last executing test programs: 11.462395127s ago: executing program 3 (id=300): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000100)={0x0, 0x0, "ba3686b41535dd28f7931ac06dfdc4ac"}) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1000000000000, 0x800, 0x7}, 0x6}, 0x20, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="c3b9fa79d427aa8b51d42c0b50dc14fd", 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000", 0x24) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0d, &(0x7f0000000000)={'wlan1\x00'}) r5 = syz_clone3(&(0x7f0000000600)={0x84100, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x31}, &(0x7f0000000500)=""/65, 0x41, &(0x7f0000000280)=""/19, 0x0}, 0x58) syz_open_procfs$namespace(r5, &(0x7f0000000680)='ns/ipc\x00') r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r9, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x800) add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r9) r10 = add_key(&(0x7f00000006c0)='pkcs7_test\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="aa6817f82e5e4b81feb97e08df887968cf6e950683f7c5b2f6cb5aaa36dec30cce3691719a380bfbfed769102a49f18596b31da7617def9bbfef69eaede7f37da300f187dfb2f7db442c38f4d8db009c58866a58ce2cbd24ff", 0x59, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r10, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={0x0, 0xd4, 0x7f}, &(0x7f0000000180)=ANY=[@ANYBLOB="656e633d72934fdbd16173680f69cda0b7da1e629d9afbfe9c13a13d7368613531322d618000"/77], &(0x7f0000000340)="a199ddb5ed1e08109e04627c8cef9db91fe7973242c712dd2c423d9e0c90f64c52a30a22054a6c2272c635e0fa382cc939b5ad1734b4ba404be8a79e244eb4407875950a73a0553ad5ff321b6bab6766f0599b7803889e0996b194981503f34077961d45ad437d7f2d7a9bb5a38782830dc11e743081a5706b1dcfe788abb1b16c5126188177aa9dd82dc855724e4806d332b371015553fe3c7e236d1ef17065de150e25d3eb0b7a5f81ec1cbd5f91709c2723246e29878d8fa7fefabe50c4ed623e44762c0df1f84f10aecd77df690b6bd92795", &(0x7f0000000200)="15b128ec9172a1f5490c16124c0135bd27a9ba71e693f414cc6b35e18e49057333dc7a64b6e309c84c3f3340e475a752bdd1fba5339b2d710f116ee88d129279cc6de175b7e21bdffa273e1718e2763909380631ca346f45e2c85437dc5945f09b4f24acee81ed244550c1f51bce4fd75f9c37075f7ab3f7a58eeb876af963") syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85, 0x1, 0x40}}]}}]}}]}}, 0x0) 10.212245541s ago: executing program 1 (id=303): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 4) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.470277812s ago: executing program 3 (id=304): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1216eb010000000000408c0d220000000000000109022400010000000009040000301b0578b936174d00000122040009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendto$unix(r4, &(0x7f00000002c0)="4e08a0ef9ac7f14143949466fbb7d16dbb8b2049c0bba0eaf39d88e72bec9edfea49a56f4e718451bfdee5e13254324baf222ce2cf99b06ad6ccdb8fecc92933c3d5b1fb893bcc012624958354ab790e", 0x50, 0x8080, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000140)=""/85, 0x55}], 0x2}, 0x100) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0xc4582) 8.32807825s ago: executing program 1 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x200) (fail_nth: 6) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x200, 0x40022020}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x40a004fc, 0x0, 0x6, 0xfffffffc, 0x8b, 0x0, 0x2000, 0x6, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.772838986s ago: executing program 1 (id=310): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x800a, 0x1}}], 0x1c, 0x4004040}], 0x1, 0x20008891) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0xc}, {0x0, 0x62}, {&(0x7f00000005c0)="15e1baf1349f8d540d311f161a740d1b86cf345bc603db7d283c2802fc53de3f309bd862b47a6f3fb15399f9e1789ecfad08895b956296436ac2e416bd0b57b6328af5cae6c6e1e60d4f015f270cd7c7e58aee6bac71301c50119e268eda0badb58929596e1028bf29eef608d31ba4324f23ff82f0fae451416905842991adfec5dbbd0dde15ba01d705b90663da02445957ca0768539b297e7531f8afe28ffca55563ee0a6b23c31b87dda1eb90551be1ccba2e9a4e19d0297af6", 0xbb}], 0x3}, 0x200ce0c0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) get_mempolicy(0x0, &(0x7f0000000080), 0x10, &(0x7f0000b05000/0x1000)=nil, 0x1) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000980)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x73, @local, 0x9}}, {{0xa, 0x4e20, 0x8, @local, 0x5}}]}, 0x190) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x9, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000e40)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x2, [{{0xa, 0x4e24, 0x0, @local, 0x6}}, {{0xa, 0x4e20, 0x6, @local}}]}, 0x190) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2006c000103000aff3f000057fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80000000001010400000000141a00000200000044000f800800024000000004080001400000fff20800024000000006080003400000000e08000140000000000800034000000026510001400000000308000340000000040800074000000001240001801400018088000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800540010000000000"], 0xa8}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') syz_emit_ethernet(0x6a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004503005c00000000000490787f000001e0000001000000000048907803000000030000006a2600000000000000000f295fe0111d66706c62b9564ce029fe1df581"], 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000023106a053103000000000001090224000100007e1109040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r8, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x1e, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c20000c800000000000086dd60fca33f00506700fe800000000000000000000000000010fe800000000000000000003a0fafb201e035c7e8582a9a7239f700000000aa3b04001000000000ff010000000000000000000000000001ff020000000000000000000000000001000300000000000000175b72b9acd21a0ca186608b74f100000000000000"], 0x0) preadv(r7, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1ef, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000108000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 6.750503547s ago: executing program 0 (id=314): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x10000, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 6.493878448s ago: executing program 0 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}}, 0x24}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.25409723s ago: executing program 2 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) 6.10470472s ago: executing program 2 (id=317): r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x1, 0x2000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001140)={0xb0000008}) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902110000fffffffedbdf2500"], 0x10}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @private=0xa010101}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$P9_RSTATu(r5, 0x0, 0x62) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x22000, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0xfe, 0x0, 0x0, 0xfffffffc, {0x4, 0x6, 0xfffffffd, 0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x40000c4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004e904}, 0x800) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000003780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003740)={&(0x7f0000004680)=ANY=[@ANYBLOB="0055225cdaf7bccb2c8fdbed5cf9000000", @ANYRES16=r9, @ANYBLOB="00042dbd7000fbdbdf254a000000080001006e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x11c4}, 0x1, 0x0, 0x0, 0x801}, 0x20000804) 5.939699683s ago: executing program 0 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x1, 0x0, {0xa, 0x4e21, 0x4729, @remote, 0x2}}}, 0x32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) 5.802152538s ago: executing program 4 (id=319): openat$dsp(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x133801, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "fffffffffffffff9", "241ac1eb797f3647a51ed8fb51ee710f00214de279c9b7e07a696756a31d83d7", "f8a2e06d", "00000400000100"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) socket$kcm(0x2, 0x1, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x305080, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x1c2e, 0x10100, 0x0, 0x20380, 0x0, r4}, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 5.801368376s ago: executing program 0 (id=320): io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x4, 0x9]}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7, 0x0, 0x0, 0x0, 0xc}, 0x94) (async, rerun: 32) r0 = socket$packet(0x11, 0xa, 0x300) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000140)}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) recvfrom$packet(r2, &(0x7f0000000000)=""/119, 0x77, 0x0, &(0x7f0000000140)={0x11, 0xc, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x5b23, 0x0) (async, rerun: 64) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) (rerun: 64) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe80000000000000"], 0x0) (async) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 32) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x7, 0x1) (rerun: 32) 5.658408615s ago: executing program 2 (id=321): syz_clone3(&(0x7f00000003c0)={0x4000000, &(0x7f00000000c0), &(0x7f0000000480), &(0x7f0000000200), {0x2d}, &(0x7f0000000240)=""/153, 0xffffffffffffffe2, &(0x7f0000000680)=""/4096, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4}, 0x58) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001d80), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000001dc0)={0x6f, [0x8, 0x0, 0x9, 0x7, 0x0, 0x4, 0x7fff, 0xb6c8, 0x3, 0x5, 0x2, 0xe219, 0x6, 0x2, 0xe7c, 0x8, 0x5e47, 0x2, 0xff, 0x6, 0x7, 0x6, 0x5, 0x4, 0x4, 0x4, 0x1, 0xb, 0x6, 0x844, 0x6, 0x6, 0x5, 0xf, 0xffc0, 0x3, 0x9, 0xfff, 0x1000, 0x300, 0x1, 0x6, 0x7fff, 0x8018, 0x7, 0x5, 0x7, 0x8], 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000006180)='./mnt\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x10162, 0x0) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r6, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setrlimit(0xec2465c563524b53, &(0x7f0000000000)={0x0, 0xfffffffe}) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000080)='+/-\',.:\'\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00']}, &(0x7f0000000500)={[&(0x7f0000000440)='+&i^\x00', &(0x7f00000004c0)]}) 5.472137036s ago: executing program 1 (id=322): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x7, 0x9, 0x1, 0x0, 0x6}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10100, 0x2, 0x4000000}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x4000) syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r7, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xe000, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 5.318342144s ago: executing program 3 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000000)='ubifs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2c) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000001800010025bd7000fcdbdf25fe8000000000000000000000000000aae00000010000000000000000000000004e2200004e200002020020a033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d433000000fe8000000000000000000000000000aa0101000000000000f6040000000000000500000000040000fcffffffffffffff0dffffffffffffff08000000000000000800000000000000ffffffffffffffffac080000000000000200000000000000060000000000000001000000000000000100000008000000090000002dbd7000013500000200008c000000020000000c0015005c0735003e26532200"], 0xfc}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r4, 0x0, 0x0) 5.151107004s ago: executing program 4 (id=324): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b35, &(0x7f0000000000)={'wlan0\x00'}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x6) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) close_range(r2, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(r4, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000000)={0x62}, 0xc) 4.856268407s ago: executing program 4 (id=325): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e25, 0x3, 'fo\x00', 0x20, 0x3240, 0x4000003a}, {@multicast2, 0x4e24, 0x4, 0xe, 0x12d5c, 0x3f0fbc3b}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 4.287971102s ago: executing program 2 (id=326): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x100, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x5bd1b}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_IFLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_BROADCAST={0xfffffffffffffda6, 0x2, @remote}]}, 0x70}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00"/11], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff99) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="e702f2ffef1f97b0ae1a006b88a8000081000000c92b103c7dba395ad30000000000000000009024657cfc561a03aeb2006e000008000000000000000000000022f49e06000098a1d6dc00fd5b1000"/88], 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000f80)=""/4089, 0xff9) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_macvtap\x00'}}, 0x1e) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f80)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xa, 0xd}, {0xb, 0x8}, {0xc, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffb}, @TCA_CHAIN={0x8, 0xb, 0x56}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) r11 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r11, 0x7, 0x0, 0x0, 0x0) 3.898206851s ago: executing program 1 (id=327): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x7d, &(0x7f00000000c0)={0x15, 0x7, 0xfffffff0}) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1]}, 0x45c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000011c0)={@map, 0xffffffffffffffff, 0x34, 0x2}, 0x20) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = dup(r0) read$FUSE(r2, 0x0, 0x18) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000006f7cffff090581030000000000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000000440)=[{0x3137, 0x1800, 0x0, 0x0}, {0x1, 0x8010, 0x0, 0x0}], 0x2}) 3.716938042s ago: executing program 4 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x30, 0x1c, 0x114236db3b607435, 0x70bd24, 0x25dfd3fe, {0x2, 0x0, 0x0, r4, 0x40, 0xa2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x6, 0x7, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x20, 0x3, 0x100000}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @private}, &(0x7f00000001c0)=0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x0) (fail_nth: 6) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10009}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd4, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) 3.616347318s ago: executing program 4 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}}, 0x24}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.44196912s ago: executing program 3 (id=330): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x14, 0x40000, 0x0}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd931d3864d39ddd0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r1) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x6) 3.36601757s ago: executing program 2 (id=331): r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x1, 0x2000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001140)={0xb0000008}) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902110000fffffffedbdf2500"], 0x10}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @private=0xa010101}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$P9_RSTATu(r5, 0x0, 0x62) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x22000, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0xfe, 0x0, 0x0, 0xfffffffc, {0x4, 0x6, 0xfffffffd, 0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x40000c4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004e904}, 0x800) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000003780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003740)={&(0x7f0000004680)=ANY=[@ANYBLOB="0055225cdaf7bccb2c8fdbed5cf9000000", @ANYRES16=r9, @ANYBLOB="00042dbd7000fbdbdf254a000000080001006e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000007100000018107580040007000c100480081000800410020001267cc375813a6bdd695a3a1938875b9bc4565cb02b481284904e8039dfb5b7763b4db2c81929d0e562f1055331752599307c84748baa46e1a758d0c11987d6ad4bb82a00416d033ddfc177c0575b5a20e29094b2c6828411099c1fc6d96125c30e4e1e44fd6540679fd4be201f9b1682e2e9e031e646bd1f2f81059093c54dfc0b923c5d1b56cb0c829ae9e07339c1bbcff33c411751f5209e6fde3b5f299b2bafe1bc2fe346dacad9daee598c34b5ba448a01ae53d310b1d6da8f4bc39f0e53b1da7060e0df818e6f6653f1796c64ac282971146c31e7d4e551c16f66dbb52f0642287d67cebf8ca3896ba0746a2f6a9df01bcb1e0ed374bd3fa4cb8dbb4199b551c499250cda95cfeb361e85d00a7b2916133605b885bc7a0d8e5bcc5baaa3cec2e0b09407432a3335138be0258202f865a02d9877dfc39c0249d3034b7c7a380b124076c9902ad13b3ed3153e71a7d7c1c9e356fd05b31575e5c6a0367c9d7fc7e9b5b4bb5af9aadc22b5d51eeca26259ebe3eafe5ae08ed9d1c0b01937de784a66badc3b8d3f6988abc9448c2e66b750a3ce48c0815fdf98ea0623d08de3ebfaf48fcfc92fa342cb22cda178e6e4f58641a1887545f3385bfabbc1ad4b64eaf2c4ab12219ef08914d48875f125fa3a83c63611f3c3578168b101abf44f5015d74c489dc392181673918be55887e9a08b178e52281d09637c4a88e0bcb4e3f50fa649c1563e3e5caf2fb334e2beb60a347eba5c608da16233df8ba1b7f7cb53f9c9d27266da0196723e66776c5e595b496140ed9f7cd3e95cf5ab4d4b982ed9f787acee6c50aed87445c623d4feec0da8b04747c9c49007a5933ef7104097249a374a1ec2da6e0e4f8f1e4efcd241f4db7815fdc740ea472a16026a8c9427f01522040dbae3bdd1932d0336d5b3675afcbff165221d34983949c4511a3a7a1ee150e43b4bfd6020575941627df0707480adbb1153db38406291fc2ec73cf43313cb3e07c8dde5c8f77b1a56d8302e4dca24aaf1cf40ce718fa4684dc2ed308d77e0e28cdcff46f26a49253a6caf1e445219639a93e43187f4aff0b4818436ca5cbbfad52cf2f7e352d6d7bc9677f86ef7bef91cd2081519ecfbf25343356f907a955e99deeffd08b52558f706631ff4c40d3504593bbf5358e1a4422d9b659b84c7c80fac2c1f5c55fd69167db5351ef5c2a6bbc1e00eee7c40d282656db43ed142d554215e937b3ec4190e028b69ad38d03c03a37e557c9caa5c79f89fa004d48c0c1c41f173205bb6f627ed8f8c8c9042bb7cec7e80bf1a67304fb250eb726c3c36bbf54def70d70d5f03c2c1113be8c5a6e241ff13d5061df978df1b6f375e3562766c4c85156217661a1a6a9e4e1ff7b53d62a86bbe9ab72c338db6a879b38500e67f0fa9561d59e9f57c28a480304529a30d3bdfdedc716cf5c8509b1939e1e82dc93627fcaac250699a6679bd0cfe43701b202a52dd0d988408fa61eb32a2d01abac29129ee7470e3783e6ff257b1a7515c357066b9b6d14d465679f6410dabf996725133e4e3c7fcc9173bf0b2121af02db5909ca7dedd26cb61ab45c43e84fdf9003dbe1d3075b5401c77e9bc8b9e36e1c3c0c75ac966d005cdde63770a43a3dda515c7bb0322c8d851fbea661579ac9914dbd015070441bf1b6884143d3127cc9b56f405e18b044d9f5d9423b484ff7f8654950415046f4359e5ac7332e368bdaf0d6265246bf54b200f4bb0733329b65694b02c6482f2af425ab47124046f211f7affeb9ded02e6f510a538a5ea2304b4a7e3a0e1aa0330f64786d1158174a16d5c36371ed4eae538c41bc7f4f33c080276898da6f017a58f9a8d894b050b4d00e921cef76470b537482c0fdd949f5b893420ce56c232d1a8cbe6d33a3d8451a227dbafdff13dfd659bcb10a4a73edec7f946e2d598488100e298abade846e32498e2727e9b749dc3cfa203be5a56050f1929b90f84b8eaafadf27f1a247c25dfcb76edb3c16c3424c2a370ad0f9cde9df86da85f4550643dec7fb22e2426d9b97130cd7f1e81f7f53a5d46bbf8f208db8ad335d863f17102dd2fd6f808a55e130193591d2407faad071d7db03587e7122caa0dc19e6495eb24e4d7bd8f741a2a76f066228c6f823bcfebf72ca0f1eda1df95661beda052d1687de16f60df70f3247ff0ffe46cc542312f4c77f8c274b44363533097b40554702250296b5f898e17d9a1f4c10b8244ddb9843e8867b4b9be83d9fa2af2265db1fcb110c413ae05df5179b74c3e5b7629fc2cfcdd4bc03081044d1cd4b98e987ed4adf8d1717505c4a308333e32aefabeee96ef1e03670d7776f00a03a36effaf0244d4d915199738079e29f3fcf65aa204a3266c81b19546852cbe0008c3ae1b03b01ca7a60f2fd1dd516f5c0f67a02d9f92cc1f51dc6955180eaba5e9e3a23aff9ccbb8f2f34699a704aa8da30de9eb99ba742eea681fda5c5dbfee29d4d9107f28c053132cfcdae7ad308a76b691d68af9516a2989f6fa8cf76a644c8beac0e32928546d8d4496e476f2203a3fb0668b31666edf65c5892894f56f28c5abeea56230e0b6728117a888bf26e2d415a02096835221b61d3e433e23e7704dddf84ede89aea9862eb9aa21c7fc11e73702eaa29b33c8c856e8803323bb7d34a3fdfa12ae717eb91c66b8232106baf153b345c9a035da73ec8f524af84be4c1498747399bfa6c03502f456d557ab8dbb72bbedfd974349e4eb8075e605cc5a5c240753fe1aabd24d971f5641dfcfd6d5e792ba7575b856e0875b3b3e9b8dd104938d94d7b120376754cc897a91f42adb2453ebdf721bd010c7052b788627753badb6ab4dff054ca3495c7101e2c234e977c812c385d31b1246a8347f380eeb4a21188b91d7743e2fa26c70b16ec5c41c648069e221b5d481718cbbddae3923c1cdf3c833a0bcdf36758e346b8fc69d5cdc96b5598b7c8c99f2b246a2623bccef9f977de26f76d4b2c0da466ca9369ac1cc8f07b7f7b9c4a65c320c60e674fe350b4e459027ba4bcecd5d880189080bf66d24a720a70e532fc80bae9bad50c0f6276036f34ffbe698ac530460b04cd299f020c86c203af26c2d309409848a1168cb4dccea3ed22397e9f32bfab9fb83bcfbe6d711c2c6aeea5ddbe1138d78a96eb33272479c8d08b32ac7ee7f11b67d8ce38cfc86c7e7911edeb3dd39b4d8e415cb48a12960d3b553a130e7cab8559d2f5be7f902160a2ea10b9c2861126efd16a9a2d9dd4de6c618202bbf3a303e78ee242a455d96f54ad38133572b0ffcfff7bc5e4d256140ea3e2bf1c754b7df07b28b69ab0b22574eccdc4b5a334e2d143e64cf12ca9abe4c5a387d954f49dd94ea584f2c8484f816345b9050fcb161f546c00f218d0ec08e0e14a3a12e648a60049dbe64ac7e2e16945156acdef40552bad0b357a53c0e3674aa50879109caa21af830c87c156b6dca7ce03542e7b52aa21ede195346c8adddf6cf4d13ca930d819765678026cb57922ffd3557a28d35b39cad01be39be687555e00df17f3c9dd4931fcc759543cbc1a84f77632d6ddb05f15726ac3d982ca413359934e5428456d1b946386cbab890d42726fd9702b1b126afe603bde857b5b051edf820f934e4b964285f9594d75d736b5a5ab801431c7bb901f68dde5c9f901abde92f3ac8244ba82dbf414161b133576a5d7c3d1ab57926a79a106efa98295d5d4cf573168c067792a89da5c093026cecdd5e2517c5f2e3e10408b327c8a0dc41bfc2757e59c739f14342d3520f9ac0814f57885c3e0855f215695d548c2285b22ca591623f41961cd321c8983926e0f2f9dcc6ba41a2661327f2fa1e3e94c34cee897276f7311696011d0b6efa1ff3202388c8d808cfed059f3a628a14ffa7febe5fbe73a2e833cdb8cc8cee2070f47bbb524022b534da031c718bdc6824bcb027b00ff7cb36c9b346e72ff449d4a73f1dbef6bb5fa49e93851a9052a293f011d0e91abfada80dc1a8da5cd2b59191757b70ca57f8172bbbc4ec9e57f22551da7c01258e2699684fc9ee2eed2b437d5462c20350937cecd19e82f6a512e22b2212b3195c66ad7238bda43f00063441be6fabe299b03ed054d09f53cdf0beb1971d1bd7133bf0483187f94386b8fbf80751bcb26d3aa8145f62943d118df16215392e6f4ad797a361146cb82a30d78cb8f059b9cfc6fe6450a7917e12d0a6cc304cd761a10290cefa9810093e79cef5bffe507ec9370652a394d1ab1983adc11184bdf8cd65b7349983bd4106db6b9c86e2b3b26954663fe909b70301888108957586045b1ae5fd562877df4659486a0f97dceab216a9402d0a0f850deb1921cb09b0cc8842c50c1eca406232729fc957c45e2ede5c4ab9bc0b5732c22895af92f4a80eaefb07e3a14108a86000419cc507d9ec3b8f8db0147d521ac2f060eca239b5566a224cb3253e494b97793a0918b91564ca73168385e6a5fbf4b0681249ef68e0d74324573fea7566b1415c190c4f2e5ee38ef4f24ebf5655e326c3b9e1269c74e6b8e2d5c390b405ee44d56bcf91663914c40e4f3d71836740539e24c9ae736045d63e911cee5d6201153d83a99e71ff37a3e671c2f35b37c1ef5610b58273dec88070f7a5e67833aab4442f00791d1a36d5cbb949f2d111dd29512dc92c7415f1baea73031ac25f3c38798402624c3045fd7109254922961deb1c9558891a53d1e33d3f513a157e8f1dee395553c288c5583fca9b592cca87222a9e87b772d1d1b680186288984563432d115af534cab3e3c51af022cce51094bcf1b48507d1a762594106fbad566497a79ffa513060a60ec0e0483fde9bfe2b795bea01d3d5127280e82c604378b19651dd8dcab9b0e8ee6ed01c1c88cd68d6a326851d74bc758cf734cc3cde33813694182ca339fd185395b46456975918c06ff78e72aab29fb24636fcd1b0836d74a55c9475910d2074b69361ac422b52bfd6c4a0b565853b27ec27f9cc46e1f0cdd75d726244d1197094c05a3a2389b1ac1669583ed867f1ce792ccda6bafb42a4b61a1e22e643ecf02f4b2aa488e52fd2f4a9c0d9d3ed42d6cc6ba13552511fdcd0dc93a8f7e39ad845e0d422d53ef22ceeffce135c9fee8c8cc94e589a33a5f2cea1813b79ec2637f67922298b99cdf44bb296d0f98fd5a9e11b337802133e58fecc99916fb9e840b2764b1670ab317dc96299ab1db8b37b0aefaa88a2011e9df4c1104830a2315d2c4ce3839315a15735e4d225c958abf0d2102124b4f8cdaa63683e6f09b03c034d0bb22e479133e2133651d1f9942f5516caf2bda22ec252d988b0a3d77535b635cc2da2ddb543c586ff3bfd66684044cbe68dd702f36caed8e313df045914202a2ae740122a18b477c8840ee72b99fc4668510e4001de8717d60ace67ed3bf00db6ae410dfb4ed0d97fc891832c2a1b813c39880689fa6d669e3832c90b9139588f6f0c7d143065ed965f0777c0640bdfebc74c568fe3465bef78eb2d8365ba35c6bc2f6a776d071087de05516b9710bb0983e488c7c237784e24d3014f8d46a30664560e1ffe5afe4745b3e531ad258003b06094ffc91fb71eb65c33e300e345a638d7532933392c7c88831a0268b1759ec57bc90658ce6890ea06e08d3c710bd232ee19c58d8aac27fd4640a112854453f76f74bc38db720d978232af92e0356f0ac159a05a4baec39a8488f9f7b69e522c612b9f4ba5a314b9e5ae4f56bf14e7f306a47bda1fd55e00988b89d61b64f667b5839360bcdc947bbe0bff8f3fa0400090068017580600112801c018480c80000800a00050050505050505000003400068008000500010000000800020005000000080001000f000000080000000400000008000100ffffffff0800030000000000080002000600000008000200920c00000a00050008021100000000002c000680080000000500000008000000010000800800030003000000080003000010000008000300030000001500010010f61d396c6371d9c4f4a34f1582e8c474000000240006800800050000010000080003008c00000008000000000000000800010009000000280000800a00010002020202020200000a00050050505050505000000a0005005050505050500000280000800a0005006b77573e33e700000e0001008611729bbabc74f4a2030000060001004283000038002d800a00000002020202020200001a000000657f6ec246da838926de0072269e0476edfcf728d87700000a00000001010101010100000600f70001070000040003000c00758004000480040008000800758004000200"], 