last executing test programs: 9.933657266s ago: executing program 1 (id=1591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0xffffffff, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r10, &(0x7f0000000580)={0x2020}, 0x2020) pread64(r10, &(0x7f0000000480)=""/209, 0xd1, 0x2) read$FUSE(r10, &(0x7f0000002c40)={0x2020}, 0x2020) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r9, 0x70042, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r11 = socket(0xa, 0x3, 0x2) setsockopt$inet_int(r11, 0x0, 0x13, 0x0, 0xfffffffffffffe8e) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000000)) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r6, 0xffff8000) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}]}, &(0x7f0000000980)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.81324664s ago: executing program 0 (id=1592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000ffffff73000000008500000005000000bf09edffffffffff54090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000e3c1b05ac39831f96afeffd43f2583036b33e8cf3105f81d5b6809dcc66451ddf78f839aea34f88e10dd6c391e76"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x20, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="7110222eb34e00009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) io_submit(0x0, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) r6 = signalfd4(r5, &(0x7f0000000640)={[0x4, 0x4]}, 0x8, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ecffffffd0fc00000000a00000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xa, &(0x7f0000000100)=""/10, 0x41000, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x2, 0xa1, 0x9b52}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0x6f3b23fc}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, &(0x7f0000001100), 0x0, &(0x7f0000001140)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xfffffffffffffe2f, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20060041) 9.579924156s ago: executing program 2 (id=1593): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0xffffffffffffffff, 0x10, 0x2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setitimer(0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unshare(0x40000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x24, r5, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x64, r5, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 9.317834088s ago: executing program 4 (id=1594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac000000210001000000000000000000ac1e0001000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff020000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000000000000000e0000002000000000000de00000000000000000000000000000000000a001000a300000000000000"], 0xac}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x2) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0x7, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x1, 0x6}, {0x3, 0x12}]}, 0x14, 0x1) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/168, 0xa8}, 0xfff}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x2400c010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_getres(0xa, 0x0) r5 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x30c, 0x4) sendmmsg(r5, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d1", 0x7}, {&(0x7f0000001c00)="659900c3f7c8e5", 0x7}], 0x2}}], 0x1, 0x24044015) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0x574}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket$alg(0x26, 0x5, 0x0) 7.87124976s ago: executing program 4 (id=1596): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x18, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xb0, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10ad}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "c23c2381f2b886d76bb7538513fbcd4f921ea9d68df518dfb3c93290"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x66c00000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1975}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4fc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24000800}, 0x2000000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) unshare(0x20000400) syz_open_dev$loop(0x0, 0xdf6, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1, 0x80000) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xfffe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) pread64(r6, &(0x7f0000000040)=""/123, 0x7b, 0x3) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000001380), &(0x7f0000001400)=0x68) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$VIDIOC_TRY_DECODER_CMD(r8, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0xb, 0x400008, 0x3002, 0xfffffffd, 0x7, 0x7f, 0x3, 0x806, 0x40000007, 0x808, 0x2, 0x9, 0x80000003, 0x4, 0x1, 0xeb]}) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r10, 0x81, 0x2, &(0x7f0000000280)="10b1") 7.850251579s ago: executing program 0 (id=1597): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000280), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)={0x14, 0x2e, 0x301, 0x70bd26, 0xfffffffd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x20000000) 7.354548562s ago: executing program 0 (id=1598): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000028e080c8db1571b7ac6571089d780000000000000000000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xc8}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r7, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @local}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 7.354153435s ago: executing program 3 (id=1599): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) r2 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) 7.027064672s ago: executing program 3 (id=1600): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29a, 0x0, 0x7fffffffffffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xe2f5b6da09b13d83, 0x4) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5ec, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x5c4, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x20c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0x1a0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x38c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e8d121266089d30d58ca66a1769b8a83772c00"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x61}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x98}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}]}]}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_emit_ethernet(0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000403a00fe8000000000000000000000000000bbff020000000000000000000000000005010090780000000060fa0a6b0300000000000000000000000000000000000001000000040000000000002300000000002c0000000000000000000400000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r6) fsopen(&(0x7f0000000180)='efs\x00', 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) 6.935088731s ago: executing program 2 (id=1601): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x4}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2102, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7}, 0x20) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2400, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a3000000000240004802000018007000100727400001400028008000240000000020800"], 0xd4}}, 0x0) 6.866687838s ago: executing program 1 (id=1602): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=@newsa={0xfc, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xf9}}]}, 0xfc}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x134, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000e40)="4b5d262307ae23f4e7bdd4e4ffe8a4c160dc1904b68136f72c04bb9520d7f85036109ef3d8a26f4b67fa65d3a7a87a793c42580a419a09279e707c9ec3f3de4889dfd9eb7dbf861ad66f4a1d09d9c700b815c21bbb18b9c641491247eca3fe88bab589d9334363e416af5f1dff328c53cdafb78a4c1e8110c16ce756f832a0ad65bfaaa1da80f6bc8fc0098d2200cc610a90d24e0ffff60571ac5918ea01a8c64a39cb28bb8ae1bc48e0ea78335eab9611838100f76a5815776ed39a1d407ec6a66376bf5f1d1c13ce25b4fe46583ef5a2303ee9d2af35279c8c577be5a2c6b166ed7b6c92f33d35365fbaeb7db535996695203f1dfb9d0c0bfac6895597600feb02639ee9fc80f08f519a3e43a736c19ac1192d362dbc8807da18c5e866123d9d0c053e56500955a8c01e76d9e95f10fc7eee19fdd148feb1b4d46745993c27d4f81c3d3458796d83b9a99b903404065acec1ceebd70fba4c2f1916355114ce0291f5695982919e98237c5feb8efe3fce86c95e61d0088e50285b1f54690a50f0396bcc94285054de680a52cd1a9f32c9ff83d312fc31f95f0d111633879673e9bf811bf06323e88d3cbcd5dc1bb877a8a6693916f8efa9cf2617df55437acda6ce7eae57916cf5104995e3e32c06c4cf3ea8d2f3897414482bdc1c6ef917b9459d7b0f6ce17d8395bfedfcd73d3e15ef6c80740431d824be0f88c0500d4a5c65ec738cd8b430d1569e7bfba7a53158fa46e7bf19dac588794c1ebb87bb2c4f1c9eafd087d446e7f1bb500b8c1cea448dc0a57f1d0e8b978a78a71cff4aab0075e45180c3986d59172dd38e1fcd46def9165b08f2064d5584e109d6d9278f4f6481f1c87c0eccf677211318ffda1374aa1c95abeb8f79bda254b99c37e3de35506d7aa101d01c7088b6fb03c8cfe247934944ad669d50efc55a07cd45ac622811a3eb019299160868a92a1af0fa884e89acda3d33aa2a6532a083a879daa3732c31809c7d79dc06592e441711e196477d5e59caccd9a22e61f79f8e1583da6b837ae08352ea4503d451b9ff1c3a5a214917eb8b0e62e6ef30efd7d7fe7f03884ebb953bfee6ee2105a888bc1efba45be0e7ed6bf630c9a83f2938983c266cd8bc710646dc36ee94ad2e4b6414c6b0ce7f5b888180bcfce273483735ad52cd5032092c37725b44c2f7456424d134e3129695246e7b61a47854ddb629267fdd31e15cb4450473f7dda61f1f4d7d0fe829117eaf27f63996d3d190e6fc7e1217b080af5aebfcf4e4227dc1ca928596f4dab43e86777349cfcd245d1e419c04f7b73faf877906e00bd3a86ef698024ab2bdf7d371d6d8a153633781bf5f6c04c88ae07f1633c0c549c388aeff6e36781972f9f590e16d86072d2eb54e99801b328781e92bedf31d2e80966b4a6da8b5b5a46b074df27f84e4a510e568ec87b3ae44e1cb33dcee324b732bedc5b3f2b6f7ac2fb7f4ab34ee90bd481c88ddff99c94b2a5e9645fd6225d9f1d50c1cc542ea3c166543f9cf504a36c08a4bb95e2b7ff56cfa6bf462fd4092a261450e73ec67bdbdb37d31694b8003d17f05b4321c9149fe0a22fc22ab32fa17cfd95ece58d8d878c81bcd20cafb712ac4daa708aa5e05c8c04e36fb3c20878f229c73186856a470252e78fa888c6f9a24decadc319769bf05be4a0fe0a3e6fbf8eb3d0fe3e2f0cd9bb87a7f54358fb4b244cfbf919a173fe89bede5a498ca844b99bf397f7872a7762b01c33a82ec17424b375214ad69df749791b289f690e42ab816696362c5d0c596918b440cf3db9e3990190bdec7475708e08b968c4c4e3a0058e60f0237f0bb08668719987e14ae963e8d962923deaf54722510f4e9eb8c3399be95e146a98428631ea09087d19163229f9fae6eb6f7e896e415541e887a8a68f3b94dc80d5885795749ec71817938438e7674b67853ef7c17576c85ab593b24b0d6787130ec75182deb5372244f6716853a30944a7e0ff8030f5fa9a07529ee6db978dd605042cef3f71f94d0c65749c5e6b989ad9d5da1d43f4a83b4ff49affec0442dffe3733aacb459f7c4b12212bded15c44d81e1bded7732dcaed4ffc2dfa7bbab95ee0f91267c786a5b6b4718d1512ff921016227f6a85cffade2d4d0cd46ef61a765eb0adb81571bed036b551a601ba275583f9c719617b562d2373bdbccc8d59ab82ee182defac3ce0e9a6c5daf9ae3b706efc92bd0dc202c131dccb6a70823196e90c1f82c3e239f3a25b4b4f01d622fd4721c804c2127f21cff0cd75544197504e9681ac8ba6404f067111ca1fe2e93403474aca2bd175e472c2bfa8523a36e6dfe236ba715b4a233373abe7921a3cfc731737b53c54547306b2d58707647fa8d78df494e452034eb2f881aecafe4d8cb44a5cc348ac1f515d5ca362da3773c2bcfc6ec54421c02bab37ccc8f09423721e095e5deaf70c79d10f06a96c58d8c684f0187e8e85ca0897b086c3ead836be4250bce4703078cf7de608028f6a01f507a5cb08217f7248bacb10265afae6666b0fbeb7f675214d9417b38fd51e93d2dd2bef0a725cc67a7a2f6cd75e407bd36a613851aa97e0e68cdd4ebd6214159e208b203aebcf363774b70e16410e898b100424befbd224e58508f1817b6ed28c566fd608d3ffdc62cac1918b51d8b707ee475ffa615099f04494d211ed9eeea9ca7bc8d4420d1c6f486bac124a90152c2df233460910141d5cdf5d09fbfcb27f82a4f130cda97d7ab530bcd07de2d3ee2235df49d6ccd9abe54234168b5bd3c5e459beeb9a50c3b2d586341aae41cca2ca8e61e59daee763edf635244013a2ead390e813951d4bf2fb3952b9b2b0f0c9c615310e79289d2ca78e9c1e51c0dd3aeb31803eddbd4cee441a4463ab1a43e7cf24e9cfb06ccf66e3baa714692ae92d9a05cb045762b0436ebfe684dc19e6b1eeabf362283d4a06769819e88207af6cdc7cd8ffe8505ea56809e251bd04343bb0aff5a5fae6ad5374819b6d1c5b84d83bcdcc4a20aaa26baad6aef33b92b456762d8947742a1cffd6787e6e18ab8449e5f6753f96ae4173971a7fdbb0191f5d965d38c69654de5e4c13d62ca47c36fe384d8507283303b678a81e6ed02efa09914aa9b3534cdb3d6b82a6111205431284b3e26af0171be01d070c43f9648fd71d3f23eabd10353685853e8654e528ac94f138e330d7c22ad799ddd74e7d1016021b561477f99042b5c0c06a1e2259d847baaa25607c675015292d571caf4d91853804c8dafd0e9a3af77d1eab1eecf0d43dea3df170986a9ea083a7b89cad0736f863b60b53ec9152756952edb4e07ba2072a71f7f245d1c6fd6bf4b0b8c5e1bd89514930511fcc8b701c61cbbef94bd18ba827256d2f681e84b7e66802c1efd7fa75b2cf51f836735e668401df6581726537fba44aa4871f334fdcae948eeeab2e581fd78794ce40e5d7d1ffd5b73fe8c6881495dc8c53054a3a172b2df747026cfc70d95d2888bf6a3989cdb2ab506967438db32faf960f0d0e07f9c91d2169d4ae53cb8a176084ff18f9e2e81e4a52e60365e7c98f8d92219779266a1146aed83741f344f52efa3493c9d3f0fc92baf35c13bde564558372913e5cf2108c1e270470f24a284c92494fa8a2e07531eb34139f299eafe4206f122b5077b1a78f462377ecd8e47660d3d4c3bb5b8780981f0bf8c34756d7dab52f1c03ee7ea680e315939a851eed50531bcdc59df3b1234dc83ef67d4f63d6cfd3b78c0fa6c860cb4b5883e4d41312c5a9111151206bf5a30ecd258f9556f669e342adf881543d75c76028ee511b2f392bc1e45df15b6b842e3070263d0cd8334794d6340167efde6c72fb332000d490b74672bff63304cea71d2b8bb8c35f6e6d751c8219218de2bec7b7c01f761e7d6b16a38e130327df1445020cfdbe7af4dad912f245b4978baca9cac617cb91684e3be55d68499423df5f84f6fb6dd718a373f8cdfa8ded64b6af609912dfd82983a3439014953ff081f4980e3a4543ae9d491d32c792610f1ed0bf5ec525695ef5671089145698b829545fbf03cc003eab1340db71899bfe2373f2539a1c989b1f4d3e5db6c6612b18861001d534168dba287d132f78e92816a32c05177a5b53ee8ec668f07b065b093cd91c5f72c3967d51adbe58575459590a210210f7dc5fbcc1078e64335b57e7cf527eb018189b3dec8aba3fbee4ccdd6e918ff2b87ce4a50343df7fd2f387f591e02a9b4e858c872f4934afde3d8a81666f13b22c11c5f26f4482139b96b5ee53125c573eb95e4a19ab326cce217ffefbdc96db4e9452d6caaeca322e7b2fa0427657192d15cb7f7969eca47aa680a4b8bcad7fbac800a27136941e53f530f269cf002f21dce6218d7c50c17e79ee544d8eaf6ebf446c9880313b8d1a787475069a3eec675700c82bd121dfc32ec00a1ca944ddfe00a4087f043d6e2c7cf811e15956b91d8f29d96c3f5ed9d4fd65ac0ac0484e778d56366d18f2450abcfcc73031dbe947e96d8f4f0688007fb129d2e615cd82b046986a38bd354ef06660521c4177d9ebacfb6bb0af7634e51660fb8244715c107b2458f37a8e6b62fcacfbd3ebd0f3d988509c2102faa7e0ae3ee08986b44dbe043ead987079a095713c57a6e6047aa885f5089057c5d641015e26173163777667e5203e67ac8dd8425fa06f1209a3a381dbe7bcfea032120ce7a2ab75a657fdcddd11f239502fa9395d9dd0346560df292575bef35fc5ac46a3f8aa39ee864d9f380cd50b8f53e95d8e23565a8c6de9a41f35ab8276e02496251e3fccb20a7dcfa54cbd79497b63e70e2f8f1394a2a516a417f14cfecb5b913397728a7c26814712dd1d0c43f419d57f6a4408fa8d92162aaf539fd084b619dbcd769f06f15296ded49fc82adea937ea8e3295198992fef1abbb042ebeeaee99d4447feb846286bc48aa1e664c96103ee71b8429b5629e255cd60699f7448b035027d8f34b4f2d76df628a0365ae4ba77bc995d627015471805b56d8c0f4eeda3678b906fc570832c6001ecbf921a8f91d7885f18b8001a5c1bae8a75b72951fbe31ff04c2109826df3b8c7e8325aa027982c610e4ed7a44fc6b26d93e5d33cab40cf3f68172a51b94ba4106eb5c5224f70b06812d3f9be951b817785d85595c79fffd35daf24c8ad9e475b4a55b4446679496d5ef10494f2ea6aa1db421e49bb6dc2c935f7ab5b9155e956b52b08c839d6672a99e03776890496dcdc26df829cce8f377b9c20ebebad08f2ceb0d2a8ed267a57b7e58536f0aa5b197ee0d793207278773178a36f760bff8725b3bd3008b3d9b28f9139c50187808f84b4a0bbc39b753d29142c8c49265c85ba4b431424381f3c23b24bcacb5e5ea9a7326d82e9d918728967d99beba3d8095d9375530e687f082e2994273f3758653a11f92948b61f9e201f6b46a993c39440a582f90e39a12f2de4a612457d226345f31649a8bf04713cef91c27dd7cd4c77ebf998b719a117eaf1777adabfc801747fcba783c287e7e078514cc17b9549540afe509cb9c0990e95cde2437c894a7d6a232e6e1dd3aeec3acfd6b315806c9c6fd7f826bfb418d7288a02b7808ae5b079954853dd754f8f73d4b744d9bd8c1b72ffc1b80177551616de1445a3d576f41812248ceaf29afe93e0da01c73ef3d0bd50ba8c11acc2a282e3e5ee8adaeb3cdfc6f7a7305b9c1ba3026697d24cbfd0210b9660032b1e174b77d682832465d01be800eb8d298f514d203913c8e00c943bb11565132bb00cb856f4579be6c3f7", 0x1000}, {&(0x7f00000000c0)="975666384f579559b1e01ebd2f9c14e89b01f9", 0x13}, {&(0x7f00000003c0)="02c01409fd63088856b7fb8cc9d5e320bb14096e1d59bd2aad8e05421d67e15137a9c732455a5cc5d89cff42aa10dc5a75a3dbdcab87948e0f5d7f0c229fa0e193ae6770050b017e5cf9", 0x4a}, {&(0x7f0000000440)="0cba17183bd6fc44717dd80a4bc79b7fe1fcc4de1e9c668314526fab8338f5ff1c300179434e5b90f99b759ce5b904458723883269d3c55043657008c661b7d5d4053ade8bb28dff1fcca95c799ed557508c0328d2c46b691a35ee060c274edae1ba4dde743ad7e0901745a800cd0e5bf57c531a8b6b2eae29e5afa4a865ef3ba6bb373662848a75f316a3c4d62766e4e074d68310e36fe25eec6bcfd187dd8a5d29af27ccff56220b77", 0xaa}, {&(0x7f00000005c0)="c67109f6c9891d97e03170a271cf58d784103f23d021d74be7718fb7ae4c9d7af01bc8ec882feb87726817c58c2bac97671db5a7cebbed224da03ca2eed219e7057f4bd83a7182b4db3342e6998eb858149faa43bf0b283c412b0445b083786a32d5ebd8f0612a5db9f95f8a649321b30bcb0cbbd08d875bf669b3faff4b07629dd90ce90e", 0x85}, {&(0x7f0000000500)="03165d0578661d20a841ec250075d5f4e4690fa54d63c1a4802151e369d21d21083bd87c89efd7cb977184448a5bd9dbe845d805890de62ccbdb67b10a445095f5c4bd9009ad8efbdd425eea69500b5f6529bbc9", 0x54}], 0x6, 0x0, 0x0, 0x800}, 0x20000000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0x8e) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000580)={0x10800, 0x0, 0x87}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r8, 0x4611, 0x4) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e9, 0x1000, 0x0, 0xda}) 5.590450885s ago: executing program 2 (id=1603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 5.244209104s ago: executing program 0 (id=1604): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x200, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a0000004cd5ab4d2dcf68cc118c23d214ed57655c249a00040000000000005acba8383e129ddb181a40510aa7ee2288816061dec50e0558fcdbec6ff312592455829aa3b3ab5bb75572d49954672d8fc768", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a00010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x4, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) close(0x3) prctl$PR_SET_KEEPCAPS(0x8, 