last executing test programs: 5m39.048768769s ago: executing program 0 (id=3534): socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2000}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m23.759771378s ago: executing program 32 (id=3534): socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2000}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m19.237060638s ago: executing program 3 (id=3560): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) 5m19.05011388s ago: executing program 3 (id=3563): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace$poke(0xf, 0x0, 0x0, 0x4) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x5, r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x10}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYBLOB="040007e1050083e29e99a45f1db363bf50a2cfe47905000900010002000800"], 0x16) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x45) sendmsg$inet6(r0, 0x0, 0x4048043) 5m15.057294653s ago: executing program 3 (id=3573): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5m9.449050318s ago: executing program 3 (id=3576): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x34, r3, 0x801, 0x70bd2b, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1c5}]}, 0x34}}, 0x0) 5m1.570861309s ago: executing program 33 (id=3565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x26020480) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000069, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x140f, 0x1, 0x800000, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xfffffffffffffdb8, 0x45, 'issm\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) gettid() openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, 0x0, 0x0) writev(r5, &(0x7f0000000380)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) timer_create(0x0, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0}) inotify_init1(0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 5m1.259660914s ago: executing program 3 (id=3579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000"], &(0x7f0000000180)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000940)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 5m0.856567261s ago: executing program 3 (id=3581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0xfffffffffffffcd7, 0x2, {0x6, 0x80, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000800) 4m53.835068436s ago: executing program 4 (id=3597): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4m52.405370397s ago: executing program 5 (id=3547): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r3, 0x0, &(0x7f0000000500)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7765772064656661756c7420757365723a73797a2030303030303030303030373234000095f711372275ff1cd87534e9df7c7e1bdbed0b5e6bc71db2bd3d3bb7508023491e54668469f11cd51b350ac09c09c19d051594c1cc453e0f5a65289fd460a370ccac8c5f324082ed8ae2829426b001"], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) 4m42.436679358s ago: executing program 34 (id=3584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4m42.236186373s ago: executing program 35 (id=3581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0xfffffffffffffcd7, 0x2, {0x6, 0x80, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000800) 4m42.211749901s ago: executing program 4 (id=3600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000006}]}}}}}}}, 0x0) 4m42.039282119s ago: executing program 4 (id=3601): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8004) 4m41.456919183s ago: executing program 4 (id=3602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x300}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60006010}, 0x200008c2) 4m41.403600359s ago: executing program 6 (id=3577): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x14}, @mpls={[], @ipv6=@icmpv6={0xc, 0x6, "2c6eab", 0x8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x4, 0x9}}}}}, 0x3e) 4m41.124991018s ago: executing program 4 (id=3603): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = socket$alg(0x26, 0x5, 0x0) sendfile(r3, r0, 0x0, 0x9) 4m41.0208207s ago: executing program 6 (id=3604): openat$fb0(0xffffffffffffff9c, 0x0, 0x400601, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x1c, 0x8f, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x5}, {@empty, 0x1}]}]}}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 4m29.030308083s ago: executing program 36 (id=3547): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r3, 0x0, &(0x7f0000000500)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7765772064656661756c7420757365723a73797a2030303030303030303030373234000095f711372275ff1cd87534e9df7c7e1bdbed0b5e6bc71db2bd3d3bb7508023491e54668469f11cd51b350ac09c09c19d051594c1cc453e0f5a65289fd460a370ccac8c5f324082ed8ae2829426b001"], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) 4m28.332535288s ago: executing program 6 (id=3606): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x101d0) 4m28.331053506s ago: executing program 4 (id=3607): openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x6, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x400009, 0x1, 0x3, 0x4, 0x0, 0x9, 0x6, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x5, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x80000008, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x40000009, 0x9, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x1, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) landlock_create_ruleset(&(0x7f0000000140)={0x9300, 0x0, 0x1}, 0x18, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x474, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}, {0x4}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x474}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3m59.621542966s ago: executing program 37 (id=3606): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x101d0) 3m38.315139509s ago: executing program 38 (id=3607): openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x6, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x400009, 0x1, 0x3, 0x4, 0x0, 0x9, 0x6, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x5, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x80000008, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x40000009, 0x9, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x1, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) landlock_create_ruleset(&(0x7f0000000140)={0x9300, 0x0, 0x1}, 0x18, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x474, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}, {0x4}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x474}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2m34.671264821s ago: executing program 0 (id=3608): timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) unshare(0x40000000) setitimer(0x1, 0x0, 0x0) 2m34.369634346s ago: executing program 0 (id=3642): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000005280)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000006c0)}], 0x1}}], 0x1, 0x44) listen(r0, 0x100101) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) dup2(r3, r1) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 2m31.247894841s ago: executing program 0 (id=3651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x17, 0x800, 0x9f, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {0x0}, {&(0x7f0000003480)=""/172, 0xac}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/108, 