0x11c4}, 0x1, 0x0, 0x0, 0x801}, 0x20000804) 3.181613463s ago: executing program 4 (id=332): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x88901) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003e80)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x8, 0x60c5, 0x1ff}, 0x0, 0x52}, [{0x0, 0x3, 0x8, 0x4, 0x7, 0x4}, {0x3, 0x2f, 0x4, 0x2, 0x9, 0xffffffff}, {0xbc6d, 0x7, 0x4, 0x2, 0x2, 0xfffffffb}, {0xe9, 0x800, 0x80000000, 0x5, 0x3, 0x6}, {0x80, 0x3, 0x0, 0x1, 0x213a, 0x3}, {0x6, 0x5, 0x10, 0x8, 0x40, 0xf2}, {0x9, 0xff, 0x2, 0x7, 0x7d, 0x9c}, {0x6, 0x2, 0xfffffff7, 0x5, 0x1, 0x80}, {0x3, 0xee, 0x0, 0x2, 0x2}, {0x3, 0x5, 0x4e0397d2, 0x3, 0x100f, 0x7}, {0x10000, 0x6, 0x101, 0xfffffedb, 0xfffffff7, 0x7}, {0xea7, 0xd98, 0x10, 0x58d, 0x0, 0x1}, {0x9, 0x5847, 0x6a, 0x2, 0xb, 0x400}, {0x6, 0x4000000, 0x8, 0x1, 0x8, 0x8b9}, {0x4, 0x2, 0x6, 0x74, 0xd, 0x2}, {0x0, 0x0, 0x431, 0x5, 0x1ff, 0xbdbc}, {0x2, 0x80000001, 0x3, 0x3, 0x9, 0x5563f14a}, {0x1, 0xfff, 0x800, 0xd4e4, 0x8, 0x3}, {0x40, 0x9, 0x9, 0x5, 0xffffffff, 0xfffffffc}, {0x1, 0xe4f2, 0x2, 0x7, 0x0, 0x5}, {0xd19f, 0x8, 0x4000005, 0x10001, 0x5, 0x7}, {0x10000, 0x1da26058, 0x2, 0x8, 0xd1, 0x80000001}, {0x0, 0xffffffff, 0x70, 0xf5, 0xffffffff, 0x6}, {0x9, 0x6, 0x5, 0xff, 0xa, 0x4}, {0x5f9, 0x7, 0x1, 0x7e7, 0x2, 0x629}, {0x1, 0x7, 0xe0000, 0x5, 0x0, 0x9}, {0x1, 0x595, 0x8, 0x6, 0xffff, 0x800}, {0x9, 0x3, 0x1, 0x0, 0x8, 0x4}, {0x2, 0x7ff, 0x4, 0xe3fc, 0x5, 0x2ccb}, {0x8000, 0x4, 0xe, 0x7db2, 0x7, 0xfffffffc}, {0x1a, 0x4, 0x3, 0x5, 0x81, 0x3}, {0x80, 0x5, 0x6, 0x1, 0x8, 0x4}, {0x101, 0x9, 0x1, 0x8e, 0x2b4ea749, 0x98bf}, {0xfffffffc, 0x2, 0x4, 0x6, 0x6, 0xfffffffc}, {0xad5e, 0x7, 0x7, 0x401, 0x3, 0x10001}, {0xf, 0x9, 0x2, 0x1, 0x2, 0x3}, {0x0, 0x1000, 0xffffffff, 0x5, 0x9, 0x9}, {0x9, 0x3ff, 0xffffffff, 0x6, 0xfffffffa, 0x13}, {0xad, 0x4, 0x2, 0xc45, 0x76ec1b55, 0x24000000}, {0xffff, 0x5, 0x3, 0x657, 0x8}, {0xfffffff8, 0x8, 0x80000001, 0x0, 0x4, 0x5}, {0x5, 0x9, 0xa61e, 0x4, 0x1}, {0x8, 0xffff, 0x7fff, 0x3, 0x81, 0x2}, {0x3216, 0x100, 0x1, 0xfffffffa, 0x7, 0x6}, {0xffffff01, 0xfffff474, 0x80000003, 0x9, 0x400, 0x6}, {0x4, 0x0, 0xf7, 0x4, 0xa3f, 0x4}, {0xcb, 0x0, 0x7, 0x8, 0x3, 0x8}, {0x10000, 0x7, 0x80, 0xffffff3f, 0xc28, 0x8}, {0x7, 0xfffffc00, 0xfffffff7, 0x7ff, 0x8, 0x4}, {0x9, 0x1ff, 0x0, 0x7, 0x811b, 0x4eef4a80}, {0xa6, 0x429c6781, 0x2, 0x8, 0x6, 0x2}, {0x0, 0x5, 0x8, 0x200, 0x7fffffff, 0x4}, {0x3c9, 0x1000, 0x7, 0x88e3, 0x9, 0x6}, {0x80, 0x7, 0x9, 0x586, 0x80, 0x80000001}, {0xc6, 0x1, 0x400, 0x10000, 0xa5, 0x8}, {0x9, 0x800, 0x0, 0xffffffff, 0x2, 0x3}, {0x0, 0x9, 0x8, 0x0, 0x2, 0x5}, {0x1, 0x10, 0x66, 0x10000, 0x9, 0x58}, {0x1606, 0x7, 0x67000, 0x4, 0x1, 0x5}, {0x8, 0x10000, 0x6, 0x4, 0x0, 0x2}, {0x4, 0xffffffbe, 0x8, 0x1, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x3, 0x8, 0x4}, {0x9, 0x2, 0x1fe, 0x203c81ad, 0x3, 0xac6}, {0x2, 0x5a4, 0x80, 0x9, 0x8, 0x5}, {0x7, 0x5, 0x80, 0x5, 0x6, 0xffffffff}, {0x1, 0x2, 0x6, 0xffff, 0x3695, 0x8b84}, {0x6, 0xc138, 0xfffffffe, 0x200, 0x8001, 0x6}, {0x9, 0xb, 0x4, 0x3, 0x6, 0x4}, {0x7b, 0xfffffffb, 0x8, 0x4, 0x4bf2}, {0x10000, 0x8, 0x8002, 0x5, 0x81, 0x3}, {0x5, 0x1, 0xfffffffd, 0x1000, 0xfffffffb, 0x1ee29bb3}, {0x3, 0x7, 0x1, 0xfaf9, 0x6, 0x8}, {0xf, 0x800, 0x9, 0x8, 0x10, 0xfffffffa}, {0xf, 0xf, 0x1, 0x8000, 0x7fffffff, 0x3}, {0x3, 0x6, 0x7, 0xf, 0x7fffffff, 0x9}, {0x5, 0x3, 0x1, 0x0, 0x6, 0x2}, {0x9, 0x5, 0x3ff, 0x101, 0xfffffd92, 0x4}, {0x9, 0x8, 0x53, 0x101, 0x3, 0x4}, {0x7f, 0x1, 0x3ff, 0xe, 0x3}, {0x8, 0x7, 0x0, 0x7, 0xdbe7, 0x64}, {0x8, 0xd5, 0x80000000, 0x0, 0x3ff, 0x8}, {0x5, 0x9, 0x7fff, 0x3, 0x4, 0xffff0001}, {0x6, 0x7f, 0x1, 0x3, 0xffffffff, 0x6}, {0x3, 0x4, 0x6, 0xffffff46, 0xfff, 0x1}, {0xfb, 0xffff, 0xfffffff7, 0x1633a348, 0x7, 0x401}, {0x2, 0x5, 0xfff, 0x0, 0x2, 0x6}, {0x0, 0xc, 0x6, 0xb0, 0x8, 0x10000}, {0x50000, 0x7, 0xf, 0x6, 0x7, 0x81}, {0xffffffff, 0x5, 0x400, 0x1, 0x3, 0x6}, {0x2, 0x9b, 0x2, 0x0, 0xebb, 0x7fff}, {0x2, 0x928f, 0x9, 0x1ff, 0x4f5b, 0x2}, {0x1, 0x6cbc511d, 0x7ff, 0x0, 0x85ad, 0x8}, {0xffff, 0x7ff00, 0x0, 0x6, 0x800000, 0xdeb}, {0xfca, 0x9, 0x3, 0x8, 0x5, 0x15}, {0x5f, 0x0, 0xfff, 0x25, 0x2, 0x8}, {0xa, 0x7fff, 0x1000, 0x1, 0xfffffff8, 0x7}, {0x61, 0x7, 0xe7, 0x8000, 0xff82, 0x8}, {0x1, 0x1, 0x2, 0x7fff, 0x5, 0xf}, {0xfffeffff, 0x8000000, 0x80, 0xac7, 0x3, 0x81}, {0x7bf, 0x36a, 0x3, 0x9, 0x3, 0xfff}, {0xfffffffe, 0x8a5, 0x9, 0xffc, 0x2, 0x8}, {0x6, 0x7fffffff, 0x548, 0x409d, 0x80003, 0x48be}, {0x80000001, 0xc9cf, 0x6, 0x0, 0x5, 0x5}, {0x9, 0x0, 0x9, 0x2, 0xc7d, 0x4}, {0x24b, 0x5, 0x3, 0x4, 0x4, 0xee8}, {0x80000001, 0x8, 0xb9, 0xbf, 0x13, 0x5}, {0x4, 0x6, 0x9, 0x6, 0x3ff, 0x7ff}, {0x6, 0x4, 0xaa5, 0x6, 0x85b2, 0x5}, {0x7, 0x7, 0x1, 0x401, 0xfffffffc, 0xfffffffe}, {0x8, 0x8, 0x6, 0x7ff, 0x40, 0x7}, {0x3, 0xffffffff, 0x8000, 0x3, 0x8, 0x4}, {0xfffffffc, 0xfffffff8, 0x0, 0x5, 0x777c874c, 0x2}, {0x7f, 0x1, 0x8, 0x7, 0x2, 0x8000000c}, {0x1000, 0x5, 0x5, 0x758, 0x4, 0xde5}, {0xc9, 0x18, 0x9, 0x2, 0x9, 0x3}, {0x4, 0x8, 0x189afba6, 0x13b, 0xfffffffe, 0x8000}, {0x1, 0x8, 0xffff0000, 0x0, 0x4, 0x5}, {0x3, 0x19cc, 0x7, 0x3ff, 0x3, 0x8}, {0x5, 0x4, 0x8001, 0x0, 0xffffffff, 0x10000}, {0x3, 0xffffff33, 0x7, 0x8000, 0xf, 0x67}, {0x5, 0x1, 0xf, 0x7, 0x80000000, 0x40}, {0x4, 0xffff8000, 0x3, 0x7, 0x401, 0x7}, {0x3, 0x5, 0x3, 0xdf1, 0x9, 0xa86}, {0xfffffff0, 0xc39, 0x5, 0x47c91d4f, 0x7, 0xfff}, {0x7, 0x1, 0x0, 0xffff, 0x80000000, 0x44}, {0x6, 0x4, 0x80000000, 0x0, 0x9fff, 0x7}, {0x4, 0x7, 0x10, 0x12, 0x7, 0x6}, {0x401, 0xa244, 0x401, 0x8000000, 0x10000, 0x1}], [{0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0xf8e1383b8cf81f5c}, {0x0, 0x1}, {0x6}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x3, 0xbbce2ba6d91f75b4}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0xbd2160cb22616194}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x6}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x3}, {0x4}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2dc3454860c343e6, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x8, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$xdp(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="4942bed01777126086b6957d7ea020c56fc0435cbd0ae1213cffe965ddc54b19de690ec1116a9ff545007f948b66fe717d13", 0x32}, {&(0x7f0000000200)="600bca9aacb314f0e94e33bfbf690098030251c32c126239cd77112175cad081590a85af", 0x24}], 0x2}, 0x48815) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x3e, 0x14, 0x3, 0x200, "0e28cdef8de2b9faef9a9bbda7c15d174865e26f5f4eeb4b057df2645c87f52d"}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r8, 0x0, 0x78) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4) 3.104231193s ago: executing program 3 (id=333): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0xc, &(0x7f0000000340)={0x20, 0x11, 0x41, {0x41, 0x28, "56fb9a59db284fba84c852454c66416b6dc449f16a84fd3c22631d58211b21e4c1266b71afb634627a92aa9724855b3c89c212dc9425f670025c937c0f9055"}}, &(0x7f0000000240)={0x0, 0x3, 0x21, @string={0x21, 0x3, "61037301e4547868802596333013e1ab5a9e3e5696ef7eaef536bf9296b962"}}}, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x20, 0x15, 0xb7, "c2663640b4f5c737de426fee2570d4b349bb39c988185749a6ae6d8b8cd5deb36c2f87e8214df2c74d1c577d6ba4b6240b192192b3f48a648fec88472936b6fb0d186044c8c675914595ff3ae1764fda077939423f34c52f70682b7ce5b69906173d8ec19c43249dd20df4a7a5c1549c3fc8eb1689330ba3cec26b1f372cc52b14bf18db99a27560eeb890d48c455c5b04125e8f8b40641c5a57ca7a0c042211c2cd26e17495a7438b0389a41cf617111daa9207debf95"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x81, 0x3, "172f8c"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, "c6"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "a5"}, &(0x7f0000000640)={0x20, 0x84, 0x4, "6a4eda26"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "5cb771"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000280)={0x0, 0x5, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xa2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f00002bb000/0x3000)=nil, 0x3000, 0x1) setuid(0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r4, r7, 0x7, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000700)=""/79, &(0x7f0000000780)=0x4f) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x80, 0x8, 0x6, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xfe, 0x0, 0x4038a09, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x0, 0x0, 0x7, 0xc}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) 2.991092339s ago: executing program 2 (id=334): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) semget$private(0x0, 0x6, 0x3b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b640)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000002c0)="87a2978462ecec58035ccd5b38ec0518dd0c53495154fb334c4516d2a8efdc30d4", 0x21}, {&(0x7f00000004c0)="daf3004b9f61d415fab14abc3f862cecba094592c8209803984f6cb408ae4cc8a3150b9fe4bcacb0000d5ce7dc8c10683314c972452e02dc03b2bb9991f24dc24b9100", 0x43}, {0x0}, {&(0x7f00000003c0)="18a4041483ee1b822fcb2ab546d32e0c86bd6a1106b6f4f3eaccb21025d2b2", 0x1f}, {&(0x7f00000005c0)="4d6d172ebfe1e9a70190afb12af797428b053f64", 0x14}, {&(0x7f0000000600)="cee9e85060f653c5121679b7b87175e776e2047fbe8399902b5699f12a01f5b51b751dc6cc8f79e169208e2d5b4faa3940bd3a827dca5a9abc841253a14b9a839b533f3e853616c88d82c8da50e03ab4d3db1dff56b10a456ff9f0cc267989aa1903a0d99f4037748a31bfb0b9ed", 0x6e}], 0x7, &(0x7f0000006e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r0, r1]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}], 0xfc}}, {{&(0x7f0000007180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000007200), 0x0, &(0x7f00000075c0)=[@cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r0, r1]}}], 0xd0, 0x40004}}, {{&(0x7f0000007700)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000007b80)=[{&(0x7f0000007780)="d40fcd59e1a4a334dd103b6ef4631167ffb7e861b3dc24747ba71c447e2947202e6c18e46601c59bceb737e09b79c39586ec2421da3ec2e342c20193f2502837d6fece98eb84dc5b7578d29e56d27dbac3e34f29be270d4850f707b259301553e358753fe71cd037f723895f1a262681ba70cde5253f324c83", 0x79}, {&(0x7f0000007840)}, {&(0x7f0000007880)="790da8b6f70d30a43505a5bdda85ff989dd6d9a721ec90aff4169f0123bfb9274fed122eb004c644dffb4befb76e9e2386eaed68a9dedaef1923051be5", 0x3d}, {&(0x7f00000078c0)="01ecdf1cb325ed32f07e3a9fd4bafdebd12c9b98ccc73efc40d2c06519fe5dba7a418f7dbff2e1b12582d7dc2f64570a7bb92eddfe7a4b4ed4cbd26d", 0x3c}, {0x0}, {&(0x7f0000007940)="94fbaee8b12df10b1927890a2bc75dda59f1400eaa8a7d9ae6b1d4ff82f3ef7585c52a", 0x23}, {&(0x7f0000007980)="ef5476739cdaa4734c3cae105f38ead1f7a5d66a812e3e05d5b1e5d6cab7c3b73061e9de06312afc7f7c87aed29986633bbc977bc34682b4e58f76734af75014fd800876ed5b69530e5fb0d97cafafe70f7bdf4cbe4634907b8214279a251c19c51a6121", 0x64}, {&(0x7f0000007a80)="014f168a4a68fb368d46ad2abb7935ea80c91cab22801611783185f6a17adc7f60ccf789863cbf64fbcb2c3f08d899494e545276a94165fb9a8ef974fd9a0cb904ef7237d7350738dd756176722a841c4a8a22cd70bd1bc7b0a9441280c7d644d827f3ef99b6fffad563e38d", 0x6c}, {&(0x7f0000007b00)="1bde814f5449478be556a2d18ed3abed41d0a4604a336c73bfef93be93607798bfcb00a2316a58dd60058bf192b897ec792b40cb13692d608fc3ba05de8c89624326620330a538cc04a182295e2cd06a78ca", 0x52}], 0x9, &(0x7f0000009e80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xb0, 0x4000}}, {{&(0x7f0000009f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000b540)=[{&(0x7f000000a000)="46f63b9b9281bfb02f12aba73ee0f48f88cc0294d3c91c06038546df144bbf36cedf6a2ef65d166f3c7666c43bcc3a8301c1405c09f314a47fc9568307376745960e22125694aed43e3b469f819c5faecfbfff6603b95f7bd32ed0ce1743dcf43ccc6ad7b984c178e751b5655c3125808ac1099386883da12f76abfe682289dc25ad9de1da3b203b82458e7847ac2e5844e8f5f1574eec6a3978185a8f", 0x9d}, {&(0x7f000000a0c0)="cb42c6de00c497556f99d54a0b0f61c23e379292e1594f5e9f2fa76c62e088", 0x1f}, {&(0x7f000000a100)="9631a5a00d98c1214a5b547a3a9381b5fb7f0e77c9a7d8bf80ac17bb72b5d0c00814babdd046f840ff536271", 0x2c}, {&(0x7f000000a140)="d50f701925c1834f762586ff52f7ea5f90c46639c7ee01698a7b3c968d1e1c1102e0ca3a64aecfc79931e9410e178f86596ebded02fdbf7719", 0x39}, {&(0x7f000000a180)="a79f3ce59c082529439b63667439717a71dbacd05aa3b0d659bb4d1275b6cb56abf41b4eecde992c5d4e46381684e6dc5c498b65b4fd50a34d832342528697f6ce4b3005ceddb30288f679bc1077dcfa6016e75a6f9860460fbbc3924d332d996c8788aa357630fb0e9d06d55abb306ec8c280faf635326d97c231ce15df16f84745b1d34e16c74faaa8b5479a6b441cb722fc3a651848953b70889211b88057544ef68c40a8247be6aefac49d189dfb59e6129f50dc42fa3507d9846f033cdf18d49780a207883c896d578978deea4f7e3f14380c677264efcb108f062ffa6263e0d5b43d207c4d30ca4542d54c4b726230b8917112d449dc28f5dd38fd443b33167b04c4d0fb979c3aaeabdd46b995e3672832ba74f5b0af4a0a5e4f9452aed95da921adbcb6ab8424ad6aba5a6219f3f1ea56e97e6059dc8d60f1e05465db6be4158df988c76daa51086a2267d1572c9d2a9b33c43bc972c56ce0814b43177d61d727b7798c74ea8f841916556b95df0395aabd8b0adfcf4dd84d74dc588f1d97827f61faee92e96af1019d2c22f3ed84111cab089a89c891f96aacf79c6a9c42e306ceeba186376be7339079da093479fc946d1be344b669f3893ce4c4cc539ece0790a82b2f656e7ff2defe366effe3165d5fa2cc2091f8072cd484ed4c12bc77a6cbedc0c1c38efab7fb69108349180d6be5e2c189e5f1eb8f9d2ac68605e3e5b310808a9ef1b4e8758a4fb8b7f104d684187f8dccde957badfe40b743c71e3d38a2d49ab634ffc02fe44fe64a9839ed6d88e684a4adeeaf29a751e8813504f4cb2123e20f29a42792db21637d6af23e844ae78ac42c216becfb265d79f66983c7a358ee7f65d52ce119f2c5b5f32a3132cb6850e53037a1facfe1ab1689fa51818957b8682d1585eed25bb8b5d9a8fd367db29e3c150cac43883422f13e1d89dff95e0a237f414d0ae189f2fd80849c539f2e31b042fafd3466bd134790bd23320b9e16f2e2bd3e4e456c538c8ed399c53dc316c2f1973d94d2f4f77db3b0b7647426f176c84740a29719a0a56e0ff7dcbf1483fc324b210c6f7cc165d240a54e140a5ea738e0b588a83b25206c1782368f537bbfa5ca395779c72fd18b8985798ca1bb1639351ff48be9903683db57499f14388982448ec75fdfb2492b6eed2a8e0433b56ff2308475f2c34ab1ee9666def66dbf371e825f8f1f5d9793e6f60354457f27ffdbcd4933b4bc41e11f9b3e3b98089ec96f347c756ca19f129c4cdeef8113d50adea15c5432fb9e0874513a00eab095f68d07654338362499ef35f6be441f488e1e77ceab598c4f8f68b8bca435277de8ec22ce5525a16f5f58ab53cc2ba31b40c7131489d152f24a2667e1be167de53fba0bb22a9efc71241153fbbf2b55ff2ce399dac1f5e7e401c5cc626c0eb0b908c2b1ec9934833de75215c5c7609bba67197eb1864a86f5decfd41369f74e14102b6af26d6c0779be3b1f13deba82e12e24bd1756af352eb5a1e7e41c58c14d0f4161f3787936a3f2fa82233760d6fc187dfb89307063fb6238dad30d4f8e19a75b82cdaf3c78c92e97a1a7e668945e7420940daf47d74e9c6a6a0f82e2115ebd7a88cc8aeaf883601e583d12d54f3c9d8a9f18cb5bb739d9ff09d4c57326c0c3b90748ad3db330a3fc3f735ee2f9da3a1d20e287a7b5a117d77380de49094b6af90a72f509d383b813305b1493b58d5315cd3bc11bda949a918a76bb1d11d453e1c1e3f535e8dced9ca8f138777eaafbc5a9de0ee253d5192147d0ad5d686b0cd927210fe4e726018aa5c6c0773130fb55cc93768b3203c183a5b5f4f911deb5654ee56e999217b20202e0b180ea30d24e79b05fc1f9954d57005cd7f57d74786cb9900b4d2ce9de6c065b0b0ecf8a944fe4f90c191ea5b2ead74238ba5d084739896b06f1d5363c0787eedd6bf6c6fa5ce42a08d55de5e0b1cd31fa62283929ad780dd4de1863d721e3f6b03ef94b93dc6f14b61a217c5fb868f7524b5fd2812b51fef87ea5e2a8c62a97d8f92996b3f33e7d3b7187641e3a621d6acca231f9bd7caf02e43f48870edbc8c65e71082638433d27b24bb4a354516bf41d327efc879142a863baec30e67079f8cff21bb2f43d1615f0d4f0503fd7a8dce90d7438022bed164407ecc44f180615cca6f68984a8d27a9c34768fb9474afce8f51a1c1e2422b917fb915b6dd772e0981551a5c979d8b7c18bdc3d1ae4c1f62e6529ebde01a34e5b321ea6a052c0882df4aa5711477b85f3312eafabcf7369bcc7d74c463c7e2e8f5705f7c7af9fa2d375c422c6eb10b68ce7b405101bf0e62b8007f2644f51970f4f1b21ffc5acec7d43575ee7c5cebc0a0dcd05be06ff4f728b098df5d0e88decbd1476e2dba0582947784f7db5826f5b79081b829937e76713d0f135c1edbab43ab6fbc0e14986fe2a17528dca2bf7da33dbb2f21d5dabd7bc2e83af04cd281f35abd3fb926341445acf099ba05d9e5f9c93ec3aba35ed1f90b5d4ba3deb53c92178ec90b3358bd6c4479258e5b294cbe61ec438cff6501e1811f093f69edb4d1fed89bf155cdeb175482fea5ae63d94ac9623e6e4938ff26c683367ac6f0da09e7979e50c1c3874d961ef94bc0f86a1314c3fee71001ef09801837f3257606c1932b9547190eb9becc32d19dab20a609319899d7da498b4b12a2a70ac59a948a39ab708f0cc70d05c53556b14ae1390a59c73215c9ca169f2bcc31877d11be9f3eb3a0b19110d1efc205871eedd02ab926ffe4e24135ab5318fb2d9e9bb744492b510a27176a3dd2d0d2dd55fc9c317991b67c9f1dcabae3854c4ca9b9e0a103d0bfd95e9ce9ba4234f0bf3c3bae8499b95633cf2e4afa116dbfb5a9a98db4442455a16d2932f16b543a91237795ddb2d40b24fae1d012d07bd040e07e896d4146e2c9f019654c1273f4934d11e502602c241db2a0a79103072d0c12d0249f881dc7c935fdd62810d1e5d707ec260e190efb8508ee90545e911641a81d2548e8ef69b58f586ccc4e722852c51adf394e3a8ec009f6d78e0b509e1513c94ca05f2ef8760105e3dae0657f3a449631b3525e1b59bc9e7fbd6fa4831570f630a45ae4c3cc6e2e4ca96134acd0b93fdc44c17a296097f83cdd5f5496794ef1d6c59b18a37aeedc7e7d07a54559de99f485cf997c62b9357a223e41f727c27f6d91233ba1b2c76de59ee05963b899858a917dd42ca0395384127adb144dbdb50a7a55e12773fdc4b0df7196658b1dd0af4554c5ec7f44db9fb42e6a6796a00f22d979129019498341b2c455a4bce3affc2c9b0c6604afdac6e11efabee4d01f93d86d2d5bdd33f6c4ed4e0390e701ecb62e68c6d1737c94dfcf237e2d89a5cd28b82597d7f6b8519bfc98c7c6a49cc169e3aad522f6b4e45a5e4d6d8b67cca2cfb13816d67025c7d1eee29e5f33c387928769c15d56bf49f50a91639bfa0145603b9ae9fc7c2b8015cd437e9dded6796043b91ee3badc600d5639897c90063f469de7fd0f7089a6b1eba9922634147f97e00733a27b553867b99faa4c502f793e8ebf6b1a0b7f70427ff763a8b872a3a877eaea7dc77c918474caac9afb35bb3419c03184ee415a2563e48062233b8ddfc3a155c619c5237003f86cb40416d514f860b5c00396bf0972850137cd934c309c7b3f8f3f27043e254800a24e66d450fffd4ad5c4a1898509160fb9eb208e943d91c3611b0b8ee0d65afdb94a908fa0fa52ce784e9cbf863b236e1f51014b9adb9c30ccc2d898747c687918b723262eab2a9d9f23001a306cd231f0c879a1b53fdd6c348920cd68e4f61f9a6203e8272a95319a8354956215ec874aa3d62743894a867ef55abbe4745e69c035fbfbc2492322d46303492c5bd851ec31aad56894d876bd19776124cd3c37b749fd612ff70effa9b3713903482f0ee490e6512c80ecdac4c699ef3db2247a7929bea348036cbeb6dbf5c93ae5b9678d543b11f00593f9a22ce67e3774c87af9b12512537adc44d0b4e633a077b93dc682ae1b5ad481ed28894900d147c48c28fa3d00dd63d82ce2569d0ca31e8eabc94bc3f165ded429eb1f2825ac0fe43a5d67902b08fa2ec9475eefcc5e527cc088c71b3fd4f5c03f3dbd2a2c63a4a59b04cf50241513fe2c4a06461a4b38c21d260c571f42c9a790924efdd70b4f678126c0e81d8a126d3949787ff5baa6e886f6ac4eca169ff176a50718345495940a10f060fedf7921228d3756f6a88d4c250e5d0755df6d1e561999575da779b963b9a8e47a96a0bbaef6d2e15950175b9b6b7ad19fe889b85c5668fd763394bbbb08e5d6469cc77ad946e056afac8120b2495f931ef701124069934c031f747f25f7838371afe7f2a37a3bc39859d116eebf1e20bcf25abe8eb025ed4dfd3022059de5fbdc9a1a4f9be8a8098b80d8bb6d449bade578c85e45e45ee811816dcb29a70ef7081b360059183c794d998080465d98f57feeaa5fe4d30c825fd056cf20c4af9c202835bb8032c46c339ef8a5dd58980b90c080438d5b710a744f8349645b9cd0b80f40148d6543d882e0215f116c475f7c5b2be5ce5454f760dc05a491c1873bffb4695e69c531c6ae6f8803a35b123c0bda7ba9ede565cfcb6310f654dc317336010a0abd8929b397ba79abba2c335a99ba640ce02827a04a3e4636f5fd6f52f8ca8dcb42efbafe6f9c102bf66edf0d29dfe75de9ce91ac3b240aeaf0f8355b55681a23f6b36cec785ef7c65b679268fc06785ebfcce19cf8559608ce28ac8f40b3f15a6832316ee0861c3f06967447286d76e514627287373da5533496f34ef5e8e5770521ea1813073ac5488dd210e70daf2fb275feaaa0c2520b89f772ab48facaef30a9c94022d7899485b362baf704ba22d4197bd54d7b5384ded79598e90498bd25d3f88dbd92de3f02b02f8e4686d36a0fac8d697492c45bbc890c62587679f52d2d341155c348c63d68dcc700f584989c26ef6e2a4315130872bb46411fc897f3e43b700af4352e2c513340c5ffb89aacfc86f0bee7220ac28b0440d4bc17ad5658a81d5af116cd2d924c296998bc04705a07ef5305202a3ce6dfddec92f109eb11159844b8602ff94dff9b3ac276704d800aba83e2185b80044c1cffacb2174582ae3aed1fb1217438fa4c67da7c5db0c13fb7928531c747ec6ccad3ffd8402c04b92233b86e67ac842a1235f70b25e0986ded37977660ccdc0143c0def05299ee39970481d930baa8283fada3b949af5697073d52f99f227bbf4f550144460b7c1307661626c0d97a857b11b152dea184bc0a0f1b6df7d611a727997c973c823c15db02f5231aa9557e8c50f2c66ed829af93e1ac82799add050cef46a114db6083130d22f8f27b908e5c06d16355f364febfcf9e3da979b931eb50060445ffe0c509d0d036336719da80ac0091e5f1ab4008f960a5b89eb4ce3bedd2e725c9b210a65edb08d3854f12dba8584cdeff40e0d0fb65bec4fc3ac125ac34cd3409674392650d9dc277c35ed5c763b9a24f7d32f8693346b72ee38bf306f595bf4d6bbfaf43b2a1382616f9969acb4dc21ecda0f4464ea35f5fe1df8f7a502af1e94d84d64c2f6dd1c86f450d4a492da01f7b7b31ecaa8aa769672778f39efe117bd0b5779d4991f025a6b2e7acdbe658b88e034a350b795b57ccb97b63f73858008b9cdf0149e0b685a8229e25489c49a270d6b6ad64f0ad122bf0b7871be1f7089169d26b7b41182d0d97fc119969852e4745c09e50a7d7ca013967509f9e8929f", 