0xffffffee) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) io_uring_enter(r3, 0x47f6, 0x40, 0x2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f2, &(0x7f0000003680)={'ip6tnl0\x00', &(0x7f0000003600)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x7800, 0x0, 0x0, 0xffffffff}}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="4ba72c4cfd81685544e46c3f08004bdad4e6e35db8499c2107a7a0417a956a41cb42", 0x22}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 4.551490552s ago: executing program 3 (id=1605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f00000010c0)={0x0, 0x1c2b, 0x8, 0x2, 0x1e1}, 0x0, 0x0) io_uring_enter(r1, 0x214d, 0x0, 0x45, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x30c, 0x4) sendmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d1", 0x7}, {&(0x7f0000001c00)="659900c3f7c8e5", 0x7}], 0x2}}], 0x1, 0x24044015) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x110, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x2002, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d0e", @ANYRES32, @ANYBLOB="140006"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000380)={0x0, 0xfd, 0x6, 0x0}) 4.441028963s ago: executing program 2 (id=1606): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0904000000000000000002000020333db37a73797a30000000000900020073797a32000000002c000000080a05000000000000000000020000060900020073797a32000000000900010073797a30"], 0x80}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x5, 0x100) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000580)=""/151) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x3}, 0x1c) mkdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x1) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r7, 0xc04c5609, &(0x7f0000000500)=@multiplanar_userptr={0x657a, 0x3, 0x4, 0x1, 0xa, {}, {0x0, 0x8, 0xe, 0x7, 0x81, 0x86, "f2b8b425"}, 0x4b, 0x2, {0x0}, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00') r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0}, 0x0) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) 4.086890795s ago: executing program 1 (id=1607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac000000210001000000000000000000ac1e0001000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff020000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000000000000000e0000002000000000000de00000000000000000000000000000000000a001000a300000000000000"], 0xac}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x2) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0x7, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x1, 0x6}, {0x3, 0x12}]}, 0x14, 0x1) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/168, 0xa8}, 0xfff}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x2400c010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_getres(0xa, 0x0) r5 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x30c, 0x4) sendmmsg(r5, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d1", 0x7}, {&(0x7f0000001c00)="659900c3f7c8e5", 0x7}], 0x2}}], 0x1, 0x24044015) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0x574}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket$alg(0x26, 0x5, 0x0) 3.897321184s ago: executing program 4 (id=1608): r0 = openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000003c0)={0x6, 0xc55, 0x2, {0x2, @pix={0xa38, 0x0, 0x41414770, 0x4, 0x9, 0x9, 0x3, 0xbf89, 0x1, 0x2, 0x0, 0x3}}, 0x1}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x5, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) 3.066299962s ago: executing program 1 (id=1609): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000280), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)={0x14, 0x2e, 0x301, 0x70bd26, 0xfffffffd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x20000000) 2.930936897s ago: executing program 4 (id=1610): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) r2 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) 2.74869009s ago: executing program 3 (id=1611): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0xfffffffe}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002d00)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc8cdba49fb0e39ee}, 0x4000800) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x7}]}, 0x8) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.747566647s ago: executing program 1 (id=1621): r0 = openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000003c0)={0x6, 0xc55, 0x2, {0x2, @pix={0xa38, 0x0, 0x41414770, 0x4, 0x9, 0x9, 0x3, 0xbf89, 0x1, 0x2, 0x0, 0x3}}, 0x1}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x5, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) 2.742306252s ago: executing program 4 (id=1622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f00000010c0)={0x0, 0x1c2b, 0x8, 0x2, 0x1e1}, 0x0, 0x0) io_uring_enter(r1, 0x214d, 0x0, 0x45, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x30c, 0x4) sendmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d1", 0x7}, {&(0x7f0000001c00)="659900c3f7c8e5", 0x7}], 0x2}}], 0x1, 0x24044015) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x110, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x2002, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d0e", @ANYRES32, @ANYBLOB="140006"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000380)={0x0, 0xfd, 0x6, 0x0}) 2.376044767s ago: executing program 0 (id=1612): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0xffffffffffffffff, 0x10, 0x2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setitimer(0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unshare(0x40000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x24, r5, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x64, r5, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 2.374700563s ago: executing program 2 (id=1613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0xffffffff, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r10, &(0x7f0000000580)={0x2020}, 0x2020) pread64(r10, &(0x7f0000000480)=""/209, 0xd1, 0x2) read$FUSE(r10, &(0x7f0000002c40)={0x2020}, 0x2020) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r9, 0x70042, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r11 = socket(0xa, 0x3, 0x2) setsockopt$inet_int(r11, 0x0, 0x13, 0x0, 0xfffffffffffffe8e) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000000)) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r6, 0xffff8000) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}]}, &(0x7f0000000980)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 350.797703ms ago: executing program 2 (id=1614): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000028e080c8db1571b7ac6571089d780000000000000000000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xc8}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r7, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @local}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 350.332611ms ago: executing program 3 (id=1615): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 335.285267ms ago: executing program 0 (id=1626): r0 = openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000003c0)={0x6, 0xc55, 0x2, {0x2, @pix={0xa38, 0x0, 0x41414770, 0x4, 0x9, 0x9, 0x3, 0xbf89, 0x1, 0x2, 0x0, 0x3}}, 0x1}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x5, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) 332.019112ms ago: executing program 1 (id=1616): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29a, 0x0, 0x7fffffffffffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xe2f5b6da09b13d83, 0x4) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5ec, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x5c4, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x20c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0x1a0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x38c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e8d121266089d30d58ca66a1769b8a83772c00"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x61}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x98}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}]}]}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_emit_ethernet(0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000403a00fe8000000000000000000000000000bbff020000000000000000000000000005010090780000000060fa0a6b0300000000000000000000000000000000000001000000040000000000002300000000002c000000000000000000040000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r6) fsopen(&(0x7f0000000180)='efs\x00', 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) 163.457004ms ago: executing program 3 (id=1617): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 0s ago: executing program 4 (id=1618): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0xb3, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540)={0x40000000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x3) mq_timedreceive(r0, &(0x7f0000000580)=""/169, 0xa9, 0x200001000a9b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYRESHEX=r4], 0x2d0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000980)) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x14, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44880}, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r10, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d4}, 0x8084) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x38c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r8, 0x1, 0x70bd2b, 0x80, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xd}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x808c0c1}, 0x48000) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r12 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r12, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r12, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r12, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r12, 0x0, 0x0) kernel console output (not intermixed with test programs): .00 [ 397.982920][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.993263][ T855] hid_prodikeys: hid-prodikeys: failed to find output report [ 397.993263][ T855] [ 398.030045][ T5924] usb 5-1: config 0 descriptor?? [ 398.039623][ T9906] netlink: 'syz.3.1133': attribute type 13 has an invalid length. [ 398.052162][ T9906] netlink: 'syz.3.1133': attribute type 17 has an invalid length. [ 398.066018][ T855] usb 2-1: USB disconnect, device number 43 [ 398.156248][ T9906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.249988][ T9912] fido_id[9912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 398.265552][ T5924] usb 5-1: USB disconnect, device number 38 [ 398.518206][ T3001] batadv1: left promiscuous mode [ 399.410263][ T9933] usb usb8: usbfs: process 9933 (syz.0.1138) did not claim interface 0 before use [ 399.445362][ T9933] usb usb8: selecting invalid altsetting 3 [ 401.038019][ T5924] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 401.208201][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 401.219323][ T5924] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.229312][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.241497][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 401.251674][ T5924] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.265183][ T5924] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.274402][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.380949][ T9968] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 401.403826][ T9967] tipc: Enabled bearer , priority 0 [ 401.415562][ T9967] syzkaller0: entered promiscuous mode [ 401.422202][ T9967] syzkaller0: entered allmulticast mode [ 401.503767][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.513567][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.797810][ T5843] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 401.984325][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.998258][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.009570][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.024182][ T5843] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.033829][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.048152][ T5843] usb 3-1: config 0 descriptor?? [ 402.070075][ T9985] netlink: 'syz.4.1158': attribute type 6 has an invalid length. [ 402.079499][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 402.165201][ T9989] pim6reg: entered allmulticast mode [ 402.242566][ T9988] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 402.314729][ T9989] pim6reg: left allmulticast mode [ 402.515945][ T5843] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 402.517826][ T9725] tipc: Node number set to 348618612 [ 402.959335][T10000] capability: warning: `syz.1.1161' uses deprecated v2 capabilities in a way that may be insecure [ 403.359080][ T5924] usb 1-1: usb_control_msg returned -71 [ 403.374340][ T5924] usbtmc 1-1:16.0: can't read capabilities [ 403.642889][ T5927] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 403.808574][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 403.840923][ T5924] usb 1-1: USB disconnect, device number 46 [ 403.855637][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.898947][ T5927] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 403.908654][ T9725] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 403.916948][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.937032][ T5927] usb 2-1: config 0 descriptor?? [ 404.242102][ T5843] usb 2-1: USB disconnect, device number 44 [ 404.532627][T10015] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1165'. [ 404.579461][T10015] netlink: 'syz.2.1165': attribute type 13 has an invalid length. [ 404.588787][T10015] netlink: 'syz.2.1165': attribute type 17 has an invalid length. [ 404.626670][T10015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.974494][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 405.139737][ T9] usb 3-1: USB disconnect, device number 39 [ 405.374248][T10027] FAULT_INJECTION: forcing a failure. [ 405.374248][T10027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 405.389259][T10027] CPU: 0 UID: 0 PID: 10027 Comm: syz.0.1169 Not tainted syzkaller #0 PREEMPT(full) [ 405.389290][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.389304][T10027] Call Trace: [ 405.389312][T10027] [ 405.389322][T10027] dump_stack_lvl+0x189/0x250 [ 405.389351][T10027] ? __pfx____ratelimit+0x10/0x10 [ 405.389384][T10027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.389408][T10027] ? __pfx__printk+0x10/0x10 [ 405.389449][T10027] ? fs_reclaim_acquire+0x7d/0x100 [ 405.389481][T10027] should_fail_ex+0x414/0x560 [ 405.389515][T10027] prepare_alloc_pages+0x213/0x610 [ 405.389545][T10027] __alloc_frozen_pages_noprof+0x123/0x370 [ 405.389574][T10027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 405.389602][T10027] ? pfn_valid+0xba/0x490 [ 405.389637][T10027] ? policy_nodemask+0x27c/0x720 [ 405.389665][T10027] alloc_pages_mpol+0x232/0x4a0 [ 405.389694][T10027] alloc_pages_noprof+0xa9/0x190 [ 405.389719][T10027] pte_alloc_one+0x23/0x310 [ 405.389739][T10027] ? __pte_alloc+0x1d/0x1a0 [ 405.389765][T10027] __pte_alloc+0x25/0x1a0 [ 405.389792][T10027] __handle_mm_fault+0x492e/0x53a0 [ 405.389841][T10027] ? __pfx___handle_mm_fault+0x10/0x10 [ 405.389893][T10027] ? __pfx___might_resched+0x10/0x10 [ 405.389920][T10027] handle_mm_fault+0x40a/0x8e0 [ 405.389962][T10027] __get_user_pages+0x165c/0x2a00 [ 405.390035][T10027] __gup_longterm_locked+0xde4/0x1660 [ 405.390084][T10027] ? sanity_check_pinned_pages+0x1241/0x1300 [ 405.390114][T10027] ? gup_fast_fallback+0x1b86/0x22d0 [ 405.390148][T10027] gup_fast_fallback+0x1d65/0x22d0 [ 405.390175][T10027] ? trace_irq_disable+0x37/0x100 [ 405.390199][T10027] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 405.390265][T10027] ? __pfx_gup_fast_fallback+0x10/0x10 [ 405.390294][T10027] ? crypto_aes_encrypt+0xd22/0x6020 [ 405.390331][T10027] ? pin_user_pages_fast+0x4d/0xb0 [ 405.390363][T10027] iov_iter_extract_pages+0x35f/0x5e0 [ 405.390396][T10027] extract_iter_to_sg+0xe46/0x24e0 [ 405.390432][T10027] ? __crypto_xor+0x17fa/0x1850 [ 405.390454][T10027] ? sanity_check_pinned_pages+0x123a/0x1300 [ 405.390487][T10027] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 405.390519][T10027] ? unpin_user_page+0xc9/0x1d0 [ 405.390544][T10027] ? __pfx_unpin_user_page+0x10/0x10 [ 405.390583][T10027] ? __asan_memset+0x22/0x50 [ 405.390616][T10027] hash_sendmsg+0x4f4/0x11d0 [ 405.390663][T10027] ? __pfx_hash_sendmsg_nokey+0x10/0x10 [ 405.390688][T10027] __sock_sendmsg+0x21c/0x270 [ 405.390717][T10027] __sys_sendto+0x3bd/0x520 [ 405.390751][T10027] ? __pfx___sys_sendto+0x10/0x10 [ 405.390778][T10027] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 405.390814][T10027] ? __fget_files+0x3a0/0x420 [ 405.390851][T10027] ? ksys_write+0x22a/0x250 [ 405.390882][T10027] ? exc_page_fault+0x82/0x100 [ 405.390916][T10027] ? __pfx_ksys_write+0x10/0x10 [ 405.390953][T10027] __ia32_sys_sendto+0xdd/0x100 [ 405.390994][T10027] __do_fast_syscall_32+0xb6/0x300 [ 405.391018][T10027] ? lockdep_hardirqs_on+0x98/0x140 [ 405.391055][T10027] do_fast_syscall_32+0x34/0x80 [ 405.391077][T10027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 405.391103][T10027] RIP: 0023:0xf6ffd539 [ 405.391122][T10027] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 405.391141][T10027] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 405.391164][T10027] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 405.391179][T10027] RDX: 00000000fffffd0b RSI: 0000000000000800 RDI: 0000000000000000 [ 405.391193][T10027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.391205][T10027] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 