0x6c}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/170, 0xaa}], 0x3, &(0x7f0000001e80)=""/4080, 0xff0}}], 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {&(0x7f0000004540)=""/240, 0xf0}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) 2m30.747198351s ago: executing program 0 (id=3659): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0xff7ffff7) eventfd(0x4) syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) userfaultfd(0x80801) pipe2$9p(&(0x7f0000000040), 0x0) socket$inet6(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0xff}, {&(0x7f0000001480)="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", 0xc01}], 0x3) 2m29.978721367s ago: executing program 0 (id=3663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) (fail_nth: 5) 2m29.293399293s ago: executing program 39 (id=3663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) (fail_nth: 5) 6.896908644s ago: executing program 1 (id=4416): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\b\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'tunl0\x00', 0x0}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000100"], 0x48) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0x4018aee3, &(0x7f0000000000)) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) 5.721029881s ago: executing program 9 (id=4421): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x207}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000) 5.674916401s ago: executing program 9 (id=4422): syz_emit_ethernet(0x33, &(0x7f0000000cc0)=ANY=[@ANYBLOB="e90c610faca2bbbbbbbbbbbb0800450000250000e0000000119078a10400001e94fc90f600"/51], 0x0) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x12, 0x0, @opaque="3a18adf0273224539e7c"}}}}}, 0x0) 5.612744685s ago: executing program 9 (id=4423): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) gettid() socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000b80)="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", 0xce}], 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x260}], 0x1, 0x40800) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x2, 0x10a5, 0x3, 0x0, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000000280)={0x4}) 4.73290056s ago: executing program 8 (id=4426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18a00, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0501c000080054"], 0xfdef) (async) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x209000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 4.589296424s ago: executing program 9 (id=4427): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$vim2m(0x0, 0x1000, 0x2) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x1}, {r4, 0xe000}, {r3, 0x4}, {r2, 0x75d2fd647345b897}, {r1, 0x400}, {r5, 0x4604}, {r0, 0x103}, {0xffffffffffffffff, 0x4084}, {r1, 0x10}, {r2, 0x2000}], 0xa, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x9]}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x5}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000380)='syz0\x00') ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) r7 = syz_io_uring_setup(0x422, &(0x7f00000000c0)={0x0, 0x20079af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = socket$kcm(0x2, 0x3, 0x2) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r10, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x801}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4.460760174s ago: executing program 8 (id=4429): syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = gettid() kcmp(r4, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x1000) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="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", 0x120}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0xff00) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 4.254648011s ago: executing program 2 (id=4430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c514000300697036677265300000000000d53210df6a"], 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (fail_nth: 2) 3.836936386s ago: executing program 1 (id=4432): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x0, 0x0, 0x4, "a7212277"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) 3.387954534s ago: executing program 9 (id=4433): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1, &(0x7f0000000280)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x40002162, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f73322e6c32746c8c"]) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x4e21, @multicast1}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0xd0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010026bd70000400000005000000080009000200000008000c00a50a000008000b00000000000600010007000000"], 0x34}}, 0x20) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r11, 0x80487436, &(0x7f0000001500)) sched_setattr(0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008860) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) shmctl$SHM_INFO(0x0, 0xe, 0x0) 3.208379643s ago: executing program 8 (id=4434): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100), &(0x7f0000000240)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r1, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 3.127847464s ago: executing program 2 (id=4435): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0xb84, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "75587ba42f58777c5457b426fee6056656be4cdd"}}]}, @TIPC_NLA_NODE={0xae0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xadc, 0x3, "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"}]}]}, 0xb84}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 3.115517963s ago: executing program 8 (id=4436): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x0, 0xb641}, 0xc) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x80000000}, {0xa, 0x4e20, 0x0, @mcast2}, 0x0, {[0x7, 0xfffffffc, 0x10001, 0x0, 0x6, 0x0, 0x3b62]}}, 0x5c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x108001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xfaf}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 1.676837114s ago: executing program 2 (id=4438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0xb44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xadc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xad5, 0x3, "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"}]}]}, 0xb44}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 1.395814653s ago: executing program 8 (id=4441): io_setup(0x80000000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000003d00000000000000000000000000000000000000003a000b007b000000ff0f0000fdffffff5f000000d82aa543cc86ecc8b05f8cc9dbb0c73604551a6676a3e4923a3d8aefa77883e71ed0c4e91dc4062c27acfb32d152f46cec53fbeac9a250c356836ee396ba0ea562a09e45b052"], 0x152) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$kcm(0x29, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000100)={0x0, 0xf18e3e9029660614, "307c934443d8d5b50500000000007800", {0xa, 0x10000a6}, 0x7fff}) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x34000}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003040)="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", 0x21d}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4a20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, &(0x7f0000001c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x50}}], 0x2, 0x4044051) r6 