T6904] RBP: 00007f8f78ddc090 R08: 0000000000000000 R09: 0000000000000000 [ 143.530389][ T6904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.530400][ T6904] R13: 0000000000000000 R14: 00007f8f781b5fa0 R15: 00007f8f782dfa28 [ 143.530429][ T6904] [ 143.554022][ T6907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.267'. [ 144.015575][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 144.025742][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.060909][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.197253][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.40 [ 144.235500][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.292221][ T10] usb 1-1: can't set config #1, error -71 [ 144.336430][ T10] usb 1-1: USB disconnect, device number 15 [ 144.369493][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 144.419074][ T24] usb 4-1: USB disconnect, device number 13 [ 145.282433][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 145.437522][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.469438][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 145.514156][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 145.542504][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 145.584503][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 145.604833][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 145.664951][ T10] usb 4-1: Manufacturer: syz [ 145.704310][ T10] usb 4-1: config 0 descriptor?? [ 146.312476][ T10] rc_core: IR keymap rc-hauppauge not found [ 146.341962][ T10] Registered IR keymap rc-empty [ 146.347433][ T6964] Cannot find add_set index 0 as target [ 146.350761][ T6963] random: crng reseeded on system resumption [ 146.363666][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.398460][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.547845][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 146.732968][ T5925] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 146.753576][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 147.035200][ T5925] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.045846][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.080366][ T5925] usb 1-1: config 0 descriptor?? [ 147.081275][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.109970][ T5925] cp210x 1-1:0.0: cp210x converter detected [ 147.121205][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.278'. [ 147.132636][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 147.162915][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.185556][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.307502][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.332668][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.352532][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.404243][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.423663][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.482890][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.499237][ T6978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.279'. [ 147.502578][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.512436][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 147.559043][ T10] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 147.582377][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 147.588350][ T5925] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 147.607117][ T10] usb 4-1: USB disconnect, device number 14 [ 148.012461][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 148.212575][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 148.226855][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 148.260219][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.278769][ T10] usb 4-1: Product: syz [ 148.284760][ T10] usb 4-1: Manufacturer: syz [ 148.291652][ T10] usb 4-1: SerialNumber: syz [ 148.307997][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 148.314686][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 148.741930][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 148.741947][ T30] audit: type=1326 audit(1752311324.488:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4ce98e929 code=0x0 [ 148.889171][ T888] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 149.350880][ T5925] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 149.395693][ T5925] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 149.434762][ T5925] usb 1-1: cp210x converter now attached to ttyUSB0 [ 149.460262][ T5925] usb 1-1: USB disconnect, device number 16 [ 149.488738][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.500046][ T5925] cp210x 1-1:0.0: device disconnected [ 149.949410][ T5925] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 150.103631][ T5910] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 150.133921][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.183966][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.203816][ T5925] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.243160][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.300312][ T5925] usb 1-1: SerialNumber: syz [ 150.308841][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.452897][ T888] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 150.602553][ T888] usb 4-1: Using ep0 maxpacket: 8 [ 150.612920][ T888] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 150.622014][ T888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.732636][ T888] usb 4-1: Product: syz [ 150.766930][ T888] usb 4-1: Manufacturer: syz [ 150.771630][ T888] usb 4-1: SerialNumber: syz [ 150.922013][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.922677][ T888] usb 4-1: config 0 descriptor?? [ 150.939266][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.943543][ T888] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 150.958253][ T888] usb 4-1: setting power ON [ 150.964865][ T888] dvb-usb: bulk message failed: -22 (2/0) [ 150.968343][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.980639][ T888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.999474][ T888] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 151.018623][ T888] usb 4-1: media controller created [ 151.069566][ T5910] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 151.095565][ T888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.124182][ T5925] usb 1-1: 0:2 : does not exist [ 151.137822][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.235707][ T7015] bond_slave_0: entered promiscuous mode [ 151.241988][ T7015] bond_slave_1: entered promiscuous mode [ 151.253772][ T888] usb 4-1: selecting invalid altsetting 6 [ 151.259611][ T888] usb 4-1: digital interface selection failed (-22) [ 151.285998][ T888] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 151.312013][ T5910] usb 2-1: config 0 descriptor?? [ 151.330817][ T7015] vlan2: entered promiscuous mode [ 151.346686][ T5925] usb 1-1: USB disconnect, device number 17 [ 151.350103][ T888] usb 4-1: setting power OFF [ 151.384837][ T7015] bond0: entered promiscuous mode [ 151.407895][ T888] dvb-usb: bulk message failed: -22 (2/0) [ 151.495152][ T888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 151.622681][ T888] (NULL device *): no alternate interface [ 151.782272][ T888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 151.786823][ T5910] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 151.870351][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.936673][ T5910] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 151.971295][ T5910] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 152.032271][ T5910] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 152.071203][ T5910] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 152.097538][ T5933] usb 4-1: USB disconnect, device number 16 [ 152.152973][ T5910] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 152.314811][ T888] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 152.516144][ T888] usb 1-1: config 0 has no interfaces? [ 152.629428][ T888] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 152.655425][ T888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.667358][ T888] usb 1-1: Product: syz [ 152.675471][ T888] usb 1-1: Manufacturer: syz [ 152.680147][ T888] usb 1-1: SerialNumber: syz [ 152.723736][ T888] usb 1-1: config 0 descriptor?? [ 152.846932][ T7042] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3248334662 (6496669324 ns) > initial count (5331025046 ns). Using initial count to start timer. [ 153.232593][ T7046] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 153.690453][ T5955] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 153.778275][ T5910] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 5: -71 [ 153.916466][ T5910] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense calibration info: -71 [ 153.926911][ T5910] playstation 0003:054C:0DF2.0006: Failed to get calibration data from DualSense [ 153.937834][ T7002] delete_channel: no stack [ 153.942552][ T5955] usb 3-1: Invalid ep0 maxpacket: 32 [ 153.960217][ T5910] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 154.012252][ T5910] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 154.057574][ T5910] usb 2-1: USB disconnect, device number 14 [ 154.082580][ T5955] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 154.212504][ T2150] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 154.468272][ T7061] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 154.532534][ T5955] usb 3-1: Invalid ep0 maxpacket: 32 [ 154.540668][ T5955] usb usb3-port1: attempt power cycle [ 154.692445][ T2150] usb 4-1: Using ep0 maxpacket: 16 [ 154.771497][ T2150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.782804][ T2150] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 154.791919][ T2150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.802099][ T2150] usb 4-1: config 0 descriptor?? [ 154.893359][ T5955] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 154.943717][ T5955] usb 3-1: Invalid ep0 maxpacket: 32 [ 154.966778][ T10] usb 1-1: USB disconnect, device number 18 [ 155.012655][ T7065] ======================================================= [ 155.012655][ T7065] WARNING: The mand mount option has been deprecated and [ 155.012655][ T7065] and is ignored by this kernel. Remove