405.391218][T10027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.391251][T10027] [ 406.857274][T10059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.307694][ T5924] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 407.418362][T10068] bridge0: entered allmulticast mode [ 407.439342][T10066] pim6reg: entered allmulticast mode [ 407.708969][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 407.718697][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 407.752940][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 407.799259][ T855] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 407.813554][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.868158][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 407.887299][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 407.929429][ T5924] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 407.938753][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.946940][ T5924] usb 1-1: Product: syz [ 407.969758][ T855] usb 4-1: Using ep0 maxpacket: 16 [ 408.039306][ T855] usb 4-1: config 0 has no interfaces? [ 408.073238][ T855] usb 4-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=d3.63 [ 408.098392][ T5924] usb 1-1: Manufacturer: syz [ 408.109957][ T855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.123470][ T5924] usb 1-1: SerialNumber: syz [ 408.204080][ T855] usb 4-1: Product: syz [ 408.220156][ T5924] usb 1-1: config 0 descriptor?? [ 408.240082][ T855] usb 4-1: Manufacturer: syz [ 408.244750][ T855] usb 4-1: SerialNumber: syz [ 408.281209][T10061] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.342346][ T5924] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 408.356004][ T855] usb 4-1: config 0 descriptor?? [ 408.366948][ T5187] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 408.514257][ T5187] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 408.581910][ T5187] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 408.638479][ C1] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 408.687374][ T5187] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 408.702192][T10061] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 408.840635][ T5187] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 408.912952][ T6062] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 408.965548][ T5187] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 409.017698][ T5187] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 409.163337][ T5927] usb 4-1: USB disconnect, device number 31 [ 409.322013][T10081] kvm: pic: single mode not supported [ 409.322038][T10081] pic_ioport_write: 6 callbacks suppressed [ 409.322055][T10081] kvm: pic: level sensitive irq not supported [ 409.827127][T10102] FAULT_INJECTION: forcing a failure. [ 409.827127][T10102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.848740][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.3.1193 Not tainted syzkaller #0 PREEMPT(full) [ 409.848771][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.848785][T10102] Call Trace: [ 409.848794][T10102] [ 409.848802][T10102] dump_stack_lvl+0x189/0x250 [ 409.848829][T10102] ? __pfx____ratelimit+0x10/0x10 [ 409.848861][T10102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.848885][T10102] ? __pfx__printk+0x10/0x10 [ 409.848927][T10102] should_fail_ex+0x414/0x560 [ 409.848960][T10102] _copy_to_user+0x31/0xb0 [ 409.848984][T10102] simple_read_from_buffer+0xe1/0x170 [ 409.849013][T10102] proc_fail_nth_read+0x1b3/0x220 [ 409.849050][T10102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.849088][T10102] ? rw_verify_area+0x2a6/0x4d0 [ 409.849118][T10102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.849153][T10102] vfs_read+0x200/0xa30 [ 409.849182][T10102] ? fdget_pos+0x247/0x320 [ 409.849211][T10102] ? __pfx___mutex_lock+0x10/0x10 [ 409.849233][T10102] ? __pfx_vfs_read+0x10/0x10 [ 409.849265][T10102] ? __fget_files+0x2a/0x420 [ 409.849294][T10102] ? __fget_files+0x3a0/0x420 [ 409.849317][T10102] ? __fget_files+0x2a/0x420 [ 409.849357][T10102] ksys_read+0x145/0x250 [ 409.849386][T10102] ? exc_page_fault+0x82/0x100 [ 409.849419][T10102] ? __pfx_ksys_read+0x10/0x10 [ 409.849460][T10102] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 409.849483][T10102] ? lockdep_hardirqs_on+0x98/0x140 [ 409.849520][T10102] __do_fast_syscall_32+0xb6/0x300 [ 409.849543][T10102] ? lockdep_hardirqs_on+0x98/0x140 [ 409.849579][T10102] do_fast_syscall_32+0x34/0x80 [ 409.849602][T10102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 409.849628][T10102] RIP: 0023:0xf7f96539 [ 409.849646][T10102] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 409.849665][T10102] RSP: 002b:00000000f5486590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 409.849688][T10102] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5486620 [ 409.849703][T10102] RDX: 000000000000000f RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 409.849715][T10102] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 409.849728][T10102] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 409.849741][T10102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.849774][T10102] [ 410.215868][T10108] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1196'. [ 410.500609][T10111] netlink: 'syz.2.1196': attribute type 13 has an invalid length. [ 410.510818][T10111] netlink: 'syz.2.1196': attribute type 17 has an invalid length. [ 410.603424][T10111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.170616][ T5924] usb 1-1: USB disconnect, device number 47 [ 411.410221][T10127] FAULT_INJECTION: forcing a failure. [ 411.410221][T10127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.431890][T10127] CPU: 1 UID: 0 PID: 10127 Comm: syz.3.1200 Not tainted syzkaller #0 PREEMPT(full) [ 411.431935][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.431957][T10127] Call Trace: [ 411.431966][T10127] [ 411.431981][T10127] dump_stack_lvl+0x189/0x250 [ 411.432015][T10127] ? __pfx____ratelimit+0x10/0x10 [ 411.432054][T10127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.432077][T10127] ? __pfx__printk+0x10/0x10 [ 411.432112][T10127] ? __might_fault+0xb0/0x130 [ 411.432166][T10127] should_fail_ex+0x414/0x560 [ 411.432205][T10127] _copy_from_user+0x2d/0xb0 [ 411.432229][T10127] get_compat_msghdr+0xad/0x4a0 [ 411.432270][T10127] ? __pfx_get_compat_msghdr+0x10/0x10 [ 411.432312][T10127] ? ___sys_recvmsg+0x1c4/0x510 [ 411.432340][T10127] ? kfree+0x4d/0x6b0 [ 411.432376][T10127] ___sys_recvmsg+0x17f/0x510 [ 411.432399][T10127] ? _parse_integer_limit+0x1ae/0x1f0 [ 411.432433][T10127] ? __pfx____sys_recvmsg+0x10/0x10 [ 411.432480][T10127] ? __fget_files+0x3a0/0x420 [ 411.432518][T10127] do_recvmmsg+0x36a/0x770 [ 411.432549][T10127] ? __pfx_do_recvmmsg+0x10/0x10 [ 411.432569][T10127] ? ksys_write+0x1cb/0x250 [ 411.432622][T10127] ? __fget_files+0x3a0/0x420 [ 411.432655][T10127] __sys_recvmmsg+0x19d/0x280 [ 411.432679][T10127] ? __pfx___sys_recvmmsg+0x10/0x10 [ 411.432700][T10127] ? __pfx_ksys_write+0x10/0x10 [ 411.432739][T10127] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 411.432766][T10127] __do_fast_syscall_32+0xb6/0x300 [ 411.432790][T10127] ? lockdep_hardirqs_on+0x98/0x140 [ 411.432834][T10127] do_fast_syscall_32+0x34/0x80 [ 411.432856][T10127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.432882][T10127] RIP: 0023:0xf7f96539 [ 411.432900][T10127] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 411.432920][T10127] RSP: 002b:00000000f544455c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 411.432943][T10127] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800031c0 [ 411.432958][T10127] RDX: 0000000000000300 RSI: 0000000000000022 RDI: 0000000000000000 [ 411.432971][T10127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.432983][T10127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 411.432997][T10127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.433029][T10127] [ 411.973515][ T30] audit: type=1326 audit(1764710810.814:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 412.126362][ T30] audit: type=1326 audit(1764710810.844:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 412.428589][ T30] audit: type=1326 audit(1764710810.854:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 412.479247][ T30] audit: type=1326 audit(1764710810.864:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 412.603952][ T30] audit: type=1326 audit(1764710810.864:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 412.763029][ T30] audit: type=1326 audit(1764710810.864:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 412.837857][ T30] audit: type=1326 audit(1764710810.864:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 412.913783][ T30] audit: type=1326 audit(1764710810.864:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 413.018320][ T30] audit: type=1326 audit(1764710810.904:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 413.419366][ T9725] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 414.239258][ T9725] usb 5-1: Using ep0 maxpacket: 16 [ 414.250016][ T9725] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 414.288323][ T9725] usb 5-1: config 0 has no interface number 0 [ 414.294506][ T9725] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 414.328316][ T9725] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 414.362688][ T9725] usb 5-1: config 0 interface 41 has no altsetting 0 [ 414.381231][ T9725] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 414.404731][ T9725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.424054][ T9725] usb 5-1: Product: syz [ 414.437069][T10159] netlink: 'syz.1.1212': attribute type 4 has an invalid length. [ 414.439140][ T9725] usb 5-1: Manufacturer: syz [ 414.455778][T10159] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1212'. [ 414.461806][ T9725] usb 5-1: SerialNumber: syz [ 414.490125][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'. [ 414.502038][ T9725] usb 5-1: config 0 descriptor?? [ 414.514395][T10139] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 414.533200][T10139] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 414.818680][ T9725] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 414.874416][ T9725] usb 5-1: USB disconnect, device number 39 [ 414.907171][ T30] audit: type=1326 audit(1764710813.744:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 415.633622][T10179] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1221'. [ 415.663995][T10179] netlink: 'syz.4.1221': attribute type 13 has an invalid length. [ 415.697720][T10179] netlink: 'syz.4.1221': attribute type 17 has an invalid length. [ 415.761132][T10179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.108531][T10185] ip6t_REJECT: ECHOREPLY is not supported [ 416.417860][ T5945] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 416.442804][ T5945] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 417.167680][ T5945] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 417.317698][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 417.325377][ T5945] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 417.343941][ T5945] usb 5-1: config 0 has no interface number 0 [ 417.354092][ T5945] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 417.377387][ T5945] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 417.397351][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.407642][ T5945] usb 5-1: Product: syz [ 417.411868][ T5945] usb 5-1: Manufacturer: syz [ 417.426708][ T5945] usb 5-1: SerialNumber: syz [ 417.448685][ T5945] usb 5-1: config 0 descriptor?? [ 417.462337][ T5945] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 417.493349][ T5945] em28xx 5-1:0.132: Video interface 132 found: [ 417.548272][ T9725] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 417.710801][ T9725] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 417.730476][ T9725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 417.752850][ T9725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 417.777314][ T9725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 417.805680][ T9725] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 417.816206][ T9725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.830140][ T9725] usb 4-1: Product: syz [ 417.835702][ T9725] usb 4-1: Manufacturer: syz [ 417.845655][ T9725] usb 4-1: SerialNumber: syz [ 417.856068][ T9725] usb 4-1: config 0 descriptor?? [ 417.859745][ T5945] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 417.872142][ T9725] iguanair 4-1:0.0: failed to submit urb: -90 [ 417.881722][ T9725] iguanair 4-1:0.0: probe with driver iguanair failed with error -90 [ 418.102939][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 418.131312][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 418.146194][ T9725] usb 4-1: USB disconnect, device number 32 [ 418.486015][ T5927] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 418.621809][ T5945] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 418.649827][ T5945] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 418.663497][ T5945] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 418.708135][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 418.716538][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 418.727483][ T5927] usb 2-1: config 4 interface 0 has no altsetting 0 [ 418.737722][ T5945] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 418.740915][ T5927] usb 2-1: string descriptor 0 read error: -22 [ 418.752428][ T5945] em28xx 5-1:0.132: analog set to bulk mode. [ 418.768504][ T5927] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 418.850810][ T5924] em28xx 5-1:0.132: Registering V4L2 extension [ 418.925613][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.959914][ T5945] usb 5-1: USB disconnect, device number 40 [ 418.987077][ T5927] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 418.993931][ T5945] em28xx 5-1:0.132: Disconnecting em28xx [ 419.042248][ T5927] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 419.151656][T10228] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1238'. [ 419.165971][ T5927] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 419.182489][T10228] netlink: 'syz.3.1238': attribute type 13 has an invalid length. [ 419.196904][ T5927] usb 2-1: media controller created [ 419.212134][T10228] netlink: 'syz.3.1238': attribute type 17 has an invalid length. [ 419.300944][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.334200][T10228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.484192][ T5924] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 419.502813][ T5924] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 419.530495][ T5924] em28xx 5-1:0.132: No AC97 audio processor [ 419.562863][ T5924] usb 5-1: Decoder not found [ 419.583303][ T5924] em28xx 5-1:0.132: failed to create media graph [ 419.607510][ T5924] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 419.639125][ T5924] em28xx 5-1:0.132: Remote control support is not available for this card. [ 419.658175][ T5945] em28xx 5-1:0.132: Closing input extension [ 419.804751][ T5927] usb 2-1: USB disconnect, device number 45 [ 419.807502][ T5945] em28xx 5-1:0.132: Freeing device [ 420.231878][T10254] FAULT_INJECTION: forcing a failure. [ 420.231878][T10254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.268756][T10254] CPU: 1 UID: 0 PID: 10254 Comm: syz.4.1243 Not tainted syzkaller #0 PREEMPT(full) [ 420.268787][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.268802][T10254] Call Trace: [ 420.268811][T10254] [ 420.268820][T10254] dump_stack_lvl+0x189/0x250 [ 420.268850][T10254] ? __pfx____ratelimit+0x10/0x10 [ 420.268884][T10254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.268907][T10254] ? __pfx__printk+0x10/0x10 [ 420.268938][T10254] ? __might_fault+0xb0/0x130 [ 420.268982][T10254] should_fail_ex+0x414/0x560 [ 420.269016][T10254] _copy_from_user+0x2d/0xb0 [ 420.269040][T10254] ia32_restore_sigcontext+0xe5/0x5b0 [ 420.269076][T10254] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 420.269106][T10254] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 420.269160][T10254] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.269192][T10254] ? lockdep_hardirqs_on+0x98/0x140 [ 420.269229][T10254] __ia32_compat_sys_sigreturn+0x21c/0x270 [ 420.269268][T10254] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 420.269321][T10254] ? do_int80_emulation+0xec/0x3f0 [ 420.269345][T10254] ? asm_int80_emulation+0x1a/0x20 [ 420.269368][T10254] do_int80_emulation+0x126/0x3f0 [ 420.269391][T10254] ? clear_bhb_loop+0x60/0xb0 [ 420.269412][T10254] ? clear_bhb_loop+0x60/0xb0 [ 420.269439][T10254] asm_int80_emulation+0x1a/0x20 [ 420.269461][T10254] RIP: 0023:0xf70cd558 [ 420.269479][T10254] Code: 00 00 51 52 55 89 e5 0f 34 cd 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 77 00 00 00 cd 80 <90> 90 90 90 90 90 90 90 b8 ad 00 00 00 cd 80 90 90 90 90 90 90 90 [ 420.269500][T10254] RSP: 002b:00000000f54bceb4 EFLAGS: 00000206 ORIG_RAX: 0000000000000077 [ 420.269523][T10254] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 420.269537][T10254] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 420.269549][T10254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 420.269562][T10254] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 420.269575][T10254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 420.269607][T10254] [ 420.617690][ T5945] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 420.748854][ T5945] usb 1-1: device descriptor read/64, error -71 [ 421.043205][ T5945] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 421.177778][ T5945] usb 1-1: device descriptor read/64, error -71 [ 421.184124][ T43] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 421.300857][ T5945] usb usb1-port1: attempt power cycle [ 421.357709][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 421.365244][ T43] usb 2-1: config 0 has no interfaces? [ 421.374918][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 421.388004][ T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 421.396497][ T43] usb 2-1: Manufacturer: syz [ 421.416923][ T43] usb 2-1: config 0 descriptor?? [ 421.647787][ T5945] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 421.729081][ T5945] usb 1-1: device descriptor read/8, error -71 [ 422.123917][ T5945] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 422.149400][ T5945] usb 1-1: device descriptor read/8, error -71 [ 422.269029][ T5945] usb usb1-port1: unable to enumerate USB device [ 422.578403][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 422.578493][ T30] audit: type=1326 audit(1764710821.414:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 422.849038][ T30] audit: type=1326 audit(1764710821.414:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 422.937661][ T30] audit: type=1326 audit(1764710821.414:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 423.238467][ T30] audit: type=1326 audit(1764710821.414:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 423.452359][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.459869][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.503678][ T30] audit: type=1326 audit(1764710821.414:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 423.567227][ T30] audit: type=1326 audit(1764710821.454:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 423.634616][ T30] audit: type=1326 audit(1764710821.414:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 423.868311][ T30] audit: type=1326 audit(1764710821.454:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 423.946749][ T30] audit: type=1326 audit(1764710821.454:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 424.098315][ T30] audit: type=1326 audit(1764710821.454:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 424.276905][ T43] usb 2-1: USB disconnect, device number 46 [ 424.378475][ T5945] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 424.549982][ T5945] usb 1-1: unable to get BOS descriptor or descriptor too short [ 424.558646][ T5945] usb 1-1: not running at top speed; connect to a high speed hub [ 424.583010][ T5945] usb 1-1: config index 0 descriptor too short (expected 14893, got 45) [ 424.594643][T10291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.636544][ T5945] usb 1-1: config 172 has too many interfaces: 247, using maximum allowed: 32 [ 424.664653][ T5945] usb 1-1: config 172 has an invalid descriptor of length 78, skipping remainder of the config [ 424.699314][ T5945] usb 1-1: config 172 has 0 interfaces, different from the descriptor's value: 247 [ 424.726108][ T5945] usb 1-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 424.751812][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.774265][ T5945] usb 1-1: Product: බₒ१ꃭî…å½™ÛŠï‚—ä˜å®Œå‰ªæ¨·ï éŸºë—ªâ¨ºì£‘ꖪ鈹䅔询Ἓ꒨豜烧ᵖıå¹áªŒë™ªí³ç­†ã¯¿ë©³åŸ”巂쮹ᯱܖጘꗬï„ⱉ臠ꥼゑ⢻î¹æ¬ªë¶à®—ሶè‚ྗ攦䇊浂Ɨ찪â¼î½‡â®ªç…ªï‰¨Õ¼ëœè©™èŽ†ì†½ìšå¬ä¸é¡›ã¡ˆì˜…縸î‚꾯ê—å´ªâ—塆豩ꛊ [ 424.868043][ T43] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 424.992741][ T5945] usb 1-1: Manufacturer: à°„ [ 424.997885][ T5945] usb 1-1: SerialNumber: à Š [ 425.069347][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.081698][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 425.163579][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.176358][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.185278][ T43] usb 2-1: SerialNumber: syz [ 425.231644][ T43] cdc_ether 2-1:1.0: skipping garbage [ 425.237139][ T43] usb 2-1: bad CDC descriptors [ 425.443249][T10297] kthread_run failed with err -4 [ 425.451624][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 425.469973][ T1165] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.488430][ T1165] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.559666][T10309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.569210][T10309] bond3: entered promiscuous mode [ 425.575247][T10309] bond0: (slave bond3): Enslaving as an active interface with an up link [ 425.740437][ T9725] usb 2-1: USB disconnect, device number 47 [ 425.777092][ T1165] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.806235][ T1165] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.939121][T10321] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1263'. [ 426.108574][ T5945] usb 1-1: USB disconnect, device number 52 [ 426.197868][ T43] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 426.358568][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 426.375518][ T43] usb 5-1: config 1 interface 0 altsetting 95 bulk endpoint 0x82 has invalid maxpacket 64 [ 426.386383][ T43] usb 5-1: config 1 interface 0 altsetting 95 bulk endpoint 0x3 has invalid maxpacket 16 [ 426.402641][ T43] usb 5-1: config 1 interface 0 altsetting 95 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.421253][ T43] usb 5-1: config 1 interface 0 has no altsetting 0 [ 426.430284][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.439565][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.447708][ T43] usb 5-1: Product: syz [ 426.451900][ T43] usb 5-1: Manufacturer: syz [ 426.456505][ T43] usb 5-1: SerialNumber: syz [ 426.464659][T10321] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 426.478516][T10321] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 426.517813][ T5945] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 426.688281][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 426.698401][ T5945] usb 1-1: unable to get BOS descriptor or descriptor too short [ 426.708517][ T43] usb 5-1: bad CDC descriptors [ 426.722376][ T5945] usb 1-1: config 8 has an invalid interface number: 64 but max is 0 [ 426.744403][ T5945] usb 1-1: config 8 has no interface number 0 [ 426.753916][ T43] usb 5-1: USB disconnect, device number 41 [ 426.758612][T10333] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1267'. [ 426.776011][ T5945] usb 1-1: config 8 interface 64 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 426.792660][T10333] netlink: 'syz.3.1267': attribute type 13 has an invalid length. [ 426.803214][ T5945] usb 1-1: config 8 interface 64 has no altsetting 0 [ 426.816450][ T5945] usb 1-1: New USB device found, idVendor=19d2, idProduct=64c6, bcdDevice= e.34 [ 426.825822][T10333] netlink: 'syz.3.1267': attribute type 17 has an invalid length. [ 426.842647][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.877456][ T5945] usb 1-1: Product: syz [ 426.882899][ T5945] usb 1-1: Manufacturer: syz [ 426.888400][ T5945] usb 1-1: SerialNumber: syz [ 426.893653][T10333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.112288][T10323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.129886][T10323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.241740][ T5945] cdc_ether 1-1:8.64: invalid descriptor buffer length [ 427.250892][ T5945] usb 1-1: bad CDC descriptors [ 427.297430][ T5945] usb 1-1: USB disconnect, device number 53 [ 427.721222][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 427.741169][T10341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1269'. [ 428.778782][ T9725] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 428.937724][ T9725] usb 3-1: Using ep0 maxpacket: 8 [ 429.006801][ T9725] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 429.018615][ T9725] usb 3-1: can't read configurations, error -61 [ 429.233347][ T9725] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 429.468335][ T9725] usb 3-1: Using ep0 maxpacket: 8 [ 429.486518][ T9725] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 429.505796][ T9725] usb 3-1: can't read configurations, error -61 [ 429.525507][ T9725] usb usb3-port1: attempt power cycle [ 429.898573][ T9725] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 429.939082][ T9725] usb 3-1: Using ep0 maxpacket: 8 [ 429.946478][ T9725] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 429.955660][ T9725] usb 3-1: can't read configurations, error -61 [ 430.023288][T10376] FAULT_INJECTION: forcing a failure. [ 430.023288][T10376] name failslab, interval 1, probability 0, space 0, times 0 [ 430.055069][T10376] CPU: 0 UID: 0 PID: 10376 Comm: syz.1.1282 Not tainted syzkaller #0 PREEMPT(full) [ 430.055102][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.055121][T10376] Call Trace: [ 430.055133][T10376] [ 430.055144][T10376] dump_stack_lvl+0x189/0x250 [ 430.055180][T10376] ? __pfx____ratelimit+0x10/0x10 [ 430.055214][T10376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.055237][T10376] ? __pfx__printk+0x10/0x10 [ 430.055273][T10376] ? __pfx___might_resched+0x10/0x10 [ 430.055296][T10376] ? fs_reclaim_acquire+0x7d/0x100 [ 430.055322][T10376] should_fail_ex+0x414/0x560 [ 430.055356][T10376] should_failslab+0xa8/0x100 [ 430.055382][T10376] kmem_cache_alloc_node_noprof+0x77/0x700 [ 430.055414][T10376] ? __alloc_skb+0x112/0x2d0 [ 430.055445][T10376] ? netlink_autobind+0xdb/0x300 [ 430.055471][T10376] __alloc_skb+0x112/0x2d0 [ 430.055505][T10376] netlink_sendmsg+0x5c6/0xb30 [ 430.055548][T10376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.055584][T10376] ? __import_iovec+0x5d4/0x7f0 [ 430.055604][T10376] ? aa_sock_msg_perm+0xf1/0x1b0 [ 430.055633][T10376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.055656][T10376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.055691][T10376] __sock_sendmsg+0x21c/0x270 [ 430.055719][T10376] ____sys_sendmsg+0x505/0x820 [ 430.055760][T10376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.055799][T10376] ? kstrtouint+0x6e/0xe0 [ 430.055836][T10376] ___sys_sendmsg+0x21f/0x2a0 [ 430.055872][T10376] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.055913][T10376] ? rcu_read_lock_any_held+0xb3/0x120 [ 430.055968][T10376] ? __fget_files+0x2a/0x420 [ 430.055992][T10376] ? __fget_files+0x3a0/0x420 [ 430.056028][T10376] __sys_sendmsg+0x164/0x220 [ 430.056068][T10376] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.056112][T10376] ? __pfx_ksys_write+0x10/0x10 [ 430.056147][T10376] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 430.056177][T10376] ? lockdep_hardirqs_on+0x98/0x140 [ 430.056215][T10376] __do_fast_syscall_32+0xb6/0x300 [ 430.056238][T10376] ? lockdep_hardirqs_on+0x98/0x140 [ 430.056276][T10376] do_fast_syscall_32+0x34/0x80 [ 430.056298][T10376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 430.056325][T10376] RIP: 0023:0xf703d539 [ 430.056344][T10376] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 430.056365][T10376] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 430.056388][T10376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 430.056404][T10376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.056417][T10376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.056430][T10376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 430.056444][T10376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.056476][T10376] [ 430.408576][ T5945] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 430.438263][ T9725] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 430.470210][ T9725] usb 3-1: Using ep0 maxpacket: 8 [ 430.499678][ T9725] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 430.507866][ T9725] usb 3-1: can't read configurations, error -61 [ 430.520274][ T9725] usb usb3-port1: unable to enumerate USB device [ 430.598101][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 430.613799][ T5945] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 430.625359][ T5945] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 430.662494][ T5945] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 430.676995][ T5945] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 430.703081][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 430.722524][ T5945] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 430.756659][ T5945] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 430.765993][ T5945] usb 1-1: Product: syz [ 430.771419][ T5945] usb 1-1: Manufacturer: syz [ 430.776160][ T5945] usb 1-1: SerialNumber: syz [ 430.797103][ T5945] usb 1-1: config 0 descriptor?? [ 430.816978][ T5945] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 430.836325][ T5945] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 431.103757][T10371] binder: 10370:10371 ioctl c018620c 80000240 returned -22 [ 431.116144][T10398] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 431.122369][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.136320][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.263313][T10398] netlink: 436 bytes leftover after parsing attributes in process `syz.3.1289'. [ 431.500820][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.516094][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.548226][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.584701][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.774589][ T9] usb 1-1: USB disconnect, device number 54 [ 431.783610][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 431.818313][ T9725] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 431.968876][ T9725] usb 2-1: Using ep0 maxpacket: 8 [ 431.976181][T10416] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1294'. [ 431.976218][ T9725] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 431.988093][T10416] netlink: 'syz.3.1294': attribute type 13 has an invalid length. [ 432.003419][T10416] netlink: 'syz.3.1294': attribute type 17 has an invalid length. [ 432.018244][ T9725] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.054642][ T9725] usb 2-1: config 0 has no interface number 0 [ 432.068340][ T9725] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 432.092432][ T9725] usb 2-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 432.117965][T10416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.131469][ T9725] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 432.166613][ T9725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.175479][ T9725] usb 2-1: Product: syz [ 432.180547][ T9725] usb 2-1: Manufacturer: syz [ 432.181292][T10419] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1295'. [ 432.185193][ T9725] usb 2-1: SerialNumber: syz [ 432.201145][ T9725] usb 2-1: config 0 descriptor?? [ 432.221583][ T9725] ttusb_dec_send_command: command bulk message failed: error -8 [ 432.231402][T10419] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1295'. [ 432.233228][ T9725] ttusb-dec 2-1:0.113: probe with driver ttusb-dec failed with error -8 [ 432.268387][ T9725] usbhid 2-1:0.113: couldn't find an input interrupt endpoint [ 432.442422][ T9725] usb 2-1: USB disconnect, device number 48 [ 432.616318][T10428] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1298'. [ 432.963780][T10438] trusted_key: syz.2.1301 sent an empty control message without MSG_MORE. [ 433.401623][T10443] macsec1: entered promiscuous mode [ 433.416377][T10443] macsec1: entered allmulticast mode [ 436.481760][T10503] loop6: detected capacity change from 0 to 7 [ 436.489577][T10503] Dev loop6: unable to read RDB block 7 [ 436.495371][T10503] loop6: AHDI p3 p4 [ 436.500768][T10503] loop6: partition table partially beyond EOD, truncated [ 436.509576][T10503] loop6: p3 start 1886353253 is beyond EOD, truncated [ 436.524698][T10503] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1322'. [ 436.550576][T10503] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1322'. [ 436.633811][T10500] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1321'. [ 436.643320][T10504] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1323'. [ 436.664960][T10500] netlink: 'syz.0.1321': attribute type 13 has an invalid length. [ 436.673109][T10504] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1323'. [ 436.678526][T10500] netlink: 'syz.0.1321': attribute type 17 has an invalid length. [ 436.894229][T10513] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 436.909337][T10500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.568356][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 438.775300][ T9] usb 2-1: config 3 has an invalid interface number: 7 but max is 0 [ 438.789136][ T9] usb 2-1: config 3 has no interface number 0 [ 438.847520][ T9] usb 2-1: config 3 interface 7 has no altsetting 0 [ 438.872402][ T9] usb 2-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=3f.7b [ 438.897552][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.908355][ T9] usb 2-1: Product: syz [ 438.928634][ T9] usb 2-1: Manufacturer: syz [ 438.933306][ T9] usb 2-1: SerialNumber: syz [ 439.232056][T10552] FAULT_INJECTION: forcing a failure. [ 439.232056][T10552] name failslab, interval 1, probability 0, space 0, times 0 [ 439.249750][T10538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.280087][T10538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.303036][T10552] CPU: 1 UID: 0 PID: 10552 Comm: syz.4.1338 Not tainted syzkaller #0 PREEMPT(full) [ 439.303069][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 439.303085][T10552] Call Trace: [ 439.303095][T10552] [ 439.303105][T10552] dump_stack_lvl+0x189/0x250 [ 439.303136][T10552] ? __pfx____ratelimit+0x10/0x10 [ 439.303170][T10552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.303194][T10552] ? __pfx__printk+0x10/0x10 [ 439.303240][T10552] should_fail_ex+0x414/0x560 [ 439.303276][T10552] should_failslab+0xa8/0x100 [ 439.303302][T10552] __kmalloc_cache_noprof+0x6f/0x6e0 [ 439.303335][T10552] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 439.303365][T10552] ? sctp_add_bind_addr+0x8c/0x370 [ 439.303394][T10552] ? sctp_add_bind_addr+0xb0/0x370 [ 439.303430][T10552] sctp_add_bind_addr+0x8c/0x370 [ 439.303467][T10552] sctp_copy_local_addr_list+0x30b/0x4e0 [ 439.303503][T10552] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 439.303535][T10552] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 439.303569][T10552] ? sctp_v6_is_any+0x64/0x80 [ 439.303603][T10552] ? sctp_copy_one_addr+0x93/0x360 [ 439.303638][T10552] sctp_bind_addr_copy+0x189/0x3c0 [ 439.303679][T10552] sctp_connect_new_asoc+0x2e0/0x690 [ 439.303706][T10552] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 439.303727][T10552] ? __local_bh_enable_ip+0x12d/0x1c0 [ 439.303768][T10552] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 439.303794][T10552] ? security_sctp_bind_connect+0x7e/0x2e0 [ 439.303833][T10552] sctp_sendmsg+0x155c/0x2810 [ 439.303869][T10552] ? __pfx_sctp_sendmsg+0x10/0x10 [ 439.303889][T10552] ? aa_sk_perm+0x160/0x920 [ 439.303923][T10552] ? aa_sk_perm+0x7f0/0x920 [ 439.303953][T10552] ? __pfx_aa_sk_perm+0x10/0x10 [ 439.303982][T10552] ? sock_rps_record_flow+0x19/0x410 [ 439.304018][T10552] ? inet_sendmsg+0x2f4/0x370 [ 439.304055][T10552] __sock_sendmsg+0x19c/0x270 [ 439.304086][T10552] ____sys_sendmsg+0x505/0x820 [ 439.304126][T10552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.304166][T10552] ? kstrtouint+0x6e/0xe0 [ 439.304206][T10552] ___sys_sendmsg+0x21f/0x2a0 [ 439.304241][T10552] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.304281][T10552] ? rcu_read_lock_any_held+0xb3/0x120 [ 439.304337][T10552] ? __fget_files+0x2a/0x420 [ 439.304362][T10552] ? __fget_files+0x3a0/0x420 [ 439.304398][T10552] __sys_sendmsg+0x164/0x220 [ 439.304435][T10552] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.304478][T10552] ? __pfx_ksys_write+0x10/0x10 [ 439.304515][T10552] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 439.304539][T10552] ? lockdep_hardirqs_on+0x98/0x140 [ 439.304577][T10552] __do_fast_syscall_32+0xb6/0x300 [ 439.304601][T10552] ? lockdep_hardirqs_on+0x98/0x140 [ 439.304641][T10552] do_fast_syscall_32+0x34/0x80 [ 439.304664][T10552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.304704][T10552] RIP: 0023:0xf70cd539 [ 439.304724][T10552] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 439.304744][T10552] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 439.304768][T10552] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002c00 [ 439.304785][T10552] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.304799][T10552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.304812][T10552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 439.304827][T10552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.304861][T10552] [ 439.918940][ T9725] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 440.020972][T10571] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1345'. [ 440.034313][T10571] netlink: 'syz.4.1345': attribute type 13 has an invalid length. [ 440.042377][T10571] netlink: 'syz.4.1345': attribute type 17 has an invalid length. [ 440.081028][ T9725] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.097400][ T9725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 440.108367][T10571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.118551][T10571] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.137076][T10571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.145389][ T9725] usb 3-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.00 [ 440.163329][ T9725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.404035][ T9725] usb 3-1: config 0 descriptor?? [ 440.420091][ T9] radio-si470x 2-1:3.7: si470x_get_report: usb_control_msg returned -71 [ 440.459665][ T9] radio-si470x 2-1:3.7: probe with driver radio-si470x failed with error -5 [ 440.550338][ T9] usb 2-1: USB disconnect, device number 49 [ 440.852975][ T9725] hid (null): global environment stack underflow [ 440.864779][ T9725] hid-generic 0003:093A:8003.001E: global environment stack underflow [ 440.887384][T10583] Invalid logical block size (641) [ 440.895514][ T9725] hid-generic 0003:093A:8003.001E: item 0 1 1 11 parsing failed [ 440.954145][ T9725] hid-generic 0003:093A:8003.001E: probe with driver hid-generic failed with error -22 [ 441.057023][T10554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.066381][T10554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.078786][ T9725] usb 3-1: USB disconnect, device number 44 [ 441.204412][T10587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1351'. [ 441.704339][T10594] syzkaller0: entered promiscuous mode [ 441.728233][T10594] syzkaller0: entered allmulticast mode [ 441.736626][T10598] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 445.446975][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.465401][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.649783][T10644] delete_channel: no stack [ 445.693133][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'. [ 446.040057][T10685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1379'. [ 446.164604][T10691] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1381'. [ 446.347729][ T43] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 446.600245][ T43] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 446.628205][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.662642][ T43] usb 4-1: Product: syz [ 446.707834][ T43] usb 4-1: Manufacturer: syz [ 446.713742][ T43] usb 4-1: SerialNumber: syz [ 446.765474][ T43] usb 4-1: config 0 descriptor?? [ 447.458204][ T9725] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 447.618187][ T9725] usb 2-1: Using ep0 maxpacket: 32 [ 447.646291][ T9725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.684869][ T9725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.728823][ T9725] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 447.754318][ T9725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.798559][ T9725] usb 2-1: config 0 descriptor?? [ 448.249711][ T9725] savu 0003:1E7D:2D5A.001F: unknown global tag 0xd [ 448.271944][ T9725] savu 0003:1E7D:2D5A.001F: item 0 4 1 13 parsing failed [ 448.316646][ T9725] savu 0003:1E7D:2D5A.001F: parse failed [ 448.341359][ T9725] savu 0003:1E7D:2D5A.001F: probe with driver savu failed with error -22 [ 449.313258][ T9725] usb 4-1: USB disconnect, device number 33 [ 450.708139][ T5924] usb 2-1: USB disconnect, device number 50 [ 451.200915][T10716] FAULT_INJECTION: forcing a failure. [ 451.200915][T10716] name failslab, interval 1, probability 0, space 0, times 0 [ 451.295649][T10716] CPU: 1 UID: 0 PID: 10716 Comm: syz.2.1388 Not tainted syzkaller #0 PREEMPT(full) [ 451.295680][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.295695][T10716] Call Trace: [ 451.295706][T10716] [ 451.295717][T10716] dump_stack_lvl+0x189/0x250 [ 451.295746][T10716] ? __pfx____ratelimit+0x10/0x10 [ 451.295779][T10716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.295802][T10716] ? __pfx__printk+0x10/0x10 [ 451.295834][T10716] ? __pfx___might_resched+0x10/0x10 [ 451.295856][T10716] ? fs_reclaim_acquire+0x7d/0x100 [ 451.295882][T10716] should_fail_ex+0x414/0x560 [ 451.295915][T10716] should_failslab+0xa8/0x100 [ 451.295939][T10716] __kmalloc_cache_noprof+0x6f/0x6e0 [ 451.295972][T10716] ? snd_pcm_oss_change_params_locked+0x172/0x3e40 [ 451.296019][T10716] snd_pcm_oss_change_params_locked+0x172/0x3e40 [ 451.296049][T10716] ? __pfx___mutex_trylock_common+0x10/0x10 [ 451.296077][T10716] ? rcu_is_watching+0x15/0xb0 [ 451.296099][T10716] ? trace_contention_end+0x39/0x100 [ 451.296124][T10716] ? __mutex_lock+0x335/0x1350 [ 451.296159][T10716] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 451.296184][T10716] ? aa_file_perm+0x44d/0x1540 [ 451.296216][T10716] ? __pfx___mutex_lock+0x10/0x10 [ 451.296251][T10716] ? __pfx_aa_file_perm+0x10/0x10 [ 451.296283][T10716] snd_pcm_oss_write+0x2fb/0x1190 [ 451.296307][T10716] ? get_pid_task+0x20/0x1f0 [ 451.296349][T10716] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 451.296377][T10716] ? bpf_lsm_file_permission+0x9/0x20 [ 451.296402][T10716] ? security_file_permission+0x75/0x290 [ 451.296437][T10716] ? rw_verify_area+0x255/0x4d0 [ 451.296466][T10716] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 451.296493][T10716] vfs_write+0x27e/0xb30 [ 451.296533][T10716] ? __pfx_vfs_write+0x10/0x10 [ 451.296566][T10716] ? __fget_files+0x2a/0x420 [ 451.296601][T10716] ? __fget_files+0x2a/0x420 [ 451.296623][T10716] ? __fget_files+0x3a0/0x420 [ 451.296646][T10716] ? __fget_files+0x2a/0x420 [ 451.296683][T10716] ksys_write+0x145/0x250 [ 451.296713][T10716] ? exc_page_fault+0x82/0x100 [ 451.296746][T10716] ? __pfx_ksys_write+0x10/0x10 [ 451.296781][T10716] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 451.296804][T10716] ? lockdep_hardirqs_on+0x98/0x140 [ 451.296840][T10716] __do_fast_syscall_32+0xb6/0x300 [ 451.296864][T10716] ? lockdep_hardirqs_on+0x98/0x140 [ 451.296900][T10716] do_fast_syscall_32+0x34/0x80 [ 451.296923][T10716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 451.296949][T10716] RIP: 0023:0xf7f95539 [ 451.296967][T10716] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 451.296986][T10716] RSP: 002b:00000000f540055c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 451.297008][T10716] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002000 [ 451.297022][T10716] RDX: 0000000000088020 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.297035][T10716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.297047][T10716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 451.297060][T10716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.297110][T10716] [ 452.324400][ T9725] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 453.200825][T10732] fuse: Bad value for 'fd' [ 453.223539][T10734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1394'. [ 453.392837][T10738] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1396'. [ 453.837836][ T5924] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 454.502675][ T5924] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 454.527655][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.535717][ T5924] usb 1-1: Product: syz [ 454.544887][ T5924] usb 1-1: Manufacturer: syz [ 454.552614][ T5924] usb 1-1: SerialNumber: syz [ 454.582279][ T5924] usb 1-1: config 0 descriptor?? [ 454.913089][ T5924] mos7840 1-1:0.0: required endpoints missing [ 454.953562][ T5924] hid-generic 0000:0003:0001.0020: unknown main item tag 0x0 [ 454.981472][ T5924] hid-generic 0000:0003:0001.0020: unknown main item tag 0x0 [ 455.022672][ T5924] hid-generic 0000:0003:0001.0020: hidraw0: HID v0.03 Device [syz0] on syz1 [ 455.286302][ T9725] usb 1-1: USB disconnect, device number 55 [ 455.365054][T10757] fido_id[10757]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 456.780642][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1404'. [ 456.809300][T10768] : entered promiscuous mode [ 456.878134][T10776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1408'. [ 456.908315][T10773] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1407'. [ 456.966666][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 457.027708][ T5924] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 457.526001][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 457.539428][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.818692][ T5924] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 457.849111][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.972345][ T5924] usb 3-1: config 0 descriptor?? [ 457.984668][ T5924] dvb-usb: found a 'TeVii S662' in warm state. [ 457.992623][ T5924] dw2102: su3000_power_ctrl: 1, initialized 0 [ 458.002649][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 458.029685][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 458.124036][ T5924] dvbdev: DVB: registering new adapter (TeVii S662) [ 458.140947][ T5924] usb 3-1: media controller created [ 458.171486][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 458.177309][ T5924] dw2102: i2c transfer failed. [ 458.210887][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 458.246720][ T5924] dw2102: i2c transfer failed. [ 458.261140][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 458.266985][ T5924] dw2102: i2c transfer failed. [ 458.271828][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 458.278169][ T5924] dw2102: i2c transfer failed. [ 458.282973][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 458.288822][ T855] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 458.297683][T10798] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 458.347022][ T5924] dw2102: i2c transfer failed. [ 458.358953][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 458.367101][ T5924] dw2102: i2c transfer failed. [ 458.381739][ T5924] dvb-usb: MAC address: 02:02:02:02:02:02 [ 458.472388][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.497695][ T855] usb 2-1: Using ep0 maxpacket: 32 [ 458.511307][ T855] usb 2-1: config 0 has an invalid interface number: 24 but max is 0 [ 458.537672][ T855] usb 2-1: config 0 has no interface number 0 [ 458.557198][ T855] usb 2-1: config 0 interface 24 has no altsetting 0 [ 458.572010][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 458.583752][ T5924] dw2102: command 0x0e transfer failed. [ 458.592105][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 458.602898][ T5924] dw2102: command 0x0e transfer failed. [ 458.609354][ T855] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 458.618874][ T855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.626992][ T855] usb 2-1: Product: syz [ 458.631585][ T855] usb 2-1: Manufacturer: syz [ 458.636273][ T855] usb 2-1: SerialNumber: syz [ 458.648825][ T855] usb 2-1: config 0 descriptor?? [ 458.659190][T10804] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1415'. [ 458.675134][ T855] f81534 2-1:0.24: required endpoints missing [ 458.948267][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 459.177181][ T5924] dw2102: command 0x0e transfer failed. [ 459.192480][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 459.217984][ T5924] dw2102: command 0x0e transfer failed. [ 459.245682][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 459.286652][ T5924] dw2102: command 0x51 transfer failed. [ 459.307207][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 459.314474][ T5924] dw2102: i2c probe for address 0x68 failed. [ 459.324171][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 459.331933][ T5924] dw2102: i2c probe for address 0x69 failed. [ 459.339938][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 459.349134][ T5924] dw2102: i2c probe for address 0x6a failed. [ 459.363516][ T5924] dw2102: probing for demodulator failed. Is the external power switched on? [ 459.515587][ T5924] dvb-usb: no frontend was attached by 'TeVii S662' [ 459.798169][ T5924] rc_core: IR keymap rc-tt-1500 not found [ 459.810030][ T5924] Registered IR keymap rc-empty [ 459.823457][ T5924] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 460.198289][ T9725] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 460.498214][ T9725] usb 4-1: Invalid ep0 maxpacket: 16 [ 460.684013][ T5924] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input42 [ 460.708161][ T9725] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 460.768032][ T5924] dvb-usb: schedule remote query interval to 250 msecs. [ 460.849313][ T5924] dw2102: su3000_power_ctrl: 0, initialized 1 [ 460.881980][ T5924] dvb-usb: TeVii S662 successfully initialized and connected. [ 460.969230][ T5924] usb 3-1: USB disconnect, device number 45 [ 461.038371][ T9725] usb 4-1: Invalid ep0 maxpacket: 16 [ 461.106309][ T9725] usb usb4-port1: attempt power cycle [ 461.392998][T10823] FAULT_INJECTION: forcing a failure. [ 461.392998][T10823] name failslab, interval 1, probability 0, space 0, times 0 [ 461.406181][T10823] CPU: 0 UID: 0 PID: 10823 Comm: syz.2.1420 Not tainted syzkaller #0 PREEMPT(full) [ 461.406203][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.406213][T10823] Call Trace: [ 461.406222][T10823] [ 461.406231][T10823] dump_stack_lvl+0x189/0x250 [ 461.406253][T10823] ? __pfx____ratelimit+0x10/0x10 [ 461.406282][T10823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.406307][T10823] ? __pfx__printk+0x10/0x10 [ 461.406343][T10823] ? __pfx___might_resched+0x10/0x10 [ 461.406368][T10823] should_fail_ex+0x414/0x560 [ 461.406392][T10823] should_failslab+0xa8/0x100 [ 461.406410][T10823] kmem_cache_alloc_noprof+0x74/0x6e0 [ 461.406434][T10823] ? __pmd_alloc+0xc2/0x540 [ 461.406464][T10823] __pmd_alloc+0xc2/0x540 [ 461.406510][T10823] __handle_mm_fault+0x9ad/0x53a0 [ 461.406550][T10823] ? __pfx___handle_mm_fault+0x10/0x10 [ 461.406587][T10823] ? __pfx___might_resched+0x10/0x10 [ 461.406606][T10823] handle_mm_fault+0x40a/0x8e0 [ 461.406635][T10823] __get_user_pages+0x165c/0x2a00 [ 461.406680][T10823] get_user_pages_remote+0x2f1/0xac0 [ 461.406710][T10823] ? __pfx_get_user_pages_remote+0x10/0x10 [ 461.406738][T10823] ? mmap_read_lock_maybe_expand+0xb0/0x3c0 [ 461.406774][T10823] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 461.406813][T10823] get_arg_page+0x104/0x330 [ 461.406840][T10823] ? __pfx_get_arg_page+0x10/0x10 [ 461.406868][T10823] copy_string_kernel+0x191/0x2a0 [ 461.406894][T10823] do_execveat_common+0x3c5/0x6a0 [ 461.406926][T10823] __ia32_compat_sys_execve+0x99/0xb0 [ 461.406951][T10823] __do_fast_syscall_32+0xb6/0x300 [ 461.406968][T10823] ? lockdep_hardirqs_on+0x98/0x140 [ 461.406995][T10823] do_fast_syscall_32+0x34/0x80 [ 461.407010][T10823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 461.407030][T10823] RIP: 0023:0xf7f95539 [ 461.407044][T10823] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 461.407057][T10823] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 461.407073][T10823] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 