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050027bd700100ffffffe400562823282500", @ANYRES32=r7, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='T\x84W1ce', &(0x7f00000000c0)='CQ2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) socket$isdn(0x22, 0x2, 0x22) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000ffc000/0x1000)=nil) 1.39217411s ago: executing program 2 (id=4442): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x26a00, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) close(0x3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x5, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}}, 0x108) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000080), 0x5f43, 0x12b143) fremovexattr(r4, &(0x7f0000000500)=@known='system.posix_acl_access\x00') r5 = syz_open_dev$video(&(0x7f00000002c0), 0x9, 0x240480) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000100)={0x2, 0x4, 0xe1}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x3, 0x40, 0x0, 0x7, 0x71, 0x1, 0x0, 0x3, 0x9, 0x5, 0x6, 0x0, 0x7, 0x1, 0xa, 0x4, 0x3, 0x0, '\x00', 0x6, 0x1432535f}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000200)) close(0x3) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000280)=0x10006) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TCSETSW(r9, 0x5432, 0x0) 1.316920838s ago: executing program 7 (id=4443): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000440)={0x0, 0x6, 0x37}) (fail_nth: 8) 1.010058636s ago: executing program 7 (id=4444): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'batadv_slave_0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x4000000000000}, 0x0) 1.009656684s ago: executing program 8 (id=4445): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x1a00, 0x6000, 0x0, 0x0}], 0x1}) 938.283571ms ago: executing program 2 (id=4446): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100), &(0x7f0000000240)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r1, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 869.885494ms ago: executing program 2 (id=4447): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ppoll(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x9]}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x5}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000380)='syz0\x00') ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1) r4 = syz_io_uring_setup(0x422, &(0x7f00000000c0)={0x0, 0x20079af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = socket$kcm(0x2, 0x3, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r7, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x801}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 800.827032ms ago: executing program 7 (id=4448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0xb84, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "75587ba42f58777c5457b426fee6056656be4cdd"}}]}, @TIPC_NLA_NODE={0xae0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xadc, 0x3, "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"}]}]}, 0xb84}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 800.06877ms ago: executing program 7 (id=4449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000040)) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}, @FRA_DST={0x8, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x2810) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000004c0)=0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 741.205917ms ago: executing program 1 (id=4450): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0xb80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "75587ba42f58777c5457b426fee6056656be4cdd"}}]}, @TIPC_NLA_NODE={0xadc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xad7, 0x3, "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"}]}]}, 0xb80}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 715.866059ms ago: executing program 7 (id=4451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x300}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60006010}, 0x200008c2) (fail_nth: 12) 414.542917ms ago: executing program 1 (id=4452): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x2f) (rerun: 32) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000400)="ec9bd6803a98a02ef9647e9688f5f3b659008b3d1a2b1d0f418f6fa73df387f85fe434aa3b91fb967f26d27988362d05e0ba4342785c65d3473c312cd1ee47e8024393acbfa4daf40fee07e415957fb2465687c2f3790e286d1273bd844e94536b2f21b84c6a90649ee98ac79d", 0x6d}], 0x1) (async, rerun: 32) fsopen(&(0x7f0000000000)='cpuset\x00', 0x1) (async, rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 64) 282.299709ms ago: executing program 9 (id=4453): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.812502][T19967] RSP: 002b:00007f6348ddf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.812526][T19967] RAX: ffffffffffffffda RBX: 00007f63481b5fa0 RCX: 00007f6347f8ebe9 [ 907.812542][T19967] RDX: 0000000000008004 RSI: 0000200000000040 RDI: 0000000000000004 [ 907.812554][T19967] RBP: 00007f6348ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 907.812567][T19967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.812579][T19967] R13: 00007f63481b6038 R14: 00007f63481b5fa0 R15: 00007f63482dfa28 [ 907.812598][T19967] [ 907.826989][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 908.116607][ T8111] dw2102: command 0x0e transfer failed. [ 908.122309][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 908.128494][ T8111] dw2102: command 0x0e transfer failed. [ 908.251042][T19985] program syz.9.3987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 908.449415][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 908.463524][ T8111] dw2102: command 0x0e transfer failed. [ 908.469498][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 908.475477][ T8111] dw2102: command 0x0e transfer failed. [ 908.481154][ T8111] dvb-usb: bulk message failed: -22 (1/0) [ 908.487100][ T8111] dw2102: command 0x51 transfer failed. [ 908.492879][ T8111] dvb-usb: bulk message failed: -22 (5/0) [ 908.685668][ T8111] dw2102: i2c probe for address 0x68 failed. [ 908.691979][ T8111] dvb-usb: bulk message failed: -22 (5/0) [ 908.697805][ T8111] dw2102: i2c probe for address 0x69 failed. [ 908.703987][ T8111] dvb-usb: bulk message failed: -22 (5/0) [ 908.709911][ T8111] dw2102: i2c probe for address 0x6a failed. [ 908.716000][ T8111] dw2102: probing for demodulator failed. Is the external power switched on? [ 908.724872][ T8111] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 908.879369][ T8111] rc_core: IR keymap rc-tt-1500 not found [ 908.886007][ T8111] Registered IR keymap rc-empty [ 908.898089][ T8111] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 908.910029][ T8111] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input48 [ 909.102596][ T8111] dvb-usb: schedule remote query interval to 250 msecs. [ 909.232381][ T8111] dw2102: su3000_power_ctrl: 0, initialized 1 [ 909.294458][ T8111] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 909.350304][T20008] netlink: 'syz.1.3993': attribute type 8 has an invalid length. [ 909.379698][ T8111] usb 3-1: USB disconnect, device number 89 [ 909.487259][ T8111] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 909.943756][T20018] block device autoloading is deprecated and will be removed. [ 909.951460][ T8111] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 909.962251][T20018] syz.1.3995: attempt to access