last executing test programs: 28.521513017s ago: executing program 4 (id=8941): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$video(0x0, 0x8082007c, 0x121000) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) r3 = eventfd2(0x4, 0x800) mmap(&(0x7f00000ac000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x2d5c000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x16, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(r4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 26.633211634s ago: executing program 4 (id=8946): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/170, 0xaa}], 0x4}}, {{&(0x7f0000000200), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f00000008c0)=""/109, 0x6d}], 0x7}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/51, 0x33}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/43, 0x2b}], 0x4, &(0x7f0000000d00)}}, {{&(0x7f0000000e40)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x50}}], 0x4, 0x2163, &(0x7f00000010c0)={0x0, 0x3938700}) r2 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3f36, &(0x7f0000001100)={0x0, 0xdcde, 0x8, 0x1, 0x35, 0x0, r2}, 0x0, &(0x7f0000003240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendfile(r5, r4, 0x0, 0x17) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x2000, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r7, &(0x7f00000000c0)="8f6500020b00000000c867e80cec72689a876dfaf6ba3604", 0xfff7) fchdir(r6) setrlimit(0x1, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20401, 0x30) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 24.900621368s ago: executing program 4 (id=8950): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000280)={0x2, 0x1, 0x3, {0x2, @win={{0x7fff, 0xfffffff0, 0xfffffffc, 0x7}, 0x3, 0x3, &(0x7f0000000400)={{0xffff, 0x1, 0xd09, 0xd4}, &(0x7f0000000500)={{0x5, 0x5, 0x1, 0x457758a3}}}, 0x80000002, &(0x7f0000000540)="e45a3335b0e0061a8989459b0b612fffdbf3868e410d238b6b9ebe1ca4d881746f95c0c8be7f8fa3fbeab0b9f906d0b2cf4457670d925c0826ebbff61a2ca09f321d3d7994761c3ddddddebd7c702a5d22e6380bcc80eaee66569f3c7ce0cc67b6e9bed4dca36b8abe38b0d0d2ff6b51bbcb692b335e15d332187556b8824885da06d4ade67c5da51bd711ad46307bce5e73d44e3fc2405af379aeeb9ce49d9f673120136c97809cf470861ba0000221c9cd958358dcc12aba97eaa4aec55e8f26382f8a77bfac63d019c90908da965a", 0xf6}}, 0x6}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x9, 0x7, 0x0, 0x70bd27, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0x7, @private0, 0x7f}}]}, 0x38}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x98, 0x0, &(0x7f0000001740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3000}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000240)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) 20.849433657s ago: executing program 4 (id=8955): ptrace(0x4206, 0x0) waitid(0x1, 0x0, &(0x7f0000000080), 0x4, &(0x7f0000000100)) 20.103919545s ago: executing program 4 (id=8956): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000480)={0xd2, 0x3, &(0x7f0000000080)}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="010000"], 0x3c}}, 0x0) 19.523750231s ago: executing program 4 (id=8963): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000640)=[{0x0, 0x1, 0x0, &(0x7f0000001ec0), &(0x7f0000000300)}, {0x0, 0x0, 0x0, 0x0, 0x0}, {0x5, 0x1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/171, 0xab}, {0x0}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/97, 0x61}, {&(0x7f0000000180)=""/14, 0xe}], &(0x7f0000000a80)}, {0x5, 0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000ac0)=""/26, 0x1a}, {&(0x7f0000000b00)=""/140, 0x8c}, {0x0}, {&(0x7f0000000cc0)=""/24, 0x18}, {0x0}], &(0x7f0000001d40)}, {0x0, 0x1, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0x659, 0x1, 0x3]}, {0x0, 0x1, 0x0, &(0x7f0000002380), 0x0}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000000180)}, {0x1, 0x1, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c80)=""/87, 0x57}], &(0x7f0000003e00)}, {0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/152, 0x98}], &(0x7f0000000380)=[0x5, 0xb5b5]}], 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000001000000010000006cdbdb983c44c278d442000000000000000c737c08ca69bb4a853ff0a1d322a662e4a658c2b45b4e028aea8fff9764830c956f0954dfc148ed9eb7baf87e91b3f6"], 0x10}, 0x20040001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 17.089695621s ago: executing program 1 (id=8968): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x183240, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) statx(0xffffffffffffffff, &(0x7f0000002d40)='./file0\x00', 0x400, 0x10, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002e80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)="3e4159d7459ad4b90b89c8ffafe027fc499a3ccbc3e813d23592fafe0487c87da16a1d133f80b278cfec030699afd4838458888128e7f0e855e8c3c701da65", 0x3f}, {&(0x7f0000000400)="cb3782a5643c862a7729c18764e9704eef3bc910e7d4319ba4eed62ce81645426ab4ca5cc7d36b8efb417b79a28e0c2ff9dd419bfd42d310707df468a61703e8df32d8e997fb307beb4722868608277458753a0b3dd1849e72", 0x59}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="0e824d8a79ccf0cb02d89e5bf8a33939b55f56f3f5e7e861f0dcbe209bab54c5f7e3045d86b63a93da1fb173300ce89eea4a9bf930150ce86f6d623b94dab1eddeb706be926a6296683f60f61b6af86efe33be0076845017e0ebe6e768f28b09f7521b2cf20f46cf52f3f0b5f76de73672a4c6e2e771f30f85c4994bb9c4c42ce4d66d6dc44fa63a88a25faa1aa9ec60079d801c1e344cdec4aa4d76ffa44c368bf91f43409cc55f636a815ea924c44f8ac5babd7d894c0256ff483d4ead4183e3c34af900de796d95bc13c3a91748a440e8c1a94785b4797958cd9b99a62d146dd6", 0xe2}], 0x4, &(0x7f0000001700)=[@rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r3, r1, r1, r3, r0, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r0, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r2]}}], 0x94, 0x40000}}, {{&(0x7f00000017c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001840)="87d32ebcd4e34ecf973c97283612ead81160e8fe4d87b854cabf272d88c96f17606a11ea3aab9c6981ec", 0x2a}, {&(0x7f0000001880)="4c8288e105acd01986dfc42dbcc40bb91538688a2df250e91d8aaa2d58636c90667fcc53d8557ab6315208983cef24ec6992082a35e26b3af386c254db36e41e318c83de00702f90172542eed85b097b9fd3629a2a7f4d016b61d9c5a4736aa6f816d486da2232cf130b7d9e51065f6d4a401c5d1658f295104977eb54a14ed0bbbbc3522b8e9cd0162cc62f964d64b9a6e9bce6d20e5d41c6be4c6b7c5e", 0x9e}, {&(0x7f0000001940)="a4a9fed41bf5805dd4fd0ffeb238a6f590b2da735be59c4ab41dec8c7a9066abad19388fd197d45584ddd2c53023bd23b0e01b689d1b26fac701363a5d87b4753f543bdd34678912f2bc939dd2e2f246967c4bcbff7e2f9f96474f9b80a008707d020cf350848bfa1129a5b3fc479105724e2de61f0013fd2ba3702d8fe2fbb5be4b3759253ae828d4129fb789cd99ae5936ccae8681fb9095552e78a55392a45d23798d6b2ac4d4af7403", 0xab}, {&(0x7f0000001a00)="6f4a0e4690909c841a358abb791fd366ece0f668f3c74262959e7aba92114439eecbc8e319fc7c82ad1f042439a8a6250de9493a9cddeff0a04ffcadb4338cfc92e8994b1423b859af3d383b8ca8dbc1c2b53d9e42317223e1585bab7c68383c20e30a9e89defa5d6a1aa852618c581afe9a0ec8c73c9ac548f1b1e9a4228bae61960f33ff2d63fba8270a7a908ea15eeb58e62631bb5b968edc3cbe4e7e80c98a464120fd33b87044f9f7d9b29457f2ab02ca38240b6cb0e0d127d6bd081dac5683c9aa3fa16efbc43a540cac28f63084d299a5ad3bf783fc0a0fac36f9c6bc6b54df451e6516f91e36f86b4e36dfc0e083876b97b4add3", 0xf8}, {&(0x7f0000001c00)="b3b40e4a561d7dc40c46e694807a32aba81a2353cca00c10f38c092019d2077600d2379632dc739efa34fb95f6ae9e9b04c7b1de", 0x34}, {&(0x7f0000001c40)}], 0x6, &(0x7f0000001f00)=[@rights={{0x24, 0x1, 0x1, [r2, r0, r3, r0, r1, r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r2, r1, r3, r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xb4, 0x40}}, {{&(0x7f0000001fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000002040)="86735fe9a5ef68402c1bb4700456585ef7f54d7b4f516abb7da4a247ce710c31b6f3b0b13ce419ab8b64474010626e9446fe2afae564b3341adc7b2f7c5acfe9a1b7aff639d308195059b1dddbf9bf9535f3d1d77d054938149d47d63556e8524369b885bc0a5272ab6105a6903623da2af2a8f6245c02bbc0f0da5fdcf110e93e23fc8d535fa71f0c5c8a6d08cafa494e3ff7b40d518d7a5c47989ead2cacb61e3a349c6cf68ddf2ba9df6e93cb3b31cf11bd2150ba98c63453169d3c54845b7e1df653cb", 0xc5}, {&(0x7f0000002140)="9c9d5bfa25b5c0655c92d38ea05fc90545c1bb8933a1f6f9db3b92fbe8986b8a319ae4a6fcf87e1c6574c45d71dff43885523c020f18a0fcd5e9160fb0d3fe4c5290e83cd6057b8fb2be31389f128ec5c1458861b2eafe95ec5d6aa868da9061846cf2e5d4e4bbbb31f5cf16f88c3f50db1728e50f6524861bdef064a47673364ce8fabbefee1db5fe3ef28a3b5f3ca21046b11e0ba7190f265049bcf9a0194499ceed671f9d4b6da4b8c7e05d9dbca47086658be05735166f6f9ac9ea12631136474b9b4f6ffd", 0xc7}, {&(0x7f0000002240)="0d9758f27635a399d190c7e2134cf782946ef5aabaa1309399a38c5666b531832a5ce1e55b8af7238f16db9398bbdf2c684be3fa14c826d5859e679421d1da6210904bdab9a473966f1f", 0x4a}, {&(0x7f00000022c0)="d590aa1d7083985c441ac7c6bd4b056917dc2fc7186918bd5873cb2ce9b3dc87bf90ecb62306903e91fa", 0x2a}], 0x4, &(0x7f00000023c0)=[@cred={{0x18}}], 0x18, 0x20000000}}, {{&(0x7f0000002400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002480)="495228974b3ea3c01df18406d2b87a7fcbd0ffc6fc77a12a526a42a7c3802ee84d5e3039a56e9119953415749078202849476cd703a767ab2296082df80aad72b9de8bce", 0x44}, {&(0x7f0000002500)="04d4140e643b08b818ae295f259edc", 0xf}, {&(0x7f0000002540)="0cc419648b92766e59aa1cb5b8084173ea8f10e881266315f188a0b5bea87173c360b53a1635728e2b7e149ba4b6f278a3f49f5ff76004f8ba17551acb6ad515e488789d901043822a47a08448fe7297c6cdb476abccd11ee768eeb812df22bbd98b044338bd4a8c58ce6e33d830297f19203e385ad38d908e1d28afcb6772000628f86709992cf65d5dc16c688d0cc3fe2335acf4d3a44e89c2bbbf1c39e3fafb774fa31c41f682d5b8", 0xaa}, {&(0x7f0000002600)="d330010340ece1ae40647765307c62f86281b8a4314368a0a02a7cba2bc44a62f931", 0x22}], 0x4, &(0x7f0000002ec0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r0, r0, r0, r0, r3]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}], 0xb0, 0x4}}, {{&(0x7f0000002f80)=@abs={0xfae802c26564ac06, 0x0, 0x4e22}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003000)="442a284697e36fb937f0bfe36df9c390a92e25eece1fea520dc9a1788b5dfbfbdf14a50d5b930eb62b05abc3889101dbd4cb94a8329a9bcc324e5f7b4a2a4697bad1c5ac38b3ff7f5f1da5eb1276e04f569a1c70e89950ff5f8445bad16142c5f560d7b677abf53c9f770709c19e516fbf6f6cf73a266ad3dc293eff3f5bea5aed9474b2750482", 0x87}, {&(0x7f00000030c0)="6baf6c989cf41c7ff664c4", 0xb}, {&(0x7f0000003100)="361895f864529e2524d55a20d727d367a7e9b4846596a76edf87200e8ce003136453511a71366343af4fe7a63d2ec4c6b04303def0c0804781e41654281e5c7372f660e7babfae75e1c4d488c0f07f5caa981c3550dd93b74f3c632a09181dc83165f3fd354161bf6d5686345e5b18c3bae58225578a4d864953a97cdd385ae11b8db61ec1c016ad14458a", 0x8b}, {&(0x7f00000031c0)="4f8650b91be3f532c6ebc9fa22099c682331b7e54ebc5e2be365", 0x1a}], 0x4, 0x0, 0x0, 0x1}}], 0x5, 0x4000080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000015efc64021040e0057b60102030109022200014000000009049b00010202ff00090505040008fd81072501800005004ca2d96d9b65cbe2d62b9ea4"], 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a"], 0xd0}}, 0x40) r9 = dup(r6) r10 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r9, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r10, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="d8be9af93b62243903c6dc52b535f4178e01d99e8204abe16c57c721b5c3cb2b959f54af300083b1f9697eee6ccc0eec956f5d8dd3ae140fc9222f8860e13b22348658f5c6b6eef2c6e9ce5b6a37b9b147f7f4636fcc045a51512100ef37a51aef7469402d89a20c03ae15ab7c36b6ca9abf451dae691c26c21bbc341cc4888261d23e676149c55f395ebd2999228dc6f727662709853596736a6ee42d15ccbf48026d975429db2f36201adc79bf761eeb7da5fe", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES64=r3, @ANYBLOB="1f003300d000000008021100ef0008029f02000050501996151c9d9e0a97e3e9a108a323fc5395e6cc3418d71b3f1aea5721820800000000000000a01fd7254397f4b3bde56ecd0c00000000000000004325"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x10) 13.67736512s ago: executing program 3 (id=8972): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000280)={0x2, 0x1, 0x3, {0x2, @win={{0x7fff, 0xfffffff0, 0xfffffffc, 0x7}, 0x3, 0x3, &(0x7f0000000400)={{0xffff, 0x1, 0xd09, 0xd4}, &(0x7f0000000500)={{0x5, 0x5, 0x1, 0x457758a3}}}, 0x80000002, &(0x7f0000000540)="e45a3335b0e0061a8989459b0b612fffdbf3868e410d238b6b9ebe1ca4d881746f95c0c8be7f8fa3fbeab0b9f906d0b2cf4457670d925c0826ebbff61a2ca09f321d3d7994761c3ddddddebd7c702a5d22e6380bcc80eaee66569f3c7ce0cc67b6e9bed4dca36b8abe38b0d0d2ff6b51bbcb692b335e15d332187556b8824885da06d4ade67c5da51bd711ad46307bce5e73d44e3fc2405af379aeeb9ce49d9f673120136c97809cf470861ba0000221c9cd958358dcc12aba97eaa4aec55e8f26382f8a77bfac63d019c90908da965a", 0xf6}}, 0x6}) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x9, 0x7, 0x0, 0x70bd27, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0x7, @private0, 0x7f}}]}, 0x38}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x98, 0x0, &(0x7f0000001740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3000}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000240)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) 13.672678562s ago: executing program 1 (id=8981): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x9, 0x7, 0x0, 0x70bd27, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0x7, @private0, 0x7f}}]}, 0x38}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x98, 0x0, &(0x7f0000001740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3000}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000240)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) 11.395909832s ago: executing program 2 (id=8975): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000640)=[{0x0, 0x1, 0x0, &(0x7f0000001ec0), &(0x7f0000000300)}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x3, 0x887]}, {0x0, 0x0, 0x0, &(0x7f0000001d00), &(0x7f0000001d40)}, {0x0, 0x1, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0x659, 0x1, 0x3]}, {0x0, 0x1, 0x0, &(0x7f0000002380), 0x0}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000000180)}, {0x1, 0x1, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c80)=""/87, 0x57}], &(0x7f0000003e00)}, {0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/152, 0x98}], &(0x7f0000000380)=[0x5, 0xb5b5]}], 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000001000000010000006cdbdb983c44c278d442000000000000000c737c08ca69bb4a853ff0a1d322a662e4a658c2b45b4e028aea8fff9764830c956f0954dfc148ed9eb7baf87e91b3f6"], 0x10}, 0x20040001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10.499517571s ago: executing program 1 (id=8977): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x10, 0x1, 0x1, [r2]}}], 0x10, 0x8805}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 9.929444555s ago: executing program 3 (id=8978): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x183240, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) statx(0xffffffffffffffff, &(0x7f0000002d40)='./file0\x00', 0x400, 0x10, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002e80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)="3e4159d7459ad4b90b89c8ffafe027fc499a3ccbc3e813d23592fafe0487c87da16a1d133f80b278cfec030699afd4838458888128e7f0e855e8c3c701da65", 0x3f}, {&(0x7f0000000400)="cb3782a5643c862a7729c18764e9704eef3bc910e7d4319ba4eed62ce81645426ab4ca5cc7d36b8efb417b79a28e0c2ff9dd419bfd42d310707df468a61703e8df32d8e997fb307beb4722868608277458753a0b3dd1849e72", 0x59}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="0e824d8a79ccf0cb02d89e5bf8a33939b55f56f3f5e7e861f0dcbe209bab54c5f7e3045d86b63a93da1fb173300ce89eea4a9bf930150ce86f6d623b94dab1eddeb706be926a6296683f60f61b6af86efe33be0076845017e0ebe6e768f28b09f7521b2cf20f46cf52f3f0b5f76de73672a4c6e2e771f30f85c4994bb9c4c42ce4d66d6dc44fa63a88a25faa1aa9ec60079d801c1e344cdec4aa4d76ffa44c368bf91f43409cc55f636a815ea924c44f8ac5babd7d894c0256ff483d4ead4183e3c34af900de796d95bc13c3a91748a440e8c1a94785b4797958cd9b99a62d146dd6", 0xe2}], 0x4, &(0x7f0000001700)=[@rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r3, r1, r1, r3, r0, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r0, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r2]}}], 0x94, 0x40000}}, {{&(0x7f00000017c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001840)="87d32ebcd4e34ecf973c97283612ead81160e8fe4d87b854cabf272d88c96f17606a11ea3aab9c6981ec", 0x2a}, {&(0x7f0000001880)="4c8288e105acd01986dfc42dbcc40bb91538688a2df250e91d8aaa2d58636c90667fcc53d8557ab6315208983cef24ec6992082a35e26b3af386c254db36e41e318c83de00702f90172542eed85b097b9fd3629a2a7f4d016b61d9c5a4736aa6f816d486da2232cf130b7d9e51065f6d4a401c5d1658f295104977eb54a14ed0bbbbc3522b8e9cd0162cc62f964d64b9a6e9bce6d20e5d41c6be4c6b7c5e", 0x9e}, {&(0x7f0000001940)="a4a9fed41bf5805dd4fd0ffeb238a6f590b2da735be59c4ab41dec8c7a9066abad19388fd197d45584ddd2c53023bd23b0e01b689d1b26fac701363a5d87b4753f543bdd34678912f2bc939dd2e2f246967c4bcbff7e2f9f96474f9b80a008707d020cf350848bfa1129a5b3fc479105724e2de61f0013fd2ba3702d8fe2fbb5be4b3759253ae828d4129fb789cd99ae5936ccae8681fb9095552e78a55392a45d23798d6b2ac4d4af7403", 0xab}, {&(0x7f0000001a00)="6f4a0e4690909c841a358abb791fd366ece0f668f3c74262959e7aba92114439eecbc8e319fc7c82ad1f042439a8a6250de9493a9cddeff0a04ffcadb4338cfc92e8994b1423b859af3d383b8ca8dbc1c2b53d9e42317223e1585bab7c68383c20e30a9e89defa5d6a1aa852618c581afe9a0ec8c73c9ac548f1b1e9a4228bae61960f33ff2d63fba8270a7a908ea15eeb58e62631bb5b968edc3cbe4e7e80c98a464120fd33b87044f9f7d9b29457f2ab02ca38240b6cb0e0d127d6bd081dac5683c9aa3fa16efbc43a540cac28f63084d299a5ad3bf783fc0a0fac36f9c6bc6b54df451e6516f91e36f86b4e36dfc0e083876b97b4add3", 0xf8}, {&(0x7f0000001b00)="5f1555a62d1d02bbbe8e8b78a6d6613e316054e3fe45f1d2ef4c3c61b50afaf9b7773e2a8c7b25498096e6172b801f48a813f57dd59f6e971cbc6e7732b3ff289c6029cd938e9ff2736f7f482ae427125189ea18aa2d1f6b774c85524870d5802614e7b157619617d8c9c17e748f42312050efd2de3437b89079ac10c970769747a367ecc5653eb66cde1f2e2fd591699c3d46715b691c59625f8dca3411d4ed3911ddf25b04d414ccf93f189c5d4c29a83aac45d3752ef040f4192939ce18f606d764cdfde73bb5a5ac80f009fa94ef136238998358039c023910394250491827", 0xe1}, {&(0x7f0000001c00)="b3b40e4a561d7dc40c46e694807a32aba81a2353cca00c10f38c092019d2077600d2379632dc739efa34fb95f6ae9e9b04c7b1de", 0x34}, {&(0x7f0000001c40)}], 0x7, &(0x7f0000001f00)=[@rights={{0x24, 0x1, 0x1, [r2, r0, r3, r0, r1, r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r2, r1, r3, r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xb4, 0x40}}, {{&(0x7f0000001fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000002040)="86735fe9a5ef68402c1bb4700456585ef7f54d7b4f516abb7da4a247ce710c31b6f3b0b13ce419ab8b64474010626e9446fe2afae564b3341adc7b2f7c5acfe9a1b7aff639d308195059b1dddbf9bf9535f3d1d77d054938149d47d63556e8524369b885bc0a5272ab6105a6903623da2af2a8f6245c02bbc0f0da5fdcf110e93e23fc8d535fa71f0c5c8a6d08cafa494e3ff7b40d518d7a5c47989ead2cacb61e3a349c6cf68ddf2ba9df6e93cb3b31cf11bd2150ba98c63453169d3c54845b7e1df653cb", 0xc5}, {&(0x7f0000002140)="9c9d5bfa25b5c0655c92d38ea05fc90545c1bb8933a1f6f9db3b92fbe8986b8a319ae4a6fcf87e1c6574c45d71dff43885523c020f18a0fcd5e9160fb0d3fe4c5290e83cd6057b8fb2be31389f128ec5c1458861b2eafe95ec5d6aa868da9061846cf2e5d4e4bbbb31f5cf16f88c3f50db1728e50f6524861bdef064a47673364ce8fabbefee1db5fe3ef28a3b5f3ca21046b11e0ba7190f265049bcf9a0194499ceed671f9d4b6da4b8c7e05d9dbca47086658be05735166f6f9ac9ea12631136474b9b4f6ffd", 0xc7}, {&(0x7f0000002240)="0d9758f27635a399d190c7e2134cf782946ef5aabaa1309399a38c5666b531832a5ce1e55b8af7238f16db9398bbdf2c684be3fa14c826d5859e679421d1da6210904bdab9a473966f1f", 0x4a}, {&(0x7f00000022c0)="d590aa1d7083985c441ac7c6bd4b056917dc2fc7186918bd5873cb2ce9b3dc87bf90ecb62306903e91fa", 0x2a}], 0x4, &(0x7f00000023c0)=[@cred={{0x18}}], 0x18, 0x20000000}}, {{&(0x7f0000002400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002480)="495228974b3ea3c01df18406d2b87a7fcbd0ffc6fc77a12a526a42a7c3802ee84d5e3039a56e9119953415749078202849476cd703a767ab2296082df80aad72b9de8bce", 0x44}, {&(0x7f0000002500)="04d4140e643b08b818ae295f259edc", 0xf}, {&(0x7f0000002540)="0cc419648b92766e59aa1cb5b8084173ea8f10e881266315f188a0b5bea87173c360b53a1635728e2b7e149ba4b6f278a3f49f5ff76004f8ba17551acb6ad515e488789d901043822a47a08448fe7297c6cdb476abccd11ee768eeb812df22bbd98b044338bd4a8c58ce6e33d830297f19203e385ad38d908e1d28afcb6772000628f86709992cf65d5dc16c688d0cc3fe2335acf4d3a44e89c2bbbf1c39e3fafb774fa31c41f682d5b8", 0xaa}, {&(0x7f0000002600)="d330010340ece1ae40647765307c62f86281b8a4314368a0a02a7cba2bc44a62f931", 0x22}], 0x4, &(0x7f0000002ec0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r0, r0, r0, r0, r3]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}], 0xb0, 0x4}}, {{&(0x7f0000002f80)=@abs={0xfae802c26564ac06, 0x0, 0x4e22}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003000)="442a284697e36fb937f0bfe36df9c390a92e25eece1fea520dc9a1788b5dfbfbdf14a50d5b930eb62b05abc3889101dbd4cb94a8329a9bcc324e5f7b4a2a4697bad1c5ac38b3ff7f5f1da5eb1276e04f569a1c70e89950ff5f8445bad16142c5f560d7b677abf53c9f770709c19e516fbf6f6cf73a266ad3dc293eff3f5bea5aed9474b2750482", 0x87}, {&(0x7f00000030c0)="6baf6c989cf41c7ff664c4", 0xb}, {&(0x7f0000003100)="361895f864529e2524d55a20d727d367a7e9b4846596a76edf87200e8ce003136453511a71366343af4fe7a63d2ec4c6b04303def0c0804781e41654281e5c7372f660e7babfae75e1c4d488c0f07f5caa981c3550dd93b74f3c632a09181dc83165f3fd354161bf6d5686345e5b18c3bae58225578a4d864953a97cdd385ae11b8db61ec1c016ad14458a", 0x8b}, {&(0x7f00000031c0)="4f8650b91be3f532c6ebc9fa22099c682331b7e54ebc5e2be365", 0x1a}], 0x4, 0x0, 0x0, 0x1}}], 0x5, 0x4000080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000015efc64021040e0057b60102030109022200014000000009049b00010202ff00090505040008fd81072501800005004ca2d96d9b65cbe2d62b9ea4"], 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a"], 0xd0}}, 0x40) r9 = dup(r6) r10 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r9, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r10, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="d8be9af93b62243903c6dc52b535f4178e01d99e8204abe16c57c721b5c3cb2b959f54af300083b1f9697eee6ccc0eec956f5d8dd3ae140fc9222f8860e13b22348658f5c6b6eef2c6e9ce5b6a37b9b147f7f4636fcc045a51512100ef37a51aef7469402d89a20c03ae15ab7c36b6ca9abf451dae691c26c21bbc341cc4888261d23e676149c55f395ebd2999228dc6f727662709853596736a6ee42d15ccbf48026d975429db2f36201adc79bf761eeb7da5fe", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES64=r3, @ANYBLOB="1f003300d000000008021100ef0008029f02000050501996151c9d9e0a97e3e9a108a323fc5395e6cc3418d71b3f1aea5721820800000000000000a01fd7254397f4b3bde56ecd0c00000000000000004325"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x10) 9.799485517s ago: executing program 1 (id=8979): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000022c0), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendfile(r4, r1, 0x0, 0x578410eb) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '.[(@#\xa2:'}, {0x20, '/dev/infiniband/rdma_cm\x00'}, {0x20, ')'}, {0x20, '/dev/infiniband/rdma_cm\x00'}, {0x20, '.:'}, {0x20, '/dev/infiniband/rdma_cm\x00'}, {0x20, '/dev/infiniband/rdma_cm\x00'}], 0xa, "8864a40156f2cfcdd53eb4d104367b423a475c7b0e222a2dd5a25a39fc59ecd2d702d1fd48af710f57ec528ce93710a75c8ec79e968e217b49e5ae9b31e85f4162e985c36e9cbf2079958b3ec6b426af5846ce0b76da8291caab0102762b3dd96eec796e9ef0c2407dc980704449433e9b9260705bf6da63ff733e3dd025a9e78783785471b97f4f9f8e0f7fb644a263671588fee6614209a267852d4f002ad6d1a40ade92ac277afbfa6ce7ca76e855d45f1f460cfdddb2a13209679065f5076290282bcc0ab930bba8b26c61224451d57672dc1ee53b545059a3e863ccb0cb8784de6cbf8dab10dcfd46f96de991c42d5578ce"}, 0x261) writev(r0, &(0x7f0000003780)=[{&(0x7f0000002600)="9c4e018cd44c50ff0f", 0x9}], 0x1) 9.753645965s ago: executing program 2 (id=8980): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x499, 0x2, 0x8}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x3}, 0x8) r2 = openat$dsp(0xffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000001c0)={0xa4, 0x5, 0x9}, 0xc) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7, 0x10001}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x28) socket$l2tp(0x2, 0x2, 0x73) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000340)=0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000380), 0x1) eventfd(0x80) socket$qrtr(0x2a, 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000400)={0x20000010}) pipe(&(0x7f0000000440)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000480)={'icmp6\x00'}, &(0x7f00000004c0)=0x1e) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000500)={0x7, 0x2, 0x9, 0x40, 0x9}, 0x14) fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xd9, 0x4, 0xc0, 0xff, 0x5ab, 0x31, 0x103, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x20, 0x2, [{{0x9, 0x4, 0x36, 0x2, 0x0, 0xf3, 0x25, 0x68, 0x5}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x0, 0x8, 0x1, 0x20, 0x7}, 0x5, &(0x7f00000005c0)={0x5, 0xf, 0x5}, 0x1, [{0x51, &(0x7f0000000600)=@string={0x51, 0x3, "e5fc8fe19f9e09b97aa6a0030de500ffbc71b9eec091846a8fe677aa7085d2dbf2fffa83385519c6cc76a7b1234d98c8c409fe69f30d4b133c1b5466a9d87e0b4a82dd4b0646a315affb1239a723bb"}}]}) pipe2$watch_queue(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f0000000700)={0x5}) 7.10731102s ago: executing program 3 (id=8983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x98}}, 0x0) 7.052983847s ago: executing program 0 (id=8984): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb4}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) r3 = inotify_init1(0x0) inotify_add_watch(r3, 0x0, 0x400) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x98}}, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400)={[0x4ad1]}, &(0x7f0000000440), 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000780)=""/243}, 0x20) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004dc0)={0x2020}, 0x2020) 7.017398294s ago: executing program 3 (id=8985): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x2, 0x0, [0x1, 0x5, 0xffffffff, 0xe76, 0xffff, 0x2, 0xc491, 0x9, 0x3, 0x9, 0x9, 0x4, 0x30000, 0x9, 0x7cb, 0x44]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 6.506162599s ago: executing program 2 (id=8986): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/170, 0xaa}], 0x4}}, {{&(0x7f0000000200), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f00000008c0)=""/109, 0x6d}], 0x7, &(0x7f0000000980)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x94}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/51, 0x33}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/43, 0x2b}], 0x4, &(0x7f0000000d00)}}, {{&(0x7f0000000e40)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x50}}], 0x4, 0x2163, &(0x7f00000010c0)={0x0, 0x3938700}) r2 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3f36, &(0x7f0000001100)={0x0, 0xdcde, 0x8, 0x1, 0x35, 0x0, r2}, 0x0, &(0x7f0000003240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendfile(r5, r4, 0x0, 0x17) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x2000, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r7, &(0x7f00000000c0)="8f6500020b00000000c867e80cec72689a876dfaf6ba3604", 0xfff7) fchdir(r6) setrlimit(0x1, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20401, 0x30) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 4.672437941s ago: executing program 3 (id=8987): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000480)={0xd2, 0x3, &(0x7f0000000080)}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="010000"], 0x3c}}, 0x0) 4.469990148s ago: executing program 2 (id=8988): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) rseq(0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) 4.23663459s ago: executing program 0 (id=8989): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 4.050042774s ago: executing program 0 (id=8990): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10, 0x8805}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 3.987835007s ago: executing program 2 (id=8991): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/170, 0xaa}], 0x4}}, {{&(0x7f0000000200), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f00000008c0)=""/109, 0x6d}], 0x7, &(0x7f0000000980)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb4}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/51, 0x33}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/43, 0x2b}], 0x4, &(0x7f0000000d00)}}, {{&(0x7f0000000e40)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x50}}], 0x4, 0x2163, &(0x7f00000010c0)={0x0, 0x3938700}) r2 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3f36, &(0x7f0000001100)={0x0, 0xdcde, 0x8, 0x1, 0x35, 0x0, r2}, 0x0, &(0x7f0000003240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendfile(r5, r4, 0x0, 0x17) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x2000, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r7, &(0x7f00000000c0)="8f6500020b00000000c867e80cec72689a876dfaf6ba3604", 0xfff7) fchdir(r6) setrlimit(0x1, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20401, 0x30) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 3.954249208s ago: executing program 0 (id=8992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="f38c65256105aa37b04e3fbca4c78496bf90de269a6ec7214e00c032c062fd08e291eb4c790200ad5b05afa734235e971ccb2ae31e96312db2a2beaa552dd40b", 0x40, 0xb, 0x0, 0x0) 3.110411581s ago: executing program 0 (id=8993): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000640)=[{0x0, 0x1, 0x0, &(0x7f0000001ec0), &(0x7f0000000300)}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x3]}, {0x5, 0x1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/171, 0xab}, {0x0}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/97, 0x61}, {&(0x7f0000000180)=""/14, 0xe}], &(0x7f0000000a80)}, {0x5, 0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000ac0)=""/26, 0x1a}, {&(0x7f0000000b00)=""/140, 0x8c}, {0x0}, {&(0x7f0000000cc0)=""/24, 0x18}, {0x0}], &(0x7f0000001d40)}, {0x0, 0x1, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0x659, 0x1, 0x3]}, {0x0, 0x1, 0x0, &(0x7f0000002380), 0x0}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000000180)}, {0x1, 0x1, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c80)=""/87, 0x57}], &(0x7f0000003e00)}, {0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/152, 0x98}], &(0x7f0000000380)=[0x5, 0xb5b5]}], 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000001000000010000006cdbdb983c44c278d442000000000000000c737c08ca69bb4a853ff0a1d322a662e4a658c2b45b4e028aea8fff9764830c956f0954dfc148ed9eb7baf87e91b3f6"], 0x10}, 0x20040001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.303721899s ago: executing program 2 (id=8994): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000010400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x14}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x4}}], 0x2, 0x0) close_range(r4, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) unshare(0x6a040000) r8 = socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x278, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x76}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x51}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @private0, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xe9, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xa, @mcast2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x593}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x116}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x593}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r9 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000001f00)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000600)="5f47e9d63149a228da326b678b1f3ba8236e9f3508e8ebb1804edbdfc7ff3f1100a322b702b1955491091a8172c88f27271b96369270945b3de30ac1cc24ea5391322035e166c8edd103dac045deb0cfc896d0f23bf33d71cafee720208ddd8c9020e3ec692079f9526fb93871a5573a2cd446aea996521c80a0ecb8f306549a228d05b7bef5938be9a5fdba8f1365a61fe9dd85bd6af0d7b4fa5629931aff631cee975243f4561d54b581bf04da2880429c6bb96c7c76039c5e7da6329d9eed768de99a072d4fd9e9b82c692862157748037b24", 0xd4}, {&(0x7f0000000700)="461fb9e61a7e25dfd28b7c6c0c20c5418bc8200a4bb2f4cb598f38d493f48fefd5caa262584101a5d2d770813329c068ec5628580c0bf0af52dd24a0a1ca260dcdab8f18fa534388f25404172297d0bbd5c4cba40eb655340298c6e17b05a879982eb41437f73351e6fb2d3c26beff0b87d0d68e51f04df3a8c223526bbc90723a489ea319ac728bd539963a5a9000303095c69d19771ade7bb569d89d7dbdfba05aac38ca7c429275", 0xa9}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="000040add9b37fbdc855218e40a99d351f1cd0ccfbb7632c6131865eb766bce188743629450ff3bc5e20c6740d4d3a9bb0fec56b6847da4fbf4cb70cf80601142c18f961d67ebe62a8bb113e325b98dde4f2c1ccc118", @ANYRES32, @ANYRES32=r5, @ANYRES32=r11], 0x0, 0x14}}, {{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000008c0)="37c1beccc35e1415612dd073c46144bb3294abfae002c4d2a2f818a85438303bea4396dde358ec3c58089dbf575d0732ef", 0x31}, {&(0x7f0000000900)="dd40c5bdd73ca8d973aecb07aeed33cb10ff2d15ed772dd46be5eee9c80e4190321afaa02eecad671f65044b545d0192c262e5a8110f2b7084d20405b9b6bcdd475b17459ebd793c774ba424961cc3c32f9153169bf4f70dcb5137f21cc008e67f9e83538d8e1f9bdb5cc6e7f73851246930b84d32b9c2c67523bf41088fd9a7be9a1f3a1afc61b1d1", 0x89}], 0x2, &(0x7f0000000c00)=[@cred={{0x18}}, @rights={{0xc}}, @rights={{0x24, 0x1, 0x1, [r3, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r5, r0]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r4]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xa8, 0x20008010}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000d40)="074acae7c467d0b03141bf57dcae51b95e13c4d5365b9bcbef4834101d9bdc6d3330d84ace2ab7418602b272dd46af9b664c65bf7b4a13a5ed333a8541c4cb789734ea1d22e4b5ad59ec8b576af43b9e5b", 0x51}, {&(0x7f0000000dc0)="caa623490310e2700387f1ada31f85c86511f94eaa56c19a199398e8d5d3e01cb6bcda393a552c13986946d34907f81953f2fca047219a7b8fa78a0ed1303f9ab209d55aeef28291f101d0504c95988d0772878919f8a77ddf21a59e89421f87546fd699cd7e02f14c5c9310514a88", 0x6f}, {&(0x7f0000000e40)="19df9fb473d9d6a8c4cc31b207f58aca8ca5b6bcee19daaf368dee9853a69723bd6fa4921f0b2da2e83c6fa0fc1ebb8dae", 0x31}, {&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000000e80)="e37b1b336ef0f7d5378ebb90037e6d89d18e0d0ce7a5aeba8a4453f660c9ae4d0ac2ce66cd1afa4631ca9c762b6a59899d7b663228c7c98f4ab1c0485bf0bfa4085211b1a8ff30b8d4e8", 0x4a}, {&(0x7f0000000a00)="380bb8764fabd84c3e7cbef55bfcde3ef56eba44ce06f8c6c6862e74fabd702b5e32b60c52dfacae00584ed7df6a3c55aed507701998a495f4a3224f0f0c8de5647f0d6f47504a53cbd6ec2093771f9be57620aef3fc77a7b6aacec178ed7c9b9594a99a2a83e180489e2e2c2368dee80bb1fea20a7777804a267275f8c8e54d38f6f06256d76e1330dedecbf8dd3a6f8aa5f6a5eab35595095a1e45ebd1ee05d2f63077db1bde7da1024d41e3cef16b77e5d4699a1756dd5799c0989259188d683a55e62ef9be092859593c6ca693d7", 0xd0}], 0x6, &(0x7f0000001280)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff, r0]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r8, r6]}}, @cred={{0x18}}], 0xe0, 0x4000010}}, {{&(0x7f0000001380)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000005200)="eaca741347eb3611e19378c13170f1c7baea0c80aa633d1e071773e8e5eb927263c0368ed017fc34b7ddfa7d613d9ea7f0d5a479dd4535e478788fe1e878b7a1263c9b6a94581f35d55b2f17d7f5406f81f66fddf416646995f2ddadad92cb54c62cc80efa871264638068cdf9825370201b3bb5fc45cf2ea521a796a60f98c31edad4908949b672452a2e61c07135975c720a51562b6dc9eacb341f69d7d25858233550412e734b6cb3153d0c9208db9c73f3066287d34d120423a5b9d3dbae038ae48b8aea207cee3242095b527431f4658c178c1946d96cfd55e60b33f69393c41f11e0d9904068968ae6e68c7e99e55ad831f85e1d37d240472fd73b3e3314a12cc640803a6ee768edc356523e5b0cde0d6e3a8391003f4f3653688ced264c0b5c45d550f24e7c41759318889aabdcc625468ac86ff2966fded0f6033842f9a801220a8f7fe15b963892f2c752a8fbb8baa04ac0b057f2c4be16c9b348201858a9dd89601a87a8b573e7e27ad630683d95199875275d8a2115e598e012a65c3f57481c8e34bfd22081cfa160905265fd7a71a201289ce14f141db06377ddcf50f7b5666db1f8dbea22c261fa638da6a19a29b522eff73e40221a6d237be64ede63867398683b02ceb1c60bdc50b15e4fea04dd60e38684b0779354d1611a2a3f3e7dcd322a98d893af54b3ec282b4e84fdad8685ba015dfae0bd783962be4df96d7695acd8284473a8225b1f33d6ecee8fccc6b9d59d34043f61f0b34fb7748b43bcb604091331ca8194fbf8bf57a988d4cc22b6cb3a29109386fbe1d6fae40313885fddea6300ab43cc4644248a2fa18f7ae9f4057a4eb32ab57ddad13c736fcb018b81d192ea6a86f086ba7b020b25d95440c67f219f1b9e58d375ec39f19ecb663095aadf3a849e77233787027b00b9348d5172ad37610169485802b68f01680ec9c136fef71167ec12f0d2f8d43f2eeccccbd746eab898cf542c4f2aba6eb094b1c7865378a70d1c9cc1949c018a9460cc42c60d5caa6557d6a39f6f8c33df744e93d328b1b21238048a69be8c359094a83bfc14630db3182c8645814e84d53fdbfad026b47238ed508115ff3240ffcffe69f9eb2d671962f636ce3760d07a19b6e636c4cf770d9ab464e5441c01a2d0d6fcde761087b18dc8f28c521cc99ab4a6b2f733d1b3f77a13797abb55bc350be77c14bca347db1b088577392b5b67cffa2462ece33b768108bb35de1a81dd05851c8110e221bdee7c74e0c70d686aaea43215fc6315aeb6e06d21c90016e4562ea087414e1955947a5b7a81ab7c23c3c40c33cd4470f4f4319a00fd6f4aa1b3ce7a1928c2b52730a05a11eb507e1cb84de6537ffc5ea07b4a2a5db8685088480ad82410758e8ca6fcaf67f0db58d2b1ee0102982ddd7a07b866f6056c06a48275772fb578c6d0c39c7b68390e84ebf7025a33d8ff85cf14139013eb22e9ad8a61cbf20f66d78ca510cb6763de96c7726766a4fcb9de2d243e47e82c864bd55779996dba74470a626c167f0f835b7e6f020094b70ac0dc657af01ddad71977213960b4542db1706fb37638c8b4c233cab7bfa558304c6a363b3c5b6327ba272e89d0c197f1229d67345773aa695e3d930a8f2fb3db64b6b9e73bcb8a50e2348d646f6c3e0cf79ca997b66805cc139f4333180388ec92e59cd99ee5a9223af60db8c98781816f2671ce02d6736c3b4b2c349f0d039349a5aeea1b5d1d102ad25c7fcc08f29b9ab673f037644e5634b6b8deb4b75f951405afdd84b2e2f0948d600361af39fa2f47c25fbb1d8506d4146e43ab7527c6dfb2e2b36f743c783d70b7c3daa01d909755244163bbcd5ad27e5e52e81f6ab674f32967a46769ed73f694b52d7300a61f3604c7deb6745f66bf24ea4cc21e6d877f0eecd6d40c4414f027aaff15f8c4bdd908ebbf716c5fac58531b0a8768c6669ec0f1c9766b09b4913134b1aad3bf49ae616c0973bc34a2d3de14c095910ffebd51cc1a9c90ab0c2e1390e906403b8df27eab738de754ea96db405ca23ef20471b0231272bdc2011e86c048d5a7cfc7adee2250d711058a0af1311bb66abdf7f02e2d04e0f1f44941d148b6b0ef2551382222cbe26b857bd8768e94c96b08495097e0110065653b8ae45966f60679eba97f0b57065e5f1358526d362ff3aaef23785d60b88dcfa887e2e85dd438dcee10523dc55ac5ba95f5bd9e16599c7c30139f4f9e1b231de21b883777f894f9431af0d9ce9542c2c024e495b7c6a1de2126ef6bbee4227a04e8349b1a013be43d4a1b8a5410e3902f0cf281ded7157e94d1ec99ffaa93550c37ba1f0e19ed40520caf8c592c5401d127f998d8ad64b1ed6deda85536f9070af94c78827b09d819612a674b291feb2a7c311425a0100017f36c6ec94e6400cb0cd03cf4b0d0f0637425265cdb277ff5ccd64666a005f43afee92a7db4ffcb2db893c2f3b2a78d5a5f2586a0ae4a4f32dd4b61786a8c54db0a1f5ded56324dba083de6fbd3d563a4f3e84e4916cd78047fbefd5deee2985f88821ef10129985621101bf4b7b063d061f27b34d425c81bd4bc82f6606782829cfa6e9be36bef8cf1748aa709f53633a303d6b4ed7257d39bf93deed68ea9fef2f7758bb185d74f20274545f1c0d026e485aa8943ebf78f722ce01141c81b9720fe8afe91892000e7cfcd22fb68add3b8125054cc0566d36a89a23e79cf61347c7354f3c21ac8f765dd260cd95483e8f235cb5ec99560c62ee4993aa1e89158284e013b586e34db5226302a1d65cdda20de2be035ad11591e28dac35d76368e2465ee9cc7e4dc11270087f139604ea29b6af29d39e9a19e0bcd545784c2a64bac2b3f223059567e456e3567b9a51a4659b593ebd5ab1de4964899883ac5dad45417fbc106d9cf978b4006d304bdaa464daad3f50207b3a247522bd15f75a753ff8ef65c25c96f09ed1d7232e685b8baa5bec6500668e6c80380095312113f87ca8414d71952ade2b8f45f33f55079527dfe4f7be910992fa28e5d74389cb0f49f41e6621613937e715b89b5491eb62bea5dc4e5c34b1e15bd86e626bf7899c07307b16b78eae7815ca1009ad372137c255541e93584daecdcfb95edadb875aad75df3b081449948fbcafe9b768626dc73b3a3111fe89e41ced305083f9bf99fc6b9ddd6748bba49133e36f4b19dc9423eb0bf1af1c8b6030abfd93555eb4dbc8f43c0289741f39beb8450cf615ddb0776147768411c84d2af5993d578babd0db2c87ee250d67629b5d23c49592a284ef97b73d6e886cf9c6dd1a6a7d8f8f7a82f772887f5cd346c360a46de79edd00678852fa4a675fb4c554e96ddbe3a61c2da02ac1c835423ef06ea7cdc2975b6326f19cd2ba491572ca1b6514d168daf01d49bef51a48266ba40bd8215259b6c11e61a75ba88de2e683af351ea1ccca1522658f8a751b3d8108a472def1bf6ab3cc34abb9eddd0be827b9990d7287c7005739ae0f26f0dd4fb14224086ae7ede593081e7379b78d30c75dcdb4063911e47dafeb1349b3fe886119bf60170ed6fb1b2170eaadbda5e25d2b67cafc413d245b592a38235bac01be131cbb289d9d340f15ba289bef708217f85bef2b7f2b504567750cfd776f7d6f9df83b13a4694ddecdda8b490623095528f9599c08fb94cb4e8183bbbc497f69df5c3e007279b931322156171976c403a8a61caa01f387c32b7a75ffefcf341ba8ab64f83d880ba786eee82c7a138b9379f72b6a2034a0b496adad4057329e26da789560bc0d4fcaba791f1585825ae0d6b8fe28accef6b9fdd779a84f7e81c85ad263770d4864611eca9ff10377bdc91939a40015a7d75c1d821d5f18bb27777dacd8527a2ceee03c315ca03083c7689729679225e737e9a16e4fd4a2ff74467fe91255f19bc08a49ee37580ba54a60cf7c2b57909ade3b963828695c25cbbc6d3504f21d78ff79bf77cd9060fa69c17761e796bff84ab9ee50b24cd584004eb7d203478dece28b7f9896fb775b7c5aafee8c34d33e55b97cab41d3f4bab43d3888346378ad1f7fc73030a0371c8a1b6762b19cc55e42bd6d34baca2643257c48a59c3277c27af91a920e97b83cea39a4e5f2f0940e63383f6513e593ecbee8c74e9cce0cb514487bd41c25ad41096b4144f624f03690374d32f87be8dc45bb9534a08cf5ad368f1ce821d107f443d6a1b8be572d1976149be082d53342781c60e6fc3b5b78dec8f8f04c66648b8542dc828e413d6a3a389f214b94d6ac37c340c88bb148f6f5a9910d16cdc78973138b8e8aef1016ce2619d46352858cadeed39e6deab2446712d740260575445d75557aa79cc92dc02917ceaebe6db0bbbbe57fcccf84959b42d851ca79ca064b5e0c7be83c69725a927692d25aea0fbc861a0ff58b0bce59772a6748ff79e707dfa5038475a0acf878aa0f538c4c48da9d38129b5f39f95d586795d09a4ab86b1dd837c11b5dc807d26e179f85f7359c8831eff9a759e1ed2112cabe2a089d41d7d210eaa5b9917052c9ff8fc87f2caad8c78f4568aea967d268935a01f2bcdfee61a1dea2708d70620982e811904c0ffc7216b0ebef38b0fcf3741cfce8ced5e2139c512c700c3d7576963093a8f2b25fcb71e34a4e7d34f4b1be46c117219d0e8c3ef128804fb0e3710ab5564c4941cdf5ef0588378477ecf0b9d576da3345c728879e838299a084a4f49f3ec0acbbcb222dcd21c9b80e0c6a646edf32352952d55d01f2b6bc8f4ca118366d693e5ccb472ec1e9d82a0ca480bdfaddf034608c0235678615e9f9efbf52d0a52545936514ba05a1fe9016b7e0679fc476a60a41ff1fa94b5774b33bb929d2b62e4af722ffdb8f5f084053876b051306e173903c66be24cce5af9b69cc549ea2d4ccda8a5016846342d9114782fa9fc6e50948023b891c0ac6e166d517135d8055183928840dd45674eb768b04081a904e8a75b4d2751754fa4260f0621769a0e997a79d30a05a6dd18444a95982cbedd4a26e0394b196e370eeb47227ba3a3f9d6cdd22333ccbe6d5c6cecddb92dbbd5a802ff386b44622a1ad9913dd738f18b9425fb6ae14c2fa0c61629974e15b03ca55ef985db06efa9bf3e0ad3da609358b79f86a1b511e5af9ac561049b7e60df6dc51e859d21de1f0a6501688f400706a9e23441a701029ca8d0cd13fd56845e972bae8efcc46cecfbec93e768f260d753261efc1cbef2de0e2b78b9d7393accc79a9039ee817e8c152e2da1a4d5ffd06ae09aa3c5c39209b4f26c5c115541889dcac7f8de49c25004b41bb56e676dc0fbf967024c6d846041449ce6ae7bda838b03601605519322e8ccde4a2939e11d5db12a7a4dc1c6136e76383bb1031723e2b6f89be1b56040f51d71e98d95b4b0a8f7b3592ea1a359cd8b11d1581cc2cec7d4b4ed411ef4c645628c850b3b47c095a7c921a4790255b52aa9c87ea7077e78f3463430f4132f639e6d93fb574f4068ca5ab0a40fabd77c0e8925b74772067187884a91c89aeaaba9fd71aff1e225748aa57d75f6a4566788340d05e6adab3b0654bdba8f3a2b37b01a1c5df1428e2a54ded16acee1076cdcb2392e56e6832ae85474cd3cea5ea603f58a3c3d10ceb1934f02260c1e012ce076388052b4021772a0bdfa3e25f1a952ed628a1ba795e2d41b12983868ac526f33222f6aafd821a01959fde023fcab75ff2f84d9ddbf32fd335dcefa41182820428f9b59a7f8566177965c9a90210d2413fd859c3063f08a5cfa0427e98ed10a96a0938a030444", 