461.407084][T10823] RDX: 0000000080011500 RSI: 0000000000000000 RDI: 0000000000000000 [ 461.407094][T10823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 461.407102][T10823] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 461.407112][T10823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.407134][T10823] [ 461.651379][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.664380][ T9725] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 461.689621][ T9725] usb 4-1: Invalid ep0 maxpacket: 16 [ 461.796793][ T43] usb 2-1: USB disconnect, device number 51 [ 461.829142][ T9725] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 461.848913][ T9725] usb 4-1: Invalid ep0 maxpacket: 16 [ 461.849575][ T5924] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 461.854578][ T9725] usb usb4-port1: unable to enumerate USB device [ 462.787698][ T5924] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 463.001946][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 463.044190][T10850] : entered promiscuous mode [ 463.118607][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 463.342665][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.427802][ T5924] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 463.436902][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.490049][ T5924] usb 5-1: config 0 descriptor?? [ 463.500174][ T5924] dvb-usb: found a 'TeVii S662' in warm state. [ 463.514455][ T5924] dw2102: su3000_power_ctrl: 1, initialized 0 [ 463.810056][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 463.857410][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.878292][ T5924] dvbdev: DVB: registering new adapter (TeVii S662) [ 463.885004][ T5924] usb 5-1: media controller created [ 463.937805][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 463.947926][ T5924] dw2102: i2c transfer failed. [ 463.953464][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 463.961046][ T5924] dw2102: i2c transfer failed. [ 464.021189][T10860] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 464.037685][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 464.068921][ T5924] dw2102: i2c transfer failed. [ 464.073749][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 464.100999][ T5924] dw2102: i2c transfer failed. [ 464.127723][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 464.137666][ T5924] dw2102: i2c transfer failed. [ 464.151111][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 464.164098][ T5924] dw2102: i2c transfer failed. [ 464.182445][ T5924] dvb-usb: MAC address: 02:02:02:02:02:02 [ 464.244135][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.353602][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 464.372352][ T5924] dw2102: command 0x0e transfer failed. [ 464.407000][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 464.437753][ T5924] dw2102: command 0x0e transfer failed. [ 464.768936][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 464.774728][ T5924] dw2102: command 0x0e transfer failed. [ 465.314035][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 465.332858][ T5924] dw2102: command 0x0e transfer failed. [ 465.347642][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 465.579976][ T9] hid-generic 0000:0003:0001.0021: unknown main item tag 0x0 [ 465.587472][ T9] hid-generic 0000:0003:0001.0021: unknown main item tag 0x0 [ 465.587621][ T5924] dw2102: command 0x51 transfer failed. [ 465.619365][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 465.631235][ T5924] dw2102: i2c probe for address 0x68 failed. [ 465.653674][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 465.826757][ T5924] dw2102: i2c probe for address 0x69 failed. [ 465.933665][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 465.953862][ T5924] dw2102: i2c probe for address 0x6a failed. [ 465.966006][ T5924] dw2102: probing for demodulator failed. Is the external power switched on? [ 466.082049][ T5924] dvb-usb: no frontend was attached by 'TeVii S662' [ 466.145841][T10881] binder: 10874:10881 ioctl c018620c 80000380 returned -22 [ 466.197530][ T9] hid-generic 0000:0003:0001.0021: hidraw0: HID v0.03 Device [syz0] on syz1 [ 466.347729][ T5924] rc_core: IR keymap rc-tt-1500 not found [ 466.353701][ T5924] Registered IR keymap rc-empty [ 466.376699][ T5924] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 466.757688][ T855] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 466.788775][T10886] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1436'. [ 466.808057][ T5924] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input45 [ 466.878255][ T5924] dvb-usb: schedule remote query interval to 250 msecs. [ 466.886980][T10882] fido_id[10882]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 466.917937][ T855] usb 3-1: Using ep0 maxpacket: 32 [ 466.933126][ T855] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 466.944598][ T5924] dw2102: su3000_power_ctrl: 0, initialized 1 [ 466.957618][ T855] usb 3-1: config 0 has no interface number 0 [ 466.967833][ T5924] dvb-usb: TeVii S662 successfully initialized and connected. [ 466.978207][ T855] usb 3-1: config 0 interface 24 has no altsetting 0 [ 467.034145][ T855] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 467.044494][ T855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.059876][ T5924] usb 5-1: USB disconnect, device number 42 [ 467.078460][ T855] usb 3-1: Product: syz [ 467.083966][ T855] usb 3-1: Manufacturer: syz [ 467.088988][ T855] usb 3-1: SerialNumber: syz [ 467.105708][ T855] usb 3-1: config 0 descriptor?? [ 467.113133][ T855] f81534 3-1:0.24: required endpoints missing [ 467.902551][ T5924] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 468.023854][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 468.410356][T10891] kvm: Disabled LAPIC found during irq injection [ 468.928103][ T5924] usb 3-1: USB disconnect, device number 46 [ 469.507764][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 469.858287][ T9] usb 1-1: device descriptor read/64, error -71 [ 470.066819][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 470.156526][T10915] : entered promiscuous mode [ 470.512191][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 470.658724][ T9] usb 1-1: device descriptor read/64, error -71 [ 470.818514][ T9] usb usb1-port1: attempt power cycle [ 470.974745][ T5924] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 471.149758][ T5924] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 471.158488][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 471.167064][ T5924] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 471.178679][ T9] usb 1-1: device descriptor read/8, error -71 [ 471.200085][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 471.230382][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 471.251240][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 471.331377][ T5924] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 471.359638][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 471.368153][ T5924] usb 4-1: Product: syz [ 471.372358][ T5924] usb 4-1: Manufacturer: syz [ 471.383825][ T5924] cdc_wdm 4-1:1.0: skipping garbage [ 471.392233][ T5924] cdc_wdm 4-1:1.0: skipping garbage [ 471.400527][ T5924] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 471.406476][ T5924] cdc_wdm 4-1:1.0: Unknown control protocol [ 471.418370][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 471.459347][ T9] usb 1-1: device descriptor read/8, error -71 [ 471.569019][ T9] usb usb1-port1: unable to enumerate USB device [ 472.468217][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 473.041520][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 473.074649][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.137470][ T9] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 473.195445][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.271415][ T9] usb 1-1: config 0 descriptor?? [ 473.305610][ T9] dvb-usb: found a 'TeVii S662' in warm state. [ 473.341514][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 473.361384][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 473.391878][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.409847][ T9] dvbdev: DVB: registering new adapter (TeVii S662) [ 473.422490][ T9] usb 1-1: media controller created [ 473.435703][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 473.443653][ T9] dw2102: i2c transfer failed. [ 473.454737][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 473.466924][ T9] dw2102: i2c transfer failed. [ 473.480241][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 473.493549][ T9] dw2102: i2c transfer failed. [ 473.503651][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 473.513684][ T9] dw2102: i2c transfer failed. [ 473.524727][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 473.538730][ T9] dw2102: i2c transfer failed. [ 473.552189][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 473.563831][ T9] dw2102: i2c transfer failed. [ 473.573544][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 473.612324][T10945] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 473.719609][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.822384][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 473.875796][ T9] dw2102: command 0x0e transfer failed. [ 473.885353][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 473.897115][ T9] dw2102: command 0x0e transfer failed. [ 474.396616][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 474.476885][T10957] binder: 10950:10957 ioctl c018620c 80000380 returned -22 [ 474.522728][ T9] dw2102: command 0x0e transfer failed. [ 474.548306][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 474.563861][ T9] dw2102: command 0x0e transfer failed. [ 474.578485][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 474.588907][ T9] dw2102: command 0x51 transfer failed. [ 474.601276][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 474.725360][ T9] dw2102: i2c probe for address 0x68 failed. [ 474.745085][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 474.760629][ T9] dw2102: i2c probe for address 0x69 failed. [ 474.772479][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 474.790096][ T5927] usb 4-1: USB disconnect, device number 39 [ 474.862120][ T9] dw2102: i2c probe for address 0x6a failed. [ 474.952188][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 475.349997][ T9] dvb-usb: no frontend was attached by 'TeVii S662' [ 475.538125][ T9] rc_core: IR keymap rc-tt-1500 not found [ 475.552483][ T9] Registered IR keymap rc-empty [ 475.579616][ T9] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 475.653574][ T9] input: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input47 [ 475.683575][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 475.707663][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 475.868519][ T9] dvb-usb: TeVii S662 successfully initialized and connected. [ 475.980134][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 476.097274][ T9] usb 1-1: USB disconnect, device number 60 [ 476.128271][ T5927] dw2102: i2c transfer failed. [ 476.263971][ T9] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 476.423902][T10979] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1458'. [ 476.638662][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 476.938207][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 476.968450][ T9] usb 1-1: config 0 has an invalid interface number: 24 but max is 0 [ 477.068223][ T9] usb 1-1: config 0 has no interface number 0 [ 477.081542][ T9] usb 1-1: config 0 interface 24 has no altsetting 0 [ 477.146884][T10986] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 477.231498][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 477.270833][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.299418][ T9] usb 1-1: Product: syz [ 477.327519][ T9] usb 1-1: Manufacturer: syz [ 477.342908][ T9] usb 1-1: SerialNumber: syz [ 477.370316][ T9] usb 1-1: config 0 descriptor?? [ 477.390141][ T9] f81534 1-1:0.24: required endpoints missing [ 478.196500][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 478.219144][T10993] : entered promiscuous mode [ 479.757105][ T9] usb 1-1: USB disconnect, device number 61 [ 479.791783][T11003] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1466'. [ 479.801343][T11003] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 480.280440][T11009] tipc: Started in network mode [ 480.298982][T11009] tipc: Node identity 26ac63c3a07f, cluster identity 4711 [ 480.326778][T11009] tipc: Enabled bearer , priority 0 [ 480.356695][T11010] syzkaller0: entered promiscuous mode [ 480.366723][T11010] syzkaller0: entered allmulticast mode [ 481.520604][ T855] tipc: Node number set to 2262000579 [ 482.406208][T11042] binder: 11033:11042 ioctl c018620c 80000380 returned -22 [ 483.925132][T11054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1478'. [ 484.659424][ T5924] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 485.201993][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 485.352099][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.381011][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.397641][ T5924] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 485.408138][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 485.426226][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.442452][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 485.483853][T11070] : entered promiscuous mode [ 485.811290][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 485.812436][ T5924] usb 3-1: config 0 descriptor?? [ 485.835666][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.907044][ T9] usb 5-1: Product: syz [ 485.927480][ T9] usb 5-1: Manufacturer: syz [ 485.939874][ T9] usb 5-1: SerialNumber: syz [ 485.967751][ T9725] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 486.168858][ T9725] usb 4-1: Using ep0 maxpacket: 32 [ 486.190096][ T9725] usb 4-1: config 0 has an invalid interface number: 24 but max is 0 [ 486.208755][ T9725] usb 4-1: config 0 has no interface number 0 [ 486.245500][ T9725] usb 4-1: config 0 interface 24 has no altsetting 0 [ 486.315011][T11074] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1482'. [ 486.381009][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 486.411657][ T9725] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 486.433399][ T9725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.453732][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 486.465571][ T9725] usb 4-1: Product: syz [ 486.473916][ T9725] usb 4-1: Manufacturer: syz [ 486.514740][ T9725] usb 4-1: SerialNumber: syz [ 486.570879][ T5924] corsair 0003:1B1C:1B02.0022: unknown main item tag 0x0 [ 486.578670][ T9725] usb 4-1: config 0 descriptor?? [ 486.601203][ T5924] corsair 0003:1B1C:1B02.0022: unknown main item tag 0x0 [ 486.621418][ T5924] corsair 0003:1B1C:1B02.0022: unknown main item tag 0x0 [ 486.651847][ T5924] corsair 0003:1B1C:1B02.0022: unknown main item tag 0x0 [ 486.652217][ T9725] f81534 4-1:0.24: required endpoints missing [ 486.672134][ T5924] corsair 0003:1B1C:1B02.0022: unknown main item tag 0x0 [ 486.709984][ T5924] corsair 0003:1B1C:1B02.0022: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 487.739322][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 487.889950][ T5924] corsair 0003:1B1C:1B02.0022: Failed to get K90 initial state (error -71). [ 487.943486][ T5924] usb 3-1: USB disconnect, device number 47 [ 488.586029][ T9725] usb 4-1: USB disconnect, device number 40 [ 488.770928][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 488.792823][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 488.810078][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 488.821172][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 488.845225][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 488.897501][ T9] usb 5-1: USB disconnect, device number 43 [ 489.419900][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 490.362848][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 490.558156][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 490.569870][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.600450][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 490.617670][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 490.652408][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.671214][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 490.778579][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 490.825650][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.876172][T11105] binder: 11099:11105 ioctl c018620c 80000380 returned -22 [ 490.926462][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 490.958346][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 491.018589][ T9] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 491.035493][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.069421][ T9] usb 2-1: Product: syz [ 491.079363][ T9] usb 2-1: Manufacturer: syz [ 491.096510][ T9] usb 2-1: SerialNumber: syz [ 491.116519][ T9] usb 2-1: config 0 descriptor?? [ 491.154797][ T9] redrat3 2-1:0.0: Couldn't find all endpoints [ 491.160498][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1491'. [ 491.452776][T11108] input: syz0 as /devices/virtual/input/input48 [ 491.480903][T11086] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1484'. [ 492.859904][T11127] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1494'. [ 492.860202][ T43] usb 2-1: USB disconnect, device number 52 [ 493.689194][T11132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1495'. [ 494.037628][ T43] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 494.457683][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 