beyond end of device [ 909.962251][T20018] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 910.354312][ T8111] usb 3-1: config 0 has no interfaces? [ 910.466062][ T8111] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 910.476098][ T8111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.484306][ T8111] usb 3-1: Product: syz [ 910.488706][ T8111] usb 3-1: Manufacturer: syz [ 910.509404][ T8111] usb 3-1: SerialNumber: syz [ 910.516694][ T8111] usb 3-1: config 0 descriptor?? [ 911.073323][T20039] FAULT_INJECTION: forcing a failure. [ 911.073323][T20039] name failslab, interval 1, probability 0, space 0, times 0 [ 911.116816][T20039] CPU: 1 UID: 0 PID: 20039 Comm: syz.9.4002 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 911.116850][T20039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 911.116861][T20039] Call Trace: [ 911.116866][T20039] [ 911.116871][T20039] dump_stack_lvl+0x189/0x250 [ 911.116892][T20039] ? __pfx____ratelimit+0x10/0x10 [ 911.116908][T20039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 911.116922][T20039] ? __pfx__printk+0x10/0x10 [ 911.116938][T20039] ? fs_reclaim_acquire+0x7d/0x100 [ 911.116955][T20039] ? __pfx___might_resched+0x10/0x10 [ 911.116966][T20039] ? lock_acquire+0x5f/0x360 [ 911.116983][T20039] should_fail_ex+0x414/0x560 [ 911.117000][T20039] should_failslab+0xa8/0x100 [ 911.117017][T20039] kmem_cache_alloc_noprof+0x73/0x3c0 [ 911.117033][T20039] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 911.117047][T20039] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 911.117062][T20039] mmu_topup_memory_caches+0x21/0x170 [ 911.117078][T20039] kvm_mmu_load+0x9d/0x22f0 [ 911.117093][T20039] ? vmx_set_apic_access_page_addr+0x6a0/0x8c0 [ 911.117107][T20039] ? __pfx_vmx_set_apic_access_page_addr+0x10/0x10 [ 911.117120][T20039] ? kvm_apic_has_interrupt+0x4b1/0x770 [ 911.117140][T20039] vcpu_run+0x484e/0x6fa0 [ 911.117177][T20039] ? __pfx_vcpu_run+0x10/0x10 [ 911.117191][T20039] ? __local_bh_enable_ip+0x12d/0x1c0 [ 911.117204][T20039] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 911.117219][T20039] ? rcu_is_watching+0x15/0xb0 [ 911.117231][T20039] ? lock_acquire+0x5f/0x360 [ 911.117249][T20039] ? rcu_is_watching+0x15/0xb0 [ 911.117260][T20039] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 911.117277][T20039] ? __mutex_trylock_common+0x153/0x260 [ 911.117290][T20039] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 911.117305][T20039] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 911.117320][T20039] ? rcu_is_watching+0x15/0xb0 [ 911.117331][T20039] ? trace_contention_end+0x39/0x120 [ 911.117344][T20039] ? __mutex_lock+0x335/0x1350 [ 911.117362][T20039] ? rcu_is_watching+0x15/0xb0 [ 911.117373][T20039] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 911.117390][T20039] ? rcu_is_watching+0x15/0xb0 [ 911.117408][T20039] ? lock_release+0x4b/0x3e0 [ 911.117424][T20039] ? get_task_pid+0x22/0x310 [ 911.117439][T20039] kvm_vcpu_ioctl+0x95c/0xe90 [ 911.117454][T20039] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 911.117467][T20039] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 911.117487][T20039] ? lock_release+0x4b/0x3e0 [ 911.117504][T20039] ? __fget_files+0x2a/0x420 [ 911.117514][T20039] ? __fget_files+0x3a0/0x420 [ 911.117524][T20039] ? __fget_files+0x2a/0x420 [ 911.117534][T20039] ? bpf_lsm_file_ioctl+0x9/0x20 [ 911.117549][T20039] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 911.117563][T20039] __se_sys_ioctl+0xf9/0x170 [ 911.117578][T20039] do_syscall_64+0xfa/0x3b0 [ 911.117595][T20039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.117607][T20039] ? clear_bhb_loop+0x60/0xb0 [ 911.117620][T20039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.117631][T20039] RIP: 0033:0x7fa48db8ebe9 [ 911.117644][T20039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.117655][T20039] RSP: 002b:00007fa48ea31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.117670][T20039] RAX: ffffffffffffffda RBX: 00007fa48ddb5fa0 RCX: 00007fa48db8ebe9 [ 911.117679][T20039] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 911.117687][T20039] RBP: 00007fa48ea31090 R08: 0000000000000000 R09: 0000000000000000 [ 911.117695][T20039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 911.117703][T20039] R13: 00007fa48ddb6038 R14: 00007fa48ddb5fa0 R15: 00007fa48dedfa28 [ 911.117715][T20039] [ 911.636762][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4004'. [ 911.646298][T20047] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.653694][T20047] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.709314][T20049] program syz.9.4005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 911.749611][ T8106] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 911.774132][T20051] fuse: Unknown parameter 'grou00000000000000000000' [ 911.849113][T20056] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4008'. [ 911.858979][T20056] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4008'. [ 911.911018][ T8106] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 911.932528][ T8106] usb 2-1: config 0 has no interface number 0 [ 911.987162][ T8106] usb 2-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62 [ 912.014120][ T8106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.035541][ T8106] usb 2-1: Product: syz [ 912.040083][ T8106] usb 2-1: Manufacturer: syz [ 912.044702][ T8106] usb 2-1: SerialNumber: syz [ 912.050285][ T8106] usb 2-1: config 0 descriptor?? [ 912.266870][ T92] usb 2-1: USB disconnect, device number 96 [ 912.459309][ T8111] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 912.609364][ T8111] usb 10-1: Using ep0 maxpacket: 16 [ 912.617783][ T8111] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 912.633057][ T8111] usb 10-1: config 0 interface 0 has no altsetting 0 [ 912.640635][ T8111] usb 10-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 912.650529][ T8111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.663276][ T8111] usb 10-1: config 0 descriptor?? [ 912.690718][ T8106] usb 3-1: USB disconnect, device number 90 [ 913.222815][T20088] vimc link validate: Scaler:src:16x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 913.717714][T20106] loop3: detected capacity change from 0 to 1 [ 913.742207][T20106] Dev loop3: unable to read RDB block 1 [ 913.752120][T20106] loop3: unable to read partition table [ 913.758606][T20106] loop3: partition table beyond EOD, truncated [ 913.766138][T20106] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 913.976015][T20111] kvm: kvm [20110]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x40000006) = 0x0 [ 914.356743][T20121] FAULT_INJECTION: forcing a failure. [ 914.356743][T20121] name failslab, interval 1, probability 0, space 0, times 0 [ 914.385003][T20121] CPU: 1 UID: 0 PID: 20121 Comm: syz.7.4027 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 914.385033][T20121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 914.385043][T20121] Call Trace: [ 914.385050][T20121] [ 914.385060][T20121] dump_stack_lvl+0x189/0x250 [ 914.385091][T20121] ? __pfx____ratelimit+0x10/0x10 [ 914.385115][T20121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.385147][T20121] ? __pfx__printk+0x10/0x10 [ 914.385174][T20121] ? __pfx___might_resched+0x10/0x10 [ 914.385193][T20121] ? lock_acquire+0x5f/0x360 [ 914.385221][T20121] should_fail_ex+0x414/0x560 [ 914.385247][T20121] should_failslab+0xa8/0x100 [ 914.385273][T20121] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 914.385298][T20121] ? __d_alloc+0x36/0x7a0 [ 914.385316][T20121] ? rcu_is_watching+0x15/0xb0 [ 914.385336][T20121] __d_alloc+0x36/0x7a0 [ 914.385354][T20121] d_alloc_parallel+0xe5/0x15e0 [ 914.385368][T20121] ? do_raw_spin_lock+0x121/0x290 [ 914.385385][T20121] ? rcu_is_watching+0x15/0xb0 [ 914.385396][T20121] ? dput+0x37/0x2b0 [ 914.385409][T20121] ? dput+0x37/0x2b0 [ 914.385423][T20121] ? lock_release+0x4b/0x3e0 [ 914.385449][T20121] ? __pfx_d_alloc_parallel+0x10/0x10 [ 914.385470][T20121] ? step_into+0x435/0xf30 [ 914.385488][T20121] ? __raw_spin_lock_init+0x45/0x100 [ 914.385508][T20121] ? __init_waitqueue_head+0xa9/0x150 [ 914.385523][T20121] __lookup_slow+0x116/0x3d0 [ 914.385537][T20121] ? __pfx___lookup_slow+0x10/0x10 [ 914.385551][T20121] ? bpf_lsm_inode_permission+0x9/0x20 [ 914.385567][T20121] ? security_inode_permission+0xb7/0x310 [ 914.385590][T20121] ? down_read+0x1ad/0x2e0 [ 914.385609][T20121] lookup_slow+0x53/0x70 [ 914.385629][T20121] walk_component+0x2d2/0x400 [ 914.385646][T20121] ? path_lookupat+0x156/0x430 [ 914.385666][T20121] path_lookupat+0x163/0x430 [ 914.385683][T20121] filename_lookup+0x212/0x570 [ 914.385697][T20121] ? __pfx_filename_lookup+0x10/0x10 [ 914.385712][T20121] ? __pfx_kfree_link+0x10/0x10 [ 914.385733][T20121] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 914.385756][T20121] ? getname_kernel+0x146/0x2f0 [ 914.385775][T20121] ? getname_kernel+0x20e/0x2f0 [ 914.385794][T20121] kern_path+0x35/0x50 [ 914.385813][T20121] tomoyo_realpath_nofollow+0x8b/0x100 [ 914.385829][T20121] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 914.385843][T20121] tomoyo_find_next_domain+0x251/0x1aa0 [ 914.385861][T20121] ? tomoyo_bprm_check_security+0xf0/0x180 [ 914.385873][T20121] ? rcu_is_watching+0x15/0xb0 [ 914.385889][T20121] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 914.385915][T20121] ? tomoyo_bprm_check_security+0xf0/0x180 [ 914.385935][T20121] tomoyo_bprm_check_security+0x11c/0x180 [ 914.385956][T20121] security_bprm_check+0x89/0x270 [ 914.385981][T20121] bprm_execve+0x8ee/0x1450 [ 914.385999][T20121] ? __pfx_bprm_execve+0x10/0x10 [ 914.386014][T20121] ? copy_string_kernel+0x25f/0x2a0 [ 914.386029][T20121] do_execveat_common+0x510/0x6a0 [ 914.386055][T20121] __x64_sys_execveat+0xc4/0xe0 [ 914.386080][T20121] do_syscall_64+0xfa/0x3b0 [ 914.386105][T20121] ? rcu_is_watching+0x15/0xb0 [ 914.386123][T20121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.386144][T20121] ? clear_bhb_loop+0x60/0xb0 [ 914.386156][T20121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.386168][T20121] RIP: 0033:0x7fcf23f8ebe9 [ 914.386181][T20121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.386194][T20121] RSP: 002b:00007fcf24db5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 914.386217][T20121] RAX: ffffffffffffffda RBX: 00007fcf241b5fa0 RCX: 00007fcf23f8ebe9 [ 914.386232][T20121] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 914.386245][T20121] RBP: 00007fcf24db5090 R08: 0000000000001000 R09: 0000000000000000 [ 914.386257][T20121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.386269][T20121] R13: 00007fcf241b6038 R14: 00007fcf241b5fa0 R15: 00007fcf242dfa28 [ 914.386289][T20121] [ 914.539510][ T8106] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 914.935540][T20099] vimc link validate: Scaler:src:16x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 915.024223][ T8106] usb 9-1: device descriptor read/64, error -71 [ 915.154206][ T8111] usbhid 10-1:0.0: can't add hid device: -71 [ 915.164906][ T8111] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 915.196417][ T8111] usb 10-1: USB disconnect, device number 15 [ 915.309470][ T8106] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 915.459456][ T8106] usb 9-1: device descriptor read/64, error -71 [ 915.537636][ T30] audit: type=1800 audit(1755475855.807:1168): pid=20148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4037" name="bus" dev="tmpfs" ino=428 res=0 errno=0 [ 915.569905][ T8106] usb usb9-port1: attempt power cycle [ 915.774651][T20153] binder: 20152:20153 ioctl 4018620d 0 returned -22 [ 915.929393][ T8106] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 915.952665][ T8106] usb 9-1: device descriptor read/8, error -71 [ 916.251841][ T8106] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 916.307689][ T8111] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 916.328917][T20159] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 916.340608][ T8106] usb 9-1: device descriptor read/8, error -71 [ 916.353058][T20163] tipc: Enabled bearer , priority 0 [ 916.360867][T20165] tipc: Started in network mode [ 916.367773][T20165] tipc: Node identity 32c619d457fb, cluster identity 4711 [ 916.377360][T20165] tipc: Enabled bearer , priority 0 [ 916.449940][ T8106] usb usb9-port1: unable to enumerate USB device [ 916.471763][ T8111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.484558][T20159] syzkaller0: entered promiscuous mode [ 916.490958][ T8111] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 916.506747][ T8111] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 916.518412][ T8111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.527487][ T8111] usb 2-1: Product: syz [ 916.532348][T20159] syzkaller0: entered allmulticast mode [ 916.538244][ T8111] usb 2-1: Manufacturer: syz [ 916.543279][ T8111] usb 2-1: SerialNumber: syz [ 916.557985][T20166] syzkaller0: entered promiscuous mode [ 916.564102][T20166] syzkaller0: entered allmulticast mode [ 916.577321][T20165] syzkaller0: mtu less than device minimum [ 916.588797][T20165] tipc: Resetting bearer [ 916.597455][T20165] tipc: Disabling bearer [ 916.776801][T20168] tipc: Resetting bearer [ 916.794351][T20158] tipc: Resetting bearer [ 916.808053][T20158] tipc: Disabling bearer [ 917.125574][T20179] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 917.729678][T20188] syz.8.4050: attempt to access beyond end of device [ 917.729678][T20188] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 917.792801][T20192] wg1: entered promiscuous mode [ 917.798432][T20192] wg1: entered allmulticast mode [ 918.093064][T20207] geneve2: entered promiscuous mode [ 918.098316][T20207] geneve2: entered allmulticast mode [ 918.752523][ T8111] cdc_ncm 2-1:1.0: bind() failure [ 918.768515][ T8111] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 918.780468][ T8111] cdc_ncm 2-1:1.1: bind() failure [ 918.804466][ T8111] usb 2-1: USB disconnect, device number 97 [ 919.140690][T17837] hid (null): unknown global tag 0xe [ 919.170915][T17837] hid-generic 04B7:0ED8:0002.001A: reserved main item tag 0xd [ 919.250410][T17837] hid-generic 04B7:0ED8:0002.001A: unknown main item tag 0x1 [ 919.263965][T17837] hid-generic 04B7:0ED8:0002.001A: unknown global tag 0xe [ 919.280021][T17837] hid-generic 04B7:0ED8:0002.001A: item 0 2 1 14 parsing failed [ 919.297053][T17837] hid-generic 04B7:0ED8:0002.001A: probe with driver hid-generic failed with error -22 [ 919.307686][ T30] audit: type=1326 audit(1755475859.577:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20228 comm="syz.7.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf23f8ebe9 code=0x7ffc0000 [ 919.388456][ T30] audit: type=1326 audit(1755475859.577:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20228 comm="syz.7.