0x1000}, {&(0x7f000000b180)="29ddd4059a9477872337013e27d5a39ac952bf2bc738c32f715f5cf0335bca5cc3236d3216b7bdf21626b834cb9104af963ee0146408563fb70f030c32ac0fbd53093db262f7b972564cf6a208057f2798708605d8c042391ef110ffae78a9de98ff064596b1cf58bb2fa0619455b02a473ecde2f05f4e6299bc528e32455f5bcb67eacad5f7d1a41f0d06881e3f808b8547aedd6047c44aa0c607332bdb66841addc0ed053a39f436ffcbed2bb98580cdf10d9ec926186d7752c125d71a04702937315ef8", 0xc5}, {&(0x7f000000b280)="26f2d18f06e68c46687aaad8286fbf36d25ab3637ec07eb388695ab553a6bae6b3055815d9fa8a735650a7383ec4cfd0d55ef64f1315eabe6c52171425f8c4b28a37e301de5f5e1c7b095b351f0c0e0f5196ff24ff8585d3ecfbfd5483affdd35cd84cde8b2c9ae525eabd1b026786b15c28736e3cfcc1d7df25669a1d49c9c455ed6f395b1da808a12da1d94581adbad29aacf5af59a28c2bfca7f7a280cb03433c502ab4af0740e8f488f2917970ac872d8c3b839fba9edbd47622d41d1ad4e666ab479c405515b6b7b7ad77e75294f1f24d9cfc5866d165626f2a124ea43a853aeafe075a62f9b8864fae26c56aa84e91f3a1a926ad", 0xf7}, {&(0x7f000000b380)="746f0d628fc4225473ae00e65f685b5f2c2f7cf01595f9d6106567534a4f3c459630cd794463c9ad5bab1a31df485c32e0f028ca35f3d5951d162131735e0c755201a36c3e9c8e3be97f3048b83b75020894e0bcaf032510b7ebbaac5072bb8671b6b848ef6399153127326bef5b23f7cc1f148f286f917c49d6f528535199366d8df482289f47f57a58e29906a7e25ca207adb3bed2bd3e800ef886e3d2e675323b6dbd08d0f1d4d9d4ca53f36cdfea286e2f65b03c629f2d83867e0ccb6355269faa4f", 0xc4}, {&(0x7f000000b480)="3059a8e1e89455a27c7fff42eb6747eb5588c22c963a9977b039faf9bfcbe55ff51d25d8eff388f75a50f4ff79c264cf5cc5288174e2a6f35f412acf462901274d9534a2ff5f2fa5e8dfd096eb22f67891c4e429d0e1878681b5fa251d1fe62a62bf6bf3a18349cfa7b240501a141c27bcd9b6ef5061c09934b9e272a76000b2cfb3d5f6f6a0bed147f2b9ed665f9a25777fc2bd4c79b0e8b01f77c57dac1fc5ce75dc75ea", 0xa5}], 0x9, &(0x7f000000b600)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r0, r1]}}], 0x20}}], 0x4, 0x40) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10a000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x80) 2.34637023s ago: executing program 0 (id=335): fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="1b0000001a005f3803000000000000008104008000000000000000", 0x1b) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty, 0x4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) 1.870517584s ago: executing program 1 (id=336): fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="1b0000001a005f3803000000000000008104008000000000000000", 0x1b) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty, 0x4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) 252.858639ms ago: executing program 0 (id=337): fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="1b0000001a005f3803000000000000008104008000000000000000", 0x1b) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty, 0x4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) 0s ago: executing program 3 (id=338): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x88901) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003e80)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x8, 0x60c5, 0x1ff}, 0x0, 0x52}, [{0x0, 0x3, 0x8, 0x4, 0x7, 0x4}, {0x3, 0x2f, 0x4, 0x2, 0x9, 0xffffffff}, {0xbc6d, 0x7, 0x4, 0x2, 0x2, 0xfffffffb}, {0xe9, 0x800, 0x80000000, 0x5, 0x3, 0x6}, {0x80, 0x3, 0x0, 0x1, 0x213a, 0x3}, {0x6, 0x5, 0x10, 0x8, 0x40, 0xf2}, {0x9, 0xff, 0x2, 0x7, 0x7d, 0x9c}, {0x6, 0x2, 0xfffffff7, 0x5, 0x1, 0x80}, {0x3, 0xee, 0x0, 0x2, 0x2}, {0x3, 0x5, 0x4e0397d2, 0x3, 0x100f, 0x7}, {0x10000, 0x6, 0x101, 0xfffffedb, 0xfffffff7, 0x7}, {0xea7, 0xd98, 0x10, 0x58d, 0x0, 0x1}, {0x9, 0x5847, 0x6a, 0x2, 0xb, 0x400}, {0x6, 0x4000000, 0x8, 0x1, 0x8, 0x8b9}, {0x4, 0x2, 0x6, 0x74, 0xd, 0x2}, {0x0, 0x0, 0x431, 0x5, 0x1ff, 0xbdbc}, {0x2, 0x80000001, 0x3, 0x3, 0x9, 0x5563f14a}, {0x1, 0xfff, 0x800, 0xd4e4, 0x8, 0x3}, {0x40, 0x9, 0x9, 0x5, 0xffffffff, 0xfffffffc}, {0x1, 0xe4f2, 0x2, 0x7, 0x0, 0x5}, {0xd19f, 0x8, 0x4000005, 0x10001, 0x5, 0x7}, {0x10000, 0x1da26058, 0x2, 0x8, 0xd1, 0x80000001}, {0x0, 0xffffffff, 0x70, 0xf5, 0xffffffff, 0x6}, {0x9, 0x6, 0x5, 0xff, 0xa, 0x4}, {0x5f9, 0x7, 0x1, 0x7e7, 0x2, 0x629}, {0x1, 0x7, 0xe0000, 0x5, 0x0, 0x9}, {0x1, 0x595, 0x8, 0x6, 0xffff, 0x800}, {0x9, 0x3, 0x1, 0x0, 0x8, 0x4}, {0x2, 0x7ff, 0x4, 0xe3fc, 0x5, 0x2ccb}, {0x8000, 0x4, 0xe, 0x7db2, 0x7, 0xfffffffc}, {0x1a, 0x4, 0x3, 0x5, 0x81, 0x3}, {0x80, 0x5, 0x6, 0x1, 0x8, 0x4}, {0x101, 0x9, 0x1, 0x8e, 0x2b4ea749, 0x98bf}, {0xfffffffc, 0x2, 0x4, 0x6, 0x6, 0xfffffffc}, {0xad5e, 0x7, 0x7, 0x401, 0x3, 0x10001}, {0xf, 0x9, 0x2, 0x1, 0x2, 0x3}, {0x0, 0x1000, 0xffffffff, 0x5, 0x9, 0x9}, {0x9, 0x3ff, 0xffffffff, 0x6, 0xfffffffa, 0x13}, {0xad, 0x4, 0x2, 0xc45, 0x76ec1b55, 0x24000000}, {0xffff, 0x5, 0x3, 0x657, 0x8}, {0xfffffff8, 0x8, 0x80000001, 0x0, 0x4, 0x5}, {0x5, 0x9, 0xa61e, 0x4, 0x1}, {0x8, 0xffff, 0x7fff, 0x3, 0x81, 0x2}, {0x3216, 0x100, 0x1, 0xfffffffa, 0x7, 0x6}, {0xffffff01, 0xfffff474, 0x80000003, 0x9, 0x400, 0x6}, {0x4, 0x0, 0xf7, 0x4, 0xa3f, 0x4}, {0xcb, 0x0, 0x7, 0x8, 0x3, 0x8}, {0x10000, 0x7, 0x80, 0xffffff3f, 0xc28, 0x8}, {0x7, 0xfffffc00, 0xfffffff7, 0x7ff, 0x8, 0x4}, {0x9, 0x1ff, 0x0, 0x7, 0x811b, 0x4eef4a80}, {0xa6, 0x429c6781, 0x2, 0x8, 0x6, 0x2}, {0x0, 0x5, 0x8, 0x200, 0x7fffffff, 0x4}, {0x3c9, 0x1000, 0x7, 0x88e3, 0x9, 0x6}, {0x80, 0x7, 0x9, 0x586, 0x80, 0x80000001}, {0xc6, 0x1, 0x400, 0x10000, 0xa5, 0x8}, {0x9, 0x800, 0x0, 0xffffffff, 0x2, 0x3}, {0x0, 0x9, 0x8, 0x0, 0x2, 0x5}, {0x1, 0x10, 0x66, 0x10000, 0x9, 0x58}, {0x1606, 0x7, 0x67000, 0x4, 0x1, 0x5}, {0x8, 0x10000, 0x6, 0x4, 0x0, 0x2}, {0x4, 0xffffffbe, 0x8, 0x1, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x3, 0x8, 0x4}, {0x9, 0x2, 0x1fe, 0x203c81ad, 0x3, 0xac6}, {0x2, 0x5a4, 0x80, 0x9, 0x8, 0x5}, {0x7, 0x5, 0x80, 0x5, 0x6, 0xffffffff}, {0x1, 0x2, 0x6, 0xffff, 0x3695, 0x8b84}, {0x6, 0xc138, 0xfffffffe, 0x200, 0x8001, 0x6}, {0x9, 0xb, 0x4, 0x3, 0x6, 0x4}, {0x7b, 0xfffffffb, 0x8, 0x4, 0x4bf2}, {0x10000, 0x8, 0x8002, 0x5, 0x81, 0x3}, {0x5, 0x1, 0xfffffffd, 0x1000, 0xfffffffb, 0x1ee29bb3}, {0x3, 0x7, 0x1, 0xfaf9, 0x6, 0x8}, {0xf, 0x800, 0x9, 0x8, 0x10, 0xfffffffa}, {0xf, 0xf, 0x1, 0x8000, 0x7fffffff, 0x3}, {0x3, 0x6, 0x7, 0xf, 0x7fffffff, 0x9}, {0x5, 0x3, 0x1, 0x0, 0x6, 0x2}, {0x9, 0x5, 0x3ff, 0x101, 0xfffffd92, 0x4}, {0x9, 0x8, 0x53, 0x101, 0x3, 0x4}, {0x7f, 0x1, 0x3ff, 0xe, 0x3}, {0x8, 0x7, 0x0, 0x7, 0xdbe7, 0x64}, {0x8, 0xd5, 0x80000000, 0x0, 0x3ff, 0x8}, {0x5, 0x9, 0x7fff, 0x3, 0x4, 0xffff0001}, {0x6, 0x7f, 0x1, 0x3, 0xffffffff, 0x6}, {0x3, 0x4, 0x6, 0xffffff46, 0xfff, 0x1}, {0xfb, 0xffff, 0xfffffff7, 0x1633a348, 0x7, 0x401}, {0x2, 0x5, 0xfff, 0x0, 0x2, 0x6}, {0x0, 0xc, 0x6, 0xb0, 0x8, 0x10000}, {0x50000, 0x7, 0xf, 0x6, 0x7, 0x81}, {0xffffffff, 0x5, 0x400, 0x1, 0x3, 0x6}, {0x2, 0x9b, 0x2, 0x0, 0xebb, 0x7fff}, {0x2, 0x928f, 0x9, 0x1ff, 0x4f5b, 0x2}, {0x1, 0x6cbc511d, 0x7ff, 0x0, 0x85ad, 0x8}, {0xffff, 0x7ff00, 0x0, 0x6, 0x800000, 0xdeb}, {0xfca, 0x9, 0x3, 0x8, 0x5, 0x15}, {0x5f, 0x0, 0xfff, 0x25, 0x2, 0x8}, {0xa, 0x7fff, 0x1000, 0x1, 0xfffffff8, 0x7}, {0x61, 0x7, 0xe7, 0x8000, 0xff82, 0x8}, {0x1, 0x1, 0x2, 0x7fff, 0x5, 0xf}, {0xfffeffff, 0x8000000, 0x80, 0xac7, 0x3, 0x81}, {0x7bf, 0x36a, 0x3, 0x9, 0x3, 0xfff}, {0xfffffffe, 0x8a5, 0x9, 0xffc, 0x2, 0x8}, {0x6, 0x7fffffff, 0x548, 0x409d, 0x80003, 0x48be}, {0x80000001, 0xc9cf, 0x6, 0x0, 0x5, 0x5}, {0x9, 0x0, 0x9, 0x2, 0xc7d, 0x4}, {0x24b, 0x5, 0x3, 0x4, 0x4, 0xee8}, {0x80000001, 0x8, 0xb9, 0xbf, 0x13, 0x5}, {0x4, 0x6, 0x9, 0x6, 0x3ff, 0x7ff}, {0x6, 0x4, 0xaa5, 0x6, 0x85b2, 0x5}, {0x7, 0x7, 0x1, 0x401, 0xfffffffc, 0xfffffffe}, {0x8, 0x8, 0x6, 0x7ff, 0x40, 0x7}, {0x3, 0xffffffff, 0x8000, 0x3, 0x8, 0x4}, {0xfffffffc, 0xfffffff8, 0x0, 0x5, 0x777c874c, 0x2}, {0x7f, 0x1, 0x8, 0x7, 0x2, 0x8000000c}, {0x1000, 0x5, 0x5, 0x758, 0x4, 0xde5}, {0xc9, 0x18, 0x9, 0x2, 0x9, 0x3}, {0x4, 0x8, 0x189afba6, 0x13b, 0xfffffffe, 0x8000}, {0x1, 0x8, 0xffff0000, 0x0, 0x4, 0x5}, {0x3, 0x19cc, 0x7, 0x3ff, 0x3, 0x8}, {0x5, 0x4, 0x8001, 0x0, 0xffffffff, 0x10000}, {0x3, 0xffffff33, 0x7, 0x8000, 0xf, 0x67}, {0x5, 0x1, 0xf, 0x7, 0x80000000, 0x40}, {0x4, 0xffff8000, 0x3, 0x7, 0x401, 0x7}, {0x3, 0x5, 0x3, 0xdf1, 0x9, 0xa86}, {0xfffffff0, 0xc39, 0x5, 0x47c91d4f, 0x7, 0xfff}, {0x7, 0x1, 0x0, 0xffff, 0x80000000, 0x44}, {0x6, 0x4, 0x80000000, 0x0, 0x9fff, 0x7}, {0x4, 0x7, 0x10, 0x12, 0x7, 0x6}, {0x401, 0xa244, 0x401, 0x8000000, 0x10000, 0x1}], [{0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0xf8e1383b8cf81f5c}, {0x0, 0x1}, {0x6}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x3, 0xbbce2ba6d91f75b4}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0xbd2160cb22616194}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x6}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x3}, {0x4}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2dc3454860c343e6, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x8, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$xdp(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="4942bed01777126086b6957d7ea020c56fc0435cbd0ae1213cffe965ddc54b19de690ec1116a9ff545007f948b66fe717d13", 0x32}, {&(0x7f0000000200)="600bca9aacb314f0e94e33bfbf690098030251c32c126239cd77112175cad081590a85af", 0x24}], 0x2}, 0x48815) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x3e, 0x14, 0x3, 0x200, "0e28cdef8de2b9faef9a9bbda7c15d174865e26f5f4eeb4b057df2645c87f52d"}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r8, 0x0, 0x78) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4) kernel console output (not intermixed with test programs): T6493] xfrm_user_rcv_msg_compat+0x478/0x1460 [ 146.198050][ T6493] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 146.198122][ T6493] ? xfrm_get_translator+0x1b/0x240 [ 146.198148][ T6493] ? xfrm_get_translator+0x1b/0x240 [ 146.198178][ T6493] xfrm_user_rcv_msg+0x285/0xab0 [ 146.198210][ T6493] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 146.198292][ T6493] ? __pfx___mutex_trylock_common+0x10/0x10 [ 146.198322][ T6493] ? rcu_is_watching+0x15/0xb0 [ 146.198350][ T6493] ? trace_contention_end+0x39/0x120 [ 146.198375][ T6493] ? __mutex_lock+0x335/0x1360 [ 146.198413][ T6493] netlink_rcv_skb+0x208/0x470 [ 146.198446][ T6493] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 146.198473][ T6493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.198519][ T6493] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.198549][ T6493] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.198582][ T6493] xfrm_netlink_rcv+0x79/0x90 [ 146.198607][ T6493] netlink_unicast+0x82c/0x9e0 [ 146.198645][ T6493] ? __pfx_netlink_unicast+0x10/0x10 [ 146.198675][ T6493] ? netlink_sendmsg+0x642/0xb30 [ 146.198703][ T6493] ? skb_put+0x11b/0x210 [ 146.198740][ T6493] netlink_sendmsg+0x805/0xb30 [ 146.198783][ T6493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.198817][ T6493] ? __import_iovec+0x5d4/0x7f0 [ 146.198839][ T6493] ? aa_sock_msg_perm+0xf1/0x1d0 [ 146.198874][ T6493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.198897][ T6493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.198930][ T6493] __sock_sendmsg+0x21c/0x270 [ 146.198961][ T6493] ____sys_sendmsg+0x505/0x830 [ 146.198989][ T6493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.199030][ T6493] ___sys_sendmsg+0x21f/0x2a0 [ 146.199054][ T6493] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.199117][ T6493] ? __fget_files+0x2a/0x420 [ 146.199135][ T6493] ? __fget_files+0x3a0/0x420 [ 146.199166][ T6493] __sys_sendmsg+0x164/0x220 [ 146.199190][ T6493] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.199231][ T6493] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.199264][ T6493] __do_fast_syscall_32+0xb6/0x2b0 [ 146.199296][ T6493] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.199329][ T6493] do_fast_syscall_32+0x34/0x80 [ 146.199367][ T6493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.199393][ T6493] RIP: 0023:0xf70be539 [ 146.199410][ T6493] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 146.199428][ T6493] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 146.199450][ T6493] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 146.199464][ T6493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.199476][ T6493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.199488][ T6493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 146.199500][ T6493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.199531][ T6493] [ 147.178932][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 147.499722][ T6524] syzkaller1: entered promiscuous mode [ 147.505415][ T6524] syzkaller1: entered allmulticast mode [ 147.639863][ T6528] tipc: Started in network mode [ 147.653257][ T6528] tipc: Node identity ac14140f, cluster identity 4711 [ 147.674764][ T6528] tipc: New replicast peer: 255.255.255.255 [ 147.686506][ T6528] tipc: Enabled bearer , priority 10 [ 147.729689][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 147.760492][ T6530] tipc: Disabling bearer [ 147.937269][ T5953] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 147.967548][ T5925] usb 4-1: USB disconnect, device number 3 [ 148.110378][ T6537] bridge_slave_0: left allmulticast mode [ 148.116132][ T6537] bridge_slave_0: left promiscuous mode [ 148.122278][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.250376][ T5953] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 148.268365][ T6537] bridge_slave_1: left allmulticast mode [ 148.274233][ T6537] bridge_slave_1: left promiscuous mode [ 148.280216][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.309039][ T5953] usb 1-1: config 0 has no interface number 0 [ 148.315250][ T5953] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 148.335150][ T5953] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 148.457909][ T6537] bond0: (slave bond_slave_0): Releasing backup interface [ 148.475375][ T5953] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 148.504388][ T6537] bond0: (slave bond_slave_1): Releasing backup interface [ 148.525604][ T5953] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 148.573340][ T5953] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 148.618386][ T6537] team0: Port device team_slave_0 removed [ 148.640234][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.692059][ T5953] usb 1-1: config 0 descriptor?? [ 148.723061][ T5953] hub 1-1:0.3: bad descriptor, ignoring hub [ 148.746254][ T5953] hub 1-1:0.3: probe with driver hub failed with error -5 [ 148.768900][ T6537] team0: Port device team_slave_1 removed [ 148.789256][ T5953] sierra 1-1:0.3: Sierra USB modem converter detected [ 148.806275][ T6537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.834219][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.861337][ T6537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.869394][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.044674][ T5953] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 149.096395][ T5953] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 149.244416][ T5953] usb 1-1: USB disconnect, device number 6 [ 149.416261][ T5953] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 149.429225][ T6548] tipc: Enabled bearer , priority 0 [ 149.603116][ T6544] tipc: Disabling bearer [ 149.639791][ T5953] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 149.716790][ T5953] sierra 1-1:0.3: device disconnected [ 150.360253][ T6569] fuse: Unknown parameter 'ºqgOÿ#¬.Ÿ‰¸Ò[HÞ‘¥›˜ƒêþ{„_µ²½' [ 151.248385][ T6575] PKCS7: Unknown OID: [5] (bad) [ 151.253325][ T6575] PKCS7: Only support pkcs7_signedData type [ 152.407013][ T6601] binder: 6599:6601 ioctl 400c620e 80000180 returned -22 [ 152.467246][ T5932] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.627298][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 152.649567][ T5932] usb 5-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 152.667422][ T5932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12032, setting to 64 [ 152.684310][ T5932] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 152.750769][ T5932] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 152.762540][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.774160][ T5932] usb 5-1: Product: syz [ 152.784875][ T5932] usb 5-1: Manufacturer: syz [ 152.787216][ T5918] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 152.790033][ T5932] usb 5-1: SerialNumber: syz [ 152.825462][ T5932] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 152.839172][ T5932] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 152.851543][ T5932] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 153.141911][ T5918] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 153.150397][ T5918] usb 4-1: config 0 has no interface number 0 [ 153.157334][ T5918] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 153.167026][ T5918] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 153.179069][ T5918] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 153.193012][ T5918] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 153.204800][ T5918] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 153.221830][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.239441][ T5918] usb 4-1: config 0 descriptor?? [ 153.253761][ T5918] hub 4-1:0.3: bad descriptor, ignoring hub [ 153.265056][ T5918] hub 4-1:0.3: probe with driver hub failed with error -5 [ 153.280962][ T5918] sierra 4-1:0.3: Sierra USB modem converter detected [ 153.619449][ T5918] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 153.716247][ T5918] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 153.820487][ T5918] usb 4-1: USB disconnect, device number 4 [ 153.943160][ T5918] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 154.092947][ T5918] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 154.110539][ T6632] binder: 6624:6632 ioctl 40043311 800000c0 returned -22 [ 154.172496][ T5918] sierra 4-1:0.3: device disconnected [ 154.419758][ T6637] FAULT_INJECTION: forcing a failure. [ 154.419758][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 154.471739][ T6637] CPU: 1 UID: 0 PID: 6637 Comm: syz.3.146 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 154.471770][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.471783][ T6637] Call Trace: [ 154.471792][ T6637] [ 154.471802][ T6637] dump_stack_lvl+0x189/0x250 [ 154.471834][ T6637] ? __pfx____ratelimit+0x10/0x10 [ 154.471863][ T6637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.471888][ T6637] ? __pfx__printk+0x10/0x10 [ 154.471925][ T6637] ? __pfx___might_resched+0x10/0x10 [ 154.471944][ T6637] ? fs_reclaim_acquire+0x7d/0x100 [ 154.471982][ T6637] should_fail_ex+0x414/0x560 [ 154.472015][ T6637] should_failslab+0xa8/0x100 [ 154.472048][ T6637] kmem_cache_alloc_noprof+0x73/0x3c0 [ 154.472076][ T6637] ? skb_clone+0x212/0x3a0 [ 154.472103][ T6637] skb_clone+0x212/0x3a0 [ 154.472124][ T6637] ? nfnetlink_rcv+0x486/0x2520 [ 154.472153][ T6637] nfnetlink_rcv+0x4b4/0x2520 [ 154.472187][ T6637] ? __dev_queue_xmit+0x1d79/0x3b50 [ 154.472222][ T6637] ? __dev_queue_xmit+0x27b/0x3b50 [ 154.472259][ T6637] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 154.472302][ T6637] ? ref_tracker_free+0x63a/0x7d0 [ 154.472333][ T6637] ? __asan_memcpy+0x40/0x70 [ 154.472357][ T6637] ? __pfx_ref_tracker_free+0x10/0x10 [ 154.472384][ T6637] ? __skb_clone+0x63/0x7a0 [ 154.472410][ T6637] ? __skb_clone+0x483/0x7a0 [ 154.472439][ T6637] ? skb_clone+0x246/0x3a0 [ 154.472464][ T6637] ? __netlink_deliver_tap+0x807/0x850 [ 154.472495][ T6637] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.472544][ T6637] netlink_unicast+0x82c/0x9e0 [ 154.472581][ T6637] ? __pfx_netlink_unicast+0x10/0x10 [ 154.472618][ T6637] ? netlink_sendmsg+0x642/0xb30 [ 154.472648][ T6637] ? skb_put+0x11b/0x210 [ 154.472684][ T6637] netlink_sendmsg+0x805/0xb30 [ 154.472726][ T6637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.472760][ T6637] ? __import_iovec+0x5d4/0x7f0 [ 154.472781][ T6637] ? aa_sock_msg_perm+0xf1/0x1d0 [ 154.472816][ T6637] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.472839][ T6637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.472872][ T6637] __sock_sendmsg+0x21c/0x270 [ 154.472903][ T6637] ____sys_sendmsg+0x505/0x830 [ 154.472931][ T6637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.472970][ T6637] ___sys_sendmsg+0x21f/0x2a0 [ 154.472995][ T6637] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.473055][ T6637] ? __fget_files+0x2a/0x420 [ 154.473073][ T6637] ? __fget_files+0x3a0/0x420 [ 154.473103][ T6637] __sys_sendmsg+0x164/0x220 [ 154.473127][ T6637] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.473166][ T6637] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.473199][ T6637] __do_fast_syscall_32+0xb6/0x2b0 [ 154.473231][ T6637] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.473264][ T6637] do_fast_syscall_32+0x34/0x80 [ 154.473295][ T6637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.473321][ T6637] RIP: 0023:0xf70be539 [ 154.473339][ T6637] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 154.473356][ T6637] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 154.473378][ T6637] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 154.473393][ T6637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.473405][ T6637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.473417][ T6637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 154.473429][ T6637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.473459][ T6637] [ 155.282204][ T5918] usb 5-1: USB disconnect, device number 6 [ 155.650260][ T5932] IPVS: starting estimator thread 0... [ 155.694803][ T6658] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 155.739089][ T6658] FAULT_INJECTION: forcing a failure. [ 155.739089][ T6658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.761556][ T6658] CPU: 0 UID: 0 PID: 6658 Comm: syz.1.152 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 155.761587][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.761600][ T6658] Call Trace: [ 155.761609][ T6658] [ 155.761618][ T6658] dump_stack_lvl+0x189/0x250 [ 155.761651][ T6658] ? __pfx____ratelimit+0x10/0x10 [ 155.761681][ T6658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.761707][ T6658] ? __pfx__printk+0x10/0x10 [ 155.761751][ T6658] should_fail_ex+0x414/0x560 [ 155.761785][ T6658] _copy_to_user+0x31/0xb0 [ 155.761813][ T6658] simple_read_from_buffer+0xe1/0x170 [ 155.761850][ T6658] proc_fail_nth_read+0x1b3/0x220 [ 155.761879][ T6658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.761908][ T6658] ? rw_verify_area+0x2a6/0x4d0 [ 155.761934][ T6658] ? __lock_acquire+0xab9/0xd20 [ 155.761964][ T6658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.761989][ T6658] vfs_read+0x200/0xa30 [ 155.762015][ T6658] ? fdget_pos+0x247/0x320 [ 155.762038][ T6658] ? __pfx___mutex_lock+0x10/0x10 [ 155.762068][ T6658] ? __pfx_vfs_read+0x10/0x10 [ 155.762098][ T6658] ? __fget_files+0x2a/0x420 [ 155.762121][ T6658] ? __fget_files+0x3a0/0x420 [ 155.762138][ T6658] ? __fget_files+0x2a/0x420 [ 155.762166][ T6658] ksys_read+0x145/0x250 [ 155.762197][ T6658] ? __pfx_ksys_read+0x10/0x10 [ 155.762230][ T6658] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.762263][ T6658] __do_fast_syscall_32+0xb6/0x2b0 [ 155.762296][ T6658] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.762329][ T6658] do_fast_syscall_32+0x34/0x80 [ 155.762361][ T6658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.762387][ T6658] RIP: 0023:0xf70be539 [ 155.762406][ T6658] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 155.762424][ T6658] RSP: 002b:00000000f54ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 155.762446][ T6658] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ae620 [ 155.762460][ T6658] RDX: 000000000000000f RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 155.762473][ T6658] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 155.762484][ T6658] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.762497][ T6658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.762539][ T6658] [ 156.084673][ T6657] IPVS: using max 29 ests per chain, 69600 per kthread [ 156.441403][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 156.441423][ T30] audit: type=1326 audit(1754882941.798:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 156.575255][ T30] audit: type=1326 audit(1754882941.838:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 156.803257][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.156'. [ 156.812432][ T6679] netlink: 'syz.3.156': attribute type 7 has an invalid length. [ 156.822907][ T6679] netlink: 'syz.3.156': attribute type 8 has an invalid length. [ 156.831516][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 156.953002][ T6677] mmap: syz.3.156 (6677) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.797185][ T5953] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.927789][ T5953] usb 2-1: device descriptor read/64, error -71 [ 157.980182][ T5918] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.158141][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 158.185114][ T5953] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.224345][ T5918] usb 4-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 158.247181][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12032, setting to 64 [ 158.290155][ T5918] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 158.359065][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 158.368538][ T5953] usb 2-1: device descriptor read/64, error -71 [ 158.383872][ T5918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 158.450140][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.470414][ T5918] usb 4-1: Product: syz [ 158.477573][ T5953] usb usb2-port1: attempt power cycle [ 158.503756][ T5918] usb 4-1: Manufacturer: syz [ 158.517163][ T5918] usb 4-1: SerialNumber: syz [ 158.600043][ T5918] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 158.631519][ T5918] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 158.647391][ T5925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 158.664489][ T5918] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 158.847236][ T5953] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.878019][ T5953] usb 2-1: device descriptor read/8, error -71 [ 158.889479][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 158.905799][ T5925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 158.953896][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.100318][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 159.141176][ T5925] pvrusb2: ********** [ 159.157320][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 159.157320][ T5953] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.177981][ T5953] usb 2-1: device descriptor read/8, error -71 [ 159.209758][ T5925] pvrusb2: Important functionality might not be entirely working. [ 159.242124][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 159.270838][ T5925] pvrusb2: ********** [ 159.288038][ T5953] usb usb2-port1: unable to enumerate USB device [ 159.338664][ T2347] pvrusb2: Invalid write control endpoint [ 159.526921][ T6726] FAULT_INJECTION: forcing a failure. [ 159.526921][ T6726] name failslab, interval 1, probability 0, space 0, times 0 [ 159.552918][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.0.166 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 159.552949][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.552963][ T6726] Call Trace: [ 159.552972][ T6726] [ 159.552982][ T6726] dump_stack_lvl+0x189/0x250 [ 159.553013][ T6726] ? __pfx____ratelimit+0x10/0x10 [ 159.553042][ T6726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.553068][ T6726] ? __pfx__printk+0x10/0x10 [ 159.553105][ T6726] ? __pfx___might_resched+0x10/0x10 [ 159.553125][ T6726] ? fs_reclaim_acquire+0x7d/0x100 [ 159.553164][ T6726] should_fail_ex+0x414/0x560 [ 159.553198][ T6726] should_failslab+0xa8/0x100 [ 159.553231][ T6726] __kmalloc_noprof+0xcb/0x4f0 [ 159.553266][ T6726] ? kfree+0x4d/0x440 [ 159.553289][ T6726] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 159.553317][ T6726] tomoyo_realpath_from_path+0xe3/0x5d0 [ 159.553341][ T6726] ? tomoyo_domain+0xd9/0x130 [ 159.553373][ T6726] tomoyo_path2_perm+0x265/0x680 [ 159.553403][ T6726] ? tomoyo_path2_perm+0x235/0x680 [ 159.553433][ T6726] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 159.553466][ T6726] ? __asan_memset+0x22/0x50 [ 159.553534][ T6726] tomoyo_path_link+0xb7/0x100 [ 159.553558][ T6726] ? __pfx_tomoyo_path_link+0x10/0x10 [ 159.553587][ T6726] ? __pfx_filename_create+0x10/0x10 [ 159.553619][ T6726] security_path_link+0x159/0x360 [ 159.553645][ T6726] do_linkat+0x216/0x560 [ 159.553685][ T6726] ? __pfx_do_linkat+0x10/0x10 [ 159.553718][ T6726] ? getname_flags+0x1e5/0x540 [ 159.553742][ T6726] __ia32_sys_linkat+0xd4/0xf0 [ 159.553776][ T6726] __do_fast_syscall_32+0xb6/0x2b0 [ 159.553809][ T6726] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.553842][ T6726] do_fast_syscall_32+0x34/0x80 [ 159.553872][ T6726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.553896][ T6726] RIP: 0023:0xf706e539 [ 159.553913][ T6726] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 159.553931][ T6726] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 000000000000012f [ 159.553951][ T6726] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800006c0 [ 159.553965][ T6726] RDX: 00000000ffffff9c RSI: 0000000080000700 RDI: 0000000000000000 [ 159.553978][ T6726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.553989][ T6726] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 159.554001][ T6726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.554031][ T6726] [ 159.554040][ T6726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.844038][ T6704] pvrusb2: Invalid write control endpoint [ 159.892986][ T2347] pvrusb2: Invalid write control endpoint [ 159.898965][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 159.917510][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 159.925113][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 159.962064][ T2347] pvrusb2: Device being rendered inoperable [ 159.977006][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 159.992054][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 160.001299][ T2347] pvrusb2: Attached sub-driver cx25840 [ 160.006803][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 160.046183][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 160.289883][ T6736] FAULT_INJECTION: forcing a failure. [ 160.289883][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 160.360866][ T6736] CPU: 1 UID: 0 PID: 6736 Comm: syz.0.168 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 160.360898][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.360911][ T6736] Call Trace: [ 160.360920][ T6736] [ 160.360929][ T6736] dump_stack_lvl+0x189/0x250 [ 160.360960][ T6736] ? __pfx____ratelimit+0x10/0x10 [ 160.360989][ T6736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.361015][ T6736] ? __pfx__printk+0x10/0x10 [ 160.361051][ T6736] ? __pfx___might_resched+0x10/0x10 [ 160.361071][ T6736] ? fs_reclaim_acquire+0x7d/0x100 [ 160.361110][ T6736] should_fail_ex+0x414/0x560 [ 160.361143][ T6736] should_failslab+0xa8/0x100 [ 160.361177][ T6736] kmem_cache_alloc_noprof+0x73/0x3c0 [ 160.361205][ T6736] ? skb_clone+0x212/0x3a0 [ 160.361233][ T6736] skb_clone+0x212/0x3a0 [ 160.361253][ T6736] ? nfnetlink_rcv+0x486/0x2520 [ 160.361283][ T6736] nfnetlink_rcv+0x4b4/0x2520 [ 160.361313][ T6736] ? __dev_queue_xmit+0x1d79/0x3b50 [ 160.361349][ T6736] ? __dev_queue_xmit+0x27b/0x3b50 [ 160.361386][ T6736] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 160.361437][ T6736] ? ref_tracker_free+0x63a/0x7d0 [ 160.361468][ T6736] ? __asan_memcpy+0x40/0x70 [ 160.361492][ T6736] ? __pfx_ref_tracker_free+0x10/0x10 [ 160.361520][ T6736] ? __skb_clone+0x63/0x7a0 [ 160.361546][ T6736] ? __skb_clone+0x483/0x7a0 [ 160.361576][ T6736] ? skb_clone+0x246/0x3a0 [ 160.361602][ T6736] ? __netlink_deliver_tap+0x807/0x850 [ 160.361633][ T6736] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.361682][ T6736] netlink_unicast+0x82c/0x9e0 [ 160.361719][ T6736] ? __pfx_netlink_unicast+0x10/0x10 [ 160.361749][ T6736] ? netlink_sendmsg+0x642/0xb30 [ 160.361778][ T6736] ? skb_put+0x11b/0x210 [ 160.361819][ T6736] netlink_sendmsg+0x805/0xb30 [ 160.361861][ T6736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.361895][ T6736] ? __import_iovec+0x5d4/0x7f0 [ 160.361916][ T6736] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.361951][ T6736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.361974][ T6736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.362006][ T6736] __sock_sendmsg+0x21c/0x270 [ 160.362037][ T6736] ____sys_sendmsg+0x505/0x830 [ 160.362065][ T6736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.362104][ T6736] ___sys_sendmsg+0x21f/0x2a0 [ 160.362129][ T6736] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.362189][ T6736] ? __fget_files+0x2a/0x420 [ 160.362208][ T6736] ? __fget_files+0x3a0/0x420 [ 160.362238][ T6736] __sys_sendmsg+0x164/0x220 [ 160.362262][ T6736] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.362301][ T6736] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.362334][ T6736] __do_fast_syscall_32+0xb6/0x2b0 [ 160.362366][ T6736] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.362405][ T6736] do_fast_syscall_32+0x34/0x80 [ 160.362437][ T6736] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.362463][ T6736] RIP: 0023:0xf706e539 [ 160.362481][ T6736] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 160.362499][ T6736] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 160.362521][ T6736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 160.362536][ T6736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.362548][ T6736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.362559][ T6736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 160.362572][ T6736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.362601][ T6736] [ 160.708742][ T6739] FAULT_INJECTION: forcing a failure. [ 160.708742][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 160.721657][ T6739] CPU: 1 UID: 0 PID: 6739 Comm: syz.4.169 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 160.721687][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.721700][ T6739] Call Trace: [ 160.721709][ T6739] [ 160.721718][ T6739] dump_stack_lvl+0x189/0x250 [ 160.721751][ T6739] ? __pfx____ratelimit+0x10/0x10 [ 160.721781][ T6739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.721807][ T6739] ? __pfx__printk+0x10/0x10 [ 160.721852][ T6739] should_fail_ex+0x414/0x560 [ 160.721884][ T6739] should_failslab+0xa8/0x100 [ 160.721916][ T6739] kmem_cache_alloc_noprof+0x73/0x3c0 [ 160.721944][ T6739] ? skb_clone+0x212/0x3a0 [ 160.721971][ T6739] skb_clone+0x212/0x3a0 [ 160.721992][ T6739] ? dev_queue_xmit_nit+0x26f/0xcc0 [ 160.722027][ T6739] dev_queue_xmit_nit+0x416/0xcc0 [ 160.722059][ T6739] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 160.722103][ T6739] dev_hard_start_xmit+0x1be/0x830 [ 160.722156][ T6739] __dev_queue_xmit+0x1b8d/0x3b50 [ 160.722179][ T6739] ? kasan_save_track+0x3e/0x80 [ 160.722203][ T6739] ? kasan_save_free_info+0x46/0x50 [ 160.722223][ T6739] ? __kasan_slab_free+0x5b/0x80 [ 160.722260][ T6739] ? __dev_queue_xmit+0x27b/0x3b50 [ 160.722301][ T6739] ? __pfx___dev_queue_xmit+0x10/0x10 [ 160.722339][ T6739] ? kasan_quarantine_put+0xdd/0x220 [ 160.722364][ T6739] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.722400][ T6739] ? packet_rcv+0x175/0x1590 [ 160.722419][ T6739] ? kmem_cache_free+0x18f/0x400 [ 160.722467][ T6739] vlan_dev_hard_start_xmit+0x346/0x5e0 [ 160.722505][ T6739] ? __pfx_vlan_dev_hard_start_xmit+0x10/0x10 [ 160.722550][ T6739] dev_hard_start_xmit+0x2d7/0x830 [ 160.722591][ T6739] __dev_queue_xmit+0x1b8d/0x3b50 [ 160.722627][ T6739] ? __dev_queue_xmit+0x27b/0x3b50 [ 160.722658][ T6739] ? alloc_skb_with_frags+0x7df/0x890 [ 160.722680][ T6739] ? get_page_from_freelist+0x21e4/0x22c0 [ 160.722706][ T6739] ? __pfx___dev_queue_xmit+0x10/0x10 [ 160.722728][ T6739] ? skb_set_owner_w+0x25b/0x3a0 [ 160.722753][ T6739] ? sock_alloc_send_pskb+0x875/0x990 [ 160.722783][ T6739] ? packet_parse_headers+0x7ff/0xb60 [ 160.722810][ T6739] ? packet_parse_headers+0x88c/0xb60 [ 160.722843][ T6739] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 160.722867][ T6739] ? __pfx_packet_parse_headers+0x10/0x10 [ 160.722897][ T6739] ? skb_copy_datagram_from_iter+0x64b/0x720 [ 160.722926][ T6739] ? packet_xmit+0x68/0x330 [ 160.722957][ T6739] packet_sendmsg+0x3e33/0x5080 [ 160.722992][ T6739] ? begin_current_label_crit_section+0x148/0x340 [ 160.723047][ T6739] ? __pfx___might_resched+0x10/0x10 [ 160.723066][ T6739] ? __lock_acquire+0xab9/0xd20 [ 160.723124][ T6739] ? __pfx_packet_sendmsg+0x10/0x10 [ 160.723145][ T6739] ? aa_sk_perm+0x81e/0x950 [ 160.723182][ T6739] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 160.723212][ T6739] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.723247][ T6739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.723270][ T6739] ? __pfx_packet_sendmsg+0x10/0x10 [ 160.723295][ T6739] __sock_sendmsg+0x21c/0x270 [ 160.723327][ T6739] __sys_sendto+0x3bd/0x520 [ 160.723361][ T6739] ? __pfx___sys_sendto+0x10/0x10 [ 160.723389][ T6739] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 160.723433][ T6739] ? __fget_files+0x3a0/0x420 [ 160.723465][ T6739] ? ksys_write+0x22a/0x250 [ 160.723505][ T6739] __ia32_sys_sendto+0xdd/0x100 [ 160.723542][ T6739] __do_fast_syscall_32+0xb6/0x2b0 [ 160.723575][ T6739] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.723609][ T6739] do_fast_syscall_32+0x34/0x80 [ 160.723640][ T6739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.723666][ T6739] RIP: 0023:0xf7f57539 [ 160.723685][ T6739] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 160.723703][ T6739] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 160.723726][ T6739] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 160.723750][ T6739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000140 [ 160.723763][ T6739] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 160.723775][ T6739] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 160.723787][ T6739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.723817][ T6739] [ 161.549116][ T5864] usb 3-1: USB disconnect, device number 6 [ 161.800303][ T10] usb 4-1: USB disconnect, device number 5 [ 161.891577][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.173'. [ 161.957987][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 162.107266][ T5864] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 162.273455][ T5864] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.297368][ T5953] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 162.370208][ T5864] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.409703][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.482127][ T5864] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 162.500677][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.529128][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.543085][ T5864] usb 3-1: config 0 descriptor?? [ 162.558114][ T5953] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 162.573305][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.592286][ T5953] usb 4-1: config 0 descriptor?? [ 162.671684][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.687976][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.845593][ T5953] usbhid 4-1:0.0: can't add hid device: -71 [ 162.872624][ T5953] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 162.907840][ T5953] usb 4-1: USB disconnect, device number 6 [ 162.918931][ T5925] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.498875][ T5953] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 163.508873][ T5864] usbhid 3-1:0.0: can't add hid device: -71 [ 163.514927][ T5864] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 163.589736][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 163.700360][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 163.706460][ T5864] usb 3-1: USB disconnect, device number 7 [ 163.773127][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.805496][ T5953] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 163.826782][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.156200][ T5953] usb 4-1: config 0 descriptor?? [ 164.594971][ T5953] kye 0003:0458:5016.0003: control desc unexpectedly large [ 164.857190][ T5953] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0003/input/input6 [ 165.168770][ T5953] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0003/input/input7 [ 165.474366][ T6794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.174'. [ 165.770122][ T5953] kye 0003:0458:5016.0003: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 166.286334][ T5925] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 166.377901][ T24] usb 4-1: USB disconnect, device number 7 [ 166.587156][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 166.597427][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.650066][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 166.751263][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 166.804751][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 166.841791][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 166.874575][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 166.899300][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 166.906977][ T5925] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 166.927402][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.939380][ T10] usb 1-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 166.950200][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12032, setting to 64 [ 166.977152][ T5925] usb 3-1: Product: syz [ 166.981370][ T5925] usb 3-1: Manufacturer: syz [ 166.986191][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.007321][ T5925] usb 3-1: SerialNumber: syz [ 167.030527][ T5925] usb 3-1: config 0 descriptor?? [ 167.037334][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 167.046682][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 167.056001][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.095786][ T10] usb 1-1: Product: syz [ 167.101457][ T10] usb 1-1: Manufacturer: syz [ 167.106096][ T10] usb 1-1: SerialNumber: syz [ 167.145313][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 167.175413][ T10] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 167.182310][ T10] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 167.285714][ T6807] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.289580][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.371676][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.386255][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.396919][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.422736][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.447437][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.590004][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.183'. [ 167.602907][ T24] usb 2-1: config 0 descriptor?? [ 167.609774][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 167.645548][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 167.860167][ T5925] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 167.866261][ T5925] input input8: Device does not respond to id packet M [ 167.874338][ T5925] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 167.880520][ T5925] input input8: Device does not respond to id packet P [ 167.889752][ T5925] input input8: Device does not respond to id packet B [ 168.222260][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 168.299949][ T5925] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 168.321934][ T6817] tipc: Started in network mode [ 168.326968][ T6817] tipc: Node identity 9efffbae173a, cluster identity 4711 [ 168.347287][ T5925] input input8: Device does not respond to id packet N [ 168.347942][ T6817] tipc: Enabled bearer , priority 0 [ 168.365094][ T5925] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 168.417028][ T6819] syzkaller0: entered promiscuous mode [ 168.418449][ T5925] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 168.446568][ T5925] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 168.453326][ T6819] syzkaller0: entered allmulticast mode [ 168.474495][ T5925] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 168.508357][ T5925] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 168.514824][ T6822] tipc: Enabled bearer , priority 0 [ 168.548225][ T6817] tipc: Resetting bearer [ 168.563524][ T6816] tipc: Resetting bearer [ 168.584321][ T5925] usb 3-1: USB disconnect, device number 8 [ 168.602963][ T6816] tipc: Disabling bearer [ 168.670484][ T6822] syzkaller0: entered promiscuous mode [ 168.676169][ T6822] syzkaller0: entered allmulticast mode [ 168.692184][ T6823] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 168.707034][ T6825] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 168.729640][ T6822] tipc: Resetting bearer [ 168.745691][ T6821] tipc: Resetting bearer [ 168.772384][ T6821] tipc: Disabling bearer [ 168.896930][ T24] usb 2-1: USB disconnect, device number 12 [ 168.980419][ T6832] FAULT_INJECTION: forcing a failure. [ 168.980419][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 169.000569][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: syz.4.192 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 169.000600][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.000613][ T6832] Call Trace: [ 169.000622][ T6832] [ 169.000631][ T6832] dump_stack_lvl+0x189/0x250 [ 169.000662][ T6832] ? __pfx____ratelimit+0x10/0x10 [ 169.000687][ T6832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.000715][ T6832] ? __pfx__printk+0x10/0x10 [ 169.000742][ T6832] ? __pfx___might_resched+0x10/0x10 [ 169.000760][ T6832] ? fs_reclaim_acquire+0x7d/0x100 [ 169.000791][ T6832] should_fail_ex+0x414/0x560 [ 169.000818][ T6832] should_failslab+0xa8/0x100 [ 169.000846][ T6832] __kmalloc_noprof+0xcb/0x4f0 [ 169.000869][ T6832] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 169.000895][ T6832] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 169.000922][ T6832] genl_family_rcv_msg_doit+0xb8/0x300 [ 169.000948][ T6832] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 169.000974][ T6832] ? apparmor_capable+0x137/0x1b0 [ 169.000997][ T6832] ? bpf_lsm_capable+0x9/0x20 [ 169.001020][ T6832] ? security_capable+0x7e/0x2e0 [ 169.001052][ T6832] genl_rcv_msg+0x60e/0x790 [ 169.001077][ T6832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.001094][ T6832] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 169.001111][ T6832] ? __pfx_nl80211_set_tid_config+0x10/0x10 [ 169.001127][ T6832] ? __pfx_nl80211_post_doit+0x10/0x10 [ 169.001146][ T6832] ? __asan_memcpy+0x40/0x70 [ 169.001166][ T6832] ? __pfx_ref_tracker_free+0x10/0x10 [ 169.001197][ T6832] netlink_rcv_skb+0x208/0x470 [ 169.001220][ T6832] ? __lock_acquire+0xab9/0xd20 [ 169.001247][ T6832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.001267][ T6832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.001307][ T6832] ? down_read+0x1ad/0x2e0 [ 169.001336][ T6832] genl_rcv+0x28/0x40 [ 169.001352][ T6832] netlink_unicast+0x82c/0x9e0 [ 169.001382][ T6832] ? __pfx_netlink_unicast+0x10/0x10 [ 169.001406][ T6832] ? netlink_sendmsg+0x642/0xb30 [ 169.001430][ T6832] ? skb_put+0x11b/0x210 [ 169.001462][ T6832] netlink_sendmsg+0x805/0xb30 [ 169.001496][ T6832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.001523][ T6832] ? __import_iovec+0x5d4/0x7f0 [ 169.001546][ T6832] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.001575][ T6832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.001594][ T6832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.001620][ T6832] __sock_sendmsg+0x21c/0x270 [ 169.001645][ T6832] ____sys_sendmsg+0x505/0x830 [ 169.001668][ T6832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.001704][ T6832] ___sys_sendmsg+0x21f/0x2a0 [ 169.001723][ T6832] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.001771][ T6832] ? __fget_files+0x2a/0x420 [ 169.001785][ T6832] ? __fget_files+0x3a0/0x420 [ 169.001809][ T6832] __sys_sendmsg+0x164/0x220 [ 169.001828][ T6832] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.001859][ T6832] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.001885][ T6832] __do_fast_syscall_32+0xb6/0x2b0 [ 169.001912][ T6832] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.001938][ T6832] do_fast_syscall_32+0x34/0x80 [ 169.001964][ T6832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.001985][ T6832] RIP: 0023:0xf7f57539 [ 169.002000][ T6832] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 169.002015][ T6832] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 169.002033][ T6832] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 169.002045][ T6832] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.002054][ T6832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.002064][ T6832] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.002074][ T6832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.002098][ T6832] [ 169.380561][ T5953] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 169.498110][ T24] usb 1-1: USB disconnect, device number 8 [ 169.523222][ T6837] input: syz1 as /devices/virtual/input/input10 [ 169.537201][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 169.545397][ T5953] usb 4-1: config 0 has no interfaces? [ 169.556083][ T5953] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 169.567141][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.575156][ T5953] usb 4-1: Product: syz [ 169.580308][ T5953] usb 4-1: Manufacturer: syz [ 169.584922][ T5953] usb 4-1: SerialNumber: syz [ 169.599187][ T5953] usb 4-1: config 0 descriptor?? [ 170.247171][ T5925] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 170.317358][ T5953] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.501573][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 170.515076][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.528423][ T5953] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.539089][ T5953] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 170.552339][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.603282][ T5953] usb 1-1: config 0 descriptor?? [ 170.904772][ T5925] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 170.912919][ T5925] usb 2-1: config 0 has no interface number 0 [ 170.919097][ T5925] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 170.928832][ T5925] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 170.951039][ T5925] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 171.149271][ T5925] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 171.187910][ T5925] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 171.206946][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.431093][ T5925] usb 2-1: config 0 descriptor?? [ 171.485455][ T5925] hub 2-1:0.3: bad descriptor, ignoring hub [ 171.495061][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 171.508866][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 171.531783][ T5925] hub 2-1:0.3: probe with driver hub failed with error -5 [ 171.574255][ T5925] sierra 2-1:0.3: Sierra USB modem converter detected [ 171.707250][ T5925] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 171.736349][ T5925] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 171.812749][ T5925] usb 2-1: USB disconnect, device number 13 [ 171.862843][ T24] usb 4-1: USB disconnect, device number 8 [ 171.868469][ T5925] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 171.930245][ T5925] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 171.960923][ T5925] sierra 2-1:0.3: device disconnected [ 172.743370][ T44] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 172.929005][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 172.953871][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.982849][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.985969][ T6891] FAULT_INJECTION: forcing a failure. [ 172.985969][ T6891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.040689][ T6890] input: syz1 as /devices/virtual/input/input11 [ 173.045310][ T6891] CPU: 0 UID: 0 PID: 6891 Comm: syz.4.207 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 173.045343][ T6891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.045358][ T6891] Call Trace: [ 173.045368][ T6891] [ 173.045380][ T6891] dump_stack_lvl+0x189/0x250 [ 173.045422][ T6891] ? __pfx____ratelimit+0x10/0x10 [ 173.045456][ T6891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.045486][ T6891] ? __pfx__printk+0x10/0x10 [ 173.045536][ T6891] should_fail_ex+0x414/0x560 [ 173.045575][ T6891] _copy_to_user+0x31/0xb0 [ 173.045607][ T6891] simple_read_from_buffer+0xe1/0x170 [ 173.045650][ T6891] proc_fail_nth_read+0x1b3/0x220 [ 173.045680][ T6891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.045713][ T6891] ? rw_verify_area+0x2a6/0x4d0 [ 173.045742][ T6891] ? __lock_acquire+0xab9/0xd20 [ 173.045777][ T6891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.045806][ T6891] vfs_read+0x200/0xa30 [ 173.045836][ T6891] ? fdget_pos+0x247/0x320 [ 173.045862][ T6891] ? __pfx___mutex_lock+0x10/0x10 [ 173.045898][ T6891] ? __pfx_vfs_read+0x10/0x10 [ 173.045932][ T6891] ? __fget_files+0x2a/0x420 [ 173.045959][ T6891] ? __fget_files+0x3a0/0x420 [ 173.045979][ T6891] ? __fget_files+0x2a/0x420 [ 173.046012][ T6891] ksys_read+0x145/0x250 [ 173.046047][ T6891] ? __pfx_ksys_read+0x10/0x10 [ 173.046084][ T6891] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.046121][ T6891] __do_fast_syscall_32+0xb6/0x2b0 [ 173.046158][ T6891] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.046195][ T6891] do_fast_syscall_32+0x34/0x80 [ 173.046231][ T6891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.046260][ T6891] RIP: 0023:0xf7f57539 [ 173.046280][ T6891] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 173.046300][ T6891] RSP: 002b:00000000f5476590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 173.046325][ T6891] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5476620 [ 173.046342][ T6891] RDX: 000000000000000f RSI: 00000000f73e4ff4 RDI: 0000000000000000 [ 173.046357][ T6891] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 173.046370][ T6891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 173.046384][ T6891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.046430][ T6891] [ 173.337136][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.407141][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.526058][ T44] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 173.555996][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.654976][ T44] usb 2-1: config 0 descriptor?? [ 173.737342][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 173.797443][ T24] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 173.820495][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64 [ 173.841806][ T5918] usb 1-1: USB disconnect, device number 9 [ 173.870556][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 174.121456][ T44] hid (null): nested delimiters [ 174.129202][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 174.140570][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.153146][ T24] usb 3-1: Product: syz [ 174.157990][ T44] hid (null): nested delimiters [ 174.167536][ T24] usb 3-1: Manufacturer: syz [ 174.235090][ T44] hid (null): nested delimiters [ 174.250930][ T24] usb 3-1: SerialNumber: syz [ 174.328186][ T6876] program syz.1.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.526383][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 174.570517][ T5925] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 174.632962][ T24] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 174.654326][ T24] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 174.759932][ T5925] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.773999][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.799898][ T5925] usb 1-1: Product: syz [ 174.811413][ T5925] usb 1-1: Manufacturer: syz [ 174.969849][ T5925] usb 1-1: SerialNumber: syz [ 174.997007][ T5925] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.470429][ T1221] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 175.677476][ T24] usb 2-1: USB disconnect, device number 14 [ 175.917513][ T5932] usb 1-1: USB disconnect, device number 10 [ 176.147185][ T30] audit: type=1326 audit(1754882961.498:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 176.246374][ T5925] usb 3-1: USB disconnect, device number 9 [ 176.290545][ T30] audit: type=1326 audit(1754882961.498:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 176.297618][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 176.363544][ T30] audit: type=1326 audit(1754882961.538:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 176.402540][ T30] audit: type=1326 audit(1754882961.538:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 176.430270][ T30] audit: type=1326 audit(1754882961.538:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 176.461015][ T30] audit: type=1326 audit(1754882961.538:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 176.486169][ T30] audit: type=1326 audit(1754882961.538:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 176.515037][ T30] audit: type=1326 audit(1754882961.538:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 176.537235][ T5970] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 176.542367][ T30] audit: type=1326 audit(1754882961.538:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 176.588899][ T10] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 176.605916][ T1221] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 176.619368][ T30] audit: type=1326 audit(1754882961.538:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 176.657363][ T10] usb 4-1: config 0 has no interface number 0 [ 176.663632][ T10] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 176.692789][ T1221] ath9k_htc: Failed to initialize the device [ 176.747649][ T5932] usb 1-1: ath9k_htc: USB layer deinitialized [ 176.760907][ T6928] binder: 6921:6928 ioctl 40043311 800000c0 returned -22 [ 176.768153][ T5970] usb 2-1: device descriptor read/64, error -71 [ 176.802384][ T10] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 176.822231][ T10] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 176.841464][ T10] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 176.854474][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 176.864506][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.878615][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 176.882349][ T10] usb 4-1: config 0 descriptor?? [ 176.894681][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 176.909231][ T10] hub 4-1:0.3: bad descriptor, ignoring hub [ 176.920207][ T10] hub 4-1:0.3: probe with driver hub failed with error -5 [ 176.929143][ T10] sierra 4-1:0.3: Sierra USB modem converter detected [ 177.057371][ T5970] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 177.119700][ T10] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 177.134411][ T10] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 177.153609][ T5932] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 177.188554][ T10] usb 4-1: USB disconnect, device number 9 [ 177.217265][ T5970] usb 2-1: device descriptor read/64, error -71 [ 177.248160][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 177.278474][ T10] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 177.293441][ T10] sierra 4-1:0.3: device disconnected [ 177.339506][ T5932] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.352734][ T5970] usb usb2-port1: attempt power cycle [ 177.358775][ T5932] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.370690][ T5932] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.383004][ T5932] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 177.439733][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.466652][ T6930] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 177.707252][ T5970] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 177.735913][ T5970] usb 2-1: device descriptor read/8, error -71 [ 177.892574][ T6941] capability: warning: `syz.2.218' uses deprecated v2 capabilities in a way that may be insecure [ 177.919831][ T6941] FAULT_INJECTION: forcing a failure. [ 177.919831][ T6941] name failslab, interval 1, probability 0, space 0, times 0 [ 177.936823][ T6941] CPU: 0 UID: 0 PID: 6941 Comm: syz.2.218 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 177.936853][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.936866][ T6941] Call Trace: [ 177.936874][ T6941] [ 177.936883][ T6941] dump_stack_lvl+0x189/0x250 [ 177.936915][ T6941] ? __pfx____ratelimit+0x10/0x10 [ 177.936944][ T6941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.936970][ T6941] ? __pfx__printk+0x10/0x10 [ 177.937007][ T6941] ? __pfx___might_resched+0x10/0x10 [ 177.937027][ T6941] ? fs_reclaim_acquire+0x7d/0x100 [ 177.937077][ T6941] should_fail_ex+0x414/0x560 [ 177.937111][ T6941] should_failslab+0xa8/0x100 [ 177.937144][ T6941] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 177.937181][ T6941] ? __alloc_skb+0x112/0x2d0 [ 177.937209][ T6941] ? cap_capable+0x11f/0x460 [ 177.937239][ T6941] __alloc_skb+0x112/0x2d0 [ 177.937276][ T6941] tipc_get_err_tlv+0x36/0xe0 [ 177.937304][ T6941] tipc_nl_compat_recv+0x275/0xbe0 [ 177.937333][ T6941] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 177.937360][ T6941] ? __mutex_trylock_common+0x153/0x260 [ 177.937388][ T6941] ? __pfx___mutex_trylock_common+0x10/0x10 [ 177.937409][ T6941] ? __local_bh_enable_ip+0x12d/0x1c0 [ 177.937440][ T6941] ? trace_contention_end+0x39/0x120 [ 177.937475][ T6941] genl_family_rcv_msg_doit+0x215/0x300 [ 177.937508][ T6941] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.937559][ T6941] genl_rcv_msg+0x60e/0x790 [ 177.937591][ T6941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.937613][ T6941] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 177.937640][ T6941] ? __asan_memcpy+0x40/0x70 [ 177.937664][ T6941] ? __pfx_ref_tracker_free+0x10/0x10 [ 177.937703][ T6941] netlink_rcv_skb+0x208/0x470 [ 177.937731][ T6941] ? __lock_acquire+0xab9/0xd20 [ 177.937763][ T6941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.937789][ T6941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.937842][ T6941] ? down_read+0x1ad/0x2e0 [ 177.937877][ T6941] genl_rcv+0x28/0x40 [ 177.937898][ T6941] netlink_unicast+0x82c/0x9e0 [ 177.937936][ T6941] ? __pfx_netlink_unicast+0x10/0x10 [ 177.937967][ T6941] ? netlink_sendmsg+0x642/0xb30 [ 177.938002][ T6941] ? skb_put+0x11b/0x210 [ 177.938040][ T6941] netlink_sendmsg+0x805/0xb30 [ 177.938088][ T6941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.938123][ T6941] ? __import_iovec+0x5d4/0x7f0 [ 177.938146][ T6941] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.938181][ T6941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.938205][ T6941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.938238][ T6941] __sock_sendmsg+0x21c/0x270 [ 177.938270][ T6941] ____sys_sendmsg+0x505/0x830 [ 177.938299][ T6941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.938340][ T6941] ___sys_sendmsg+0x21f/0x2a0 [ 177.938364][ T6941] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.938428][ T6941] ? __fget_files+0x2a/0x420 [ 177.938446][ T6941] ? __fget_files+0x3a0/0x420 [ 177.938478][ T6941] __sys_sendmsg+0x164/0x220 [ 177.938502][ T6941] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.938543][ T6941] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.938577][ T6941] __do_fast_syscall_32+0xb6/0x2b0 [ 177.938610][ T6941] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.938644][ T6941] do_fast_syscall_32+0x34/0x80 [ 177.938675][ T6941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.938701][ T6941] RIP: 0023:0xf703e539 [ 177.938720][ T6941] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 177.938739][ T6941] RSP: 002b:00000000f542e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 177.938762][ T6941] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 177.938777][ T6941] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.938790][ T6941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.938803][ T6941] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 177.938815][ T6941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.938848][ T6941] [ 178.331008][ T5970] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 178.611927][ T5970] usb 2-1: device descriptor read/8, error -71 [ 178.727460][ T5970] usb usb2-port1: unable to enumerate USB device [ 178.759881][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.792997][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 178.959600][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.974696][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.984969][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.043968][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.053911][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.122872][ T24] usb 4-1: config 0 descriptor?? [ 179.412860][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 179.658857][ T5932] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 179.680166][ T5932] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input12 [ 180.024116][ T5932] usb 1-1: USB disconnect, device number 11 [ 180.030179][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 180.068426][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 180.281766][ T24] usb 4-1: USB disconnect, device number 10 [ 180.550224][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 180.814031][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 181.870454][ T6976] binder: 6969:6976 ioctl 40043311 800000c0 returned -22 [ 182.491887][ T5932] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 182.702397][ T5932] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 182.721029][ T5932] usb 3-1: config 0 has no interface number 0 [ 182.737276][ T5932] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 182.762757][ T6988] trusted_key: syz.0.232 sent an empty control message without MSG_MORE. [ 182.792651][ T5932] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 182.803921][ T5932] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 182.842497][ T5932] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 182.854994][ T5932] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 182.866794][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.879158][ T6990] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 182.911645][ T6990] tipc: Enabled bearer , priority 10 [ 183.016861][ T6994] FAULT_INJECTION: forcing a failure. [ 183.016861][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 183.030170][ T5932] usb 3-1: config 0 descriptor?? [ 183.034750][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.0.235 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 183.034783][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.034799][ T6994] Call Trace: [ 183.034810][ T6994] [ 183.034822][ T6994] dump_stack_lvl+0x189/0x250 [ 183.034858][ T6994] ? __pfx____ratelimit+0x10/0x10 [ 183.034891][ T6994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.034922][ T6994] ? __pfx__printk+0x10/0x10 [ 183.034960][ T6994] ? __pfx___might_resched+0x10/0x10 [ 183.034985][ T6994] ? fs_reclaim_acquire+0x7d/0x100 [ 183.035030][ T6994] should_fail_ex+0x414/0x560 [ 183.035069][ T6994] should_failslab+0xa8/0x100 [ 183.035109][ T6994] __kmalloc_noprof+0xcb/0x4f0 [ 183.035141][ T6994] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 183.035174][ T6994] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 183.035215][ T6994] genl_family_rcv_msg_doit+0xb8/0x300 [ 183.035254][ T6994] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.035283][ T6994] ? __pfx___mutex_lock+0x10/0x10 [ 183.035322][ T6994] ? __pfx_genl_get_cmd+0x10/0x10 [ 183.035373][ T6994] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 183.035429][ T6994] genl_rcv_msg+0x60e/0x790 [ 183.035465][ T6994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.035491][ T6994] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 183.035530][ T6994] ? __asan_memcpy+0x40/0x70 [ 183.035557][ T6994] ? __pfx_ref_tracker_free+0x10/0x10 [ 183.035603][ T6994] netlink_rcv_skb+0x208/0x470 [ 183.035636][ T6994] ? __lock_acquire+0xab9/0xd20 [ 183.035677][ T6994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.035706][ T6994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.035766][ T6994] ? down_read+0x1ad/0x2e0 [ 183.035807][ T6994] genl_rcv+0x28/0x40 [ 183.035830][ T6994] netlink_unicast+0x82c/0x9e0 [ 183.035873][ T6994] ? __pfx_netlink_unicast+0x10/0x10 [ 183.035907][ T6994] ? netlink_sendmsg+0x642/0xb30 [ 183.035941][ T6994] ? skb_put+0x11b/0x210 [ 183.035982][ T6994] netlink_sendmsg+0x805/0xb30 [ 183.036031][ T6994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.036070][ T6994] ? __import_iovec+0x5d4/0x7f0 [ 183.036097][ T6994] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.036136][ T6994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.036163][ T6994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.036202][ T6994] __sock_sendmsg+0x21c/0x270 [ 183.036238][ T6994] ____sys_sendmsg+0x505/0x830 [ 183.036270][ T6994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.036316][ T6994] ___sys_sendmsg+0x21f/0x2a0 [ 183.036344][ T6994] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.036423][ T6994] ? __fget_files+0x2a/0x420 [ 183.036443][ T6994] ? __fget_files+0x3a0/0x420 [ 183.036478][ T6994] __sys_sendmsg+0x164/0x220 [ 183.036506][ T6994] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.036551][ T6994] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.036589][ T6994] __do_fast_syscall_32+0xb6/0x2b0 [ 183.036627][ T6994] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.036666][ T6994] do_fast_syscall_32+0x34/0x80 [ 183.036704][ T6994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.036735][ T6994] RIP: 0023:0xf706e539 [ 183.036772][ T6994] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 183.036795][ T6994] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 183.036821][ T6994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800010c0 [ 183.036838][ T6994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.036852][ T6994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.036867][ T6994] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.036881][ T6994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.036916][ T6994] [ 183.404946][ T5932] hub 3-1:0.3: bad descriptor, ignoring hub [ 183.421296][ T5932] hub 3-1:0.3: probe with driver hub failed with error -5 [ 183.453204][ T5932] sierra 3-1:0.3: Sierra USB modem converter detected [ 183.651530][ T5932] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 183.685561][ T5932] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 183.812363][ T5932] usb 3-1: USB disconnect, device number 10 [ 183.836263][ T5932] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 183.851264][ T5932] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 183.851917][ T5932] sierra 3-1:0.3: device disconnected [ 183.922175][ T5918] tipc: Node number set to 2522460796 [ 184.132240][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 185.519549][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 185.575850][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 185.602197][ T7030] input: syz1 as /devices/virtual/input/input13 [ 186.039472][ T7035] tipc: Enabled bearer , priority 0 [ 186.060972][ T7035] syzkaller0: entered promiscuous mode [ 186.073376][ T7035] syzkaller0: entered allmulticast mode [ 186.083071][ T7035] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 186.222863][ T7036] tipc: Resetting bearer [ 186.264544][ T7034] tipc: Resetting bearer [ 186.277318][ T7040] ======================================================= [ 186.277318][ T7040] WARNING: The mand mount option has been deprecated and [ 186.277318][ T7040] and is ignored by this kernel. Remove the mand [ 186.277318][ T7040] option from the mount to silence this warning. [ 186.277318][ T7040] ======================================================= [ 186.338489][ T7034] tipc: Disabling bearer [ 186.374065][ T7042] fuse: Bad value for 'fd' [ 186.395926][ T7040] fuse: Bad value for 'fd' [ 186.537413][ T5970] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 186.709734][ T5970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.779962][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 186.818938][ T5970] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 186.824772][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 186.828396][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.860283][ T5970] usb 1-1: Product: syz [ 186.873786][ T5970] usb 1-1: Manufacturer: syz [ 186.977407][ T5932] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 187.109237][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 187.166438][ T5970] usb 1-1: SerialNumber: syz [ 187.166507][ T44] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 187.182116][ T44] usb 3-1: config 0 has no interface number 0 [ 187.190958][ T44] usb 3-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 187.195105][ T5970] cdc_subset 1-1:1.0: probe with driver cdc_subset failed with error -22 [ 187.214177][ T5932] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 187.222729][ T5932] usb 5-1: config 0 has no interface number 0 [ 187.229191][ T5932] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 187.254985][ T5970] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 187.263418][ T5932] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 187.280803][ T5970] cdc_ncm 1-1:1.0: bind() failure [ 187.284232][ T44] usb 3-1: config 0 interface 244 has no altsetting 0 [ 187.306211][ T7055] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 187.330753][ T5932] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 187.332612][ T44] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 187.360464][ T5970] cdc_subset 1-1:1.1: probe with driver cdc_subset failed with error -22 [ 187.403301][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 187.403711][ T30] audit: type=1326 audit(1754882972.738:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 187.415692][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.432246][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.453141][ T30] audit: type=1326 audit(1754882972.738:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 187.476770][ T44] usb 3-1: Product: syz [ 187.481122][ T44] usb 3-1: Manufacturer: syz [ 187.485891][ T44] usb 3-1: SerialNumber: syz [ 187.490922][ T5932] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 187.500899][ T44] usb 3-1: config 0 descriptor?? [ 187.506847][ T30] audit: type=1326 audit(1754882972.738:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 187.515932][ T5970] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 187.534456][ T30] audit: type=1326 audit(1754882972.738:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 187.561728][ T44] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort found [ 187.577636][ T30] audit: type=1326 audit(1754882972.738:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 187.599745][ T5932] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 187.609526][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.616315][ T5970] cdc_ncm 1-1:1.1: bind() failure [ 187.632761][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.670792][ T5932] usb 5-1: config 0 descriptor?? [ 187.697148][ T30] audit: type=1326 audit(1754882972.738:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 187.699793][ T5932] hub 5-1:0.3: bad descriptor, ignoring hub [ 188.183732][ T44] snd_usb_toneport 3-1:0.244: cannot get proper max packet size [ 188.220906][ T44] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort now disconnected [ 188.238687][ T5918] usb 1-1: USB disconnect, device number 12 [ 188.244842][ T5932] hub 5-1:0.3: probe with driver hub failed with error -5 [ 188.272907][ T5932] sierra 5-1:0.3: Sierra USB modem converter detected [ 188.297503][ T5932] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 188.318390][ T30] audit: type=1326 audit(1754882972.738:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 188.341080][ T7043] trusted_key: encrypted_key: insufficient parameters specified [ 188.350316][ T44] snd_usb_toneport 3-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 188.377678][ T5932] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 188.442440][ T30] audit: type=1326 audit(1754882972.738:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 188.475983][ T5932] usb 5-1: USB disconnect, device number 7 [ 188.547856][ T5932] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 188.596642][ T5932] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 188.625321][ T5932] sierra 5-1:0.3: device disconnected [ 188.957664][ T5918] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 189.041031][ T7068] FAULT_INJECTION: forcing a failure. [ 189.041031][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 189.054045][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.4.255 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 189.054075][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.054090][ T7068] Call Trace: [ 189.054098][ T7068] [ 189.054108][ T7068] dump_stack_lvl+0x189/0x250 [ 189.054140][ T7068] ? __pfx____ratelimit+0x10/0x10 [ 189.054170][ T7068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.054196][ T7068] ? __pfx__printk+0x10/0x10 [ 189.054230][ T7068] ? __lock_acquire+0xab9/0xd20 [ 189.054273][ T7068] should_fail_ex+0x414/0x560 [ 189.054306][ T7068] should_failslab+0xa8/0x100 [ 189.054340][ T7068] __kmalloc_cache_noprof+0x70/0x3d0 [ 189.054370][ T7068] ? nfulnl_recv_config+0xb62/0x1290 [ 189.054408][ T7068] nfulnl_recv_config+0xb62/0x1290 [ 189.054452][ T7068] nfnetlink_rcv_msg+0xb4d/0x1130 [ 189.054481][ T7068] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 189.054529][ T7068] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 189.054565][ T7068] ? kasan_save_free_info+0x46/0x50 [ 189.054639][ T7068] netlink_rcv_skb+0x208/0x470 [ 189.054671][ T7068] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 189.054699][ T7068] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.054739][ T7068] ? bpf_lsm_capable+0x9/0x20 [ 189.054765][ T7068] ? security_capable+0x7e/0x2e0 [ 189.054803][ T7068] nfnetlink_rcv+0x26a/0x2520 [ 189.054833][ T7068] ? __dev_queue_xmit+0x1d79/0x3b50 [ 189.054892][ T7068] ? __dev_queue_xmit+0x27b/0x3b50 [ 189.054948][ T7068] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 189.054974][ T7068] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.055015][ T7068] ? ref_tracker_free+0x63a/0x7d0 [ 189.055046][ T7068] ? __asan_memcpy+0x40/0x70 [ 189.055070][ T7068] ? __pfx_ref_tracker_free+0x10/0x10 [ 189.055098][ T7068] ? __skb_clone+0x63/0x7a0 [ 189.055126][ T7068] ? __skb_clone+0x483/0x7a0 [ 189.055155][ T7068] ? skb_clone+0x246/0x3a0 [ 189.055182][ T7068] ? __netlink_deliver_tap+0x807/0x850 [ 189.055212][ T7068] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.055250][ T7068] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.055290][ T7068] netlink_unicast+0x82c/0x9e0 [ 189.055328][ T7068] ? __pfx_netlink_unicast+0x10/0x10 [ 189.055359][ T7068] ? netlink_sendmsg+0x642/0xb30 [ 189.055387][ T7068] ? skb_put+0x11b/0x210 [ 189.055424][ T7068] netlink_sendmsg+0x805/0xb30 [ 189.055466][ T7068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.055501][ T7068] ? __import_iovec+0x5d4/0x7f0 [ 189.055522][ T7068] ? aa_sock_msg_perm+0xf1/0x1d0 [ 189.055558][ T7068] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.055581][ T7068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.055614][ T7068] __sock_sendmsg+0x21c/0x270 [ 189.055645][ T7068] ____sys_sendmsg+0x505/0x830 [ 189.055673][ T7068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.055714][ T7068] ___sys_sendmsg+0x21f/0x2a0 [ 189.055739][ T7068] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.055803][ T7068] ? __fget_files+0x2a/0x420 [ 189.055821][ T7068] ? __fget_files+0x3a0/0x420 [ 189.055852][ T7068] __sys_sendmsg+0x164/0x220 [ 189.055882][ T7068] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.055923][ T7068] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.055957][ T7068] __do_fast_syscall_32+0xb6/0x2b0 [ 189.055989][ T7068] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.056022][ T7068] do_fast_syscall_32+0x34/0x80 [ 189.056054][ T7068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.056080][ T7068] RIP: 0023:0xf7f57539 [ 189.056099][ T7068] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 189.056119][ T7068] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 189.056142][ T7068] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000700 [ 189.056157][ T7068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.056170][ T7068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.056182][ T7068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 189.056195][ T7068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.056227][ T7068] [ 189.617693][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 189.624578][ T44] usb 3-1: USB disconnect, device number 11 [ 189.730575][ T5918] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 189.730612][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.730635][ T5918] usb 4-1: Product: syz [ 189.730652][ T5918] usb 4-1: Manufacturer: syz [ 189.730669][ T5918] usb 4-1: SerialNumber: syz [ 189.766638][ T5918] r8152-cfgselector 4-1: Unknown version 0x0000 [ 189.766667][ T5918] r8152-cfgselector 4-1: config 0 descriptor?? [ 190.096717][ T7087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'. [ 190.179727][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.253'. [ 190.412112][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 190.459346][ T44] r8152-cfgselector 4-1: USB disconnect, device number 11 [ 190.496877][ T7100] input: syz1 as /devices/virtual/input/input14 [ 190.820357][ T5932] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 191.017644][ T7113] bridge_slave_0: left allmulticast mode [ 191.023421][ T7113] bridge_slave_0: left promiscuous mode [ 191.029464][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.077138][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 191.089296][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.105148][ T5932] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.147593][ T5932] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.230416][ T7113] bridge_slave_1: left allmulticast mode [ 191.231154][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.250552][ T7113] bridge_slave_1: left promiscuous mode [ 191.276172][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.365377][ T5932] usb 2-1: config 0 descriptor?? [ 191.506450][ T7113] bond0: (slave bond_slave_0): Releasing backup interface [ 191.541273][ T5925] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 191.565383][ T7113] bond0: (slave bond_slave_1): Releasing backup interface [ 191.618511][ T7113] team0: Port device team_slave_0 removed [ 191.649858][ T7113] team0: Port device team_slave_1 removed [ 191.657155][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.664632][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.736576][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.744904][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.807193][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 191.832741][ T5925] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 191.934657][ T5925] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 191.938432][ T7120] tipc: Enabling of bearer rejected, failed to enable media [ 191.953689][ T5925] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.964231][ T7125] syzkaller0: entered promiscuous mode [ 191.989122][ T7125] syzkaller0: entered allmulticast mode [ 192.062070][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.074114][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.082999][ T5925] usb 4-1: Product: syz [ 192.096008][ T5925] usb 4-1: Manufacturer: syz [ 192.101165][ T5925] usb 4-1: SerialNumber: syz [ 192.339305][ T5925] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 192.686122][ T5925] usb 4-1: 2:1 : sample bitwidth 254 in over sample bytes 2 [ 192.717269][ T5925] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 192.757435][ T5925] usb 4-1: 2:1 : invalid channels 0 [ 192.843472][ T7134] PKCS7: Unknown OID: [5] (bad) [ 192.848749][ T7134] PKCS7: Only support pkcs7_signedData type [ 192.970537][ T5925] usb 4-1: USB disconnect, device number 12 [ 193.467183][ T5925] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 193.535318][ T7143] binder: 7139:7143 ioctl 40043311 800000c0 returned -22 [ 193.691425][ T5864] usb 2-1: USB disconnect, device number 19 [ 193.747489][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.773931][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.786665][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.804378][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.852670][ T5925] usb 4-1: Product: syz [ 193.880990][ T5925] usb 4-1: Manufacturer: syz [ 193.909096][ T5925] usb 4-1: SerialNumber: syz [ 193.948504][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 194.213497][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'. [ 194.385591][ T5925] usb 4-1: cannot find UAC_HEADER [ 194.534341][ T5925] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 194.650745][ T5918] usb 4-1: USB disconnect, device number 13 [ 194.679889][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.075622][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 195.085568][ T7161] FAULT_INJECTION: forcing a failure. [ 195.085568][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 195.122476][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.1.280 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 195.122499][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.122509][ T7161] Call Trace: [ 195.122516][ T7161] [ 195.122523][ T7161] dump_stack_lvl+0x189/0x250 [ 195.122546][ T7161] ? __pfx____ratelimit+0x10/0x10 [ 195.122568][ T7161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.122586][ T7161] ? __pfx__printk+0x10/0x10 [ 195.122612][ T7161] ? __pfx___might_resched+0x10/0x10 [ 195.122626][ T7161] ? fs_reclaim_acquire+0x7d/0x100 [ 195.122654][ T7161] should_fail_ex+0x414/0x560 [ 195.122678][ T7161] should_failslab+0xa8/0x100 [ 195.122711][ T7161] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 195.122732][ T7161] ? __alloc_skb+0x112/0x2d0 [ 195.122758][ T7161] __alloc_skb+0x112/0x2d0 [ 195.122784][ T7161] netlink_ack+0x146/0xa50 [ 195.122803][ T7161] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.122824][ T7161] ? ref_tracker_free+0x63a/0x7d0 [ 195.122846][ T7161] ? __asan_memcpy+0x40/0x70 [ 195.122863][ T7161] ? __pfx_ref_tracker_free+0x10/0x10 [ 195.122892][ T7161] netlink_rcv_skb+0x28c/0x470 [ 195.122914][ T7161] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.122938][ T7161] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.122968][ T7161] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.122995][ T7161] netlink_unicast+0x82c/0x9e0 [ 195.123021][ T7161] ? __pfx_netlink_unicast+0x10/0x10 [ 195.123042][ T7161] ? netlink_sendmsg+0x642/0xb30 [ 195.123063][ T7161] ? skb_put+0x11b/0x210 [ 195.123089][ T7161] netlink_sendmsg+0x805/0xb30 [ 195.123118][ T7161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.123142][ T7161] ? __import_iovec+0x5d4/0x7f0 [ 195.123157][ T7161] ? aa_sock_msg_perm+0xf1/0x1d0 [ 195.123182][ T7161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.123199][ T7161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.123221][ T7161] __sock_sendmsg+0x21c/0x270 [ 195.123243][ T7161] ____sys_sendmsg+0x505/0x830 [ 195.123263][ T7161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.123290][ T7161] ___sys_sendmsg+0x21f/0x2a0 [ 195.123306][ T7161] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.123348][ T7161] ? __fget_files+0x2a/0x420 [ 195.123361][ T7161] ? __fget_files+0x3a0/0x420 [ 195.123381][ T7161] __sys_sendmsg+0x164/0x220 [ 195.123398][ T7161] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.123425][ T7161] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.123452][ T7161] __do_fast_syscall_32+0xb6/0x2b0 [ 195.123486][ T7161] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.123509][ T7161] do_fast_syscall_32+0x34/0x80 [ 195.123547][ T7161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.123566][ T7161] RIP: 0023:0xf70be539 [ 195.123579][ T7161] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.123592][ T7161] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 195.123609][ T7161] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 195.123619][ T7161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.123628][ T7161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.123637][ T7161] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.123658][ T7161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.123678][ T7161] [ 196.335666][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 196.471845][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 198.008237][ T7181] PKCS7: Unknown OID: [5] (bad) [ 198.067218][ T7181] PKCS7: Only support pkcs7_signedData type [ 198.617198][ T5864] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 198.954970][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 199.046857][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.080217][ T5864] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.097708][ T5864] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.106946][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.121264][ T5864] usb 4-1: config 0 descriptor?? [ 199.370890][ T7204] FAULT_INJECTION: forcing a failure. [ 199.370890][ T7204] name failslab, interval 1, probability 0, space 0, times 0 [ 199.497387][ T5864] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 199.511060][ T7204] CPU: 1 UID: 0 PID: 7204 Comm: syz.4.290 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 199.511084][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.511094][ T7204] Call Trace: [ 199.511100][ T7204] [ 199.511107][ T7204] dump_stack_lvl+0x189/0x250 [ 199.511130][ T7204] ? __pfx____ratelimit+0x10/0x10 [ 199.511152][ T7204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.511170][ T7204] ? __pfx__printk+0x10/0x10 [ 199.511196][ T7204] ? __pfx___might_resched+0x10/0x10 [ 199.511211][ T7204] ? fs_reclaim_acquire+0x7d/0x100 [ 199.511238][ T7204] should_fail_ex+0x414/0x560 [ 199.511263][ T7204] should_failslab+0xa8/0x100 [ 199.511286][ T7204] __kmalloc_noprof+0xcb/0x4f0 [ 199.511318][ T7204] ? snd_pcm_hw_refine+0x967/0x1640 [ 199.511337][ T7204] snd_pcm_hw_refine+0x967/0x1640 [ 199.511365][ T7204] ? __se_sys_io_uring_enter+0x2df/0x2b20 [ 199.511406][ T7204] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 199.511463][ T7204] ? __asan_memset+0x22/0x50 [ 199.511481][ T7204] ? snd_pcm_oss_change_params_locked+0x7a0/0x3e40 [ 199.511510][ T7204] ? snd_pcm_oss_change_params_locked+0x800/0x3e40 [ 199.511548][ T7204] snd_pcm_oss_change_params_locked+0xa84/0x3e40 [ 199.511590][ T7204] ? preempt_schedule_thunk+0x16/0x30 [ 199.511619][ T7204] ? __mutex_lock+0x349/0x1360 [ 199.511651][ T7204] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 199.511672][ T7204] ? __lock_acquire+0xab9/0xd20 [ 199.511705][ T7204] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 199.511730][ T7204] snd_pcm_oss_make_ready+0x11b/0x340 [ 199.511756][ T7204] snd_pcm_oss_set_trigger+0x95/0x740 [ 199.511783][ T7204] snd_pcm_oss_poll+0x841/0x980 [ 199.511810][ T7204] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 199.511834][ T7204] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 199.511854][ T7204] __io_arm_poll_handler+0x36f/0xbb0 [ 199.511888][ T7204] io_arm_apoll+0x62b/0x9a0 [ 199.511938][ T7204] ? __pfx_io_arm_apoll+0x10/0x10 [ 199.511958][ T7204] ? __fget_files+0x3a0/0x420 [ 199.511970][ T7204] ? __pfx_io_async_queue_proc+0x10/0x10 [ 199.511993][ T7204] ? __io_issue_sqe+0x1f9/0x4b0 [ 199.512011][ T7204] ? io_file_get_normal+0x101/0x2f0 [ 199.512030][ T7204] ? io_arm_poll_handler+0x207/0x2a0 [ 199.512057][ T7204] io_queue_async+0x187/0x450 [ 199.512082][ T7204] io_submit_sqes+0xe28/0x1d10 [ 199.512124][ T7204] __se_sys_io_uring_enter+0x2df/0x2b20 [ 199.512158][ T7204] ? ksys_write+0x1cb/0x250 [ 199.512180][ T7204] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 199.512198][ T7204] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 199.512219][ T7204] ? __pfx_vfs_write+0x10/0x10 [ 199.512241][ T7204] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.512265][ T7204] ? __fget_files+0x3a0/0x420 [ 199.512283][ T7204] ? fput+0xa0/0xd0 [ 199.512304][ T7204] ? ksys_write+0x22a/0x250 [ 199.512331][ T7204] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 199.512353][ T7204] __do_fast_syscall_32+0xb6/0x2b0 [ 199.512376][ T7204] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.512399][ T7204] do_fast_syscall_32+0x34/0x80 [ 199.512421][ T7204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.512439][ T7204] RIP: 0023:0xf7f57539 [ 199.512452][ T7204] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 199.512465][ T7204] RSP: 002b:00000000f545555c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 199.512489][ T7204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047f5 [ 199.512504][ T7204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.512517][ T7204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.512529][ T7204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.512541][ T7204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.512567][ T7204] [ 200.107159][ T5864] usb 2-1: device descriptor read/64, error -71 [ 200.281847][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.289905][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.539184][ T5864] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 200.649297][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'. [ 200.669062][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'. [ 200.737268][ T5864] usb 2-1: device descriptor read/64, error -71 [ 200.867779][ T5864] usb usb2-port1: attempt power cycle [ 201.237975][ T5864] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 201.261396][ T5864] usb 2-1: device descriptor read/8, error -71 [ 201.507213][ T5864] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 201.574539][ T5864] usb 2-1: device descriptor read/8, error -71 [ 201.614371][ T5932] usb 4-1: USB disconnect, device number 14 [ 201.646632][ T7223] FAULT_INJECTION: forcing a failure. [ 201.646632][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 201.722079][ T7223] CPU: 1 UID: 0 PID: 7223 Comm: syz.2.298 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 201.722124][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.722137][ T7223] Call Trace: [ 201.722150][ T7223] [ 201.722159][ T7223] dump_stack_lvl+0x189/0x250 [ 201.722189][ T7223] ? __pfx____ratelimit+0x10/0x10 [ 201.722225][ T7223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.722250][ T7223] ? __pfx__printk+0x10/0x10 [ 201.722283][ T7223] ? __pfx___might_resched+0x10/0x10 [ 201.722302][ T7223] ? fs_reclaim_acquire+0x7d/0x100 [ 201.722338][ T7223] should_fail_ex+0x414/0x560 [ 201.722372][ T7223] should_failslab+0xa8/0x100 [ 201.722404][ T7223] __kmalloc_cache_noprof+0x70/0x3d0 [ 201.722434][ T7223] ? tcf_chain_create+0xb0/0x310 [ 201.722470][ T7223] tcf_chain_create+0xb0/0x310 [ 201.722509][ T7223] __tcf_chain_get+0x111/0x3c0 [ 201.722541][ T7223] tc_new_tfilter+0x753/0x15b0 [ 201.722573][ T7223] ? __local_bh_enable_ip+0x12d/0x1c0 [ 201.722626][ T7223] ? __pfx_tc_new_tfilter+0x10/0x10 [ 201.722644][ T7223] ? __dev_queue_xmit+0x1d79/0x3b50 [ 201.722706][ T7223] ? __pfx_tc_new_tfilter+0x10/0x10 [ 201.722726][ T7223] rtnetlink_rcv_msg+0x7cc/0xb70 [ 201.722762][ T7223] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 201.722792][ T7223] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.722821][ T7223] ? ref_tracker_free+0x63a/0x7d0 [ 201.722853][ T7223] ? __asan_memcpy+0x40/0x70 [ 201.722878][ T7223] ? __pfx_ref_tracker_free+0x10/0x10 [ 201.722922][ T7223] netlink_rcv_skb+0x208/0x470 [ 201.722954][ T7223] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.722988][ T7223] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.723033][ T7223] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.723073][ T7223] netlink_unicast+0x82c/0x9e0 [ 201.723112][ T7223] ? __pfx_netlink_unicast+0x10/0x10 [ 201.723143][ T7223] ? netlink_sendmsg+0x642/0xb30 [ 201.723172][ T7223] ? skb_put+0x11b/0x210 [ 201.723218][ T7223] netlink_sendmsg+0x805/0xb30 [ 201.723262][ T7223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.723296][ T7223] ? __import_iovec+0x5d4/0x7f0 [ 201.723319][ T7223] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.723355][ T7223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.723378][ T7223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.723410][ T7223] __sock_sendmsg+0x21c/0x270 [ 201.723440][ T7223] ____sys_sendmsg+0x505/0x830 [ 201.723469][ T7223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.723511][ T7223] ___sys_sendmsg+0x21f/0x2a0 [ 201.723536][ T7223] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.723599][ T7223] ? __fget_files+0x2a/0x420 [ 201.723617][ T7223] ? __fget_files+0x3a0/0x420 [ 201.723649][ T7223] __sys_sendmsg+0x164/0x220 [ 201.723673][ T7223] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.723712][ T7223] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.723745][ T7223] __do_fast_syscall_32+0xb6/0x2b0 [ 201.723778][ T7223] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.723811][ T7223] do_fast_syscall_32+0x34/0x80 [ 201.723843][ T7223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.723870][ T7223] RIP: 0023:0xf703e539 [ 201.723888][ T7223] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 201.723907][ T7223] RSP: 002b:00000000f542e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 201.723930][ T7223] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 201.723945][ T7223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.723957][ T7223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.723970][ T7223] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 201.723982][ T7223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.724015][ T7223] [ 202.135839][ T5864] usb usb2-port1: unable to enumerate USB device [ 202.417993][ T7232] warning: `syz.3.300' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 203.031891][ T7242] PKCS7: Unknown OID: [5] (bad) [ 203.036899][ T7242] PKCS7: Only support pkcs7_signedData type [ 203.046201][ T7242] FAULT_INJECTION: forcing a failure. [ 203.046201][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 203.059573][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.1.303 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 203.059604][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.059617][ T7242] Call Trace: [ 203.059625][ T7242] [ 203.059634][ T7242] dump_stack_lvl+0x189/0x250 [ 203.059665][ T7242] ? __pfx____ratelimit+0x10/0x10 [ 203.059695][ T7242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.059721][ T7242] ? __pfx__printk+0x10/0x10 [ 203.059756][ T7242] ? __pfx___might_resched+0x10/0x10 [ 203.059777][ T7242] ? fs_reclaim_acquire+0x7d/0x100 [ 203.059818][ T7242] should_fail_ex+0x414/0x560 [ 203.059852][ T7242] should_failslab+0xa8/0x100 [ 203.059887][ T7242] kmem_cache_alloc_noprof+0x73/0x3c0 [ 203.059916][ T7242] ? security_file_alloc+0x34/0x330 [ 203.059950][ T7242] security_file_alloc+0x34/0x330 [ 203.059980][ T7242] init_file+0x93/0x2f0 [ 203.060006][ T7242] alloc_empty_file+0x6e/0x1d0 [ 203.060038][ T7242] path_openat+0x107/0x3830 [ 203.060064][ T7242] ? arch_stack_walk+0xfc/0x150 [ 203.060109][ T7242] ? stack_trace_save+0x9c/0xe0 [ 203.060139][ T7242] ? stack_depot_save_flags+0x40/0x860 [ 203.060169][ T7242] ? __lock_acquire+0xa41/0xd20 [ 203.060207][ T7242] ? kasan_save_track+0x4f/0x80 [ 203.060233][ T7242] ? kasan_save_track+0x3e/0x80 [ 203.060258][ T7242] ? __kasan_slab_alloc+0x6c/0x80 [ 203.060287][ T7242] ? getname_flags+0xb8/0x540 [ 203.060307][ T7242] ? __pfx_path_openat+0x10/0x10 [ 203.060331][ T7242] ? do_fast_syscall_32+0x34/0x80 [ 203.060363][ T7242] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.060411][ T7242] do_filp_open+0x1fa/0x410 [ 203.060436][ T7242] ? __lock_acquire+0xab9/0xd20 [ 203.060470][ T7242] ? __pfx_do_filp_open+0x10/0x10 [ 203.060521][ T7242] ? _raw_spin_unlock+0x28/0x50 [ 203.060547][ T7242] ? alloc_fd+0x64c/0x6c0 [ 203.060591][ T7242] do_sys_openat2+0x121/0x1c0 [ 203.060619][ T7242] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.060647][ T7242] ? ksys_write+0x1e1/0x250 [ 203.060685][ T7242] __ia32_compat_sys_openat+0x131/0x160 [ 203.060718][ T7242] __do_fast_syscall_32+0xb6/0x2b0 [ 203.060751][ T7242] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.060786][ T7242] do_fast_syscall_32+0x34/0x80 [ 203.060819][ T7242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.060845][ T7242] RIP: 0023:0xf70be539 [ 203.060863][ T7242] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 203.060883][ T7242] RSP: 002b:00000000f546c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 203.060905][ T7242] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 203.060920][ T7242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.060933][ T7242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.060946][ T7242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 203.060959][ T7242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.060990][ T7242] [ 203.364254][ T5864] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 203.665141][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 203.687252][ T5864] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 203.700571][ T7244] PKCS7: Unknown OID: [5] (bad) [ 203.709164][ T7244] PKCS7: Only support pkcs7_signedData type [ 203.747445][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.792720][ T5864] usb 4-1: config 0 descriptor?? [ 204.003186][ T5864] usb 4-1: USB disconnect, device number 15 [ 204.915295][ T7251] netlink: 168 bytes leftover after parsing attributes in process `syz.0.306'. [ 204.917279][ T5918] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 204.924577][ T7251] netlink: 168 bytes leftover after parsing attributes in process `syz.0.306'. [ 204.972101][ T7248] fuse: root generation should be zero [ 204.984455][ T7248] FAULT_INJECTION: forcing a failure. [ 204.984455][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.030950][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: syz.1.305 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 205.030983][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.030995][ T7248] Call Trace: [ 205.031004][ T7248] [ 205.031013][ T7248] dump_stack_lvl+0x189/0x250 [ 205.031043][ T7248] ? __pfx____ratelimit+0x10/0x10 [ 205.031071][ T7248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.031096][ T7248] ? __pfx__printk+0x10/0x10 [ 205.031138][ T7248] should_fail_ex+0x414/0x560 [ 205.031171][ T7248] _copy_to_user+0x31/0xb0 [ 205.031215][ T7248] simple_read_from_buffer+0xe1/0x170 [ 205.031253][ T7248] proc_fail_nth_read+0x1b3/0x220 [ 205.031281][ T7248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.031320][ T7248] ? rw_verify_area+0x2a6/0x4d0 [ 205.031345][ T7248] ? __lock_acquire+0xab9/0xd20 [ 205.031374][ T7248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.031399][ T7248] vfs_read+0x200/0xa30 [ 205.031426][ T7248] ? fdget_pos+0x247/0x320 [ 205.031449][ T7248] ? __pfx___mutex_lock+0x10/0x10 [ 205.031479][ T7248] ? __pfx_vfs_read+0x10/0x10 [ 205.031508][ T7248] ? __fget_files+0x2a/0x420 [ 205.031531][ T7248] ? __fget_files+0x3a0/0x420 [ 205.031549][ T7248] ? __fget_files+0x2a/0x420 [ 205.031577][ T7248] ksys_read+0x145/0x250 [ 205.031615][ T7248] ? __pfx_ksys_read+0x10/0x10 [ 205.031647][ T7248] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.031680][ T7248] __do_fast_syscall_32+0xb6/0x2b0 [ 205.031711][ T7248] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.031744][ T7248] do_fast_syscall_32+0x34/0x80 [ 205.031774][ T7248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.031800][ T7248] RIP: 0023:0xf70be539 [ 205.031818][ T7248] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 205.031833][ T7248] RSP: 002b:00000000f54ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 205.031852][ T7248] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ae620 [ 205.031864][ T7248] RDX: 000000000000000f RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 205.031874][ T7248] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 205.031883][ T7248] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.031893][ T7248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.031935][ T7248] [ 205.267157][ T5918] usb 4-1: device descriptor read/64, error -71 [ 205.315103][ T7260] FAULT_INJECTION: forcing a failure. [ 205.315103][ T7260] name failslab, interval 1, probability 0, space 0, times 0 [ 205.357511][ T7260] CPU: 0 UID: 0 PID: 7260 Comm: syz.0.309 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 205.357544][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.357557][ T7260] Call Trace: [ 205.357566][ T7260] [ 205.357576][ T7260] dump_stack_lvl+0x189/0x250 [ 205.357607][ T7260] ? __pfx____ratelimit+0x10/0x10 [ 205.357637][ T7260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.357663][ T7260] ? __pfx__printk+0x10/0x10 [ 205.357696][ T7260] ? __pfx___might_resched+0x10/0x10 [ 205.357718][ T7260] ? fs_reclaim_acquire+0x7d/0x100 [ 205.357757][ T7260] should_fail_ex+0x414/0x560 [ 205.357791][ T7260] should_failslab+0xa8/0x100 [ 205.357834][ T7260] __kmalloc_noprof+0xcb/0x4f0 [ 205.357862][ T7260] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 205.357894][ T7260] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 205.357928][ T7260] genl_family_rcv_msg_doit+0xb8/0x300 [ 205.357958][ T7260] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 205.357992][ T7260] ? apparmor_capable+0x137/0x1b0 [ 205.358020][ T7260] ? bpf_lsm_capable+0x9/0x20 [ 205.358049][ T7260] ? security_capable+0x7e/0x2e0 [ 205.358087][ T7260] genl_rcv_msg+0x60e/0x790 [ 205.358118][ T7260] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.358140][ T7260] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 205.358162][ T7260] ? __pfx_nl80211_new_interface+0x10/0x10 [ 205.358185][ T7260] ? __pfx_nl80211_post_doit+0x10/0x10 [ 205.358209][ T7260] ? __asan_memcpy+0x40/0x70 [ 205.358234][ T7260] ? __pfx_ref_tracker_free+0x10/0x10 [ 205.358272][ T7260] netlink_rcv_skb+0x208/0x470 [ 205.358301][ T7260] ? __lock_acquire+0xab9/0xd20 [ 205.358333][ T7260] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.358358][ T7260] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.358409][ T7260] ? down_read+0x1ad/0x2e0 [ 205.358445][ T7260] genl_rcv+0x28/0x40 [ 205.358467][ T7260] netlink_unicast+0x82c/0x9e0 [ 205.358505][ T7260] ? __pfx_netlink_unicast+0x10/0x10 [ 205.358535][ T7260] ? netlink_sendmsg+0x642/0xb30 [ 205.358563][ T7260] ? skb_put+0x11b/0x210 [ 205.358600][ T7260] netlink_sendmsg+0x805/0xb30 [ 205.358641][ T7260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.358673][ T7260] ? __import_iovec+0x5d4/0x7f0 [ 205.358695][ T7260] ? aa_sock_msg_perm+0xf1/0x1d0 [ 205.358730][ T7260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.358753][ T7260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.358782][ T7260] __sock_sendmsg+0x21c/0x270 [ 205.358822][ T7260] ____sys_sendmsg+0x505/0x830 [ 205.358852][ T7260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.358893][ T7260] ___sys_sendmsg+0x21f/0x2a0 [ 205.358918][ T7260] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.358981][ T7260] ? __fget_files+0x2a/0x420 [ 205.358999][ T7260] ? __fget_files+0x3a0/0x420 [ 205.359031][ T7260] __sys_sendmsg+0x164/0x220 [ 205.359056][ T7260] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.359096][ T7260] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.359130][ T7260] __do_fast_syscall_32+0xb6/0x2b0 [ 205.359163][ T7260] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.359197][ T7260] do_fast_syscall_32+0x34/0x80 [ 205.359230][ T7260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.359256][ T7260] RIP: 0023:0xf706e539 [ 205.359274][ T7260] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 205.359293][ T7260] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 205.359316][ T7260] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000e40 [ 205.359331][ T7260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.359344][ T7260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.359357][ T7260] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.359369][ T7260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.359399][ T7260] [ 205.517195][ T5918] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 205.586392][ T7263] PKCS7: Unknown OID: [5] (bad) [ 205.839646][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.310'. [ 205.847261][ T5918] usb 4-1: device descriptor read/64, error -71 [ 205.885202][ T7263] PKCS7: Only support pkcs7_signedData type [ 205.957583][ T5918] usb usb4-port1: attempt power cycle [ 206.087151][ T5932] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 206.237192][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 206.260145][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.280989][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.293197][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.300694][ T5932] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 206.310409][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.317241][ T5918] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 206.347323][ T5932] usb 2-1: config 0 descriptor?? [ 206.408376][ T5918] usb 4-1: device descriptor read/8, error -71 [ 206.677212][ T5918] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 206.717734][ T5918] usb 4-1: device descriptor read/8, error -71 [ 206.791710][ T7278] tipc: Enabled bearer , priority 0 [ 206.797991][ T5932] hid (null): nested delimiters [ 206.810642][ T7278] syzkaller0: entered promiscuous mode [ 206.817375][ T5932] hid (null): nested delimiters [ 206.822305][ T5932] hid (null): nested delimiters [ 206.837564][ T5918] usb usb4-port1: unable to enumerate USB device [ 206.838917][ T5932] hid (null): unknown global tag 0xc [ 206.844193][ T7278] syzkaller0: entered allmulticast mode [ 206.893683][ T7280] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 206.924923][ T7278] tipc: Resetting bearer [ 206.936030][ T7277] tipc: Resetting bearer [ 206.962754][ T7277] tipc: Disabling bearer [ 207.051021][ T5932] usb 2-1: USB disconnect, device number 24 [ 207.647266][ T5932] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 207.792121][ T5932] usb 1-1: device descriptor read/64, error -71 [ 207.798822][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'. [ 