0x1000}, {&(0x7f0000008680)="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", 0xe00}, {&(0x7f0000001400)="6ee82a497619efd1defd7ae0da5ec20042cdb920897b6bacb7bbdcc63a7343a5b15400bfbf52c79efc3e67fc80a26d786ce1bd10887c779cc028f4613193bc62eff16a75c1fc1628fef7b17e58225e70f7c03e1b578c15290d961b9cd261622e15bd805a3e9a908b208f3c6a2d0e2e883af0d1e3c4f1891723d3486538f9e76c4e19ff65f560af9113491138dac58c6299d3fd25dbd546c198ae6aaf538b53a7d9f1dd2e25f3634c00f07395bfae044abf702d3d86c9d2a6896d2a71be7aed8cd58e80d161fab5765dcf42eda45671a3e7de8ef19a", 0xd5}, {&(0x7f000000c280)="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", 0x1000}, {&(0x7f0000001500)="24f70edd8dd9a1e03b588a703bf10a55c187c967d0c9476a0656a8f19b72cb1af26b297573d7c567bc1574691f", 0x2d}, {&(0x7f0000001540)}, {&(0x7f0000001580)="cf11440efbf98155aac0b00eb7f66e678cacebdd7b8251f0513a0c6271e4e147218d7be2e1a1f947ef448e62c86f45eee69461f957a1f2e866ee28ae7c9c7c239cafa33d3d0f449c073c3e500b2495cac2b26b557bd26e20169b691e914f78c451777d31ed940b0114098e4334f51dfc4845e65cf875111e4f2bb968c6cb95d065bc7c4279b623404497e873029d8fb5ab3904c8b7ba3643cc457312d737902385c5893c5cf9d369f61d6fb1ccbac428775d09ff36b248fbb2d79c42b4c2b838cb15220aa91155bbd4e817eff07f89dbb899f969546cecfa5c88fdde5d08043ceca23bff38fcb9cf12785100275d06e0ea56f0", 0xf3}], 0x7, &(0x7f0000001780)=[@cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, r6, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r8, r7, r2, 0xffffffffffffffff, r11, r5]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r10, 0xffffffffffffffff, r7, 0xffffffffffffffff, r2, 0xffffffffffffffff, r6, r6]}}], 0xc0, 0x409c0}}, {{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001700)="34593539e86b81d95bba5554dc64620764ed6a9b9257e0d3cfb9d4", 0x1b}], 0x1, &(0x7f0000001900)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0x28, 0x400c4}}, {{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001b00)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, r4, 0xffffffffffffffff, r10]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r7]}}], 0xd0, 0x40010}}, {{&(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001c80)="d441152d4eeb915e98cfd178f549e9682fd754c47820285b797a2f278c400408b76a41fb0793c1087c43f12039dd62bf7a1460834bf7444b078223012b6206dfa4649a1edc57f90d80cc9fd1ff426d0a9238f409551a4557076957a275db567c6ef48eeada8d818a4eedf8b70da4ff399bc4f5af1de7feced8919fbbef0e1f3ca35c182879edd0507fad1b4f2e5d665c298216272a42d7574dc89d03118932e78587e21095f033fcc1d38cb8fab6a751f54c1babb98f6fa2be4527090ea1f400b865bb60b5d74bd4fa2ec3f11670f9eec35c1a6d817782af1be92ce63715874221c55a", 0xe3}, {&(0x7f0000002000)="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", 0x325}, {&(0x7f000000d280)="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", 0x1000}], 0x3, &(0x7f0000001ec0)=[@cred={{0x18}}], 0x18, 0x24000441}}], 0x7, 0x400c0c5) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = gettid() move_pages(r12, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(r11, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40c0080) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r13 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) 1.226778394s ago: executing program 0 (id=8995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x256, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a4}}, 0x4048010) ioctl$BTRFS_IOC_SEND(r0, 0x40449426, &(0x7f00000000c0)={{r0}, 0x4, &(0x7f0000000000)=[0x3, 0xe, 0x800000000000, 0x7], 0xf, 0xc, 0x4}) r3 = accept4(r0, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80, 0x80800) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2133, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffd, 0x3, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x1, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="002205000000a713a29094ee75cd52bfcb8e5980fab3d60bce0fe079a1e282080b2e059aef74cdc2857f7ff733a00d563d8e61fedc6b1be55b6c976d387d7b187bb1108a7fee55b1cf203a602f6d5d2525fe68"], 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_hsr\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}, 0x1, 0x40000000, 0x0, 0x44084}, 0x4048884) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="00042bbd8100fddbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44081) clock_getres(0xfffffffffffffff1, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e20, 0xff, @local}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000b80)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000bc0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3a, r10}) socket$inet6_tcp(0xa, 0x1, 0x0) 457.200047ms ago: executing program 1 (id=8996): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) 381.198541ms ago: executing program 3 (id=8997): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8020) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000240)={0x0, 0x7, 0xe4c, 0x583e, 0x8, 0x4}) r2 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, &(0x7f0000000100)={0x6, 0x1, 0x7ff, 0x13}) r3 = mq_open(&(0x7f0000000180)='$@\x00', 0x1, 0x185, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x3ff, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x7, 0x0) mq_timedreceive(r2, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0) 0s ago: executing program 1 (id=8998): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000700)='./file1\x00', 0x2000775) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x19c) close(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f0000000540)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x202, 0x1, 0xcccd2000, 0x1000, &(0x7f0000009000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x5000, 0x2000, &(0x7f000002f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x4, 0x3, 0xf000, 0x1000, &(0x7f000002f000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x3, 0x0, 0xeeee8000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) r4 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000180)={&(0x7f00000002c0)="243747360ff6a6000000002ba2f99c9022000000c4a2f100274638e741c44240f29a3b470000d385260a4a000000c4027d36b0b00536fe0d094e486ff5b1bba69a42fa212175b6d5378bcc2d3a000000", 0x0, 0x0, {[0x1be63bf3]}}, 0x0, 0x8, &(0x7f0000000100)) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) pivot_root(0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): x1b0 [ 2928.584317][ T7796] netlink_unicast+0x82c/0x9e0 [ 2928.584339][ T7796] ? __pfx_netlink_unicast+0x10/0x10 [ 2928.584356][ T7796] ? netlink_sendmsg+0x642/0xb30 [ 2928.584373][ T7796] ? skb_put+0x11b/0x210 [ 2928.584395][ T7796] netlink_sendmsg+0x805/0xb30 [ 2928.584425][ T7796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2928.584446][ T7796] ? __import_iovec+0x5d4/0x7f0 [ 2928.584459][ T7796] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2928.584480][ T7796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2928.584497][ T7796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2928.584516][ T7796] __sock_sendmsg+0x219/0x270 [ 2928.584534][ T7796] ____sys_sendmsg+0x505/0x830 [ 2928.584577][ T7796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2928.584610][ T7796] ___sys_sendmsg+0x21f/0x2a0 [ 2928.584634][ T7796] ? __pfx____sys_sendmsg+0x10/0x10 [ 2928.584680][ T7796] ? __fget_files+0x2a/0x420 [ 2928.584702][ T7796] ? __fget_files+0x3a0/0x420 [ 2928.584732][ T7796] __sys_sendmsg+0x164/0x220 [ 2928.584755][ T7796] ? __pfx___sys_sendmsg+0x10/0x10 [ 2928.584787][ T7796] ? lockdep_hardirqs_on+0x9c/0x150 [ 2928.584807][ T7796] __do_fast_syscall_32+0xb6/0x2b0 [ 2928.584827][ T7796] ? lockdep_hardirqs_on+0x9c/0x150 [ 2928.584847][ T7796] do_fast_syscall_32+0x34/0x80 [ 2928.584866][ T7796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2928.584891][ T7796] RIP: 0023:0xf706e539 [ 2928.584910][ T7796] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2928.584928][ T7796] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2928.584950][ T7796] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000800000c0 [ 2928.584967][ T7796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2928.584977][ T7796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2928.584986][ T7796] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2928.584995][ T7796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2928.585016][ T7796] [ 2929.039915][ C0] vkms_vblank_simulate: vblank timer overrun [ 2929.115575][ T7688] raw-gadget.1 gadget.1: failed to queue disconnect event [ 2930.035252][T20487] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2930.305004][T20487] usb 2-1: Using ep0 maxpacket: 16 [ 2930.317629][T20487] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2930.327105][T20487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2930.364974][T20487] usb 2-1: Product: syz [ 2930.369543][T20487] usb 2-1: Manufacturer: syz [ 2930.442899][T20487] usb 2-1: SerialNumber: syz [ 2930.456864][T20487] usb 2-1: config 0 descriptor?? [ 2931.030931][T20487] as10x_usb: device has been detected [ 2931.040527][T20487] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2931.084348][T20487] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 2931.479463][T20487] as10x_usb: error during firmware upload part1 [ 2931.525434][T20487] Registered device Sky IT Digital Key (green led) [ 2931.527448][ T7809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2931.599325][ T7809] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2931.651458][ T7809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2931.747698][ T7809] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2931.780572][ T7809] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2931.805763][ T7809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2931.829060][ T7832] netlink: 'syz.0.8410': attribute type 33 has an invalid length. [ 2931.923714][ T7809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2932.186138][ T7832] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 2932.236037][ T7809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2932.260743][ T7809] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2932.513788][ T7809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2932.524296][ T7809] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2932.628706][ T7828] random: crng reseeded on system resumption [ 2932.869851][ T3792] usb 2-1: USB disconnect, device number 106 [ 2932.929906][ T3792] Unregistered device Sky IT Digital Key (green led) [ 2932.938367][ T3792] as10x_usb: device has been disconnected [ 2932.977024][T20487] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 2933.154249][T20487] usb 3-1: config 7 has an invalid interface number: 109 but max is 0 [ 2933.183564][T20487] usb 3-1: config 7 has no interface number 0 [ 2933.203191][T20487] usb 3-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2933.255301][T20487] usb 3-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2933.306601][T20487] usb 3-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2933.338630][T20487] usb 3-1: config 7 interface 109 altsetting 4 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 2933.376547][T20487] usb 3-1: config 7 interface 109 altsetting 4 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2933.417268][T20487] usb 3-1: config 7 interface 109 altsetting 4 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2933.455700][T20487] usb 3-1: config 7 interface 109 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 2933.499282][T20487] usb 3-1: config 7 interface 109 has no altsetting 0 [ 2933.555034][T30122] Bluetooth: hci0: command 0x0406 tx timeout [ 2933.602332][T20487] usb 3-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 2933.674718][T20487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2933.715081][T30122] Bluetooth: hci4: command 0x0c1a tx timeout [ 2933.740560][T20487] usb 3-1: Product: syz [ 2933.744834][T20487] usb 3-1: Manufacturer: syz [ 2933.911014][T30122] Bluetooth: hci2: command 0x0406 tx timeout [ 2933.965520][T20487] usb 3-1: SerialNumber: syz [ 2933.987397][ T7844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2934.326132][T30122] Bluetooth: hci1: command 0x0406 tx timeout [ 2934.525340][T30122] Bluetooth: hci3: command 0x0406 tx timeout [ 2935.426900][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8419'. [ 2935.641491][T30122] Bluetooth: hci0: command 0x0406 tx timeout [ 2935.795174][T30122] Bluetooth: hci4: command 0x0c1a tx timeout [ 2935.955309][T30122] Bluetooth: hci2: command 0x0406 tx timeout [ 2936.300766][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8423'. [ 2936.320101][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8423'. [ 2936.355536][T30122] Bluetooth: hci1: command 0x0406 tx timeout [ 2936.595264][T30122] Bluetooth: hci3: command 0x0406 tx timeout [ 2937.069477][ T30] audit: type=1326 audit(1754518848.025:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.8426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 2937.845735][ T30] audit: type=1326 audit(1754518848.035:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.8426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 2937.867783][ C0] vkms_vblank_simulate: vblank timer overrun [ 2937.877887][T30122] Bluetooth: hci4: command 0x0c1a tx timeout [ 2937.890492][ T30] audit: type=1326 audit(1754518848.035:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.8426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 2937.917260][ T30] audit: type=1326 audit(1754518848.035:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.8426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 2937.955224][ T30] audit: type=1326 audit(1754518848.075:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.8426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 2938.566518][T20487] usb 3-1: USB disconnect, device number 109 [ 2939.280109][ T7901] tap0: tun_chr_ioctl cmd 1074025677 [ 2939.306464][ T7901] tap0: linktype set to 3 [ 2940.473597][ T7926] random: crng reseeded on system resumption [ 2940.497275][ T7927] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 2940.550267][ T7927] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2941.185847][ T7927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2942.325200][T20487] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2942.751775][T20487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2942.801352][T20487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2942.831906][T20487] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2943.034848][T20487] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2943.050161][T20487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2943.072631][T20487] usb 2-1: config 0 descriptor?? [ 2943.254281][ T7947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2943.261658][ T7947] IPv6: NLM_F_CREATE should be set when creating new route [ 2943.268978][ T7947] IPv6: NLM_F_CREATE should be set when creating new route [ 2943.625406][T20487] plantronics 0003:047F:FFFF.0105: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2943.648368][ T7953] usb usb8: usbfs: process 7953 (syz.3.8441) did not claim interface 0 before use [ 2944.555186][T26233] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 2944.814793][T26233] usb 5-1: config 0 has no interfaces? [ 2944.889522][T26233] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2944.965094][ T3792] usb 2-1: reset high-speed USB device number 107 using dummy_hcd [ 2945.506770][T26233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2945.516941][T26233] usb 5-1: Product: syz [ 2945.586161][T26233] usb 5-1: Manufacturer: syz [ 2945.597002][T26233] usb 5-1: SerialNumber: syz [ 2945.683404][T26233] usb 5-1: config 0 descriptor?? [ 2945.815160][T22559] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2946.025073][T22559] usb 3-1: Using ep0 maxpacket: 32 [ 2946.250967][T22559] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2946.452076][T22559] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2946.461447][T22559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2946.469550][T22559] usb 3-1: Product: syz [ 2946.473748][T22559] usb 3-1: Manufacturer: syz [ 2946.478551][T22559] usb 3-1: SerialNumber: syz [ 2946.488690][T22559] usb 3-1: config 0 descriptor?? [ 2946.497878][T22559] cdc_ether 3-1:0.0: probe with driver cdc_ether failed with error -22 [ 2946.529918][T22559] usb 3-1: unsupported MDLM descriptors [ 2947.467757][T20487] usb 2-1: USB disconnect, device number 107 [ 2947.664779][T22559] usb 5-1: USB disconnect, device number 28 [ 2947.713267][ T7970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2947.720142][ T7970] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2947.727122][ T7970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2947.733361][ T7970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2947.895269][ T7970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2947.990807][T20487] usb 3-1: USB disconnect, device number 110 [ 2948.516319][T20487] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2948.964608][T16981] Bluetooth: hci0: command 0x0406 tx timeout [ 2948.987997][T20487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2949.011628][T20487] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2949.072914][T20487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.115692][T20487] usb 4-1: config 0 descriptor?? [ 2949.742069][T20487] usbhid 4-1:0.0: can't add hid device: -71 [ 2949.792881][T20487] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2949.805600][T16981] Bluetooth: hci1: command 0x0406 tx timeout [ 2949.808976][T20487] usb 4-1: USB disconnect, device number 95 [ 2949.811855][T16981] Bluetooth: hci2: command 0x0406 tx timeout [ 2949.824729][T16981] Bluetooth: hci4: command 0x0c1a tx timeout [ 2949.955108][T16981] Bluetooth: hci3: command 0x0406 tx timeout [ 2951.185983][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8467'. [ 2951.915984][ T8054] netlink: 'syz.4.8473': attribute type 10 has an invalid length. [ 2954.065980][ T8076] FAULT_INJECTION: forcing a failure. [ 2954.065980][ T8076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2954.142916][ T8076] CPU: 1 UID: 0 PID: 8076 Comm: syz.1.8477 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 2954.142948][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2954.142962][ T8076] Call Trace: [ 2954.142972][ T8076] [ 2954.142982][ T8076] dump_stack_lvl+0x189/0x250 [ 2954.143024][ T8076] ? __pfx____ratelimit+0x10/0x10 [ 2954.143051][ T8076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2954.143077][ T8076] ? __pfx__printk+0x10/0x10 [ 2954.143109][ T8076] ? fs_reclaim_acquire+0x7d/0x100 [ 2954.143172][ T8076] should_fail_ex+0x414/0x560 [ 2954.143203][ T8076] prepare_alloc_pages+0x213/0x610 [ 2954.143234][ T8076] __alloc_frozen_pages_noprof+0x123/0x370 [ 2954.143263][ T8076] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2954.143309][ T8076] ? policy_nodemask+0x27c/0x720 [ 2954.143346][ T8076] alloc_pages_mpol+0x232/0x4a0 [ 2954.143383][ T8076] vma_alloc_folio_noprof+0xe4/0x200 [ 2954.143418][ T8076] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2954.143463][ T8076] folio_prealloc+0x30/0x180 [ 2954.143496][ T8076] do_wp_page+0x1231/0x5800 [ 2954.143567][ T8076] ? __pfx_do_wp_page+0x10/0x10 [ 2954.143606][ T8076] ? do_raw_spin_lock+0x121/0x290 [ 2954.143637][ T8076] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2954.143675][ T8076] __handle_mm_fault+0x1033/0x5440 [ 2954.143703][ T8076] ? __lock_acquire+0xab9/0xd20 [ 2954.143749][ T8076] ? __pfx___handle_mm_fault+0x10/0x10 [ 2954.143794][ T8076] ? lock_vma_under_rcu+0xdf/0x3d0 [ 2954.143825][ T8076] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2954.143855][ T8076] ? __ia32_compat_sys_socketcall+0x852/0x9c0 [ 2954.143894][ T8076] handle_mm_fault+0x40a/0x8e0 [ 2954.143934][ T8076] do_user_addr_fault+0xa81/0x1390 [ 2954.143977][ T8076] ? rcu_is_watching+0x15/0xb0 [ 2954.144007][ T8076] ? trace_page_fault_user+0x84/0x1e0 [ 2954.144044][ T8076] exc_page_fault+0x76/0xf0 [ 2954.144072][ T8076] asm_exc_page_fault+0x26/0x30 [ 2954.144093][ T8076] RIP: 0023:0xf7178b12 [ 2954.144111][ T8076] Code: c7 0d c5 23 00 56 53 83 ec 1c 8b 6c 24 30 8b 55 1c 65 a1 68 00 00 00 39 c2 0f 84 11 01 00 00 80 7d 18 02 74 2b b8 08 00 00 00 0f c1 45 00 83 c0 08 85 c0 0f 88 0e 01 00 00 a8 01 75 7a 31 d2 [ 2954.144131][ T8076] RSP: 002b:00000000f543d350 EFLAGS: 00010293 [ 2954.144151][ T8076] RAX: 0000000000000008 RBX: 00000000f73b4ff4 RCX: 00000000ffffffff [ 2954.144166][ T8076] RDX: 0000000000000000 RSI: 00000000f7273f16 RDI: 00000000f73b4ff4 [ 2954.144180][ T8076] RBP: 00000000f7f16e40 R08: 0000000000000000 R09: 0000000000000000 [ 2954.144193][ T8076] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2954.144207][ T8076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2954.144238][ T8076] [ 2954.418097][ T8076] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2955.103375][T20487] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2955.965125][ T8101] binder: BINDER_SET_CONTEXT_MGR already set [ 2955.972977][ T8101] binder: 8094:8101 