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcf23f8ebe9 code=0x7ffc0000 [ 919.519741][ T30] audit: type=1326 audit(1755475859.577:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20228 comm="syz.7.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf23f8ebe9 code=0x7ffc0000 [ 919.605401][ C0] vkms_vblank_simulate: vblank timer overrun [ 919.666282][T20236] vimc link validate: Scaler:src:16x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 919.721021][ T30] audit: type=1326 audit(1755475859.577:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20228 comm="syz.7.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf23f8ebe9 code=0x7ffc0000 [ 919.778080][ T30] audit: type=1326 audit(1755475859.577:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20228 comm="syz.7.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcf23f8ebe9 code=0x7ffc0000 [ 919.841408][ T30] audit: type=1326 audit(1755475859.577:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20228 comm="syz.7.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf23f8ebe9 code=0x7ffc0000 [ 919.953063][ T8111] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 920.003101][ T30] audit: type=1326 audit(1755475859.577:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20228 comm="syz.7.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf23f8ebe9 code=0x7ffc0000 [ 920.025561][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.052124][ T30] audit: type=1326 audit(1755475859.577:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20228 comm="syz.7.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcf23f8ebe9 code=0x7ffc0000 [ 920.074688][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.092760][ T30] audit: type=1326 audit(1755475859.577:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20228 comm="syz.7.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf23f8ebe9 code=0x7ffc0000 [ 920.140907][ T8111] usb 2-1: Using ep0 maxpacket: 8 [ 920.152947][ T8111] usb 2-1: unable to get BOS descriptor or descriptor too short [ 920.169393][ T8111] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 920.249290][ T8111] usb 2-1: config 4 has no interface number 0 [ 920.255467][ T8111] usb 2-1: config 4 interface 30 has no altsetting 0 [ 920.282151][ T8111] usb 2-1: string descriptor 0 read error: -22 [ 920.289132][ T8111] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 920.298284][ T8111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.315980][ T8111] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 920.344548][ T8111] dw2102: su3000_power_ctrl: 1, initialized 0 [ 920.361150][ T8111] dvb-usb: bulk message failed: -22 (2/0) [ 920.529912][ T8111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 920.553453][T20241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.586767][T20241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.608558][ T8111] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 920.618232][ T8111] usb 2-1: media controller created [ 920.635808][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 920.642863][ T8111] dw2102: i2c transfer failed. [ 920.647785][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 920.662690][ T8111] dw2102: i2c transfer failed. [ 920.667547][T20260] dvb-usb: bulk message failed: -22 (3/0) [ 920.673694][T20260] dw2102: i2c transfer failed. [ 920.679196][T20260] dvb-usb: bulk message failed: -22 (3/0) [ 920.686174][T20260] dw2102: i2c transfer failed. [ 920.712104][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 920.724840][ T8111] dw2102: i2c transfer failed. [ 920.735362][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 920.764548][ T8111] dw2102: i2c transfer failed. [ 920.770712][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 920.776607][ T8111] dw2102: i2c transfer failed. [ 920.783186][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 920.789031][ T8111] dw2102: i2c transfer failed. [ 920.795387][ T8111] dvb-usb: MAC address: 02:02:02:02:02:02 [ 921.008194][ T8111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 921.069970][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 921.077730][ T8111] dw2102: command 0x0e transfer failed. [ 921.196452][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 921.206844][ T8111] dw2102: command 0x0e transfer failed. [ 921.520335][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 921.597773][ T8111] dw2102: command 0x0e transfer failed. [ 921.623854][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 921.629979][ T8111] dw2102: command 0x0e transfer failed. [ 921.636064][ T8111] dvb-usb: bulk message failed: -22 (1/0) [ 921.642678][ T8111] dw2102: command 0x51 transfer failed. [ 921.649474][ T8111] dvb-usb: bulk message failed: -22 (5/0) [ 921.655307][ T8111] dw2102: i2c probe for address 0x68 failed. [ 921.665454][ T8111] dvb-usb: bulk message failed: -22 (5/0) [ 921.671526][ T8111] dw2102: i2c probe for address 0x69 failed. [ 921.677649][ T8111] dvb-usb: bulk message failed: -22 (5/0) [ 921.691403][ T8111] dw2102: i2c probe for address 0x6a failed. [ 921.697438][ T8111] dw2102: probing for demodulator failed. Is the external power switched on? [ 921.706617][ T8111] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 921.799440][ T8111] rc_core: IR keymap rc-tt-1500 not found [ 921.805411][ T8111] Registered IR keymap rc-empty [ 921.814981][ T8111] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 921.832962][ T8111] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input49 [ 921.849967][ T8111] dvb-usb: schedule remote query interval to 250 msecs. [ 921.867706][ T8111] dw2102: su3000_power_ctrl: 0, initialized 1 [ 921.923004][ T8111] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 921.948777][ T8111] usb 2-1: USB disconnect, device number 98 [ 922.138033][ T8111] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 923.069373][ T92] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 923.292553][ T92] usb 9-1: Using ep0 maxpacket: 8 [ 923.301308][ T92] usb 9-1: unable to get BOS descriptor or descriptor too short [ 923.361740][ T92] usb 9-1: config 4 has an invalid interface number: 30 but max is 0 [ 923.370355][ T92] usb 9-1: config 4 has no interface number 0 [ 923.387730][ T92] usb 9-1: config 4 interface 30 has no altsetting 0 [ 923.399534][ T92] usb 9-1: string descriptor 0 read error: -22 [ 923.406082][ T92] usb 9-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 923.469115][ T92] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.497444][T20301] vimc link validate: Scaler:src:16x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 923.535808][ T92] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 923.567880][ T92] dw2102: su3000_power_ctrl: 1, initialized 0 [ 923.620948][ T92] dvb-usb: bulk message failed: -22 (2/0) [ 923.761238][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 923.761535][T20289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.797709][ T92] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 923.811245][ T92] usb 9-1: media controller created [ 923.827656][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 923.839799][ T92] dw2102: i2c transfer failed. [ 923.844602][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 923.859341][ T92] dw2102: i2c transfer failed. [ 923.871008][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 923.883412][ T92] dw2102: i2c transfer failed. [ 