the mand [ 155.012655][ T7065] option from the mount to silence this warning. [ 155.012655][ T7065] ======================================================= [ 155.192776][ T5955] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 155.263470][ T5955] usb 3-1: Invalid ep0 maxpacket: 32 [ 155.284304][ T5955] usb usb3-port1: unable to enumerate USB device [ 155.883107][ T7076] @: renamed from syz_tun (while UP) [ 156.547964][ T7087] netlink: 'syz.2.307': attribute type 13 has an invalid length. [ 156.945395][ T5933] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 157.106928][ T5933] usb 3-1: config 0 has no interfaces? [ 157.134450][ T5933] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 157.172220][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.176571][ T7099] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 157.205115][ T2150] usbhid 4-1:0.0: can't add hid device: -71 [ 157.237050][ T2150] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 157.264318][ T2150] usb 4-1: USB disconnect, device number 17 [ 157.303014][ T5933] usb 3-1: Product: syz [ 157.330151][ T5933] usb 3-1: Manufacturer: syz [ 157.345557][ T5933] usb 3-1: SerialNumber: syz [ 157.391187][ T5933] usb 3-1: config 0 descriptor?? [ 157.621643][ T7088] xt_policy: neither incoming nor outgoing policy selected [ 157.732658][ T5933] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 157.896723][ T5933] usb 4-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 157.910646][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.933392][ T5933] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 157.951390][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.974177][ T5933] usb 4-1: config 0 descriptor?? [ 158.295200][ T5933] usb 4-1: string descriptor 0 read error: -71 [ 158.307631][ T5933] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 158.324404][ T5933] usb 4-1: USB disconnect, device number 18 [ 158.392581][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 158.552497][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 158.563442][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 11 [ 158.573970][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 158.583920][ T10] usb 1-1: config 0 has no interface number 0 [ 158.593920][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 158.618448][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 158.628435][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.636892][ T10] usb 1-1: Product: syz [ 158.641407][ T10] usb 1-1: Manufacturer: syz [ 158.648028][ T10] usb 1-1: SerialNumber: syz [ 158.656798][ T10] usb 1-1: config 0 descriptor?? [ 158.669322][ T10] smsc75xx v1.0.0 [ 159.076150][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 159.101648][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 159.112300][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 159.126553][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 159.292624][ T7117] sctp: failed to load transform for md5: -4 [ 159.525957][ T2150] usb 3-1: USB disconnect, device number 19 [ 159.829021][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 159.979572][ T7141] loop6: detected capacity change from 0 to 7 [ 160.087480][ T5944] Dev loop6: unable to read RDB block 7 [ 160.093278][ T5944] loop6: AHDI p1 p2 p3 [ 160.097720][ T5944] loop6: partition table partially beyond EOD, truncated [ 160.107762][ T7144] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 160.116277][ T5944] loop6: p1 start 926365495 is beyond EOD, truncated [ 160.125927][ T7144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.142498][ T5944] loop6: p2 size 116 extends beyond EOD, truncated [ 160.170669][ T7141] Dev loop6: unable to read RDB block 7 [ 160.176482][ T7141] loop6: AHDI p1 p2 p3 [ 160.181150][ T7141] loop6: partition table partially beyond EOD, truncated [ 160.193384][ T7141] loop6: p1 start 926365495 is beyond EOD, truncated [ 160.204076][ T7141] loop6: p2 size 116 extends beyond EOD, truncated [ 160.503752][ T5955] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 160.581189][ T5944] udevd[5944]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 160.618062][ T7159] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 160.799110][ T5944] udevd[5944]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 161.485569][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.327'. [ 161.677799][ T10] usb 1-1: USB disconnect, device number 19 [ 162.130907][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.140952][ T7212] batadv_slave_0: entered promiscuous mode [ 162.328756][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 162.762549][ T5955] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 163.113564][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 163.122806][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 163.135626][ T7231] binder: BINDER_SET_CONTEXT_MGR already set [ 163.142423][ T7231] binder: 7230:7231 ioctl 4018620d 200000000040 returned -16 [ 163.268541][ T5955] usb 3-1: config 0 has no interfaces? [ 163.282996][ T5955] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 