ioctl 4018620d 80000040 returned -16 [ 2956.908216][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8485'. [ 2957.071689][ T8110] bond17 (unregistering): Released all slaves [ 2957.237385][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8485'. [ 2957.369567][ T8116] ptrace attach of "./syz-executor exec"[30126] was attempted by "./syz-executor exec"[8116] [ 2957.416341][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8483'. [ 2957.655169][ T8118] binder: 8117:8118 ioctl c0306201 80000040 returned -22 [ 2957.704732][ T8118] binder: 8117:8118 ioctl c0306201 80000640 returned -22 [ 2958.243758][ T8133] binder: BINDER_SET_CONTEXT_MGR already set [ 2958.250044][ T8133] binder: 8120:8133 ioctl 4018620d 80000040 returned -16 [ 2958.410685][T20487] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 2959.217769][T20487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2959.230151][T20487] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 2959.240866][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.249126][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.295130][T20487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.840376][T20487] usb 5-1: config 0 descriptor?? [ 2960.280745][T20487] magicmouse 0003:05AC:0265.0106: unbalanced delimiter at end of report description [ 2960.307180][T20487] magicmouse 0003:05AC:0265.0106: magicmouse hid parse failed [ 2960.345227][T20487] magicmouse 0003:05AC:0265.0106: probe with driver magicmouse failed with error -22 [ 2960.395168][ T3792] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 2960.443034][ T8148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8494'. [ 2960.493962][T20487] usb 5-1: USB disconnect, device number 29 [ 2960.555165][ T3792] usb 4-1: device descriptor read/64, error -71 [ 2960.605810][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8496'. [ 2960.668028][ T8151] bond17 (unregistering): Released all slaves [ 2960.752736][ T8151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8496'. [ 2960.844962][ T3792] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 2961.035601][ T3792] usb 4-1: device descriptor read/64, error -71 [ 2961.148928][ T3792] usb usb4-port1: attempt power cycle [ 2961.535166][T22559] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2961.556997][ T3792] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 2961.596014][ T3792] usb 4-1: device descriptor read/8, error -71 [ 2961.765166][ T8171] binder: BINDER_SET_CONTEXT_MGR already set [ 2961.771557][ T8171] binder: 8163:8171 ioctl 4018620d 80000040 returned -16 [ 2961.835410][ T3792] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 2961.859778][ T3792] usb 4-1: device descriptor read/8, error -71 [ 2961.922551][T22559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2961.942387][T22559] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2961.959854][T22559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2961.995571][ T3792] usb usb4-port1: unable to enumerate USB device [ 2961.996422][T22559] usb 2-1: config 0 descriptor?? [ 2962.529389][T22559] usbhid 2-1:0.0: can't add hid device: -71 [ 2962.539350][T22559] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2962.991188][T22559] usb 2-1: USB disconnect, device number 109 [ 2963.915780][T22559] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2964.101028][T22559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2964.112597][T22559] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2964.130097][T22559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2964.193084][T22559] usb 2-1: config 0 descriptor?? [ 2964.410283][T22559] usbhid 2-1:0.0: can't add hid device: -71 [ 2964.426055][T22559] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2964.504357][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8507'. [ 2964.516194][T22559] usb 2-1: USB disconnect, device number 110 [ 2964.667248][ T8192] input: syz0 as /devices/virtual/input/input88 [ 2964.774761][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8507'. [ 2964.886939][ T8184] bond17 (unregistering): Released all slaves [ 2965.071966][ T8200] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8509'. [ 2965.119435][ T8202] FAULT_INJECTION: forcing a failure. [ 2965.119435][ T8202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2965.193032][ T8202] CPU: 0 UID: 0 PID: 8202 Comm: syz.2.8508 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 2965.193063][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2965.193077][ T8202] Call Trace: [ 2965.193086][ T8202] [ 2965.193097][ T8202] dump_stack_lvl+0x189/0x250 [ 2965.193127][ T8202] ? __pfx____ratelimit+0x10/0x10 [ 2965.193152][ T8202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2965.193177][ T8202] ? __pfx__printk+0x10/0x10 [ 2965.193207][ T8202] ? __might_fault+0xb0/0x130 [ 2965.193249][ T8202] should_fail_ex+0x414/0x560 [ 2965.193279][ T8202] _copy_from_user+0x2d/0xb0 [ 2965.193299][ T8202] kstrtouint_from_user+0xc4/0x170 [ 2965.193331][ T8202] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2965.193378][ T8202] proc_fail_nth_write+0x88/0x200 [ 2965.193402][ T8202] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2965.193433][ T8202] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2965.193459][ T8202] vfs_write+0x27e/0xa90 [ 2965.193495][ T8202] ? __pfx_vfs_write+0x10/0x10 [ 2965.193525][ T8202] ? __fget_files+0x2a/0x420 [ 2965.193563][ T8202] ? __fget_files+0x3a0/0x420 [ 2965.193594][ T8202] ? __fget_files+0x2a/0x420 [ 2965.193634][ T8202] ksys_write+0x145/0x250 [ 2965.193666][ T8202] ? __pfx_ksys_write+0x10/0x10 [ 2965.193698][ T8202] ? lockdep_hardirqs_on+0x9c/0x150 [ 2965.193739][ T8202] __do_fast_syscall_32+0xb6/0x2b0 [ 2965.193776][ T8202] ? lockdep_hardirqs_on+0x9c/0x150 [ 2965.193804][ T8202] do_fast_syscall_32+0x34/0x80 [ 2965.193830][ T8202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2965.193856][ T8202] RIP: 0023:0xf706e539 [ 2965.193875][ T8202] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2965.193893][ T8202] RSP: 002b:00000000f545e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2965.193915][ T8202] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545e620 [ 2965.193929][ T8202] RDX: 0000000000000001 RSI: 00000000f73d4ff4 RDI: 0000000000000000 [ 2965.193942][ T8202] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2965.193954][ T8202] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2965.193966][ T8202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2965.193996][ T8202] [ 2965.579249][ T8211] ptrace attach of "./syz-executor exec"[29183] was attempted by "./syz-executor exec"[8211] [ 2965.733233][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8505'. [ 2966.870230][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8515'. [ 2968.272498][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806da88c00: rx timeout, send abort [ 2968.285155][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806da88c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2968.435395][ T3792] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2968.717431][ T3792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2968.732399][ T3792] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2968.752204][ T3792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2968.802227][ T3792] usb 5-1: config 0 descriptor?? [ 2969.084538][ T3792] usbhid 5-1:0.0: can't add hid device: -71 [ 2969.104026][ T3792] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2969.119045][ T3792] usb 5-1: USB disconnect, device number 30 [ 2969.195019][T22559] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 2969.581663][T22559] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 2969.627901][T22559] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2969.676521][T22559] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2969.692431][ T8246] bond8 (unregistering): Released all slaves [ 2969.697576][T22559] usb 2-1: string descriptor 0 read error: -22 [ 2969.707842][T22559] usb 2-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 2969.729267][T22559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2969.737915][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8520'. [ 2969.785074][ T3792] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2969.824009][ T8244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2969.874389][T22559] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input89 [ 2969.947235][ T3792] usb 5-1: config index 0 descriptor too short (expected 36, got 27) [ 2969.955659][ T3792] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2969.994343][ T3792] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2970.033177][ T3792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2970.054312][ T8254] random: crng reseeded on system resumption [ 2970.073780][ T3792] usb 5-1: config 0 descriptor?? [ 2970.110862][ T3792] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2970.159849][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2970.187290][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2970.224073][ T5218] bcm5974 2-1:1.0: could not read from device [ 2970.238067][ T5218] bcm5974 2-1:1.0: could not read from device [ 2970.263012][T22559] usb 2-1: USB disconnect, device number 111 [ 2970.264853][ T5218] bcm5974 2-1:1.0: could not read from device [ 2970.326823][T26233] usb 5-1: USB disconnect, device number 31 [ 2970.373546][ T7625] udevd[7625]: Error opening device "/dev/input/event4": No such file or directory [ 2970.392645][ T7625] udevd[7625]: Unable to EVIOCGABS device "/dev/input/event4" [ 2970.409987][ T7625] udevd[7625]: Unable to EVIOCGABS device "/dev/input/event4" [ 2970.419564][ T7625] udevd[7625]: Unable to EVIOCGABS device "/dev/input/event4" [ 2970.432686][ T7625] udevd[7625]: Unable to EVIOCGABS device "/dev/input/event4" [ 2970.436884][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8522'. [ 2970.965000][T22559] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2972.812376][ T8296] bond18 (unregistering): Released all slaves [ 2972.884218][ T8300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8534'. [ 2973.408165][ T8304] usb usb1: usbfs: process 8304 (syz.4.8536) did not claim interface 0 before use [ 2974.044992][ T6164] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2974.222200][ T6164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2974.240602][ T6164] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2974.250836][ T6164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2974.293541][ T6164] usb 3-1: config 0 descriptor?? [ 2974.565003][ T3788] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2974.576057][ T6164] usbhid 3-1:0.0: can't add hid device: -71 [ 2974.582201][ T6164] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2974.629239][ T6164] usb 3-1: USB disconnect, device number 111 [ 2974.714977][ T3792] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2974.727175][ T3788] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2974.747832][ T3788] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2974.772885][ T3788] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2974.792388][ T3788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2974.830197][ T8319] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2974.851426][ T3788] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2974.906948][ T3792] usb 2-1: Using ep0 maxpacket: 8 [ 2974.934288][ T8326] random: crng reseeded on system resumption [ 2974.946444][ T3792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2974.970175][ T3792] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2974.988197][ T3792] usb 2-1: can't read configurations, error -61 [ 2975.075328][ T6164] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2975.087453][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8544'. [ 2975.099778][ T3788] usb 5-1: USB disconnect, device number 32 [ 2975.135428][ T3792] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2975.250738][ T6164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2975.263279][ T6164] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2975.281430][ T6164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2975.295070][ T3792] usb 2-1: Using ep0 maxpacket: 8 [ 2975.300663][ T6164] usb 3-1: config 0 descriptor?? [ 2975.304191][ T3792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2975.324339][ T8332] bond8 (unregistering): Released all slaves [ 2975.330751][ T3792] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2975.345747][ T3792] usb 2-1: can't read configurations, error -61 [ 2975.352589][ T3792] usb usb2-port1: attempt power cycle [ 2975.384294][ T8334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8546'. [ 2975.705034][ T3792] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2975.725949][ T3792] usb 2-1: Using ep0 maxpacket: 8 [ 2975.741741][ T3792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2975.753447][ T3792] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2975.814989][ T3792] usb 2-1: can't read configurations, error -61 [ 2975.975316][ T3792] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2976.017896][ T3792] usb 2-1: Using ep0 maxpacket: 8 [ 2976.029078][ T3792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2976.097947][ T3792] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2976.105864][ T3792] usb 2-1: can't read configurations, error -61 [ 2976.284518][ T3792] usb usb2-port1: unable to enumerate USB device [ 2976.745367][ T3792] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2976.925832][ T6164] usbhid 3-1:0.0: can't add hid device: -71 [ 2976.934691][ T6164] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2976.935691][ T3792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2976.994054][ T3792] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2976.995370][ T6164] usb 3-1: USB disconnect, device number 112 [ 2977.037998][ T3792] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2977.048452][ T3792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2977.060734][ T3792] usb 5-1: SerialNumber: syz [ 2977.389357][ T8366] FAULT_INJECTION: forcing a failure. [ 2977.389357][ T8366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2977.485287][ T8366] CPU: 1 UID: 0 PID: 8366 Comm: syz.1.8554 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 2977.485320][ T8366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2977.485334][ T8366] Call Trace: [ 2977.485344][ T8366] [ 2977.485354][ T8366] dump_stack_lvl+0x189/0x250 [ 2977.485390][ T8366] ? __pfx____ratelimit+0x10/0x10 [ 2977.485416][ T8366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2977.485442][ T8366] ? __pfx__printk+0x10/0x10 [ 2977.485487][ T8366] should_fail_ex+0x414/0x560 [ 2977.485517][ T8366] _copy_to_user+0x31/0xb0 [ 2977.485541][ T8366] simple_read_from_buffer+0xe1/0x170 [ 2977.485577][ T8366] proc_fail_nth_read+0x1b3/0x220 [ 2977.485606][ T8366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2977.485634][ T8366] ? rw_verify_area+0x2a6/0x4d0 [ 2977.485659][ T8366] ? __lock_acquire+0xab9/0xd20 [ 2977.485689][ T8366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2977.485716][ T8366] vfs_read+0x200/0x980 [ 2977.485742][ T8366] ? fdget_pos+0x247/0x320 [ 2977.485766][ T8366] ? __pfx___mutex_lock+0x10/0x10 [ 2977.485794][ T8366] ? __pfx_vfs_read+0x10/0x10 [ 2977.485831][ T8366] ? __fget_files+0x2a/0x420 [ 2977.485868][ T8366] ? __fget_files+0x3a0/0x420 [ 2977.485899][ T8366] ? __fget_files+0x2a/0x420 [ 2977.485941][ T8366] ksys_read+0x145/0x250 [ 2977.485972][ T8366] ? __pfx_ksys_read+0x10/0x10 [ 2977.486004][ T8366] ? lockdep_hardirqs_on+0x9c/0x150 [ 2977.486034][ T8366] __do_fast_syscall_32+0xb6/0x2b0 [ 2977.486063][ T8366] ? lockdep_hardirqs_on+0x9c/0x150 [ 2977.486094][ T8366] do_fast_syscall_32+0x34/0x80 [ 2977.486121][ T8366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2977.486148][ T8366] RIP: 0023:0xf704e539 [ 2977.486167][ T8366] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2977.486187][ T8366] RSP: 002b:00000000f543e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2977.486210][ T8366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f543e620 [ 2977.486225][ T8366] RDX: 000000000000000f RSI: 00000000f73b4ff4 RDI: 0000000000000000 [ 2977.486239][ T8366] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2977.486252][ T8366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2977.486265][ T8366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2977.486297][ T8366] [ 2978.736756][ T8378] random: crng reseeded on system resumption [ 2978.969084][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8557'. [ 2979.135118][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2979.342858][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2979.354292][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2979.368559][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2979.403267][ T3792] usb 5-1: 0:2 : does not exist [ 2979.407022][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2979.417713][ T3792] usb 5-1: unit 5 not found! [ 2979.429414][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2979.446902][ T3792] usb 5-1: USB disconnect, device number 33 [ 2979.504205][ T7625] udevd[7625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2979.539713][ T9] usb 2-1: config 0 descriptor?? [ 2979.700344][ T8381] bond18 (unregistering): Released all slaves [ 2979.856216][ T8389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8558'. [ 2980.099795][ T9] plantronics 0003:047F:FFFF.0107: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2980.175257][T22559] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2980.526123][T22559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2980.601248][T22559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2980.645844][ T3789] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2980.671841][T22559] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2980.779942][T22559] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2980.811713][ T3789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2980.823797][ T3789] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2980.853642][ T3789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2980.885801][ T3789] usb 3-1: config 0 descriptor?? [ 2980.916199][T22559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2980.999079][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2981.035988][T22559] usb 5-1: config 0 descriptor?? [ 2981.136070][ T3789] usbhid 3-1:0.0: can't add hid device: -71 [ 2981.153826][ T3789] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2981.269241][ T3789] usb 3-1: USB disconnect, device number 113 [ 2981.718249][ T3789] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2981.730245][ T3792] usb 2-1: reset high-speed USB device number 116 using dummy_hcd [ 2981.865315][ T3792] usb 2-1: device descriptor read/64, error -32 [ 2981.902843][T22559] plantronics 0003:047F:FFFF.0108: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2981.931605][ T3789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2981.962814][ T3789] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2982.033043][ T3789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2982.305390][ T3792] usb 2-1: reset high-speed USB device number 116 using dummy_hcd [ 2982.361548][ T8409] ptrace attach of "./syz-executor exec"[30892] was attempted by "./syz-executor exec"[8409] [ 2982.681481][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8562'. [ 2982.926675][ T3789] usb 3-1: config 0 descriptor?? [ 2983.169709][ T8412] netlink: 'syz.1.8564': attribute type 29 has an invalid length. [ 2983.179469][ T8412] netlink: 'syz.1.8564': attribute type 29 has an invalid length. [ 2983.669054][ T3788] usb 2-1: USB disconnect, device number 116 [ 2984.864035][ T9] usb 5-1: USB disconnect, device number 34 [ 2985.292693][ T3789] usbhid 3-1:0.0: can't add hid device: -71 [ 2985.299315][ T3789] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2985.321501][ T3789] usb 3-1: USB disconnect, device number 114 [ 2985.573753][ T8434] random: crng reseeded on system resumption [ 2985.641619][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8570'. [ 2985.897368][ T8442] FAULT_INJECTION: forcing a failure. [ 2985.897368][ T8442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2985.945136][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.3.8573 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 2985.945169][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2985.945183][ T8442] Call Trace: [ 2985.945193][ T8442] [ 2985.945203][ T8442] dump_stack_lvl+0x189/0x250 [ 2985.945234][ T8442] ? __pfx____ratelimit+0x10/0x10 [ 2985.945260][ T8442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2985.945286][ T8442] ? __pfx__printk+0x10/0x10 [ 2985.945330][ T8442] should_fail_ex+0x414/0x560 [ 2985.945360][ T8442] _copy_to_user+0x31/0xb0 [ 2985.945384][ T8442] simple_read_from_buffer+0xe1/0x170 [ 2985.945420][ T8442] proc_fail_nth_read+0x1b3/0x220 [ 2985.945448][ T8442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2985.945476][ T8442] ? rw_verify_area+0x2a6/0x4d0 [ 2985.945503][ T8442] ? __lock_acquire+0xab9/0xd20 [ 2985.945532][ T8442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2985.945559][ T8442] vfs_read+0x200/0x980 [ 2985.945586][ T8442] ? fdget_pos+0x247/0x320 [ 2985.945610][ T8442] ? __pfx___mutex_lock+0x10/0x10 [ 2985.945638][ T8442] ? __pfx_vfs_read+0x10/0x10 [ 2985.945668][ T8442] ? __fget_files+0x2a/0x420 [ 2985.945705][ T8442] ? __fget_files+0x3a0/0x420 [ 2985.945736][ T8442] ? __fget_files+0x2a/0x420 [ 2985.945790][ T8442] ksys_read+0x145/0x250 [ 2985.945821][ T8442] ? __pfx_ksys_read+0x10/0x10 [ 2985.945853][ T8442] ? lockdep_hardirqs_on+0x9c/0x150 [ 2985.945885][ T8442] __do_fast_syscall_32+0xb6/0x2b0 [ 2985.945916][ T8442] ? lockdep_hardirqs_on+0x9c/0x150 [ 2985.945945][ T8442] do_fast_syscall_32+0x34/0x80 [ 2985.945971][ T8442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2985.945997][ T8442] RIP: 0023:0xf70be539 [ 2985.946016][ T8442] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2985.946035][ T8442] RSP: 002b:00000000f54ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2985.946065][ T8442] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ae620 [ 2985.946081][ T8442] RDX: 000000000000000f RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 2985.946095][ T8442] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2985.946116][ T8442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2985.946133][ T8442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2985.946164][ T8442] [ 2986.185150][ C0] vkms_vblank_simulate: vblank timer overrun [ 2986.935273][ T3789] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2987.067245][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8578'. [ 2988.154019][ T8481] bond17 (unregistering): Released all slaves [ 2988.179859][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8586'. [ 2988.258368][ T8491] random: crng reseeded on system resumption [ 2988.350331][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8588'. [ 2988.765181][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2988.905196][ T9] usb 2-1: device descriptor read/64, error -71 [ 2989.426239][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2989.577745][ T9] usb 2-1: device descriptor read/64, error -71 [ 2989.756714][ T9] usb usb2-port1: attempt power cycle [ 2990.222564][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8593'. [ 2990.256183][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2990.307775][ T9] usb 2-1: device descriptor read/8, error -71 [ 2990.625520][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2990.645820][ T9] usb 2-1: device descriptor read/8, error -71 [ 2990.756998][ T9] usb usb2-port1: unable to enumerate USB device [ 2991.210139][ T8517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8596'. [ 2991.595778][ T3789] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2991.749584][ T8530] random: crng reseeded on system resumption [ 2991.757559][ T3789] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 2991.773743][ T3789] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2991.845524][ T3789] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 2991.884107][ T3789] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 2991.924212][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8600'. [ 2991.952936][ T3789] usb 3-1: Manufacturer: syz [ 2992.301288][ T3789] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 2992.428335][ T3789] usb 3-1: USB disconnect, device number 115 [ 2993.724997][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2994.009389][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2994.031220][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2994.073494][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2994.314724][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2994.565206][ T9] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2994.574329][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2994.612343][ T9] usb 3-1: config 0 descriptor?? [ 2995.081854][ T8551] random: crng reseeded on system resumption [ 2995.120071][ T9] shield 0003:0955:7214.0109: unknown main item tag 0x0 [ 2995.148151][ T9] shield 0003:0955:7214.0109: item fetching failed at offset 4/5 [ 2995.234296][ T9] shield 0003:0955:7214.0109: Parse failed [ 2995.286267][ T9] shield 0003:0955:7214.0109: probe with driver shield failed with error -22 [ 2995.327519][ T9] usb 3-1: USB disconnect, device number 116 [ 2995.505252][T22559] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2995.635045][ T3789] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2995.669891][T22559] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2995.681520][T22559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2995.710055][T22559] usb 5-1: Product: syz [ 2995.715099][ T9] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 2995.723008][T22559] usb 5-1: Manufacturer: syz [ 2995.732737][ T8574] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8613'. [ 2995.761753][T22559] usb 5-1: SerialNumber: syz [ 2995.772566][T22559] usb 5-1: config 0 descriptor?? [ 2995.885072][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 2996.065159][ T6164] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2996.074261][ T9] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 2996.167380][ T8576] random: crng reseeded on system resumption [ 2996.182587][T22559] usb 5-1: Firmware: major: 0, minor: 13, hardware type: UNKNOWN (16) [ 2996.224999][ T6164] usb 4-1: Using ep0 maxpacket: 32 [ 2996.233724][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8614'. [ 2996.241197][ T6164] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 2996.263245][ T6164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2996.297234][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 2996.308100][ T6164] usb 4-1: config 0 descriptor?? [ 2996.335311][ T9] usb usb3-port1: attempt power cycle [ 2996.401900][T22559] usb 5-1: failed to fetch extended address, random address set [ 2996.420080][T22559] usb 5-1: atusb_probe: initialization failed, error = -524 [ 2996.460926][T22559] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 2996.491063][T22559] usb 5-1: USB disconnect, device number 35 [ 2996.740726][ T6164] viewsonic 0003:2133:0018.010A: item fetching failed at offset 0/4 [ 2996.753484][ T6164] viewsonic 0003:2133:0018.010A: probe with driver viewsonic failed with error -22 [ 2996.856103][ T9] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 2996.986781][ T6164] usb 4-1: USB disconnect, device number 102 [ 2997.006935][ T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2997.048054][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2997.060141][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 2997.069954][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2997.080744][ T30] audit: type=1326 audit(1754518908.055:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 2997.140633][ T9] usb 3-1: config 0 descriptor?? [ 2997.171005][ T30] audit: type=1326 audit(1754518908.075:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 2997.245124][ T30] audit: type=1326 audit(1754518908.075:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 2997.295157][ T30] audit: type=1326 audit(1754518908.075:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 2997.343549][ T30] audit: type=1326 audit(1754518908.085:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 2997.391703][ T30] audit: type=1326 audit(1754518908.085:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 2997.444962][ T30] audit: type=1326 audit(1754518908.085:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 2997.502982][ T30] audit: type=1326 audit(1754518908.085:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 2997.580969][ T9] hid (null): unknown global tag 0xd [ 2997.595139][ T30] audit: type=1326 audit(1754518908.085:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 2997.622577][ T9] wacom 0003:056A:00C6.010B: unknown main item tag 0x5 [ 2997.675017][ T9] wacom 0003:056A:00C6.010B: unknown global tag 0xd [ 2997.681687][ T9] wacom 0003:056A:00C6.010B: item 0 2 1 13 parsing failed [ 2997.713082][ T30] audit: type=1326 audit(1754518908.085:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 2997.736238][ T9] wacom 0003:056A:00C6.010B: parse failed [ 2997.742187][ T9] wacom 0003:056A:00C6.010B: probe with driver wacom failed with error -22 [ 2997.977874][ T8602] FAULT_INJECTION: forcing a failure. [ 2997.977874][ T8602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2998.051014][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.3.8621 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 2998.051037][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2998.051048][ T8602] Call Trace: [ 2998.051054][ T8602] [ 2998.051061][ T8602] dump_stack_lvl+0x189/0x250 [ 2998.051083][ T8602] ? __pfx____ratelimit+0x10/0x10 [ 2998.051102][ T8602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2998.051121][ T8602] ? __pfx__printk+0x10/0x10 [ 2998.051143][ T8602] ? __might_fault+0xb0/0x130 [ 2998.051172][ T8602] should_fail_ex+0x414/0x560 [ 2998.051193][ T8602] _copy_from_user+0x2d/0xb0 [ 2998.051209][ T8602] get_compat_msghdr+0xad/0x4a0 [ 2998.051236][ T8602] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2998.051266][ T8602] ___sys_sendmsg+0x193/0x2a0 [ 2998.051291][ T8602] ? __pfx____sys_sendmsg+0x10/0x10 [ 2998.051339][ T8602] ? __fget_files+0x2a/0x420 [ 2998.051362][ T8602] ? __fget_files+0x3a0/0x420 [ 2998.051393][ T8602] __sys_sendmsg+0x164/0x220 [ 2998.051416][ T8602] ? __pfx___sys_sendmsg+0x10/0x10 [ 2998.051450][ T8602] ? lockdep_hardirqs_on+0x9c/0x150 [ 2998.051472][ T8602] __do_fast_syscall_32+0xb6/0x2b0 [ 2998.051492][ T8602] ? lockdep_hardirqs_on+0x9c/0x150 [ 2998.051513][ T8602] do_fast_syscall_32+0x34/0x80 [ 2998.051533][ T8602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2998.051553][ T8602] RIP: 0023:0xf70be539 [ 2998.051567][ T8602] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2998.051581][ T8602] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2998.051597][ T8602] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800001c0 [ 2998.051608][ T8602] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 2998.051618][ T8602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2998.051628][ T8602] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2998.051637][ T8602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2998.051658][ T8602] [ 2999.927308][ T9] usb 3-1: USB disconnect, device number 120 [ 3000.340937][ T8628] ptrace attach of "./syz-executor exec"[30535] was attempted by "./syz-executor exec"[8628] [ 3000.495973][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8624'. [ 3000.530224][ T8630] ptrace attach of "./syz-executor exec"[30892] was attempted by "./syz-executor exec"[8630] [ 3000.589475][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8623'. [ 3001.162309][ T8634] random: crng reseeded on system resumption [ 3001.230432][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8627'. [ 3001.965172][ T3789] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 3002.331664][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 3002.331683][ T30] audit: type=1400 audit(1754518913.305:4741): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 3002.384608][ T8645] FAULT_INJECTION: forcing a failure. [ 3002.384608][ T8645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3002.562530][ T30] audit: type=1326 audit(1754518913.515:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.8634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 3002.604081][ T30] audit: type=1326 audit(1754518913.515:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.8634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 3002.627118][ T8645] CPU: 1 UID: 0 PID: 8645 Comm: syz.3.8633 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 3002.627144][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3002.627155][ T8645] Call Trace: [ 3002.627161][ T8645] [ 3002.627168][ T8645] dump_stack_lvl+0x189/0x250 [ 3002.627191][ T8645] ? __pfx____ratelimit+0x10/0x10 [ 3002.627212][ T8645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3002.627239][ T8645] ? __pfx__printk+0x10/0x10 [ 3002.627290][ T8645] should_fail_ex+0x414/0x560 [ 3002.627320][ T8645] _copy_to_user+0x31/0xb0 [ 3002.627343][ T8645] simple_read_from_buffer+0xe1/0x170 [ 3002.627379][ T8645] proc_fail_nth_read+0x1b3/0x220 [ 3002.627407][ T8645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3002.627441][ T8645] ? rw_verify_area+0x2a6/0x4d0 [ 3002.627467][ T8645] ? __lock_acquire+0xab9/0xd20 [ 3002.627496][ T8645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3002.627527][ T8645] vfs_read+0x200/0x980 [ 3002.627555][ T8645] ? fdget_pos+0x247/0x320 [ 3002.627578][ T8645] ? __pfx___mutex_lock+0x10/0x10 [ 3002.627606][ T8645] ? __pfx_vfs_read+0x10/0x10 [ 3002.627636][ T8645] ? __fget_files+0x2a/0x420 [ 3002.627672][ T8645] ? __fget_files+0x3a0/0x420 [ 3002.627704][ T8645] ? __fget_files+0x2a/0x420 [ 3002.627743][ T8645] ksys_read+0x145/0x250 [ 3002.627772][ T8645] ? __pfx_ksys_read+0x10/0x10 [ 3002.627818][ T8645] ? lockdep_hardirqs_on+0x9c/0x150 [ 3002.627847][ T8645] __do_fast_syscall_32+0xb6/0x2b0 [ 3002.627875][ T8645] ? lockdep_hardirqs_on+0x9c/0x150 [ 3002.627903][ T8645] do_fast_syscall_32+0x34/0x80 [ 3002.627929][ T8645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3002.627955][ T8645] RIP: 0023:0xf70be539 [ 3002.627973][ T8645] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3002.627992][ T8645] RSP: 002b:00000000f54ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 3002.628014][ T8645] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ae620 [ 3002.628029][ T8645] RDX: 000000000000000f RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 3002.628042][ T8645] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3002.628055][ T8645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3002.628067][ T8645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3002.628098][ T8645] [ 3002.875279][ T30] audit: type=1326 audit(1754518913.515:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.8634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 3002.897518][ T30] audit: type=1326 audit(1754518913.515:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.8634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 3002.919619][ T30] audit: type=1326 audit(1754518913.515:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.8634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 3002.941694][ T30] audit: type=1326 audit(1754518913.515:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.8634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 3002.963801][ T30] audit: type=1326 audit(1754518913.515:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.8634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 3002.985914][ T30] audit: type=1326 audit(1754518913.515:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.8634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 3003.008009][ T30] audit: type=1326 audit(1754518913.515:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.8634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 3003.182522][ T8656] FAULT_INJECTION: forcing a failure. [ 3003.182522][ T8656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3003.222223][ T8656] CPU: 0 UID: 0 PID: 8656 Comm: syz.0.8635 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 3003.222254][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3003.222267][ T8656] Call Trace: [ 3003.222275][ T8656] [ 3003.222286][ T8656] dump_stack_lvl+0x189/0x250 [ 3003.222319][ T8656] ? __pfx____ratelimit+0x10/0x10 [ 3003.222345][ T8656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3003.222372][ T8656] ? __pfx__printk+0x10/0x10 [ 3003.222402][ T8656] ? __might_fault+0xb0/0x130 [ 3003.222445][ T8656] should_fail_ex+0x414/0x560 [ 3003.222476][ T8656] _copy_from_user+0x2d/0xb0 [ 3003.222497][ T8656] generic_map_update_batch+0x51b/0x7f0 [ 3003.222536][ T8656] ? __pfx_generic_map_update_batch+0x10/0x10 [ 3003.222559][ T8656] ? __fget_files+0x2a/0x420 [ 3003.222600][ T8656] ? __pfx_generic_map_update_batch+0x10/0x10 [ 3003.222623][ T8656] bpf_map_do_batch+0x369/0x5f0 [ 3003.222661][ T8656] __sys_bpf+0x6af/0x870 [ 3003.222691][ T8656] ? __pfx___sys_bpf+0x10/0x10 [ 3003.222734][ T8656] ? ksys_write+0x22a/0x250 [ 3003.222775][ T8656] __ia32_sys_bpf+0x7c/0x90 [ 3003.222802][ T8656] __do_fast_syscall_32+0xb6/0x2b0 [ 3003.222831][ T8656] ? lockdep_hardirqs_on+0x9c/0x150 [ 3003.222863][ T8656] do_fast_syscall_32+0x34/0x80 [ 3003.222891][ T8656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3003.222917][ T8656] RIP: 0023:0xf7f38539 [ 3003.222935][ T8656] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3003.222953][ T8656] RSP: 002b:00000000f543555c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 3003.222975][ T8656] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000200 [ 3003.222991][ T8656] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 3003.223005][ T8656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3003.223017][ T8656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3003.223029][ T8656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3003.223052][ T8656] [ 3005.646337][ T8680] random: crng reseeded on system resumption [ 3005.723655][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8640'. [ 3005.817996][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8641'. [ 3006.016897][ T8682] bond18 (unregistering): Released all slaves [ 3006.125929][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8641'. [ 3006.378409][ T8704] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8643'. [ 3006.420739][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8643'. [ 3006.521583][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8643'. [ 3006.613340][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 3006.620580][ T8710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3009.211773][T16981] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 3011.496206][ T8746] random: crng reseeded on system resumption [ 3011.547191][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8657'. [ 3011.771047][ T8748] bond11 (unregistering): Released all slaves [ 3011.772870][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8657'. [ 3012.312099][ T8033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3012.336982][ T8033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3012.364562][ T8033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3012.411588][ T8033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3012.419461][ T8033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3012.825700][T18714] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3012.992892][T18714] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3013.191659][T18714] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3013.391361][T18714] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3014.547028][ T8033] Bluetooth: hci0: command tx timeout [ 3014.814100][T18714] bridge_slave_1: left allmulticast mode [ 3014.920255][T18714] bridge_slave_1: left promiscuous mode [ 3014.928751][T18714] bridge0: port 2(bridge_slave_1) entered disabled state [ 3014.940438][T18714] bridge_slave_0: left allmulticast mode [ 3014.948703][T18714] bridge_slave_0: left promiscuous mode [ 3014.954539][T18714] bridge0: port 1(bridge_slave_0) entered disabled state [ 3016.462063][ T8823] binder: BINDER_SET_CONTEXT_MGR already set [ 3016.468667][ T8823] binder: 8818:8823 ioctl 4018620d 80000040 returned -16 [ 3016.640155][ T8033] Bluetooth: hci0: command tx timeout [ 3017.357711][T18714] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 3017.683058][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8671'. [ 3017.864999][T18714] bond0 (unregistering): left promiscuous mode [ 3017.868185][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8671'. [ 3017.871520][T18714] bond_slave_0: left promiscuous mode [ 3017.886644][T18714] bond_slave_1: left promiscuous mode [ 3017.892454][T18714] mac80211_hwsim hwsim31 wlan1: left promiscuous mode [ 3017.903638][T18714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3017.917058][T18714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3017.931357][T18714] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 3017.942496][T18714] bond0 (unregistering): Released all slaves [ 3018.086115][T18714] bond1 (unregistering): Released all slaves [ 3018.240590][T18714] bond2 (unregistering): Released all slaves [ 3018.285483][ T8840] random: crng reseeded on system resumption [ 3018.447481][T18714] bond3 (unregistering): Released all slaves [ 3018.466874][T18714] bond4 (unregistering): Released all slaves [ 3018.493108][T18714] bond5 (unregistering): Released all slaves [ 3018.531728][T18714] bond6 (unregistering): Released all slaves [ 3018.549909][T18714] bond7 (unregistering): Released all slaves [ 3018.679065][ T8033] Bluetooth: hci0: command tx timeout [ 3018.742335][T18714] bond8 (unregistering): (slave bond9): Releasing backup interface [ 3018.765210][T18714] bond8 (unregistering): Released all slaves [ 3019.017075][T18714] bond9 (unregistering): Released all slaves [ 3019.048089][T18714] bond10 (unregistering): Released all slaves [ 3019.214111][T18714] bond11 (unregistering): (slave bond12): Releasing backup interface [ 3019.223313][T18714] bond11 (unregistering): Released all slaves [ 3019.376102][T18714] bond12 (unregistering): Released all slaves [ 3019.537105][T18714] bond13 (unregistering): Released all slaves [ 3019.706561][T18714] bond14 (unregistering): (slave bond15): Releasing backup interface [ 3019.736542][T18714] bond14 (unregistering): Released all slaves [ 3020.155733][T18714] bond15 (unregistering): Released all slaves [ 3020.207730][T18714] bond16 (unregistering): Released all slaves [ 3020.289880][ T8833] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 3020.386991][ T8790] chnl_net:caif_netlink_parms(): no params data found [ 3020.609133][T18714] tipc: Disabling bearer [ 3020.680049][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.687391][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.717371][T18714] tipc: Left network mode [ 3020.755098][ T8033] Bluetooth: hci0: command tx timeout [ 3021.690479][ T8790] bridge0: port 1(bridge_slave_0) entered blocking state [ 3021.728557][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 3021.795351][ T8790] bridge_slave_0: entered allmulticast mode [ 3021.846673][ T8790] bridge_slave_0: entered promiscuous mode [ 3022.021843][ T8790] bridge0: port 2(bridge_slave_1) entered blocking state [ 3022.050514][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 3022.071784][ T8790] bridge_slave_1: entered allmulticast mode [ 3022.093942][ T8790] bridge_slave_1: entered promiscuous mode [ 3022.488615][ T8790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3022.643123][ T8790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3023.573926][ T8790] team0: Port device team_slave_0 added [ 3023.598888][ T8790] team0: Port device team_slave_1 added [ 3023.621350][T18714] dummy0: left promiscuous mode [ 3023.681874][T18714] hsr_slave_0: left promiscuous mode [ 3023.837632][T18714] hsr_slave_1: left promiscuous mode [ 3023.865109][T18714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3023.899775][T18714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3023.923569][T18714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3023.944643][T18714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3024.021528][T18714] veth1_macvtap: left promiscuous mode [ 3024.038383][T18714] veth0_macvtap: left promiscuous mode [ 3024.062280][T18714] veth1_vlan: left promiscuous mode [ 3024.082439][T18714] veth0_vlan: left promiscuous mode [ 3024.968550][ T6164] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3025.092017][ T8922] ptrace attach of "./syz-executor exec"[29183] was attempted by "./syz-executor exec"[8922] [ 3025.201781][ T6164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3025.213071][ T6164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3025.224730][ T6164] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3025.265149][ T6164] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3025.285156][ T6164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3025.321800][ T6164] usb 3-1: config 0 descriptor?? [ 3025.513405][T18714] team0 (unregistering): Port device team_slave_1 removed [ 3025.643290][T18714] team0 (unregistering): Port device team_slave_0 removed [ 3025.853412][ T6164] plantronics 0003:047F:FFFF.010C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3027.148579][ T3789] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 3027.337791][ T3789] usb 5-1: Using ep0 maxpacket: 8 [ 3027.355725][ T3789] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 3027.375119][ T6164] usb 3-1: reset high-speed USB device number 121 using dummy_hcd [ 3027.392324][ T3789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3027.418342][ T3789] usb 5-1: Product: syz [ 3027.431688][ T3789] usb 5-1: Manufacturer: syz [ 3027.436196][ T8790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3027.443631][ T3789] usb 5-1: SerialNumber: syz [ 3027.453301][ T8790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3027.480729][ T3789] usb 5-1: config 0 descriptor?? [ 3027.490099][ T3789] gspca_main: se401-2.14.0 probing 047d:5003 [ 3027.494516][ T8790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3027.515484][ T6164] usb 3-1: device descriptor read/64, error -32 [ 3027.562638][ T8790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3027.575699][ T8790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3027.607429][ T8790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3027.755290][ T6164] usb 3-1: reset high-speed USB device number 121 using dummy_hcd [ 3027.880229][ T8790] hsr_slave_0: entered promiscuous mode [ 3027.899454][ T3789] gspca_se401: Too many frame sizes [ 3027.905054][ T6164] usb 3-1: device descriptor read/64, error -32 [ 3027.915831][ T8790] hsr_slave_1: entered promiscuous mode [ 3028.072017][T18714] IPVS: stop unused estimator thread 0... [ 3028.162323][ T6164] usb 3-1: reset high-speed USB device number 121 using dummy_hcd [ 3028.186768][ T8946] loop6: detected capacity change from 0 to 7 [ 3028.244256][ T8804] Dev loop6: unable to read RDB block 7 [ 3028.250300][ T8804] loop6: unable to read partition table [ 3028.256759][ T6164] usb 3-1: device descriptor read/8, error -32 [ 3028.267197][ T8804] loop6: partition table beyond EOD, truncated [ 3028.290601][ T8946] Dev loop6: unable to read RDB block 7 [ 3028.296611][ T8946] loop6: unable to read partition table [ 3028.316845][ T8946] loop6: partition table beyond EOD, truncated [ 3028.357391][ T8946] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 3028.432689][T22559] usb 5-1: USB disconnect, device number 37 [ 3029.156561][ T9] usb 3-1: USB disconnect, device number 121 [ 3029.692448][ T8790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3029.710020][ T8790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3029.740454][ T8790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3029.769287][ T8790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3030.283737][ T8790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3030.342017][ T8790] 8021q: adding VLAN 0 to HW filter on device team0 [ 3030.408134][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 3030.415394][ T8759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3030.802437][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 3030.809713][ T8759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3031.487065][ T8790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3031.584304][ T8992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8700'. [ 3031.626437][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8701'. [ 3031.767317][ T8790] veth0_vlan: entered promiscuous mode [ 3031.842121][ T8790] veth1_vlan: entered promiscuous mode [ 3032.000754][ T8790] veth0_macvtap: entered promiscuous mode [ 3032.032963][ T8790] veth1_macvtap: entered promiscuous mode [ 3032.410504][ T8790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3032.540479][ T8790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3032.775534][ T8766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3032.849768][ T8766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3032.973138][ T9016] ptrace attach of "./syz-executor exec"[30892] was attempted by "./syz-executor exec"[9016] [ 3033.021943][ T8766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3033.044987][ T6164] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 3033.124003][ T8766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3033.720495][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8707'. [ 3033.807194][ T8759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3033.858850][ T8759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3034.012240][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8707'. [ 3034.159366][ T8766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3034.251396][ T8766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3034.704184][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 3034.704210][ T30] audit: type=1326 audit(1754518945.675:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.8654" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fe539 code=0x0 [ 3035.173396][ T9047] FAULT_INJECTION: forcing a failure. [ 3035.173396][ T9047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3035.188580][ T9047] CPU: 1 UID: 0 PID: 9047 Comm: syz.4.8709 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 3035.188612][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3035.188626][ T9047] Call Trace: [ 3035.188635][ T9047] [ 3035.188645][ T9047] dump_stack_lvl+0x189/0x250 [ 3035.188677][ T9047] ? __pfx____ratelimit+0x10/0x10 [ 3035.188703][ T9047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3035.188730][ T9047] ? __pfx__printk+0x10/0x10 [ 3035.188760][ T9047] ? __might_fault+0xb0/0x130 [ 3035.188803][ T9047] should_fail_ex+0x414/0x560 [ 3035.188833][ T9047] _copy_from_iter+0x1db/0x16f0 [ 3035.188877][ T9047] ? __pfx__copy_from_iter+0x10/0x10 [ 3035.188911][ T9047] ? rcu_is_watching+0x15/0xb0 [ 3035.188934][ T9047] ? trace_kmalloc+0x1f/0xd0 [ 3035.188962][ T9047] ? kernfs_fop_write_iter+0x158/0x4f0 [ 3035.188999][ T9047] kernfs_fop_write_iter+0x19f/0x4f0 [ 3035.189038][ T9047] aio_write+0x535/0x7a0 [ 3035.189067][ T9047] ? __pfx_aio_write+0x10/0x10 [ 3035.189104][ T9047] ? __might_fault+0xb0/0x130 [ 3035.189154][ T9047] io_submit_one+0x78b/0x1310 [ 3035.189194][ T9047] ? __pfx_io_submit_one+0x10/0x10 [ 3035.189218][ T9047] ? __might_fault+0xb0/0x130 [ 3035.189260][ T9047] ? __might_fault+0xb0/0x130 [ 3035.189295][ T9047] __ia32_compat_sys_io_submit+0x1c7/0x330 [ 3035.189332][ T9047] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 3035.189365][ T9047] ? ksys_write+0x22a/0x250 [ 3035.189411][ T9047] ? lockdep_hardirqs_on+0x9c/0x150 [ 3035.189442][ T9047] __do_fast_syscall_32+0xb6/0x2b0 [ 3035.189471][ T9047] ? lockdep_hardirqs_on+0x9c/0x150 [ 3035.189517][ T9047] do_fast_syscall_32+0x34/0x80 [ 3035.189546][ T9047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3035.189574][ T9047] RIP: 0023:0xf712e539 [ 3035.189592][ T9047] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3035.189612][ T9047] RSP: 002b:00000000f551e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 3035.189636][ T9047] RAX: ffffffffffffffda RBX: 00000000f749f000 RCX: 0000000000000001 [ 3035.189652][ T9047] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 3035.189665][ T9047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3035.189679][ T9047] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3035.189693][ T9047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3035.189724][ T9047] [ 3035.568344][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8709'. [ 3036.387076][ T9065] netlink: 'syz.1.8712': attribute type 10 has an invalid length. [ 3036.404516][ T9065] team0: Port device netdevsim0 added [ 3037.345086][ T3789] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 3037.395974][ T3788] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 3037.497422][ T3789] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 3037.517639][ T3789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 3037.548281][ T3789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 3037.567395][ T3789] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3037.586466][ T3789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3037.627911][ T3789] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 3037.647584][ T3789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3037.656472][ T3789] usb 5-1: Product: syz [ 3037.660749][ T3789] usb 5-1: Manufacturer: syz [ 3037.666528][ T3789] usb 5-1: SerialNumber: syz [ 3037.674381][ T3789] usb 5-1: config 0 descriptor?? [ 3037.702778][ T3789] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 3037.928423][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8716'. [ 3038.076510][ T8580] usb 5-1: USB disconnect, device number 38 [ 3040.561093][ T9118] ptrace attach of "./syz-executor exec"[30535] was attempted by "./syz-executor exec"[9118] [ 3042.839748][ T8580] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3043.005061][ T3789] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 3043.145156][ T3789] usb 5-1: device descriptor read/64, error -71 [ 3043.405144][ T3789] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 3043.720661][ T9157] binder: BINDER_SET_CONTEXT_MGR already set [ 3043.726771][ T9157] binder: 9149:9157 ioctl 4018620d 80000040 returned -16 [ 3043.752926][ T3789] usb 5-1: device descriptor read/64, error -71 [ 3043.886453][ T3789] usb usb5-port1: attempt power cycle [ 3043.902222][T22559] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 3044.088410][T22559] usb 2-1: Using ep0 maxpacket: 8 [ 3044.110277][T22559] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3044.121260][T22559] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3044.182576][T22559] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3044.499631][T22559] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3044.499689][ T3789] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 3044.594231][T22559] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3044.605827][ T3789] usb 5-1: device descriptor read/8, error -71 [ 3044.680476][T22559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3045.285015][ T3789] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3045.552471][ T9156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3045.585067][ T3789] usb 5-1: device descriptor read/8, error -71 [ 3045.640021][T22559] usb 2-1: GET_CAPABILITIES returned 0 [ 3045.654945][T22559] usbtmc 2-1:16.0: can't read capabilities [ 3045.705203][ T3789] usb usb5-port1: unable to enumerate USB device [ 3045.854369][T20487] usb 2-1: USB disconnect, device number 124 [ 3046.219706][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8742'. [ 3046.286783][ T9180] bond18 (unregistering): Released all slaves [ 3046.305523][T20487] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 3046.339728][ T9184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8742'. [ 3046.367689][ T9186] libceph: resolve '. [ 3046.367689][ T9186] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 3046.367689][ T9186] ' (ret=-3): failed [ 3046.487979][T20487] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 3046.500822][T20487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3046.512513][T20487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3046.525708][T20487] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 3046.535035][T20487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3046.543043][T20487] usb 4-1: Product: syz [ 3046.547794][T20487] usb 4-1: Manufacturer: syz [ 3046.552419][T20487] usb 4-1: SerialNumber: syz [ 3046.559820][T20487] usb 4-1: config 0 descriptor?? [ 3046.675624][T22559] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 3046.708206][ T8580] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3046.795192][T20487] powermate: unknown product id 0240 [ 3046.802642][T20487] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 3046.810661][T20487] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 3046.828117][T20487] usb 4-1: USB disconnect, device number 104 [ 3046.855702][T22559] usb 2-1: Using ep0 maxpacket: 32 [ 3046.863588][T22559] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3046.876218][T22559] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3046.885394][T22559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3046.900130][ T8580] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3046.911994][ T8580] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3046.923587][T22559] usb 2-1: config 0 descriptor?? [ 3046.930044][ T8580] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3046.945224][T22559] hub 2-1:0.0: bad descriptor, ignoring hub [ 3046.951188][T22559] hub 2-1:0.0: probe with driver hub failed with error -5 [ 3046.961093][T22559] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3046.968523][ T8580] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3046.979064][ T8580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3046.992857][ T8580] usb 3-1: config 0 descriptor?? [ 3047.223738][ T9192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3047.234714][ T9192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.270122][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8745'. [ 3047.282445][ T9194] netlink: 'syz.4.8747': attribute type 10 has an invalid length. [ 3047.605038][T20487] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3047.615747][ T9204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3047.634716][ T9204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.698809][ T8580] usbhid 3-1:0.0: can't add hid device: -71 [ 3047.732475][ T8580] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3047.775189][T20487] usb 5-1: Using ep0 maxpacket: 8 [ 3047.776717][ T8580] usb 3-1: USB disconnect, device number 123 [ 3047.821880][T20487] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 3047.869869][T20487] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3047.920954][T20487] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3047.960501][T20487] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 3047.986927][T20487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3048.002008][T20487] usb 5-1: Product: syz [ 3048.009916][T20487] usb 5-1: Manufacturer: syz [ 3048.022746][T20487] usb 5-1: SerialNumber: syz [ 3048.049129][T20487] usb 5-1: config 0 descriptor?? [ 3048.072074][T20487] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 3048.941907][T20487] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 3048.953535][T20487] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 3048.966028][T20487] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 3049.255650][T22559] usb 5-1: USB disconnect, device number 43 [ 3049.690754][ T9232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8755'. [ 3050.157002][T22559] usb 2-1: USB disconnect, device number 125 [ 3051.102806][ T9254] ptrace attach of "./syz-executor exec"[8790] was attempted by "./syz-executor exec"[9254] [ 3051.215061][ T3789] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 3052.075025][ T3789] usb 5-1: device descriptor read/64, error -71 [ 3052.468895][T22559] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 3052.805115][ T3789] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3052.965152][ T3789] usb 5-1: device descriptor read/64, error -71 [ 3053.080187][ T3789] usb usb5-port1: attempt power cycle [ 3053.095161][T22559] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3053.115037][T22559] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3053.324984][T22559] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3053.413867][T22559] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3053.421221][T22559] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 3053.445181][T22559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3053.465342][ T3789] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3053.555814][ T3789] usb 5-1: device descriptor read/8, error -71 [ 3053.557173][T22559] usb 3-1: config 0 descriptor?? [ 3053.577731][ T9258] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3053.752101][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8765'. [ 3053.875790][ T3789] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3053.906952][ T3789] usb 5-1: device descriptor read/8, error -71 [ 3054.052205][ T3789] usb usb5-port1: unable to enumerate USB device [ 3054.064026][T22559] apple 0003:05AC:027C.010D: hidraw0: USB HID v0.04 Device [HID 05ac:027c] on usb-dummy_hcd.2-1/input0 [ 3054.543301][ T9288] random: crng reseeded on system resumption [ 3054.736375][ T9265] delete_channel: no stack [ 3054.972772][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8768'. [ 3055.669834][ T8580] usb 3-1: USB disconnect, device number 124 [ 3056.549630][ T9271] netlink: 'syz.0.8766': attribute type 29 has an invalid length. [ 3056.557687][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8766'. [ 3057.233275][ T9306] netlink: 'syz.0.8772': attribute type 11 has an invalid length. [ 3058.334988][T22559] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 3058.354273][ T9317] kvm: kvm [9315]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3a74516a [ 3058.494976][T22559] usb 2-1: Using ep0 maxpacket: 8 [ 3058.636833][T22559] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3058.645925][T22559] usb 2-1: config 7 has an invalid interface number: 59 but max is 0 [ 3058.654167][T22559] usb 2-1: config 7 has no interface number 0 [ 3058.689771][T22559] usb 2-1: config 7 interface 59 has no altsetting 0 [ 3058.733515][T22559] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 3058.745707][T22559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3058.753733][T22559] usb 2-1: Product: syz [ 3058.762402][T22559] usb 2-1: Manufacturer: syz [ 3058.777136][T22559] usb 2-1: SerialNumber: syz [ 3059.058979][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3059.067924][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3059.108006][T22559] kobil_sct 2-1:7.59: KOBIL USB smart card terminal converter detected [ 3059.130511][T22559] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 