923.893872][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 923.900683][T20289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.910342][ T92] dw2102: i2c transfer failed. [ 923.928016][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 924.117707][ T92] dw2102: i2c transfer failed. [ 924.135157][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 924.276915][ T92] dw2102: i2c transfer failed. [ 924.285529][ T92] dvb-usb: MAC address: 02:02:02:02:02:02 [ 924.298656][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 924.317583][ T92] dvb-usb: bulk message failed: -22 (3/0) [ 924.327467][ T92] dw2102: command 0x0e transfer failed. [ 924.338598][ T92] dvb-usb: bulk message failed: -22 (3/0) [ 924.349379][ T92] dw2102: command 0x0e transfer failed. [ 924.680590][ T92] dvb-usb: bulk message failed: -22 (3/0) [ 924.686378][ T92] dw2102: command 0x0e transfer failed. [ 924.896143][T20328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 924.919751][ T92] dvb-usb: bulk message failed: -22 (3/0) [ 924.925559][ T92] dw2102: command 0x0e transfer failed. [ 924.990922][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 925.273703][ T92] dw2102: command 0x51 transfer failed. [ 925.366520][ T92] dvb-usb: bulk message failed: -22 (5/0) [ 925.372514][ T92] dw2102: i2c probe for address 0x68 failed. [ 925.431224][ T92] dvb-usb: bulk message failed: -22 (5/0) [ 925.439823][ T92] dw2102: i2c probe for address 0x69 failed. [ 925.447809][ T92] dvb-usb: bulk message failed: -22 (5/0) [ 925.454780][ T92] dw2102: i2c probe for address 0x6a failed. [ 925.583781][ T92] dw2102: probing for demodulator failed. Is the external power switched on? [ 925.598228][ T92] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 925.960427][ T92] rc_core: IR keymap rc-tt-1500 not found [ 925.966324][ T92] Registered IR keymap rc-empty [ 925.973267][ T92] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 925.992858][ T92] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input50 [ 926.042624][ T92] dvb-usb: schedule remote query interval to 250 msecs. [ 926.049753][ T92] dw2102: su3000_power_ctrl: 0, initialized 1 [ 926.055831][ T92] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 926.068966][ T92] usb 9-1: USB disconnect, device number 13 [ 926.328178][T20359] fuse: Unknown parameter 'group_id00000000000000000000' [ 926.404905][T20364] veth0_to_bond: entered allmulticast mode [ 926.539594][ T92] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 927.301221][T20375] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4093'. [ 927.679667][T17837] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 927.860096][T17837] usb 9-1: Using ep0 maxpacket: 8 [ 927.874185][T17837] usb 9-1: unable to get BOS descriptor or descriptor too short [ 927.905267][T17837] usb 9-1: config 4 has an invalid interface number: 30 but max is 0 [ 927.914484][T17837] usb 9-1: config 4 has no interface number 0 [ 927.929336][T17837] usb 9-1: config 4 interface 30 has no altsetting 0 [ 927.953570][T17837] usb 9-1: string descriptor 0 read error: -22 [ 927.963834][T17837] usb 9-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 928.175407][T17837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.453338][T17837] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 928.487661][T17837] dw2102: su3000_power_ctrl: 1, initialized 0 [ 928.489328][ T92] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 928.504279][T17837] dvb-usb: bulk message failed: -22 (2/0) [ 928.518655][T17837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 928.541229][T17837] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 928.548869][T17837] usb 9-1: media controller created [ 928.559422][T17837] dvb-usb: bulk message failed: -22 (6/0) [ 928.565248][T17837] dw2102: i2c transfer failed. [ 928.570554][T17837] dvb-usb: bulk message failed: -22 (6/0) [ 928.576361][T17837] dw2102: i2c transfer failed. [ 928.582904][T17837] dvb-usb: bulk message failed: -22 (6/0) [ 928.588719][T17837] dw2102: i2c transfer failed. [ 928.593935][T17837] dvb-usb: bulk message failed: -22 (6/0) [ 928.602432][T17837] dw2102: i2c transfer failed. [ 928.607386][T17837] dvb-usb: bulk message failed: -22 (6/0) [ 928.613422][T17837] dw2102: i2c transfer failed. [ 928.618366][T17837] dvb-usb: bulk message failed: -22 (6/0) [ 928.633415][T17837] dw2102: i2c transfer failed. [ 928.638192][T17837] dvb-usb: MAC address: 02:02:02:02:02:02 [ 928.651801][T20378] FAULT_INJECTION: forcing a failure. [ 928.651801][T20378] name failslab, interval 1, probability 0, space 0, times 0 [ 928.664596][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 928.674745][ T92] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 928.683335][T17837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 928.691735][ T92] usb 2-1: config 0 has no interface number 0 [ 928.699147][T20378] CPU: 1 UID: 0 PID: 20378 Comm: syz.8.4094 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 928.699177][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 928.699190][T20378] Call Trace: [ 928.699197][T20378] [ 928.699206][T20378] dump_stack_lvl+0x189/0x250 [ 928.699240][T20378] ? __pfx____ratelimit+0x10/0x10 [ 928.699266][T20378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.699289][T20378] ? __pfx__printk+0x10/0x10 [ 928.699317][T20378] ? __pfx___might_resched+0x10/0x10 [ 928.699337][T20378] ? lock_acquire+0x5f/0x360 [ 928.699365][T20378] should_fail_ex+0x414/0x560 [ 928.699392][T20378] should_failslab+0xa8/0x100 [ 928.699421][T20378] __kmalloc_noprof+0xcb/0x4f0 [ 928.699447][T20378] ? kfree+0x4d/0x440 [ 928.699468][T20378] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 928.699490][T20378] tomoyo_realpath_from_path+0xe3/0x5d0 [ 928.699510][T20378] ? tomoyo_domain+0xd9/0x130 [ 928.699532][T20378] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 928.699558][T20378] tomoyo_path_number_perm+0x1e8/0x5a0 [ 928.699583][T20378] ? lock_release+0x4b/0x3e0 [ 928.699610][T20378] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 928.699638][T20378] ? rcu_is_watching+0x15/0xb0 [ 928.699657][T20378] ? lock_release+0x4b/0x3e0 [ 928.699682][T20378] ? vfs_write+0x956/0xb30 [ 928.699708][T20378] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 928.699744][T20378] ? lock_release+0x4b/0x3e0 [ 928.699771][T20378] ? __fget_files+0x2a/0x420 [ 928.699787][T20378] ? __fget_files+0x3a0/0x420 [ 928.699803][T20378] ? __fget_files+0x2a/0x420 [ 928.699822][T20378] security_file_ioctl+0xcb/0x2d0 [ 928.699847][T20378] __se_sys_ioctl+0x47/0x170 [ 928.699871][T20378] do_syscall_64+0xfa/0x3b0 [ 928.699899][T20378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.699920][T20378] ? clear_bhb_loop+0x60/0xb0 [ 928.699940][T20378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.699960][T20378] RIP: 0033:0x7f8c2ff8ebe9 [ 928.699977][T20378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.699995][T20378] RSP: 002b:00007f8c30e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 928.700018][T20378] RAX: ffffffffffffffda RBX: 00007f8c301b5fa0 RCX: 00007f8c2ff8ebe9 [ 928.700042][T20378] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 928.700055][T20378] RBP: 00007f8c30e76090 R08: 0000000000000000 R09: 0000000000000000 [ 928.700068][T20378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.700080][T20378] R13: 00007f8c301b6038 R14: 00007f8c301b5fa0 R15: 00007f8c302dfa28 [ 928.700102][T20378] [ 