163.304872][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 163.321376][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.406728][ T5955] usb 3-1: Product: syz [ 163.415846][ T5955] usb 3-1: Manufacturer: syz [ 163.421943][ T5955] usb 3-1: SerialNumber: syz [ 163.430941][ T5955] usb 3-1: config 0 descriptor?? [ 165.468518][ T7246] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.343' resets device [ 171.381695][ C1] sched: DL replenish lagged too much [ 194.267235][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289710][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.952363][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 292.959416][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5862/1:b..l [ 292.967690][ C1] rcu: (detected by 1, t=10503 jiffies, g=19885, q=850 ncpus=2) [ 292.975415][ C1] task:syz-executor state:R running task stack:21960 pid:5862 tgid:5862 ppid:5844 task_flags:0x400140 flags:0x00004002 [ 292.989741][ C1] Call Trace: [ 292.993034][ C1] [ 292.995975][ C1] __schedule+0x16f5/0x4d00 [ 293.000495][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 293.005782][ C1] ? __pfx___schedule+0x10/0x10 [ 293.010643][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 293.015866][ C1] ? kernel_text_address+0xa5/0xe0 [ 293.020978][ C1] ? unwind_get_return_address+0x4d/0x90 [ 293.026605][ C1] ? arch_stack_walk+0xfc/0x150 [ 293.031470][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 293.036771][ C1] preempt_schedule_irq+0xb5/0x150 [ 293.041889][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 293.047605][ C1] ? stack_trace_save+0x9c/0xe0 [ 293.052481][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 293.058299][ C1] irqentry_exit+0x6f/0x90 [ 293.062722][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.068708][ C1] RIP: 0010:lock_acquire+0x85/0x360 [ 293.073913][ C1] Code: 41 f1 08 00 84 c0 75 0d f6 05 72 99 ed 0d 01 0f 84 d7 01 00 00 83 3d a9 e6 03 0e 00 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 <4c> 89 ef e8 53 50 85 00 83 3d 8c e6 03 0e 00 0f 84 fa 00 00 00 65 [ 293.093535][ C1] RSP: 0018:ffffc900040bf118 EFLAGS: 00000202 [ 293.099606][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 677a2dac141ace00 [ 293.107573][ C1] RDX: 0000000000000000 RSI: ffffffff8172ab02 RDI: ffffffff8be29d60 [ 293.115576][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: 0000000000000000 [ 293.123564][ C1] R10: ffffc900040bf2d8 R11: ffffffff81ad03a0 R12: 0000000000000002 [ 293.131548][ C1] R13: ffffffff8e13f160 R14: 0000000000000000 R15: 0000000000000000 [ 293.139520][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.144628][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.150799][ C1] ? unwind_next_frame+0xc2/0x2390 [ 293.155921][ C1] ? lock_acquire+0x5f/0x360 [ 293.160515][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.165623][ C1] ? anon_vma_fork+0x1f1/0x500 [ 293.170402][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.175525][ C1] unwind_next_frame+0xc2/0x2390 [ 293.180461][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.185570][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.190772][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 293.196423][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.202596][ C1] arch_stack_walk+0x11c/0x150 [ 293.207376][ C1] ? anon_vma_fork+0x1f1/0x500 [ 293.212155][ C1] stack_trace_save+0x9c/0xe0 [ 293.216841][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 293.222222][ C1] save_stack+0xf5/0x1f0 [ 293.226463][ C1] ? __pfx_save_stack+0x10/0x10 [ 293.231321][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 293.236626][ C1] ? __put_partials+0x161/0x1c0 [ 293.241480][ C1] ? put_cpu_partial+0x17c/0x250 [ 293.246410][ C1] ? __slab_free+0x2f7/0x400 [ 293.251006][ C1] ? qlist_free_all+0x97/0x140 [ 293.255772][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 293.261401][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 293.266417][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 293.272056][ C1] ? anon_vma_fork+0x1f1/0x500 [ 293.276847][ C1] __reset_page_owner+0x71/0x1f0 [ 293.281787][ C1] __free_frozen_pages+0xc71/0xe70 [ 293.286904][ C1] __put_partials+0x161/0x1c0 [ 293.291604][ C1] put_cpu_partial+0x17c/0x250 [ 293.296378][ C1] ? put_cpu_partial+0x6d/0x250 [ 293.301262][ C1] __slab_free+0x2f7/0x400 [ 293.305693][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 293.312028][ C1] ? __phys_addr+0xd3/0x180 [ 293.316542][ C1] qlist_free_all+0x97/0x140 [ 293.321152][ C1] kasan_quarantine_reduce+0x148/0x160 [ 293.326630][ C1] __kasan_slab_alloc+0x22/0x80 [ 293.331495][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 293.336964][ C1] ? anon_vma_fork+0x1f1/0x500 [ 293.341738][ C1] anon_vma_fork+0x1f1/0x500 [ 293.346341][ C1] dup_mmap+0x9eb/0x1ac0 [ 293.350618][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 293.355325][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 293.361229][ C1] ? mm_init+0xce1/0xf10 [ 293.365490][ C1] copy_mm+0x13c/0x4b0 [ 293.369586][ C1] ? copy_process+0x978/0x3b80 [ 293.374363][ C1] copy_process+0x16d3/0x3b80 [ 293.379057][ C1] ? copy_process+0x978/0x3b80 [ 293.383851][ C1] ? __pfx_copy_process+0x10/0x10 [ 293.388903][ C1] kernel_clone+0x21e/0x870 [ 293.393430][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 293.398497][ C1] __x64_sys_clone+0x18b/0x1e0 [ 293.403280][ C1] ? count_memcg_event_mm+0x21/0x260 [ 293.408585][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 293.413918][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 293.419217][ C1] ? do_syscall_64+0xbe/0x3b0 [ 293.423910][ C1] do_syscall_64+0xfa/0x3b0 [ 293.428421][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.433638][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.439711][ C1] ? clear_bhb_loop+0x60/0xb0 [ 293.444401][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.450291][ C1] RIP: 0033:0x7f8f77f85193 [ 293.454701][ C1] RSP: 002b:00007f8f782dfca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 293.463131][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f77f85193 [ 293.471100][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 293.479064][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 293.487044][ C1] R10: 00005555781cc7d0 R11: 0000000000000246 R12: 0000000000000000 [ 293.495026][ C1] R13: 00000000000927c0 R14: 0000000000028659 R15: 00007f8f782dfe40 [ 293.503030][ C1] [ 293.506070][ C1] rcu: rcu_preempt kthread starved for 1230 jiffies! g19885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 293.517181][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 293.527170][ C1] rcu: RCU grace-period kthread stack dump: [ 293.533071][ C1] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 293.546568][ C1] Call Trace: [ 293.549849][ C1] [ 293.552779][ C1] __schedule+0x16f5/0x4d00 [ 293.557331][ C1] ? schedule+0x165/0x360 [ 293.561688][ C1] ? __pfx___schedule+0x10/0x10 [ 293.566571][ C1] ? schedule+0x91/0x360 [ 293.570822][ C1] schedule+0x165/0x360 [ 293.574981][ C1] schedule_timeout+0x12b/0x270 [ 293.579847][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 293.585234][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 293.591135][ C1] ? __pfx_process_timeout+0x10/0x10 [ 293.596423][ C1] ? prepare_to_swait_event+0x341/0x380 [ 293.601988][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 293.606863][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 293.613027][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 293.618326][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 293.623554][ C1] ? finish_swait+0xcd/0x1f0 [ 293.628163][ C1] rcu_gp_kthread+0x99/0x390 [ 293.632767][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 293.637980][ C1] ? __kthread_parkme+0x7b/0x200 [ 293.642931][ C1] ? __kthread_parkme+0x1a1/0x200 [ 293.647972][ C1] kthread+0x70e/0x8a0 [ 293.652046][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 293.657237][ C1] ? __pfx_kthread+0x10/0x10 [ 293.661932][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.667145][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.672353][ C1] ? __pfx_kthread+0x10/0x10 [ 293.676956][ C1] ret_from_fork+0x3fc/0x770 [ 293.681564][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 293.686701][ C1] ? __switch_to_asm+0x39/0x70 [ 293.691469][ C1] ? __switch_to_asm+0x33/0x70 [ 293.696226][ C1] ? __pfx_kthread+0x10/0x10 [ 293.700831][ C1] ret_from_fork_asm+0x1a/0x30 [ 293.705623][ C1] [ 293.708644][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 293.714986][ C1] Sending NMI from CPU 1 to CPUs 0: [ 293.720211][ C0] NMI backtrace for cpu 0 [ 293.720226][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 293.720245][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.720255][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 293.720279][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 0d 19 00 f3 0f 1e fa fb f4 c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 293.720294][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 293.720309][ C0] RAX: b5553f294ca38500 RBX: ffffffff81976c78 RCX: b5553f294ca38500 [ 293.720322][ C0] RDX: 0000000000000001 RSI: ffffffff8d998a4b RDI: ffffffff8be29dc0 [ 293.720333][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 293.720345][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1f3f0 [ 293.720357][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 293.720368][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 293.720385][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.720396][ C0] CR2: 00002000001fe030 CR3: 000000003142a000 CR4: 00000000003526f0 [ 293.720410][ C0] Call Trace: [ 293.720416][ C0] [ 293.720422][ C0] default_idle+0x13/0x20 [ 293.720438][ C0] default_idle_call+0x74/0xb0 [ 293.720454][ C0] do_idle+0x1e8/0x510 [ 293.720474][ C0] ? __pfx_do_idle+0x10/0x10 [ 293.720499][ C0] cpu_startup_entry+0x44/0x60 [ 293.720516][ C0] rest_init+0x2de/0x300 [ 293.720532][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 293.720550][ C0] start_kernel+0x47d/0x500 [ 293.720570][ C0] x86_64_start_reservations+0x24/0x30 [ 293.720586][ C0] x86_64_start_kernel+0x143/0x1c0 [ 293.720601][ C0] common_startup_64+0x13e/0x147 [ 293.720630][ C0] [ 297.573460][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.587309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22