3059.230230][T22559] usb 2-1: USB disconnect, device number 126 [ 3059.646313][T22559] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 3059.663166][ T9334] FAULT_INJECTION: forcing a failure. [ 3059.663166][ T9334] name failslab, interval 1, probability 0, space 0, times 0 [ 3059.677728][T22559] kobil_sct 2-1:7.59: device disconnected [ 3059.699878][ T9334] CPU: 0 UID: 0 PID: 9334 Comm: syz.2.8781 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 3059.699908][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3059.699923][ T9334] Call Trace: [ 3059.699932][ T9334] [ 3059.699942][ T9334] dump_stack_lvl+0x189/0x250 [ 3059.699979][ T9334] ? __pfx____ratelimit+0x10/0x10 [ 3059.700006][ T9334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3059.700033][ T9334] ? __pfx__printk+0x10/0x10 [ 3059.700068][ T9334] ? __pfx___might_resched+0x10/0x10 [ 3059.700098][ T9334] ? fs_reclaim_acquire+0x7d/0x100 [ 3059.700137][ T9334] should_fail_ex+0x414/0x560 [ 3059.700166][ T9334] should_failslab+0xa8/0x100 [ 3059.700199][ T9334] __kmalloc_cache_noprof+0x70/0x3d0 [ 3059.700228][ T9334] ? rtnl_newlink+0xed/0x1c70 [ 3059.700257][ T9334] ? kasan_save_free_info+0x46/0x50 [ 3059.700279][ T9334] rtnl_newlink+0xed/0x1c70 [ 3059.700300][ T9334] ? netlink_sendmsg+0x805/0xb30 [ 3059.700322][ T9334] ? __sock_sendmsg+0x219/0x270 [ 3059.700339][ T9334] ? ____sys_sendmsg+0x505/0x830 [ 3059.700363][ T9334] ? ___sys_sendmsg+0x21f/0x2a0 [ 3059.700398][ T9334] ? __sys_sendmsg+0x164/0x220 [ 3059.700420][ T9334] ? __do_fast_syscall_32+0xb6/0x2b0 [ 3059.700443][ T9334] ? do_fast_syscall_32+0x34/0x80 [ 3059.700464][ T9334] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3059.700490][ T9334] ? __pfx_rtnl_newlink+0x10/0x10 [ 3059.700530][ T9334] ? kasan_quarantine_put+0xdd/0x220 [ 3059.700551][ T9334] ? lockdep_hardirqs_on+0x9c/0x150 [ 3059.700577][ T9334] ? nlmon_xmit+0xb0/0x100 [ 3059.700600][ T9334] ? kmem_cache_free+0x18f/0x400 [ 3059.700630][ T9334] ? __local_bh_enable_ip+0x12d/0x1c0 [ 3059.700647][ T9334] ? lockdep_hardirqs_on+0x9c/0x150 [ 3059.700668][ T9334] ? __local_bh_enable_ip+0x12d/0x1c0 [ 3059.700684][ T9334] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3059.700704][ T9334] ? __dev_queue_xmit+0x27b/0x3b50 [ 3059.700720][ T9334] ? __dev_queue_xmit+0x27b/0x3b50 [ 3059.700734][ T9334] ? __dev_queue_xmit+0x27b/0x3b50 [ 3059.700751][ T9334] ? __dev_queue_xmit+0x1d79/0x3b50 [ 3059.700770][ T9334] ? __lock_acquire+0xab9/0xd20 [ 3059.700815][ T9334] ? __pfx_rtnl_newlink+0x10/0x10 [ 3059.700836][ T9334] rtnetlink_rcv_msg+0x7cc/0xb70 [ 3059.700867][ T9334] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 3059.700887][ T9334] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3059.700907][ T9334] ? ref_tracker_free+0x63a/0x7d0 [ 3059.700928][ T9334] ? __asan_memcpy+0x40/0x70 [ 3059.700948][ T9334] ? __pfx_ref_tracker_free+0x10/0x10 [ 3059.700967][ T9334] ? __skb_clone+0x63/0x7a0 [ 3059.701000][ T9334] netlink_rcv_skb+0x205/0x470 [ 3059.701022][ T9334] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3059.701045][ T9334] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3059.701075][ T9334] ? netlink_deliver_tap+0x2e/0x1b0 [ 3059.701104][ T9334] netlink_unicast+0x82c/0x9e0 [ 3059.701130][ T9334] ? __pfx_netlink_unicast+0x10/0x10 [ 3059.701155][ T9334] ? netlink_sendmsg+0x642/0xb30 [ 3059.701178][ T9334] ? skb_put+0x11b/0x210 [ 3059.701203][ T9334] netlink_sendmsg+0x805/0xb30 [ 3059.701232][ T9334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3059.701256][ T9334] ? __import_iovec+0x5d4/0x7f0 [ 3059.701270][ T9334] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3059.701296][ T9334] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3059.701315][ T9334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3059.701337][ T9334] __sock_sendmsg+0x219/0x270 [ 3059.701364][ T9334] ____sys_sendmsg+0x505/0x830 [ 3059.701394][ T9334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3059.701432][ T9334] ___sys_sendmsg+0x21f/0x2a0 [ 3059.701459][ T9334] ? __pfx____sys_sendmsg+0x10/0x10 [ 3059.701513][ T9334] ? __fget_files+0x2a/0x420 [ 3059.701538][ T9334] ? __fget_files+0x3a0/0x420 [ 3059.701572][ T9334] __sys_sendmsg+0x164/0x220 [ 3059.701598][ T9334] ? __pfx___sys_sendmsg+0x10/0x10 [ 3059.701636][ T9334] ? lockdep_hardirqs_on+0x9c/0x150 [ 3059.701658][ T9334] __do_fast_syscall_32+0xb6/0x2b0 [ 3059.701681][ T9334] ? lockdep_hardirqs_on+0x9c/0x150 [ 3059.701704][ T9334] do_fast_syscall_32+0x34/0x80 [ 3059.701726][ T9334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3059.701747][ T9334] RIP: 0023:0xf706e539 [ 3059.701763][ T9334] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3059.701779][ T9334] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3059.701798][ T9334] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 3059.701810][ T9334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3059.701820][ T9334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3059.701830][ T9334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3059.701854][ T9334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3059.701878][ T9334] [ 3060.710230][ T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3061.314784][ T9351] binder: BINDER_SET_CONTEXT_MGR already set [ 3061.321491][ T9351] binder: 9339:9351 ioctl 4018620d 80000040 returned -16 [ 3061.433455][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3061.774190][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3061.888715][ T9] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3062.128879][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3062.149100][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3062.164225][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3062.174261][ T9] usb 3-1: Product: syz [ 3062.181010][ T9] usb 3-1: Manufacturer: syz [ 3062.191638][ T9] usb 3-1: SerialNumber: syz [ 3062.616862][ T9] usb 3-1: USB disconnect, device number 125 [ 3063.448573][ T9377] random: crng reseeded on system resumption [ 3063.568705][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8793'. [ 3063.671240][ T9379] binder_alloc: 9367: binder_alloc_buf size 8 failed, no address space [ 3063.682391][ T9379] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 3065.205021][ T3788] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3065.375062][ T3788] usb 5-1: Using ep0 maxpacket: 32 [ 3065.388605][ T3788] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 3065.417534][ T3788] usb 5-1: config 0 has no interface number 0 [ 3065.449142][ T3788] usb 5-1: config 0 interface 2 has no altsetting 0 [ 3065.917815][ T3788] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 3065.927622][ T3788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3065.945136][T22559] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 3066.019747][ T3788] usb 5-1: Product: syz [ 3066.023966][ T3788] usb 5-1: Manufacturer: syz [ 3066.120040][T22559] usb 2-1: Using ep0 maxpacket: 16 [ 3066.202856][T22559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 3066.214185][T22559] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 3066.235968][T22559] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 3066.314073][T22559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3066.322387][ T3788] usb 5-1: SerialNumber: syz [ 3066.330367][ T3788] usb 5-1: config 0 descriptor?? [ 3066.524457][T22559] usb 2-1: Product: syz [ 3066.550863][T22559] usb 2-1: Manufacturer: syz [ 3066.559735][T22559] usb 2-1: SerialNumber: syz [ 3066.674098][ T9395] vlan2: entered promiscuous mode [ 3066.712659][T22559] usb 2-1: config 0 descriptor?? [ 3066.736079][ T9402] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3066.793943][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 3066.805556][ T3788] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3066.918923][ T3788] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 3066.940571][ T3788] usb 5-1: USB disconnect, device number 48 [ 3066.975455][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 3067.079687][T22559] port100 2-1:0.0: NFC: Could not get supported command types [ 3067.107872][T22559] usb 2-1: USB disconnect, device number 127 [ 3067.119484][ T9134] udevd[9134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3067.805031][ T3788] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3067.971228][ T3788] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3067.985591][ T3788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3068.018350][ T3788] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3068.027860][ T3788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3068.645835][ T3788] usb 5-1: SerialNumber: syz [ 3069.043338][ T3788] usb 5-1: 0:2 : does not exist [ 3069.192268][ T3788] usb 5-1: USB disconnect, device number 49 [ 3069.293702][ T9134] udevd[9134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3069.425017][ T9438] random: crng reseeded on system resumption [ 3069.528910][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8808'. [ 3070.003337][ T9451] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 3070.688885][ T9451] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8812'. [ 3070.749703][ T9451] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8812'. [ 3070.821290][ T3788] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3070.831596][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8812'. [ 3073.075164][ T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 3073.833074][ T9484] binder: 9479:9484 unknown command 0 [ 3073.838639][ T9484] binder: 9479:9484 ioctl c0306201 80000c40 returned -22 [ 3074.644979][ T3792] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 3074.844010][ T3792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3074.856832][ T3792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3074.891607][ T3792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3074.975408][ T3792] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3075.033406][ T3792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3075.081310][ T3792] usb 2-1: config 0 descriptor?? [ 3075.115174][ T8580] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3075.570972][ T8580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3076.055845][ T8580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3076.073887][ T8580] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3076.128981][ T8580] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3076.184964][ T8580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3076.198509][ T3792] plantronics 0003:047F:FFFF.010E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3076.226275][ T8580] usb 5-1: config 0 descriptor?? [ 3077.255543][ T8580] plantronics 0003:047F:FFFF.010F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 3077.734949][ T8580] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 3077.846097][ T9524] ptrace attach of "./syz-executor exec"[30535] was attempted by "./syz-executor exec"[9524] [ 3077.875585][ T8580] usb 2-1: device descriptor read/64, error -32 [ 3078.165062][ T8580] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 3078.336697][ T8580] usb 2-1: device descriptor read/64, error -32 [ 3078.445091][ T9530] binder: BINDER_SET_CONTEXT_MGR already set [ 3078.453243][ T9530] binder: 9525:9530 ioctl 4018620d 80000040 returned -16 [ 3079.302816][T22559] usb 2-1: USB disconnect, device number 2 [ 3080.852675][ T3788] usb 5-1: USB disconnect, device number 51 [ 3082.136476][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.175098][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3084.386144][ T9598] binder: BINDER_SET_CONTEXT_MGR already set [ 3084.493662][ T9599] binder: BINDER_SET_CONTEXT_MGR already set [ 3084.502730][ T9599] binder: 9584:9599 ioctl 4018620d 80000040 returned -16 [ 3084.591613][ T9598] binder: 9587:9598 ioctl 4018620d 80000040 returned -16 [ 3084.932963][ T8580] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3086.128901][ T9606] ptrace attach of "./syz-executor exec"[30126] was attempted by "./syz-executor exec"[9606] [ 3087.370645][ T3792] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 3087.644201][ T3792] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3087.655564][ T3792] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3087.714905][ T3792] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3087.817713][ T3792] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3087.845913][ T3792] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 3087.860334][ T9624] random: crng reseeded on system resumption [ 3087.868089][ T3792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3087.898951][ T3792] usb 4-1: config 0 descriptor?? [ 3087.951261][ T9616] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3088.134052][ T9625] binder: BINDER_SET_CONTEXT_MGR already set [ 3088.140337][ T9625] binder: 9618:9625 ioctl 4018620d 80000040 returned -16 [ 3088.262713][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8849'. [ 3088.470804][ T3792] apple 0003:05AC:027C.0110: hidraw0: USB HID v0.04 Device [HID 05ac:027c] on usb-dummy_hcd.3-1/input0 [ 3089.852580][ T9639] FAULT_INJECTION: forcing a failure. [ 3089.852580][ T9639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3089.957089][ T6164] usb 4-1: USB disconnect, device number 106 [ 3089.975004][ T9639] CPU: 0 UID: 0 PID: 9639 Comm: syz.2.8852 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 3089.975040][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3089.975054][ T9639] Call Trace: [ 3089.975063][ T9639] [ 3089.975073][ T9639] dump_stack_lvl+0x189/0x250 [ 3089.975111][ T9639] ? __pfx____ratelimit+0x10/0x10 [ 3089.975136][ T9639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3089.975161][ T9639] ? __pfx__printk+0x10/0x10 [ 3089.975203][ T9639] should_fail_ex+0x414/0x560 [ 3089.975232][ T9639] _copy_to_user+0x31/0xb0 [ 3089.975259][ T9639] simple_read_from_buffer+0xe1/0x170 [ 3089.975294][ T9639] proc_fail_nth_read+0x1b3/0x220 [ 3089.975321][ T9639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3089.975347][ T9639] ? rw_verify_area+0x2a6/0x4d0 [ 3089.975373][ T9639] ? __lock_acquire+0xab9/0xd20 [ 3089.975401][ T9639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3089.975427][ T9639] vfs_read+0x200/0x980 [ 3089.975454][ T9639] ? fdget_pos+0x247/0x320 [ 3089.975476][ T9639] ? __pfx___mutex_lock+0x10/0x10 [ 3089.975504][ T9639] ? __pfx_vfs_read+0x10/0x10 [ 3089.975533][ T9639] ? __fget_files+0x2a/0x420 [ 3089.975568][ T9639] ? __fget_files+0x3a0/0x420 [ 3089.975599][ T9639] ? __fget_files+0x2a/0x420 [ 3089.975641][ T9639] ksys_read+0x145/0x250 [ 3089.975671][ T9639] ? __pfx_ksys_read+0x10/0x10 [ 3089.975703][ T9639] ? lockdep_hardirqs_on+0x9c/0x150 [ 3089.975732][ T9639] __do_fast_syscall_32+0xb6/0x2b0 [ 3089.975760][ T9639] ? lockdep_hardirqs_on+0x9c/0x150 [ 3089.975789][ T9639] do_fast_syscall_32+0x34/0x80 [ 3089.975816][ T9639] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3089.975842][ T9639] RIP: 0023:0xf706e539 [ 3089.975867][ T9639] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3089.975887][ T9639] RSP: 002b:00000000f545e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 3089.975914][ T9639] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545e620 [ 3089.975929][ T9639] RDX: 000000000000000f RSI: 00000000f73d4ff4 RDI: 0000000000000000 [ 3089.975942][ T9639] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3089.975955][ T9639] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3089.975968][ T9639] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3089.976019][ T9639] [ 3090.647041][ T9653] random: crng reseeded on system resumption [ 3090.912384][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8864'. [ 3092.004243][ T9664] vxcan0: tx drop: invalid da for name 0x0000000080000001 [ 3092.966460][ T8580] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 3095.341744][ T9696] binder: BINDER_SET_CONTEXT_MGR already set [ 3095.351853][ T9696] binder: 9685:9696 ioctl 4018620d 80000040 returned -16 [ 3098.480583][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3098.501700][ T9717] binder: BINDER_SET_CONTEXT_MGR already set [ 3098.507899][ T9717] binder: 9707:9717 ioctl 4018620d 80000040 returned -16 [ 3098.550671][ T9718] netlink: 'syz.4.8870': attribute type 1 has an invalid length. [ 3098.580394][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3098.661760][ T9723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8870'. [ 3098.714956][ T3792] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 3098.773242][ T9721] bond11: (slave gretap1): making interface the new active one [ 3098.781537][ T9721] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 3098.825327][ T9723] 8021q: adding VLAN 0 to HW filter on device bond11 [ 3098.901057][ T3792] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 3098.911045][ T3792] usb 2-1: config 0 has no interface number 0 [ 3098.923981][ T3792] usb 2-1: config 0 interface 41 has no altsetting 0 [ 3098.935767][ T3792] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 3098.957171][ T3792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3099.252515][ T3792] usb 2-1: Product: syz [ 3099.265371][ T3792] usb 2-1: Manufacturer: syz [ 3099.270035][ T3792] usb 2-1: SerialNumber: syz [ 3099.329799][ T3792] usb 2-1: config 0 descriptor?? [ 3099.675029][ T3789] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3101.599654][ T3792] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 3101.620523][ T3792] usb 2-1: USB disconnect, device number 4 [ 3101.773650][ T8580] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 3101.995148][ T8580] usb 4-1: device descriptor read/64, error -71 [ 3102.585022][ T8580] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 3103.250765][ T9772] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 3103.304986][ T8580] usb 4-1: device descriptor read/64, error -71 [ 3103.425524][ T8580] usb usb4-port1: attempt power cycle [ 3103.658238][ T9772] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8881'. [ 3103.668327][ T9772] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8881'. [ 3103.687737][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8881'. [ 3103.804655][ T8580] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 3103.855938][ T8580] usb 4-1: device descriptor read/8, error -71 [ 3104.004946][ T6164] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 3104.104981][ T8580] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 3104.180679][ T6164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3104.200016][ T6164] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 3104.235282][ T6164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 3104.266010][ T6164] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3104.284904][ T6164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.303375][ T6164] usb 3-1: Product: syz [ 3104.313990][ T6164] usb 3-1: Manufacturer: syz [ 3104.323632][ T6164] usb 3-1: SerialNumber: syz [ 3104.345729][ T6164] usb 3-1: config 0 descriptor?? [ 3104.351022][ T8580] usb 4-1: device not accepting address 110, error -71 [ 3104.393115][ T8580] usb usb4-port1: unable to enumerate USB device [ 3104.395893][ T9780] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3104.439411][ T9780] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3104.467261][ T6164] usb 3-1: ucan: probing device on interface #0 [ 3105.226102][ T6164] usb 3-1: ucan: device reported invalid device info [ 3105.257707][ T6164] usb 3-1: ucan: probe failed; try to update the device firmware [ 3105.289841][ T9791] netlink: 'syz.1.8884': attribute type 1 has an invalid length. [ 3105.479004][ T30] audit: type=1400 audit(1754519016.455:4756): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 28 bytes leftover after parsing attributes in process `syz.1.8884'. [ 3105.715671][ T9795] bond1: (slave gretap1): making interface the new active one [ 3105.760178][ T9795] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 3105.825335][ T9791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3106.390139][ T9810] binder: BINDER_SET_CONTEXT_MGR already set [ 3106.396312][ T9810] binder: 9804:9810 ioctl 4018620d 80000040 returned -16 [ 3106.714314][ T6164] usb 3-1: USB disconnect, device number 126 [ 3107.337449][ T9816] vlan0: entered allmulticast mode [ 3107.342651][ T9816] bond0: entered allmulticast mode [ 3107.355536][ T9816] bond_slave_0: entered allmulticast mode [ 3107.361322][ T9816] bond_slave_1: entered allmulticast mode [ 3107.367910][ T9816] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 3107.375275][ T9816] bridge0: entered allmulticast mode [ 3107.875089][ T3789] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 3108.332060][ T9826] binder: BINDER_SET_CONTEXT_MGR already set [ 3108.338410][ T9826] binder: 9821:9826 ioctl 4018620d 80000040 returned -16 [ 3108.372186][ T9828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3108.379546][ T9828] IPv6: NLM_F_CREATE should be set when creating new route [ 3108.386866][ T9828] IPv6: NLM_F_CREATE should be set when creating new route [ 3109.759802][ T9838] ptrace attach of "./syz-executor exec"[30126] was attempted by "./syz-executor exec"[9838] [ 3109.791886][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8893'. [ 