494.551524][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.563129][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.573239][ T43] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 494.582649][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.611527][ T43] usb 2-1: config 0 descriptor?? [ 495.231345][ T43] corsair 0003:1B1C:1B02.0023: unknown main item tag 0x0 [ 495.262914][ T43] corsair 0003:1B1C:1B02.0023: unknown main item tag 0x0 [ 495.308004][ T5924] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 495.443369][ T43] corsair 0003:1B1C:1B02.0023: unknown main item tag 0x0 [ 495.470934][ T43] corsair 0003:1B1C:1B02.0023: unknown main item tag 0x0 [ 495.493598][ T43] corsair 0003:1B1C:1B02.0023: unknown main item tag 0x0 [ 495.517180][ T43] corsair 0003:1B1C:1B02.0023: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 495.587801][ T5924] usb 3-1: device descriptor read/64, error -71 [ 495.877792][ T5924] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 496.351335][ T5924] usb 3-1: device descriptor read/64, error -71 [ 496.468010][ T5924] usb usb3-port1: attempt power cycle [ 496.685060][ T43] corsair 0003:1B1C:1B02.0023: Failed to get K90 initial state (error -71). [ 496.722350][ T43] usb 2-1: USB disconnect, device number 53 [ 496.827689][ T5924] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 496.876107][ T5924] usb 3-1: device descriptor read/8, error -71 [ 497.287816][ T5924] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 497.322232][ T5924] usb 3-1: device descriptor read/8, error -71 [ 497.438447][ T5924] usb usb3-port1: unable to enumerate USB device [ 500.270526][T11191] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1511'. [ 501.404841][T11212] QAT: failed to copy from user cfg_data. [ 501.489039][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1518'. [ 501.652473][T11217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.338251][ T9725] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 502.490515][ T9725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.490539][ T9725] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.493133][ T9725] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 502.493158][ T9725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 502.493173][ T9725] usb 4-1: SerialNumber: syz [ 502.838336][ T5951] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 502.883418][T11218] fuse: Unknown parameter '‹' [ 502.998250][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 503.008607][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.033111][ T5951] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.062230][ T5951] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.086344][ T5951] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 503.138798][ T5951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 503.162578][ T5951] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 503.191557][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.226621][ T5951] usb 5-1: config 0 descriptor?? [ 503.233287][T11228] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1521'. [ 503.882971][ T5951] usbhid 5-1:0.0: can't add hid device: -71 [ 503.896695][ T5951] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 503.938534][ T5951] usb 5-1: USB disconnect, device number 44 [ 503.969641][T11116] syz.2.1490 (11116) used greatest stack depth: 18368 bytes left [ 504.047686][ T43] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 504.112631][ T9725] usb 4-1: 0:2 : does not exist [ 504.128268][ T9725] usb 4-1: unit 5: unexpected type 0x0d [ 504.174474][ T9725] usb 4-1: USB disconnect, device number 41 [ 504.236570][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.248513][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 504.271934][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.297948][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.328312][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.347232][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.365666][ T43] usb 1-1: Product: syz [ 504.375838][ T43] usb 1-1: Manufacturer: syz [ 504.396123][ T43] usb 1-1: SerialNumber: syz [ 504.632184][ T43] usb 1-1: 0:2 : does not exist [ 504.637213][ T43] usb 1-1: unit 9 not found! [ 504.749887][ T43] usb 1-1: USB disconnect, device number 62 [ 504.794532][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.928911][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.935368][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.825476][T11276] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1534'. [ 508.587023][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'. [ 508.610151][T11289] FAULT_INJECTION: forcing a failure. [ 508.610151][T11289] name failslab, interval 1, probability 0, space 0, times 0 [ 508.629822][T11289] CPU: 1 UID: 0 PID: 11289 Comm: syz.4.1537 Not tainted syzkaller #0 PREEMPT(full) [ 508.629868][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 508.629899][T11289] Call Trace: [ 508.629909][T11289] [ 508.629919][T11289] dump_stack_lvl+0x189/0x250 [ 508.629949][T11289] ? __pfx____ratelimit+0x10/0x10 [ 508.629983][T11289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.630006][T11289] ? __pfx__printk+0x10/0x10 [ 508.630053][T11289] should_fail_ex+0x414/0x560 [ 508.630087][T11289] should_failslab+0xa8/0x100 [ 508.630113][T11289] __kmalloc_cache_noprof+0x6f/0x6e0 [ 508.630146][T11289] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 508.630176][T11289] ? sctp_add_bind_addr+0x8c/0x370 [ 508.630205][T11289] ? sctp_add_bind_addr+0xb0/0x370 [ 508.630241][T11289] sctp_add_bind_addr+0x8c/0x370 [ 508.630278][T11289] sctp_copy_local_addr_list+0x30b/0x4e0 [ 508.630313][T11289] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 508.630345][T11289] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 508.630378][T11289] ? sctp_v6_is_any+0x64/0x80 [ 508.630413][T11289] ? sctp_copy_one_addr+0x93/0x360 [ 508.630448][T11289] sctp_bind_addr_copy+0xb3/0x3c0 [ 508.630481][T11289] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 508.630513][T11289] sctp_connect_new_asoc+0x2e0/0x690 [ 508.630548][T11289] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 508.630570][T11289] ? __local_bh_enable_ip+0x12d/0x1c0 [ 508.630611][T11289] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 508.630637][T11289] ? security_sctp_bind_connect+0x7e/0x2e0 [ 508.630675][T11289] sctp_sendmsg+0x155c/0x2810 [ 508.630711][T11289] ? __pfx_sctp_sendmsg+0x10/0x10 [ 508.630731][T11289] ? aa_sk_perm+0x160/0x920 [ 508.630758][T11289] ? aa_sk_perm+0x7f0/0x920 [ 508.630789][T11289] ? __pfx_aa_sk_perm+0x10/0x10 [ 508.630821][T11289] ? sock_rps_record_flow+0x19/0x410 [ 508.630858][T11289] ? inet_sendmsg+0x2f4/0x370 [ 508.630895][T11289] __sock_sendmsg+0x19c/0x270 [ 508.630925][T11289] __sys_sendto+0x3bd/0x520 [ 508.630959][T11289] ? __pfx___sys_sendto+0x10/0x10 [ 508.630987][T11289] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 508.631023][T11289] ? __fget_files+0x3a0/0x420 [ 508.631061][T11289] ? ksys_write+0x22a/0x250 [ 508.631095][T11289] ? __pfx_ksys_write+0x10/0x10 [ 508.631134][T11289] __ia32_sys_sendto+0xdd/0x100 [ 508.631176][T11289] __do_fast_syscall_32+0xb6/0x300 [ 508.631200][T11289] ? lockdep_hardirqs_on+0x98/0x140 [ 508.631239][T11289] do_fast_syscall_32+0x34/0x80 [ 508.631262][T11289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 508.631290][T11289] RIP: 0023:0xf70cd539 [ 508.631309][T11289] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 508.631329][T11289] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 508.631352][T11289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 508.631368][T11289] RDX: 0000000000000001 RSI: 0000000000000051 RDI: 0000000080000080 [ 508.631382][T11289] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 508.631395][T11289] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 508.631409][T11289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 508.631442][T11289] [ 509.553984][T11305] FAULT_INJECTION: forcing a failure. [ 509.553984][T11305] name failslab, interval 1, probability 0, space 0, times 0 [ 509.588298][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.0.1542 Not tainted syzkaller #0 PREEMPT(full) [ 509.588329][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.588343][T11305] Call Trace: [ 509.588352][T11305] [ 509.588363][T11305] dump_stack_lvl+0x189/0x250 [ 509.588392][T11305] ? __pfx____ratelimit+0x10/0x10 [ 509.588426][T11305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.588450][T11305] ? __pfx__printk+0x10/0x10 [ 509.588485][T11305] ? __pfx___might_resched+0x10/0x10 [ 509.588507][T11305] ? fs_reclaim_acquire+0x7d/0x100 [ 509.588535][T11305] should_fail_ex+0x414/0x560 [ 509.588569][T11305] should_failslab+0xa8/0x100 [ 509.588592][T11305] kmem_cache_alloc_node_noprof+0x77/0x700 [ 509.588614][T11305] ? __alloc_skb+0x112/0x2d0 [ 509.588640][T11305] __alloc_skb+0x112/0x2d0 [ 509.588663][T11305] netlink_dump+0x1b7/0xe90 [ 509.588690][T11305] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 509.588718][T11305] ? __pfx_netlink_dump+0x10/0x10 [ 509.588739][T11305] ? __kmalloc_cache_noprof+0x3d5/0x6e0 [ 509.588772][T11305] ? genl_start+0x581/0x6c0 [ 509.588795][T11305] __netlink_dump_start+0x5cb/0x7e0 [ 509.588823][T11305] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 509.588843][T11305] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 509.588861][T11305] ? genl_get_cmd+0x67f/0x910 [ 509.588881][T11305] ? __pfx_genl_start+0x10/0x10 [ 509.588896][T11305] ? __pfx_genl_dumpit+0x10/0x10 [ 509.588911][T11305] ? __pfx_genl_done+0x10/0x10 [ 509.588938][T11305] genl_rcv_msg+0x5da/0x790 [ 509.588960][T11305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.588976][T11305] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 509.588998][T11305] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 509.589020][T11305] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 509.589053][T11305] netlink_rcv_skb+0x208/0x470 [ 509.589076][T11305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.589094][T11305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.589130][T11305] ? down_read+0x274/0x2e0 [ 509.589151][T11305] ? genl_rcv+0xd/0x40 [ 509.589169][T11305] genl_rcv+0x28/0x40 [ 509.589185][T11305] netlink_unicast+0x82f/0x9e0 [ 509.589212][T11305] ? __pfx_netlink_unicast+0x10/0x10 [ 509.589235][T11305] ? netlink_sendmsg+0x642/0xb30 [ 509.589256][T11305] ? skb_put+0x11b/0x210 [ 509.589281][T11305] netlink_sendmsg+0x805/0xb30 [ 509.589311][T11305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.589337][T11305] ? __import_iovec+0x5d4/0x7f0 [ 509.589351][T11305] ? aa_sock_msg_perm+0xf1/0x1b0 [ 509.589371][T11305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 509.589387][T11305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.589414][T11305] __sock_sendmsg+0x21c/0x270 [ 509.589434][T11305] ____sys_sendmsg+0x505/0x820 [ 509.589462][T11305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.589490][T11305] ? kstrtouint+0x6e/0xe0 [ 509.589516][T11305] ___sys_sendmsg+0x21f/0x2a0 [ 509.589542][T11305] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.589571][T11305] ? rcu_read_lock_any_held+0xb3/0x120 [ 509.589615][T11305] ? __fget_files+0x2a/0x420 [ 509.589633][T11305] ? __fget_files+0x3a0/0x420 [ 509.589658][T11305] __sys_sendmsg+0x164/0x220 [ 509.589683][T11305] ? __pfx___sys_sendmsg+0x10/0x10 [ 509.589714][T11305] ? __pfx_ksys_write+0x10/0x10 [ 509.589740][T11305] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 509.589757][T11305] ? lockdep_hardirqs_on+0x98/0x140 [ 509.589783][T11305] __do_fast_syscall_32+0xb6/0x300 [ 509.589800][T11305] ? lockdep_hardirqs_on+0x98/0x140 [ 509.589826][T11305] do_fast_syscall_32+0x34/0x80 [ 509.589842][T11305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 509.589861][T11305] RIP: 0023:0xf6ffd539 [ 509.589875][T11305] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 509.589888][T11305] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 509.589909][T11305] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 509.589925][T11305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.589938][T11305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 509.589951][T11305] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 509.589964][T11305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 509.589997][T11305] [ 510.008662][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.255172][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1553'. [ 514.786307][ T855] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 515.198173][ T855] usb 5-1: Using ep0 maxpacket: 16 [ 515.262079][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.277414][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.303656][ T855] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 515.322693][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.339589][ T855] usb 5-1: config 0 descriptor?? [ 515.570805][T11367] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1557'. [ 515.710112][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 515.779566][ T855] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 515.807806][ T855] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 515.814925][ T855] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 515.919856][ T855] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 516.006667][ T855] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 516.047060][ T855] corsair 0003:1B1C:1B02.0024: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 516.160171][ T5951] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 516.405012][ T5951] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 516.416056][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.447539][ T5951] usb 3-1: Product: syz [ 516.470929][ T5951] usb 3-1: Manufacturer: syz [ 516.480320][ T5951] usb 3-1: SerialNumber: syz [ 517.183906][ T5951] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 517.204960][ T5951] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 517.773055][ T855] corsair 0003:1B1C:1B02.0024: Failed to get K90 initial state (error -71). [ 517.834023][ T855] usb 5-1: USB disconnect, device number 45 [ 518.459203][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.484656][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.069722][T11393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.347665][ T5924] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 519.507641][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 519.536356][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.554386][ T5924] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 519.565017][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.606612][T11403] FAULT_INJECTION: forcing a failure. [ 519.606612][T11403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.629273][ T5924] usb 1-1: config 0 descriptor?? [ 519.882692][T11403] CPU: 1 UID: 0 PID: 11403 Comm: syz.1.1567 Not tainted syzkaller #0 PREEMPT(full) [ 519.882727][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.882743][T11403] Call Trace: [ 519.882752][T11403] [ 519.882764][T11403] dump_stack_lvl+0x189/0x250 [ 519.882800][T11403] ? __pfx____ratelimit+0x10/0x10 [ 519.882834][T11403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.882859][T11403] ? __pfx__printk+0x10/0x10 [ 519.882890][T11403] ? __might_fault+0xb0/0x130 [ 519.882935][T11403] should_fail_ex+0x414/0x560 [ 519.882970][T11403] _copy_from_user+0x2d/0xb0 [ 519.882996][T11403] ia32_restore_sigcontext+0xe5/0x5b0 [ 519.883033][T11403] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 519.883063][T11403] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 519.883119][T11403] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.883152][T11403] ? lockdep_hardirqs_on+0x98/0x140 [ 519.883191][T11403] __ia32_compat_sys_rt_sigreturn+0x1a9/0x260 [ 519.883231][T11403] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 519.883274][T11403] ? do_int80_emulation+0xec/0x3f0 [ 519.883306][T11403] ? asm_int80_emulation+0x1a/0x20 [ 519.883329][T11403] do_int80_emulation+0x126/0x3f0 [ 519.883354][T11403] ? clear_bhb_loop+0x60/0xb0 [ 519.883377][T11403] ? clear_bhb_loop+0x60/0xb0 [ 519.883406][T11403] asm_int80_emulation+0x1a/0x20 [ 519.883427][T11403] RIP: 0023:0xf703d567 [ 519.883446][T11403] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 77 00 00 00 cd 80 90 90 90 90 90 90 90 90 b8 ad 00 00 00 cd 80 <90> 90 90 90 90 90 90 90 90 f3 0f 1e fb 55 89 e5 53 57 56 83 ec 34 [ 519.883466][T11403] RSP: 002b:00000000f542d080 EFLAGS: 00000282 ORIG_RAX: 00000000000000ad [ 519.883489][T11403] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f542d10c [ 519.883505][T11403] RDX: 00000000f542d08c RSI: 0000000000000000 RDI: 0000000000000000 [ 519.883520][T11403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.883533][T11403] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 519.883546][T11403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.883579][T11403] [ 520.282921][T11406] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 520.301104][ T5924] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 520.561468][T11409] FAULT_INJECTION: forcing a failure. [ 520.561468][T11409] name failslab, interval 1, probability 0, space 0, times 0 [ 520.788033][T11409] CPU: 1 UID: 0 PID: 11409 Comm: syz.1.1568 Not tainted syzkaller #0 PREEMPT(full) [ 520.788066][T11409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.788081][T11409] Call Trace: [ 520.788093][T11409] [ 520.788105][T11409] dump_stack_lvl+0x189/0x250 [ 520.788133][T11409] ? __pfx____ratelimit+0x10/0x10 [ 520.788166][T11409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.788190][T11409] ? __pfx__printk+0x10/0x10 [ 