208.067462][ T5918] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 208.127266][ T5932] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 208.238067][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 208.537410][ T5932] usb 1-1: device descriptor read/64, error -71 [ 208.592071][ T5918] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 208.609641][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.643953][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 208.654056][ T5918] pvrusb2: ********** [ 208.658553][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 208.668781][ T5918] pvrusb2: Important functionality might not be entirely working. [ 208.676587][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 208.679808][ T5932] usb usb1-port1: attempt power cycle [ 208.829548][ T5918] pvrusb2: ********** [ 208.831003][ T7312] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 208.850235][ T2347] pvrusb2: Invalid write control endpoint [ 208.850994][ T5918] usb 4-1: USB disconnect, device number 20 [ 208.993747][ T2347] pvrusb2: Invalid write control endpoint [ 209.005857][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 209.015860][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 209.025317][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 209.039110][ T2347] pvrusb2: Device being rendered inoperable [ 209.045175][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 209.063023][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 209.076715][ T2347] pvrusb2: Attached sub-driver cx25840 [ 209.082853][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 209.096774][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 209.164441][ T5932] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 209.189422][ T5932] usb 1-1: device descriptor read/8, error -71 [ 209.214548][ T7317] input: syz1 as /devices/virtual/input/input15 [ 209.409701][ T7320] FAULT_INJECTION: forcing a failure. [ 209.409701][ T7320] name failslab, interval 1, probability 0, space 0, times 0 [ 209.422525][ T7320] CPU: 1 UID: 0 PID: 7320 Comm: syz.4.328 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 209.422555][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.422569][ T7320] Call Trace: [ 209.422578][ T7320] [ 209.422588][ T7320] dump_stack_lvl+0x189/0x250 [ 209.422618][ T7320] ? __pfx____ratelimit+0x10/0x10 [ 209.422645][ T7320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.422663][ T7320] ? __pfx__printk+0x10/0x10 [ 209.422689][ T7320] ? __pfx___might_resched+0x10/0x10 [ 209.422703][ T7320] ? fs_reclaim_acquire+0x7d/0x100 [ 209.422731][ T7320] should_fail_ex+0x414/0x560 [ 209.422755][ T7320] should_failslab+0xa8/0x100 [ 209.422779][ T7320] __kmalloc_cache_noprof+0x70/0x3d0 [ 209.422800][ T7320] ? rtnl_newlink+0xed/0x1c70 [ 209.422821][ T7320] ? kasan_save_free_info+0x46/0x50 [ 209.422839][ T7320] rtnl_newlink+0xed/0x1c70 [ 209.422860][ T7320] ? netlink_sendmsg+0x805/0xb30 [ 209.422881][ T7320] ? __sock_sendmsg+0x21c/0x270 [ 209.422898][ T7320] ? ____sys_sendmsg+0x505/0x830 [ 209.422911][ T7320] ? ___sys_sendmsg+0x21f/0x2a0 [ 209.422924][ T7320] ? __sys_sendmsg+0x164/0x220 [ 209.422937][ T7320] ? __do_fast_syscall_32+0xb6/0x2b0 [ 209.422958][ T7320] ? do_fast_syscall_32+0x34/0x80 [ 209.422979][ T7320] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.423003][ T7320] ? __pfx_rtnl_newlink+0x10/0x10 [ 209.423041][ T7320] ? kasan_quarantine_put+0xdd/0x220 [ 209.423060][ T7320] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.423085][ T7320] ? nlmon_xmit+0xb0/0x100 [ 209.423097][ T7320] ? kmem_cache_free+0x18f/0x400 [ 209.423124][ T7320] ? __local_bh_enable_ip+0x12d/0x1c0 [ 209.423140][ T7320] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.423161][ T7320] ? __local_bh_enable_ip+0x12d/0x1c0 [ 209.423175][ T7320] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 209.423193][ T7320] ? __dev_queue_xmit+0x27b/0x3b50 [ 209.423210][ T7320] ? __dev_queue_xmit+0x27b/0x3b50 [ 209.423225][ T7320] ? __dev_queue_xmit+0x27b/0x3b50 [ 209.423242][ T7320] ? __dev_queue_xmit+0x1d79/0x3b50 [ 209.423262][ T7320] ? __lock_acquire+0xab9/0xd20 [ 209.423303][ T7320] ? __pfx_rtnl_newlink+0x10/0x10 [ 209.423324][ T7320] rtnetlink_rcv_msg+0x7cc/0xb70 [ 209.423349][ T7320] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 209.423370][ T7320] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.423390][ T7320] ? ref_tracker_free+0x63a/0x7d0 [ 209.423411][ T7320] ? __asan_memcpy+0x40/0x70 [ 209.423428][ T7320] ? __pfx_ref_tracker_free+0x10/0x10 [ 209.423469][ T7320] netlink_rcv_skb+0x208/0x470 [ 209.423491][ T7320] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.423520][ T7320] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.423549][ T7320] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.423575][ T7320] netlink_unicast+0x82c/0x9e0 [ 209.423600][ T7320] ? __pfx_netlink_unicast+0x10/0x10 [ 209.423620][ T7320] ? netlink_sendmsg+0x642/0xb30 [ 209.423640][ T7320] ? skb_put+0x11b/0x210 [ 209.423665][ T7320] netlink_sendmsg+0x805/0xb30 [ 209.423692][ T7320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.423715][ T7320] ? __import_iovec+0x5d4/0x7f0 [ 209.423730][ T7320] ? aa_sock_msg_perm+0xf1/0x1d0 [ 209.423754][ T7320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.423770][ T7320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.423793][ T7320] __sock_sendmsg+0x21c/0x270 [ 209.423813][ T7320] ____sys_sendmsg+0x505/0x830 [ 209.423832][ T7320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.423858][ T7320] ___sys_sendmsg+0x21f/0x2a0 [ 209.423874][ T7320] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.423914][ T7320] ? __fget_files+0x2a/0x420 [ 209.423926][ T7320] ? __fget_files+0x3a0/0x420 [ 209.423946][ T7320] __sys_sendmsg+0x164/0x220 [ 209.423962][ T7320] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.423988][ T7320] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.424010][ T7320] __do_fast_syscall_32+0xb6/0x2b0 [ 209.424032][ T7320] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.424054][ T7320] do_fast_syscall_32+0x34/0x80 [ 209.424075][ T7320] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.424093][ T7320] RIP: 0023:0xf7f57539 [ 209.424107][ T7320] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 209.424120][ T7320] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 209.424135][ T7320] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 209.424146][ T7320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.424154][ T7320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.424162][ T7320] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 209.424172][ T7320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.424191][ T7320] [ 209.427180][ T5932] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 209.744622][ T7324] tipc: Enabling of bearer rejected, failed to enable media [ 209.745929][ T5925] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 209.932122][ T5932] usb 1-1: device descriptor read/8, error -71 [ 210.067223][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 210.078782][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.101437][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 210.127465][ T5932] usb usb1-port1: unable to enumerate USB device [ 210.163741][ T5925] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 210.192827][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.293624][ T5918] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 210.324010][ T5925] usb 2-1: config 0 descriptor?? [ 210.561346][ T5925] usb 2-1: string descriptor 0 read error: -32 [ 210.660238][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 210.674654][ T5925] usb 2-1: USB disconnect, device number 25 [ 210.699656][ T5918] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 210.707949][ T5918] usb 4-1: config 0 has no interface number 0 [ 210.719888][ T5918] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.743604][ T5918] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 210.754693][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.770849][ T5918] usb 4-1: Product: syz [ 210.795546][ T5918] usb 4-1: Manufacturer: syz [ 210.825578][ T5918] usb 4-1: SerialNumber: syz [ 210.845984][ T5918] usb 4-1: config 0 descriptor?? [ 210.876796][ T5918] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 211.002574][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 211.074868][ T5918] em28xx 4-1:0.132: Video interface 132 found: [ 211.207585][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.377432][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 211.403419][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.432028][ T5918] em28xx 4-1:0.132: unknown em28xx chip ID (194) [ 211.456429][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.524153][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 211.554147][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 211.609039][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.915415][ T10] usb 3-1: config 0 descriptor?? [ 212.027841][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 212.034370][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 212.041001][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 212.047679][ T5872] Bluetooth: hci4: command 0x0406 tx timeout [ 212.053929][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 212.236468][ T5918] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 212.300892][ T5918] em28xx 4-1:0.132: board has no eeprom [ 212.387380][ T5918] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 212.452737][ T5918] em28xx 4-1:0.132: analog set to bulk mode. [ 212.554453][ T5864] em28xx 4-1:0.132: Registering V4L2 extension [ 212.697236][ T5918] usb 4-1: USB disconnect, device number 21 [ 212.758936][ T5918] em28xx 4-1:0.132: Disconnecting em28xx [ 213.245363][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 213.261744][ T5864] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 213.269009][ T5864] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 213.652338][ T5864] em28xx 4-1:0.132: No AC97 audio processor [ 213.731079][ T5864] usb 4-1: Decoder not found [ 214.127564][ T5864] em28xx 4-1:0.132: failed to create media graph [ 214.193011][ T5864] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 214.246466][ T5864] em28xx 4-1:0.132: Remote control support is not available for this card. [ 214.265136][ T5918] em28xx 4-1:0.132: Closing input extension [ 214.277321][ T5918] ================================================================== [ 214.285442][ T5918] BUG: KASAN: slab-use-after-free in media_device_unregister+0x141/0x400 [ 214.293895][ T5918] Read of size 8 at addr ffff88807af40210 by task kworker/1:4/5918 [ 214.301792][ T5918] [ 214.304124][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: kworker/1:4 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 214.304144][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.304156][ T5918] Workqueue: usb_hub_wq hub_event [ 214.304179][ T5918] Call Trace: [ 214.304188][ T5918] [ 214.304195][ T5918] dump_stack_lvl+0x189/0x250 [ 214.304216][ T5918] ? rcu_is_watching+0x15/0xb0 [ 214.304230][ T5918] ? __kasan_check_byte+0x12/0x40 [ 214.304254][ T5918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.304271][ T5918] ? rcu_is_watching+0x15/0xb0 [ 214.304286][ T5918] ? lock_release+0x4b/0x3e0 [ 214.304310][ T5918] ? __virt_addr_valid+0x1c8/0x5c0 [ 214.304331][ T5918] ? __virt_addr_valid+0x4a5/0x5c0 [ 214.304351][ T5918] print_report+0xca/0x240 [ 214.304366][ T5918] ? media_device_unregister+0x141/0x400 [ 214.304389][ T5918] kasan_report+0x118/0x150 [ 214.304412][ T5918] ? media_device_unregister+0x141/0x400 [ 214.304439][ T5918] media_device_unregister+0x141/0x400 [ 214.304466][ T5918] em28xx_release_resources+0xac/0x240 [ 214.304485][ T5918] em28xx_usb_disconnect+0x19f/0x2f0 [ 214.304504][ T5918] usb_unbind_interface+0x26b/0x910 [ 214.304528][ T5918] ? __pfx_usb_unbind_interface+0x10/0x10 [ 214.304548][ T5918] device_release_driver_internal+0x4d6/0x800 [ 214.304570][ T5918] bus_remove_device+0x34d/0x410 [ 214.304594][ T5918] device_del+0x511/0x8e0 [ 214.304610][ T5918] ? kfree+0x18e/0x440 [ 214.304633][ T5918] ? __pfx_device_del+0x10/0x10 [ 214.304647][ T5918] ? kobject_put+0x446/0x480 [ 214.304673][ T5918] usb_disable_device+0x3e9/0x8a0 [ 214.304695][ T5918] usb_disconnect+0x330/0x950 [ 214.304714][ T5918] hub_event+0x1cf5/0x4a20 [ 214.304741][ T5918] ? do_raw_spin_lock+0x121/0x290 [ 214.304761][ T5918] ? register_lock_class+0x51/0x320 [ 214.304789][ T5918] ? __pfx_hub_event+0x10/0x10 [ 214.304807][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 214.304824][ T5918] ? _raw_spin_unlock_irq+0x23/0x50 [ 214.304843][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 214.304857][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 214.304872][ T5918] process_scheduled_works+0xade/0x17b0 [ 214.304904][ T5918] ? __pfx_process_scheduled_works+0x10/0x10 [ 214.304925][ T5918] worker_thread+0x8a0/0xda0 [ 214.304942][ T5918] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.304964][ T5918] ? __kthread_parkme+0x7b/0x200 [ 214.304984][ T5918] kthread+0x70e/0x8a0 [ 214.305004][ T5918] ? __pfx_worker_thread+0x10/0x10 [ 214.305019][ T5918] ? __pfx_kthread+0x10/0x10 [ 214.305038][ T5918] ? _raw_spin_unlock_irq+0x23/0x50 [ 214.305057][ T5918] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.305076][ T5918] ? __pfx_kthread+0x10/0x10 [ 214.305095][ T5918] ret_from_fork+0x3f9/0x770 [ 214.305111][ T5918] ? __pfx_ret_from_fork+0x10/0x10 [ 214.305129][ T5918] ? __switch_to_asm+0x39/0x70 [ 214.305149][ T5918] ? __switch_to_asm+0x33/0x70 [ 214.305168][ T5918] ? __pfx_kthread+0x10/0x10 [ 214.305188][ T5918] ret_from_fork_asm+0x1a/0x30 [ 214.305214][ T5918] [ 214.305220][ T5918] [ 214.592783][ T5918] Allocated by task 5864: [ 214.597107][ T5918] kasan_save_track+0x3e/0x80 [ 214.601796][ T5918] __kasan_kmalloc+0x93/0xb0 [ 214.606391][ T5918] __kmalloc_cache_noprof+0x230/0x3d0 [ 214.611763][ T5918] em28xx_v4l2_init+0x10b/0x2e70 [ 214.616698][ T5918] em28xx_init_extension+0x11d/0x1c0 [ 214.621986][ T5918] process_scheduled_works+0xade/0x17b0 [ 214.627528][ T5918] worker_thread+0x8a0/0xda0 [ 214.632116][ T5918] kthread+0x70e/0x8a0 [ 214.636178][ T5918] ret_from_fork+0x3f9/0x770 [ 214.640761][ T5918] ret_from_fork_asm+0x1a/0x30 [ 214.645525][ T5918] [ 214.647846][ T5918] Freed by task 5864: [ 214.651813][ T5918] kasan_save_track+0x3e/0x80 [ 214.656497][ T5918] kasan_save_free_info+0x46/0x50 [ 214.661528][ T5918] __kasan_slab_free+0x5b/0x80 [ 214.666290][ T5918] kfree+0x18e/0x440 [ 214.670183][ T5918] em28xx_v4l2_init+0x1683/0x2e70 [ 214.675205][ T5918] em28xx_init_extension+0x11d/0x1c0 [ 214.680482][ T5918] process_scheduled_works+0xade/0x17b0 [ 214.686034][ T5918] worker_thread+0x8a0/0xda0 [ 214.690616][ T5918] kthread+0x70e/0x8a0 [ 214.694682][ T5918] ret_from_fork+0x3f9/0x770 [ 214.699264][ T5918] ret_from_fork_asm+0x1a/0x30 [ 214.704028][ T5918] [ 214.706357][ T5918] The buggy address belongs to the object at ffff88807af40000 [ 214.706357][ T5918] which belongs to the cache kmalloc-8k of size 8192 [ 214.720403][ T5918] The buggy address is located 528 bytes inside of [ 214.720403][ T5918] freed 8192-byte region [ffff88807af40000, ffff88807af42000) [ 214.734280][ T5918] [ 214.736598][ T5918] The buggy address belongs to the physical page: [ 214.743025][ T5918] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7af40 [ 214.751782][ T5918] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 214.760280][ T5918] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 214.767829][ T5918] page_type: f5(slab) [ 214.771809][ T5918] raw: 00fff00000000040 ffff88801a442280 ffffea0001daf600 dead000000000002 [ 214.780394][ T5918] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 214.788985][ T5918] head: 00fff00000000040 ffff88801a442280 ffffea0001daf600 dead000000000002 [ 214.797667][ T5918] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 214.806427][ T5918] head: 00fff00000000003 ffffea0001ebd001 00000000ffffffff 00000000ffffffff [ 214.815100][ T5918] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 214.823761][ T5918] page dumped because: kasan: bad access detected [ 214.830177][ T5918] page_owner tracks the page as allocated [ 214.835883][ T5918] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5515, tgid 5515 (rcS), ts 57264989684, free_ts 56793618562 [ 214.855673][ T5918] post_alloc_hook+0x240/0x2a0 [ 214.860448][ T5918] get_page_from_freelist+0x21e4/0x22c0 [ 214.865992][ T5918] __alloc_frozen_pages_noprof+0x181/0x370 [ 214.871793][ T5918] alloc_pages_mpol+0x232/0x4a0 [ 214.876647][ T5918] allocate_slab+0x8a/0x370 [ 214.881144][ T5918] ___slab_alloc+0xbeb/0x1410 [ 214.885828][ T5918] __kmalloc_cache_noprof+0x296/0x3d0 [ 214.891199][ T5918] tomoyo_init_log+0x111f/0x1f70 [ 214.896128][ T5918] tomoyo_supervisor+0x340/0x1480 [ 214.901146][ T5918] tomoyo_env_perm+0x149/0x1e0 [ 214.905907][ T5918] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 214.911537][ T5918] tomoyo_bprm_check_security+0x11c/0x180 [ 214.917255][ T5918] security_bprm_check+0x89/0x270 [ 214.922285][ T5918] bprm_execve+0x8ee/0x1450 [ 214.926784][ T5918] do_execveat_common+0x510/0x6a0 [ 214.931812][ T5918] __x64_sys_execve+0x94/0xb0 [ 214.936495][ T5918] page last free pid 5510 tgid 5510 stack trace: [ 214.942819][ T5918] __free_frozen_pages+0xbc4/0xd30 [ 214.947933][ T5918] __slab_free+0x303/0x3c0 [ 214.952341][ T5918] qlist_free_all+0x97/0x140 [ 214.956928][ T5918] kasan_quarantine_reduce+0x148/0x160 [ 214.962386][ T5918] __kasan_slab_alloc+0x22/0x80 [ 214.967241][ T5918] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 214.972704][ T5918] vm_area_alloc+0x24/0x140 [ 214.977215][ T5918] mmap_region+0xdc7/0x20c0 [ 214.981719][ T5918] do_mmap+0xc45/0x10d0 [ 214.985873][ T5918] vm_mmap_pgoff+0x2a6/0x4d0 [ 214.990456][ T5918] ksys_mmap_pgoff+0x51f/0x760 [ 214.995220][ T5918] do_syscall_64+0xfa/0x3b0 [ 214.999726][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.005618][ T5918] [ 215.007940][ T5918] Memory state around the buggy address: [ 215.013561][ T5918] ffff88807af40100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.021633][ T5918] ffff88807af40180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.029691][ T5918] >ffff88807af40200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.037746][ T5918] ^ [ 215.042332][ T5918] ffff88807af40280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.050390][ T5918] ffff88807af40300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.058441][ T5918] ================================================================== [ 215.162938][ T10] usb 3-1: USB disconnect, device number 12 [ 215.374407][ T5918] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.381671][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: kworker/1:4 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 215.392039][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.402131][ T5918] Workqueue: usb_hub_wq hub_event [ 215.407203][ T5918] Call Trace: [ 215.410502][ T5918] [ 215.413452][ T5918] dump_stack_lvl+0x99/0x250 [ 215.418077][ T5918] ? __asan_memcpy+0x40/0x70 [ 215.422705][ T5918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.427938][ T5918] ? __pfx__printk+0x10/0x10 [ 215.432567][ T5918] vpanic+0x281/0x750 [ 215.436575][ T5918] ? rcu_is_watching+0x15/0xb0 [ 215.441366][ T5918] ? __pfx_vpanic+0x10/0x10 [ 215.445897][ T5918] ? preempt_schedule_irq+0xde/0x150 [ 215.451208][ T5918] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 215.456967][ T5918] ? preempt_schedule+0xae/0xc0 [ 215.461847][ T5918] ? __pfx_preempt_schedule+0x10/0x10 [ 215.467253][ T5918] panic+0xb9/0xc0 [ 215.471007][ T5918] ? __pfx_panic+0x10/0x10 [ 215.475459][ T5918] ? __pfx_panic+0x10/0x10 [ 215.479902][ T5918] ? media_device_unregister+0x141/0x400 [ 215.485565][ T5918] check_panic_on_warn+0x89/0xb0 [ 215.490545][ T5918] ? media_device_unregister+0x141/0x400 [ 215.496210][ T5918] end_report+0x78/0x160 [ 215.500479][ T5918] kasan_report+0x129/0x150 [ 215.505018][ T5918] ? media_device_unregister+0x141/0x400 [ 215.510690][ T5918] media_device_unregister+0x141/0x400 [ 215.516190][ T5918] em28xx_release_resources+0xac/0x240 [ 215.521675][ T5918] em28xx_usb_disconnect+0x19f/0x2f0 [ 215.526991][ T5918] usb_unbind_interface+0x26b/0x910 [ 215.532228][ T5918] ? __pfx_usb_unbind_interface+0x10/0x10 [ 215.537984][ T5918] device_release_driver_internal+0x4d6/0x800 [ 215.544084][ T5918] bus_remove_device+0x34d/0x410 [ 215.549060][ T5918] device_del+0x511/0x8e0 [ 215.553426][ T5918] ? kfree+0x18e/0x440 [ 215.557528][ T5918] ? __pfx_device_del+0x10/0x10 [ 215.562402][ T5918] ? kobject_put+0x446/0x480 [ 215.567029][ T5918] usb_disable_device+0x3e9/0x8a0 [ 215.572087][ T5918] usb_disconnect+0x330/0x950 [ 215.576793][ T5918] hub_event+0x1cf5/0x4a20 [ 215.581262][ T5918] ? do_raw_spin_lock+0x121/0x290 [ 215.586344][ T5918] ? register_lock_class+0x51/0x320 [ 215.591592][ T5918] ? __pfx_hub_event+0x10/0x10 [ 215.596396][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 215.602153][ T5918] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.607387][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 215.613140][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 215.618902][ T5918] process_scheduled_works+0xade/0x17b0 [ 215.624494][ T5918] ? __pfx_process_scheduled_works+0x10/0x10 [ 215.630520][ T5918] worker_thread+0x8a0/0xda0 [ 215.635144][ T5918] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.641511][ T5918] ? __kthread_parkme+0x7b/0x200 [ 215.646462][ T5918] kthread+0x70e/0x8a0 [ 215.650557][ T5918] ? __pfx_worker_thread+0x10/0x10 [ 215.655697][ T5918] ? __pfx_kthread+0x10/0x10 [ 215.660311][ T5918] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.665533][ T5918] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.670738][ T5918] ? __pfx_kthread+0x10/0x10 [ 215.675367][ T5918] ret_from_fork+0x3f9/0x770 [ 215.679968][ T5918] ? __pfx_ret_from_fork+0x10/0x10 [ 215.685079][ T5918] ? __switch_to_asm+0x39/0x70 [ 215.689848][ T5918] ? __switch_to_asm+0x33/0x70 [ 215.694626][ T5918] ? __pfx_kthread+0x10/0x10 [ 215.699244][ T5918] ret_from_fork_asm+0x1a/0x30 [ 215.704029][ T5918] [ 215.707393][ T5918] Kernel Offset: disabled [ 215.711783][ T5918] Rebooting in 86400 seconds..