3109.830691][ T9837] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 3110.584973][ T3788] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 3111.417120][ T9844] netlink: 'syz.1.8899': attribute type 1 has an invalid length. [ 3111.497105][ T9837] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8897'. [ 3111.507196][ T9837] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8897'. [ 3111.527584][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8897'. [ 3111.685872][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8899'. [ 3111.785365][ T9844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3112.544648][ T9864] binder_alloc: 9856: binder_alloc_buf size 8 failed, no address space [ 3112.553340][ T9864] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 3116.624476][ T9893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3116.631804][ T9893] IPv6: NLM_F_CREATE should be set when creating new route [ 3116.639102][ T9893] IPv6: NLM_F_CREATE should be set when creating new route [ 3116.829847][ T3792] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3117.255623][ T9900] netlink: 'syz.1.8912': attribute type 1 has an invalid length. [ 3117.901018][ T9901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8912'. [ 3118.090211][ T9914] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 3119.272982][ T9914] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8914'. [ 3119.308773][ T9914] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8914'. [ 3122.649685][ T9955] random: crng reseeded on system resumption [ 3122.794733][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8924'. [ 3122.810679][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8923'. [ 3123.052688][ T9958] bond13 (unregistering): Released all slaves [ 3123.150273][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8924'. [ 3123.412337][ T9966] ptrace attach of "./syz-executor exec"[29183] was attempted by "./syz-executor exec"[9966] [ 3124.570330][ T9974] random: crng reseeded on system resumption [ 3124.595397][ T8580] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 3124.624585][ T9974] fuse: Bad value for 'fd' [ 3124.651228][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8927'. [ 3126.738578][ T9991] ptrace attach of "./syz-executor exec"[8790] was attempted by "./syz-executor exec"[9991] [ 3126.781197][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8928'. [ 3126.936717][ T9993] ptrace attach of "./syz-executor exec"[30535] was attempted by "./syz-executor exec"[9993] [ 3128.731281][T10004] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 3129.039819][T10006] random: crng reseeded on system resumption [ 3129.105901][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8935'. [ 3129.669685][ T8580] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 3129.778610][T10004] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8934'. [ 3129.787751][T10004] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8934'. [ 3129.808000][T10004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8934'. [ 3129.860210][T10025] random: crng reseeded on system resumption [ 3130.029724][T10026] fuse: Bad value for 'fd' [ 3130.058180][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8939'. [ 3131.390219][T10038] netlink: 'syz.1.8951': attribute type 1 has an invalid length. [ 3131.611140][T10038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8951'. [ 3131.621888][T10038] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3132.254899][ T8580] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3132.562599][T10052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3135.273819][T10076] ptrace attach of "./syz-executor exec"[30126] was attempted by "./syz-executor exec"[10076] [ 3135.476208][T16981] Bluetooth: hci0: command 0x0406 tx timeout [ 3135.643717][T10077] binder_alloc: 10072: binder_alloc_buf size 8 failed, no address space [ 3135.664137][T10077] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 3136.136399][T10079] ptrace attach of "./syz-executor exec"[30892] was attempted by "./syz-executor exec"[10079] [ 3136.221126][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8945'. [ 3137.166929][T10088] binder: BINDER_SET_CONTEXT_MGR already set [ 3137.178209][T10088] binder: 10081:10088 ioctl 4018620d 80000040 returned -16 [ 3139.699664][T10101] netlink: 'syz.4.8956': attribute type 1 has an invalid length. [ 3140.028461][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8956'. [ 3140.060786][T10104] 8021q: adding VLAN 0 to HW filter on device bond12 [ 3140.496211][ T3789] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3140.704941][ T3792] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3140.705213][ T8580] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 3140.885019][ T8580] usb 4-1: Using ep0 maxpacket: 16 [ 3140.960602][ T8580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3140.974935][ T8580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3140.999052][ T8580] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 3141.047032][ T8580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3141.078048][ T8580] usb 4-1: config 0 descriptor?? [ 3141.525953][ T8580] logitech 0003:046D:C29C.0111: reserved main item tag 0xe [ 3141.533264][ T8580] logitech 0003:046D:C29C.0111: unknown main item tag 0x0 [ 3141.623737][ T8580] logitech 0003:046D:C29C.0111: unknown global tag 0xd [ 3141.750713][ T8580] logitech 0003:046D:C29C.0111: item 0 2 1 13 parsing failed [ 3141.797206][ T8580] logitech 0003:046D:C29C.0111: parse failed [ 3141.884688][T10138] binder: BINDER_SET_CONTEXT_MGR already set [ 3141.891237][T10138] binder: 10133:10138 ioctl 4018620d 80000040 returned -16 [ 3141.898913][ T8580] logitech 0003:046D:C29C.0111: probe with driver logitech failed with error -22 [ 3141.954656][ T8580] usb 4-1: USB disconnect, device number 113 [ 3143.692444][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.698927][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3145.275051][ T3792] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3146.876892][T10173] binder: BINDER_SET_CONTEXT_MGR already set [ 3146.883436][T10173] binder: 10158:10173 ioctl 4018620d 80000040 returned -16 [ 3147.002778][T10172] binder_alloc: 10160: binder_alloc_buf size 8 failed, no address space [ 3147.014518][T10172] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 3148.134654][T16981] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3148.165358][T16981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3148.187952][T16981] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3148.196140][T16981] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3148.205065][T16981] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3148.323799][T18714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3148.722800][T18714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3149.293946][T18714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3150.193467][T18714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3150.300504][T16981] Bluetooth: hci4: command tx timeout [ 3150.405703][T20487] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3150.416153][ T8580] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 3150.578419][T20487] usb 3-1: device descriptor read/64, error -71 [ 3150.905096][T20487] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 3150.991969][T10178] chnl_net:caif_netlink_parms(): no params data found [ 3151.085864][T20487] usb 3-1: device descriptor read/64, error -71 [ 3151.239650][T20487] usb usb3-port1: attempt power cycle [ 3151.542211][T10209] binder: BINDER_SET_CONTEXT_MGR already set [ 3151.551892][T10209] binder: 10204:10209 ioctl 4018620d 80000040 returned -16 [ 3152.087014][T20487] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 3152.115674][T20487] usb 3-1: device descriptor read/8, error -71 [ 3152.355303][T16981] Bluetooth: hci4: command tx timeout [ 3152.365379][T20487] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 3152.459367][T20487] usb 3-1: device descriptor read/8, error -71 [ 3152.576335][T20487] usb usb3-port1: unable to enumerate USB device [ 3152.748148][T18714] bond11 (unregistering): (slave gretap1): Releasing backup interface [ 3154.028377][T10226] ptrace attach of "./syz-executor exec"[30892] was attempted by "./syz-executor exec"[10226] [ 3154.593047][T16981] Bluetooth: hci4: command tx timeout [ 3154.767942][T18714] bond0 (unregistering): left promiscuous mode [ 3154.774176][T18714] bond_slave_0: left promiscuous mode [ 3154.865033][T18714] bond_slave_1: left promiscuous mode [ 3154.870642][T18714] mac80211_hwsim hwsim33 wlan1: left promiscuous mode [ 3154.945603][T18714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3154.999773][T18714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3155.058395][T18714] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 3155.095389][T18714] bond0 (unregistering): Released all slaves [ 3155.130115][T10229] netlink: 'syz.3.8987': attribute type 1 has an invalid length. [ 3155.341527][T10234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8987'. [ 3155.515752][T18714] bond1 (unregistering): (slave bond2): Releasing backup interface [ 3155.532956][T18714] bond1 (unregistering): Released all slaves [ 3155.810867][T18714] bond2 (unregistering): Released all slaves [ 3156.241171][T18714] bond3 (unregistering): (slave bond4): Releasing backup interface [ 3156.251707][T18714] bond3 (unregistering): Released all slaves [ 3156.447814][T18714] bond4 (unregistering): Released all slaves [ 3156.689377][T16981] Bluetooth: hci4: command tx timeout [ 3156.761923][T18714] bond5 (unregistering): (slave bond6): Releasing backup interface [ 3157.568309][T18714] bond5 (unregistering): Released all slaves [ 3158.332004][T18714] bond6 (unregistering): Released all slaves [ 3158.541253][T10257] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8995'. [ 3158.576824][T18714] bond7 (unregistering): (slave bond8): Releasing backup interface [ 3158.588715][T18714] bond7 (unregistering): Released all slaves [ 3158.733948][T18714] bond8 (unregistering): Released all slaves [ 3158.753295][T18714] bond9 (unregistering): Released all slaves [ 3158.888335][T18714] bond10 (unregistering): Released all slaves [ 3159.030522][T18714] bond11 (unregistering): Released all slaves [ 3159.160248][T18714] bond12 (unregistering): Released all slaves [ 3159.187918][T10229] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 3159.190459][T10230] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 3159.392386][T10265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3159.823974][T18714] ------------[ cut here ]------------ [ 3159.830311][T18714] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 3159.843123][ T30] audit: type=1326 audit(1754519070.815:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.1.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 3159.890102][T18714] WARNING: CPU: 1 PID: 18714 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0 [ 3159.901525][T18714] Modules linked in: [ 3159.906419][T18714] CPU: 1 UID: 0 PID: 18714 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 3159.918457][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3159.929829][T18714] Workqueue: netns cleanup_net [ 3159.935047][T18714] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 3159.942356][T18714] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 60 13 b0 8c e8 36 7a 9c f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 a7 db d8 f6 90 0f 0b 90 42 80 7c 3d [ 3159.954184][ T30] audit: type=1326 audit(1754519070.815:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.1.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 3159.962236][T18714] RSP: 0018:ffffc90004c072a0 EFLAGS: 00010246 [ 3159.962303][T18714] RAX: ca1629674fec5a00 RBX: 0000000000000000 RCX: ffff88806ccb1e00 [ 3159.962320][T18714] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 3159.962335][T18714] RBP: ffff888046da1728 R08: 0000000000000003 R09: 0000000000000004 [ 3159.962350][T18714] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888046da29d0 [ 3159.962367][T18714] R13: ffff888046da0d80 R14: 1ffff11008db42e5 R15: dffffc0000000000 [ 3159.962385][T18714] FS: 0000000000000000(0000) GS:ffff888125d24000(0000) knlGS:0000000000000000 [ 3159.962402][T18714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3159.962417][T18714] CR2: 0000560df5c72950 CR3: 000000000df36000 CR4: 00000000003526f0 [ 3159.962438][T18714] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3159.962452][T18714] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3159.962466][T18714] Call Trace: [ 3159.962476][T18714] [ 3159.962494][T18714] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 3159.962539][T18714] __ieee80211_link_release_channel+0x33b/0x4a0 [ 3159.962569][T18714] ? __pfx_ieee80211_uninit+0x10/0x10 [ 3160.084574][ T30] audit: type=1326 audit(1754519070.845:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.1.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 3160.090995][T18714] unregister_netdevice_many_notify+0x1950/0x1ff0 [ 3160.105767][ T30] audit: type=1326 audit(1754519070.845:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.1.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 3160.118857][T18714] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 3160.134748][ T30] audit: type=1326 audit(1754519070.855:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.1.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 3160.147419][T18714] ? __pfx_call_rcu+0x10/0x10 [ 3160.147479][T18714] unregister_netdevice_queue+0x33c/0x380 [ 3160.147522][T18714] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 3160.147581][T18714] _cfg80211_unregister_wdev+0x165/0x590 [ 3160.147616][T18714] ieee80211_remove_interfaces+0x49a/0x6e0 [ 3160.147644][T18714] ? __pfx_synchronize_rcu+0x10/0x10 [ 3160.147670][T18714] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 3160.147697][T18714] ? rcu_is_watching+0x15/0xb0 [ 3160.147727][T18714] ieee80211_unregister_hw+0x5d/0x2c0 [ 3160.147774][T18714] mac80211_hwsim_del_radio+0x275/0x460 [ 3160.147803][T18714] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 3160.147841][T18714] hwsim_exit_net+0x584/0x640 [ 3160.147866][T18714] ? __pfx_hwsim_exit_net+0x10/0x10 [ 3160.147892][T18714] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 3160.147925][T18714] ops_undo_list+0x49a/0x990 [ 3160.164714][ T30] audit: type=1326 audit(1754519070.905:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.1.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 3160.176784][T18714] ? __pfx_ops_undo_list+0x10/0x10 [ 3160.176823][T18714] ? do_raw_spin_unlock+0x122/0x240 [ 3160.176856][T18714] cleanup_net+0x4c5/0x800 [ 3160.176886][T18714] ? __pfx_cleanup_net+0x10/0x10 [ 3160.176917][T18714] ? _raw_spin_unlock_irq+0x23/0x50 [ 3160.176939][T18714] ? process_scheduled_works+0x9ef/0x17b0 [ 3160.176960][T18714] ? process_scheduled_works+0x9ef/0x17b0 [ 3160.176983][T18714] process_scheduled_works+0xade/0x17b0 [ 3160.177033][T18714] ? __pfx_process_scheduled_works+0x10/0x10 [ 3160.226188][ T30] audit: type=1326 audit(1754519070.905:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.1.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 3160.227353][T18714] worker_thread+0x8a0/0xda0 [ 3160.270876][ T30] audit: type=1326 audit(1754519071.005:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.1.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 3160.281577][T18714] kthread+0x70e/0x8a0 [ 3160.281621][T18714] ? __pfx_worker_thread+0x10/0x10 [ 3160.281647][T18714] ? __pfx_kthread+0x10/0x10 [ 3160.281678][T18714] ? _raw_spin_unlock_irq+0x23/0x50 [ 3160.281705][T18714] ? lockdep_hardirqs_on+0x9c/0x150 [ 3160.281731][T18714] ? __pfx_kthread+0x10/0x10 [ 3160.281761][T18714] ret_from_fork+0x3fc/0x770 [ 3160.281788][T18714] ? __pfx_ret_from_fork+0x10/0x10 [ 3160.319455][ T30] audit: type=1326 audit(1754519071.005:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.1.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 3160.324130][T18714] ? __switch_to_asm+0x39/0x70 [ 3160.389309][ T30] audit: type=1326 audit(1754519071.005:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.1.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 3160.392828][T18714] ? __switch_to_asm+0x33/0x70 [ 3160.471452][T18714] ? __pfx_kthread+0x10/0x10 [ 3160.476146][T18714] ret_from_fork_asm+0x1a/0x30 [ 3160.480958][T18714] [ 3160.483996][T18714] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3160.491292][T18714] CPU: 1 UID: 0 PID: 18714 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 3160.503205][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3160.513291][T18714] Workqueue: netns cleanup_net [ 3160.518119][T18714] Call Trace: [ 3160.521422][T18714] [ 3160.524379][T18714] dump_stack_lvl+0x99/0x250 [ 3160.529011][T18714] ? __asan_memcpy+0x40/0x70 [ 3160.533639][T18714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3160.538888][T18714] ? __pfx__printk+0x10/0x10 [ 3160.543533][T18714] vpanic+0x281/0x750 [ 3160.547568][T18714] ? __pfx__printk+0x10/0x10 [ 3160.552194][T18714] ? __pfx_vpanic+0x10/0x10 [ 3160.556732][T18714] ? is_bpf_text_address+0x26/0x2b0 [ 3160.561979][T18714] panic+0xb9/0xc0 [ 3160.565741][T18714] ? __pfx_panic+0x10/0x10 [ 3160.570228][T18714] __warn+0x31b/0x4b0 [ 3160.574241][T18714] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 3160.579997][T18714] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 3160.585746][T18714] report_bug+0x2be/0x4f0 [ 3160.590128][T18714] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 3160.595867][T18714] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 3160.601602][T18714] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 3160.607331][T18714] handle_bug+0x84/0x160 [ 3160.611590][T18714] exc_invalid_op+0x1a/0x50 [ 3160.616121][T18714] asm_exc_invalid_op+0x1a/0x20 [ 3160.620978][T18714] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 3160.627316][T18714] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 60 13 b0 8c e8 36 7a 9c f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 a7 db d8 f6 90 0f 0b 90 42 80 7c 3d [ 3160.647014][T18714] RSP: 0018:ffffc90004c072a0 EFLAGS: 00010246 [ 3160.653088][T18714] RAX: ca1629674fec5a00 RBX: 0000000000000000 RCX: ffff88806ccb1e00 [ 3160.661064][T18714] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 3160.669043][T18714] RBP: ffff888046da1728 R08: 0000000000000003 R09: 0000000000000004 [ 3160.677021][T18714] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888046da29d0 [ 3160.684996][T18714] R13: ffff888046da0d80 R14: 1ffff11008db42e5 R15: dffffc0000000000 [ 3160.693001][T18714] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 3160.699007][T18714] __ieee80211_link_release_channel+0x33b/0x4a0 [ 3160.705263][T18714] ? __pfx_ieee80211_uninit+0x10/0x10 [ 3160.710645][T18714] unregister_netdevice_many_notify+0x1950/0x1ff0 [ 3160.717081][T18714] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 3160.723859][T18714] ? __pfx_call_rcu+0x10/0x10 [ 3160.728548][T18714] unregister_netdevice_queue+0x33c/0x380 [ 3160.734282][T18714] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 3160.740545][T18714] _cfg80211_unregister_wdev+0x165/0x590 [ 3160.746190][T18714] ieee80211_remove_interfaces+0x49a/0x6e0 [ 3160.752003][T18714] ? __pfx_synchronize_rcu+0x10/0x10 [ 3160.757302][T18714] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 3160.763638][T18714] ? rcu_is_watching+0x15/0xb0 [ 3160.768415][T18714] ieee80211_unregister_hw+0x5d/0x2c0 [ 3160.773826][T18714] mac80211_hwsim_del_radio+0x275/0x460 [ 3160.779389][T18714] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 3160.785475][T18714] hwsim_exit_net+0x584/0x640 [ 3160.790154][T18714] ? __pfx_hwsim_exit_net+0x10/0x10 [ 3160.795358][T18714] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 3160.801176][T18714] ops_undo_list+0x49a/0x990 [ 3160.805796][T18714] ? __pfx_ops_undo_list+0x10/0x10 [ 3160.810925][T18714] ? do_raw_spin_unlock+0x122/0x240 [ 3160.816132][T18714] cleanup_net+0x4c5/0x800 [ 3160.820559][T18714] ? __pfx_cleanup_net+0x10/0x10 [ 3160.825506][T18714] ? _raw_spin_unlock_irq+0x23/0x50 [ 3160.830708][T18714] ? process_scheduled_works+0x9ef/0x17b0 [ 3160.836427][T18714] ? process_scheduled_works+0x9ef/0x17b0 [ 3160.842148][T18714] process_scheduled_works+0xade/0x17b0 [ 3160.847719][T18714] ? __pfx_process_scheduled_works+0x10/0x10 [ 3160.853729][T18714] worker_thread+0x8a0/0xda0 [ 3160.858367][T18714] kthread+0x70e/0x8a0 [ 3160.862450][T18714] ? __pfx_worker_thread+0x10/0x10 [ 3160.867568][T18714] ? __pfx_kthread+0x10/0x10 [ 3160.872169][T18714] ? _raw_spin_unlock_irq+0x23/0x50 [ 3160.877380][T18714] ? lockdep_hardirqs_on+0x9c/0x150 [ 3160.882583][T18714] ? __pfx_kthread+0x10/0x10 [ 3160.887205][T18714] ret_from_fork+0x3fc/0x770 [ 3160.891803][T18714] ? __pfx_ret_from_fork+0x10/0x10 [ 3160.896929][T18714] ? __switch_to_asm+0x39/0x70 [ 3160.901704][T18714] ? __switch_to_asm+0x33/0x70 [ 3160.906473][T18714] ? __pfx_kthread+0x10/0x10 [ 3160.911076][T18714] ret_from_fork_asm+0x1a/0x30 [ 3160.915867][T18714] [ 3160.919275][T18714] Kernel Offset: disabled [ 3160.923603][T18714] Rebooting in 86400 seconds..