520.788226][T11409] ? __pfx___might_resched+0x10/0x10 [ 520.788253][T11409] should_fail_ex+0x414/0x560 [ 520.788299][T11409] should_failslab+0xa8/0x100 [ 520.788325][T11409] kmem_cache_alloc_node_noprof+0x77/0x700 [ 520.788355][T11409] ? __alloc_skb+0x112/0x2d0 [ 520.788382][T11409] __alloc_skb+0x112/0x2d0 [ 520.788418][T11409] netlink_ack+0x146/0xa50 [ 520.788455][T11409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.788500][T11409] netlink_rcv_skb+0x28c/0x470 [ 520.788523][T11409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.788542][T11409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.788595][T11409] ? down_read+0x274/0x2e0 [ 520.788617][T11409] ? genl_rcv+0xd/0x40 [ 520.788643][T11409] genl_rcv+0x28/0x40 [ 520.788665][T11409] netlink_unicast+0x82f/0x9e0 [ 520.788693][T11409] ? __pfx_netlink_unicast+0x10/0x10 [ 520.788720][T11409] ? netlink_sendmsg+0x642/0xb30 [ 520.788753][T11409] ? skb_put+0x11b/0x210 [ 520.788787][T11409] netlink_sendmsg+0x805/0xb30 [ 520.788827][T11409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.788855][T11409] ? aa_sock_msg_perm+0xf1/0x1b0 [ 520.788908][T11409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.788934][T11409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.788967][T11409] __sock_sendmsg+0x21c/0x270 [ 520.788997][T11409] __sys_sendto+0x3bd/0x520 [ 520.789031][T11409] ? __pfx___sys_sendto+0x10/0x10 [ 520.789081][T11409] ? __might_fault+0xb0/0x130 [ 520.789135][T11409] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 520.789153][T11409] ? __fget_files+0x3a0/0x420 [ 520.789173][T11409] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 520.789196][T11409] ? fput+0xa0/0xd0 [ 520.789224][T11409] ? ksys_write+0x22a/0x250 [ 520.789254][T11409] ? exc_page_fault+0x82/0x100 [ 520.789289][T11409] ? __pfx_ksys_write+0x10/0x10 [ 520.789314][T11409] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 520.789332][T11409] ? lockdep_hardirqs_on+0x98/0x140 [ 520.789370][T11409] __do_fast_syscall_32+0xb6/0x300 [ 520.789394][T11409] ? lockdep_hardirqs_on+0x98/0x140 [ 520.789430][T11409] do_fast_syscall_32+0x34/0x80 [ 520.789450][T11409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 520.789478][T11409] RIP: 0023:0xf703d539 [ 520.789498][T11409] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 520.789518][T11409] RSP: 002b:00000000f542c430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 520.789542][T11409] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f542c444 [ 520.789557][T11409] RDX: 0000000000000000 RSI: 00000000f542c560 RDI: 00000000f73d6ff4 [ 520.789570][T11409] RBP: 00000000f542c560 R08: 0000000000000000 R09: 0000000000000000 [ 520.789583][T11409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 520.789597][T11409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.789620][T11409] [ 521.120187][ T5951] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 521.133123][ T5951] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 521.144053][ T5951] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 521.662587][ T5951] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 521.774746][ T5951] usb 3-1: USB disconnect, device number 52 [ 521.892959][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 521.991115][ T5924] usb 1-1: USB disconnect, device number 63 [ 522.699763][ T5951] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 522.758981][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 522.794169][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 523.708761][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 524.205781][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.304142][ T5951] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 524.394560][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.672967][ T5951] usb 1-1: config 0 descriptor?? [ 525.010597][T11433] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1574'. [ 525.119236][T11418] tipc: Enabled bearer , priority 10 [ 525.176974][ T5951] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 525.199319][ T5924] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 525.377695][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 525.418370][ T5924] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 525.456313][ T5951] usb 1-1: USB disconnect, device number 64 [ 525.477726][ T5924] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 525.488621][ T5924] usb 4-1: can't read configurations, error -22 [ 525.550932][T11435] netlink: 'syz.4.1575': attribute type 12 has an invalid length. [ 525.675777][ T5924] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 525.857645][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 525.864119][ T5924] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 525.874395][ T5924] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 525.883722][ T5924] usb 4-1: can't read configurations, error -22 [ 525.892724][ T5924] usb usb4-port1: attempt power cycle [ 525.900136][T11439] bond0: (slave team0): Releasing backup interface [ 525.934880][T11439] team0 (unregistering): Failed to send options change via netlink (err -105) [ 526.035079][T11439] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 526.110861][T11439] team0 (unregistering): Port device team_slave_0 removed [ 526.130721][T11439] team0 (unregistering): Failed to send options change via netlink (err -105) [ 526.146412][T11439] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 526.182463][T11439] team0 (unregistering): Port device team_slave_1 removed [ 526.287800][ T5924] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 526.328340][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 526.347165][ T5924] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 526.398976][ T5924] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 526.416428][ T5924] usb 4-1: can't read configurations, error -22 [ 526.481220][T11455] netlink: 'syz.2.1580': attribute type 2 has an invalid length. [ 526.567717][ T5924] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 526.598426][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 526.604431][ T5924] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 526.613592][ T5924] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 526.622834][ T5924] usb 4-1: can't read configurations, error -22 [ 526.629837][ T5924] usb usb4-port1: unable to enumerate USB device [ 526.970383][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 527.362937][T11466] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1583'. [ 527.389665][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 527.490166][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 527.716092][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1586'. [ 528.068509][ T5951] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 528.318397][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 528.406512][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.438118][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.459286][ T5951] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 528.531940][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.604069][ T5951] usb 3-1: config 0 descriptor?? [ 529.036075][ T5951] corsair 0003:1B1C:1B02.0027: unknown main item tag 0x0 [ 529.048637][ T5951] corsair 0003:1B1C:1B02.0027: unknown main item tag 0x0 [ 529.065300][ T5951] corsair 0003:1B1C:1B02.0027: unknown main item tag 0x0 [ 529.081058][ T5951] corsair 0003:1B1C:1B02.0027: unknown main item tag 0x0 [ 529.108622][ T5951] corsair 0003:1B1C:1B02.0027: unknown main item tag 0x0 [ 529.141110][ T5951] corsair 0003:1B1C:1B02.0027: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 529.179638][ T9725] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 529.407421][ T5951] corsair 0003:1B1C:1B02.0027: Failed to get K90 initial state (error -71). [ 529.422356][T11487] netlink: 'syz.0.1590': attribute type 12 has an invalid length. [ 529.459186][ T5951] usb 3-1: USB disconnect, device number 53 [ 529.538583][ T9725] usb 4-1: Using ep0 maxpacket: 16 [ 529.548001][ T9725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.574044][ T9725] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 529.594674][T11488] fido_id[11488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 529.611961][ T9725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.632954][ T9725] usb 4-1: config 0 descriptor?? [ 530.070082][T11482] tipc: Enabled bearer , priority 10 [ 530.106179][ T9725] mcp2221 0003:04D8:00DD.0028: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 530.210453][T11496] bridge0: port 3(batadv0) entered disabled state [ 530.218031][T11496] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.225439][T11496] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.334124][ T9725] usb 4-1: USB disconnect, device number 46 [ 531.199229][T11511] random: crng reseeded on system resumption [ 531.297225][ T5924] tipc: Node number set to 503523148 [ 531.937396][T11514] netlink: 'syz.3.1595': attribute type 2 has an invalid length. [ 532.390201][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 532.475930][T11525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.848010][ T855] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 533.047854][ T855] usb 5-1: Using ep0 maxpacket: 16 [ 533.070976][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.088271][ T855] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 534.278490][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.311589][ T855] usb 5-1: config 0 descriptor?? [ 534.358838][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 534.428027][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 534.729302][ T855] mcp2221 0003:04D8:00DD.0029: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 534.768157][T11557] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1604'. [ 534.784634][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1604'. [ 535.563824][T11562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1606'. [ 535.668574][ T5924] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 535.798521][ T9725] usb 5-1: USB disconnect, device number 46 [ 535.837719][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 535.862052][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.878808][ T5924] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 535.888542][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.907876][ T5945] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 535.916367][ T5924] usb 4-1: config 0 descriptor?? [ 536.089306][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 536.099438][T11568] netlink: 'syz.4.1608': attribute type 2 has an invalid length. [ 536.111350][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.123489][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.135735][ T5945] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 536.145574][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.173469][ T5945] usb 3-1: config 0 descriptor?? [ 536.338491][T11560] tipc: Enabling of bearer rejected, already enabled [ 536.370118][ T5924] mcp2221 0003:04D8:00DD.002A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 536.573786][ T9725] usb 4-1: USB disconnect, device number 47 [ 536.601033][ T5945] corsair 0003:1B1C:1B02.002B: unknown main item tag 0x0 [ 536.618196][ T5945] corsair 0003:1B1C:1B02.002B: unknown main item tag 0x0 [ 536.630534][ T5945] corsair 0003:1B1C:1B02.002B: unknown main item tag 0x0 [ 536.644919][ T5945] corsair 0003:1B1C:1B02.002B: unknown main item tag 0x0 [ 536.659751][ T5945] corsair 0003:1B1C:1B02.002B: unknown main item tag 0x0 [ 536.695597][ T5945] corsair 0003:1B1C:1B02.002B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 536.799315][ T5945] corsair 0003:1B1C:1B02.002B: Failed to get K90 initial state (error -71). [ 536.840400][ T5945] usb 3-1: USB disconnect, device number 54 [ 536.900116][T11569] fido_id[11569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 536.934741][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'. [ 537.204553][T11580] netlink: 'syz.1.1621': attribute type 2 has an invalid length. [ 537.226423][T11581] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1611'. [ 537.241195][T11581] bond_slave_0: entered promiscuous mode [ 537.246962][T11581] bond_slave_1: entered promiscuous mode [ 537.398372][ T9725] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 537.548330][ T9725] usb 5-1: Using ep0 maxpacket: 16 [ 537.570709][ T9725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.596936][ T9725] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 537.606882][ T9725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.621403][ T9725] usb 5-1: config 0 descriptor?? [ 537.915128][T11591] random: crng reseeded on system resumption [ 537.970452][T11590] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.978133][T11590] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.909728][T11577] tipc: Enabled bearer , priority 10 [ 538.928713][ T9725] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 539.126008][ T5924] usb 5-1: USB disconnect, device number 47 [ 539.652378][T11610] netlink: 'syz.0.1626': attribute type 2 has an invalid length. [ 539.884759][T11618] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 539.896701][T11618] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 539.905159][T11618] CPU: 1 UID: 0 PID: 11618 Comm: syz.4.1618 Not tainted syzkaller #0 PREEMPT(full) [ 539.914546][T11618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.924625][T11618] RIP: 0010:fd_install+0x57/0x3d0 [ 539.929682][T11618] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 c7 4c e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 539.949313][T11618] RSP: 0018:ffffc9000e647c40 EFLAGS: 00010202 [ 539.955405][T11618] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 539.963394][T11618] RDX: ffffc9000cbad000 RSI: 00000000000000f3 RDI: 00000000000000f4 [ 539.971386][T11618] RBP: dffffc0000000000 R08: ffff88807e9b0523 R09: 1ffff1100fd360a4 [ 539.979380][T11618] R10: dffffc0000000000 R11: ffffed100fd360a5 R12: 0000000000000003 [ 539.987365][T11618] R13: 0000000000000003 R14: 0000000000000001 R15: ffff8880258b30c0 [ 539.995348][T11618] FS: 0000000000000000(0000) GS:ffff8881261c5000(0063) knlGS:00000000f54bdb40 [ 540.004296][T11618] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 540.010895][T11618] CR2: 00000000f7456288 CR3: 00000000769d0000 CR4: 00000000003526f0 [ 540.018891][T11618] Call Trace: [ 540.022186][T11618] [ 540.025159][T11618] ? do_mq_open+0x595/0x770 [ 540.029690][T11618] do_mq_open+0x5a0/0x770 [ 540.034043][T11618] ? __pfx_do_mq_open+0x10/0x10 [ 540.038920][T11618] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 540.044573][T11618] ? lockdep_hardirqs_on+0x98/0x140 [ 540.049800][T11618] ? __pfx___ia32_compat_sys_mq_open+0x10/0x10 [ 540.056068][T11618] ? __ia32_compat_sys_rt_sigprocmask+0x25b/0x390 [ 540.062496][T11618] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 540.069268][T11618] ? ret_from_fork_asm+0x1a/0x30 [ 540.074228][T11618] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 540.080937][T11618] ? lockdep_hardirqs_on+0x98/0x140 [ 540.086168][T11618] __do_fast_syscall_32+0xb6/0x300 [ 540.091295][T11618] do_fast_syscall_32+0x34/0x80 [ 540.096156][T11618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.102499][T11618] RIP: 0023:0xf70cd539 [ 540.106576][T11618] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 540.126198][T11618] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000115 [ 540.134632][T11618] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000000008c2 [ 540.142628][T11618] RDX: 00000000000000b3 RSI: 0000000080000080 RDI: 0000000000000000 [ 540.150623][T11618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.158620][T11618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.166601][T11618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.174591][T11618] [ 540.177637][T11618] Modules linked in: [ 540.181992][T11618] ---[ end trace 0000000000000000 ]--- [ 540.229512][T11618] RIP: 0010:fd_install+0x57/0x3d0 [ 540.241839][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 540.251553][T11618] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 c7 4c e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 540.277730][T11620] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1618'. [ 540.382572][T11620] netlink: 'syz.4.1618': attribute type 1 has an invalid length. [ 540.398538][T11620] netlink: 'syz.4.1618': attribute type 1 has an invalid length. [ 540.408053][T11620] netlink: 'syz.4.1618': attribute type 1 has an invalid length. [ 540.508625][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 540.534610][T11618] RSP: 0018:ffffc9000e647c40 EFLAGS: 00010202 [ 540.545530][T11618] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 540.555173][T11618] RDX: ffffc9000cbad000 RSI: 00000000000000f3 RDI: 00000000000000f4 [ 540.701080][T11618] RBP: dffffc0000000000 R08: ffff88807e9b0523 R09: 1ffff1100fd360a4 [ 540.710781][T11618] R10: dffffc0000000000 R11: ffffed100fd360a5 R12: 0000000000000003 [ 540.737091][T11618] R13: 0000000000000003 R14: 0000000000000001 R15: ffff8880258b30c0 [ 540.756041][T11618] FS: 0000000000000000(0000) GS:ffff8881261c5000(0063) knlGS:00000000f54bdb40 [ 540.799928][T11618] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 540.806649][T11618] CR2: 0000000080108018 CR3: 00000000769d0000 CR4: 00000000003526f0 [ 540.832846][T11618] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 540.847966][T11618] DR3: ffffffffeff7ff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 540.857500][T11618] Kernel panic - not syncing: Fatal exception [ 540.863969][T11618] Kernel Offset: disabled [ 540.868304][T11618] Rebooting in 86400 seconds..