928.978630][T20378] ERROR: Out of memory at tomoyo_realpath_from_path. [ 928.993566][T20378] dvb-usb: bulk message failed: -22 (3/0) [ 929.000359][T20378] dw2102: i2c transfer failed. [ 929.006608][T17837] dvb-usb: bulk message failed: -22 (3/0) [ 929.012689][ T92] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 929.021796][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.029868][ T92] usb 2-1: Product: syz [ 929.034049][ T92] usb 2-1: Manufacturer: syz [ 929.038641][ T92] usb 2-1: SerialNumber: syz [ 929.043917][T17837] dw2102: command 0x0e transfer failed. [ 929.044451][ T92] usb 2-1: config 0 descriptor?? [ 929.055308][T17837] dvb-usb: bulk message failed: -22 (3/0) [ 929.061211][T17837] dw2102: command 0x0e transfer failed. [ 929.067741][ T92] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 929.171854][T20397] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 929.230511][T20399] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 929.269820][ T92] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 929.287518][ T92] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 929.379307][T17837] dvb-usb: bulk message failed: -22 (3/0) [ 929.385139][T17837] dw2102: command 0x0e transfer failed. [ 929.394320][T17837] dvb-usb: bulk message failed: -22 (3/0) [ 929.400668][T17837] dw2102: command 0x0e transfer failed. [ 929.410190][T17837] dvb-usb: bulk message failed: -22 (1/0) [ 929.418289][T17837] dw2102: command 0x51 transfer failed. [ 929.431377][T17837] dvb-usb: bulk message failed: -22 (5/0) [ 929.439720][T17837] dw2102: i2c probe for address 0x68 failed. [ 929.446136][T17837] dvb-usb: bulk message failed: -22 (5/0) [ 929.452298][T17837] dw2102: i2c probe for address 0x69 failed. [ 929.458347][T17837] dvb-usb: bulk message failed: -22 (5/0) [ 929.464652][T17837] dw2102: i2c probe for address 0x6a failed. [ 929.469169][T20394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.472158][T17837] dw2102: probing for demodulator failed. Is the external power switched on? [ 929.511171][T20394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.519465][T17837] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 929.690649][T20404] vimc link validate: Scaler:src:16x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 929.703125][T17837] rc_core: IR keymap rc-tt-1500 not found [ 929.703147][T17837] Registered IR keymap rc-empty [ 929.704432][T17837] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 929.767409][T17837] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input51 [ 929.818541][T17837] dvb-usb: schedule remote query interval to 250 msecs. [ 929.836938][T17837] dw2102: su3000_power_ctrl: 0, initialized 1 [ 929.844977][T17837] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 929.861301][T17837] usb 9-1: USB disconnect, device number 14 [ 929.882417][T17837] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 930.189576][T17837] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 930.227232][T20421] create_pit_timer: 27 callbacks suppressed [ 930.227252][T20421] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 930.270796][T20421] kvm: pic: non byte read [ 930.369412][T17837] usb 9-1: Using ep0 maxpacket: 32 [ 930.382701][T17837] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.414288][T17837] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 930.423455][T17837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.432033][T17837] usb 9-1: Product: syz [ 930.437312][T17837] usb 9-1: Manufacturer: syz [ 930.444095][T17837] usb 9-1: SerialNumber: syz [ 930.451562][T17837] usb 9-1: config 0 descriptor?? [ 930.700789][T17837] usb 9-1: USB disconnect, device number 15 [ 930.981437][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 930.981792][ T9] usb 2-1: USB disconnect, device number 99 [ 931.024300][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 931.069078][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 931.097339][ T9] quatech2 2-1:0.51: device disconnected [ 931.114392][T20437] syz.7.4114 (20437): drop_caches: 2 [ 931.235858][T20448] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 931.536372][T20453] fuse: Bad value for 'user_id' [ 931.548041][T20453] fuse: Bad value for 'user_id' [ 931.699682][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.706317][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.108592][T20471] geneve2: entered promiscuous mode [ 932.114023][T20471] geneve2: entered allmulticast mode [ 932.509446][ T8111] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 932.699312][ T8111] usb 3-1: Using ep0 maxpacket: 16 [ 932.708596][ T8111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.719323][ T8111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.731586][ T8111] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.740992][ T8111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.749624][ T8111] usb 3-1: Product: syz [ 932.753994][ T8111] usb 3-1: Manufacturer: syz [ 932.759288][ T8111] usb 3-1: SerialNumber: syz [ 932.809380][ T8106] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 932.961954][ T8106] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.997455][ T8111] usb 3-1: 0:2 : does not exist [ 933.007801][ T8106] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 933.025195][ T8111] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 933.058473][ T8106] usb 2-1: config 0 interface 0 has no altsetting 0 [ 933.066223][ T8106] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 933.075773][ T8106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.100281][ T8111] usb 3-1: USB disconnect, device number 91 [ 933.111067][ T8106] usb 2-1: config 0 descriptor?? [ 933.145220][T17869] udevd[17869]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.131396][T20502] fuse: Bad value for 'user_id' [ 934.136456][T20502] fuse: Bad value for 'user_id' [ 935.579870][ T8106] usbhid 2-1:0.0: can't add hid device: -71 [ 935.592148][ T8106] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 935.638090][ T8106] usb 2-1: USB disconnect, device number 100 [ 935.959323][ T8106] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 936.249544][ T8106] usb 2-1: config 0 has no interfaces? [ 936.285154][ T8106] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 936.316572][ T8106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.334867][ T8106] usb 2-1: Product: syz [ 936.365704][ T8106] usb 2-1: Manufacturer: syz [ 936.394471][T20536] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4143'. [ 936.399292][ T8106] usb 2-1: SerialNumber: syz [ 936.451854][ T8106] usb 2-1: config 0 descriptor?? [ 937.220866][T17837] usb 2-1: USB disconnect, device number 101 [ 937.254925][T20564] loop2: detected capacity change from 0 to 7 [ 937.263101][T20564] loop2: [ 937.266337][T20564] loop2: partition table partially beyond EOD, truncated [ 937.319422][T20568] FAULT_INJECTION: forcing a failure. [ 937.319422][T20568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.335554][T20568] CPU: 1 UID: 0 PID: 20568 Comm: syz.2.4151 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 937.335582][T20568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 937.335594][T20568] Call Trace: [ 937.335602][T20568] [ 937.335610][T20568] dump_stack_lvl+0x189/0x250 [ 937.335639][T20568] ? __pfx____ratelimit+0x10/0x10 [ 937.335664][T20568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.335685][T20568] ? __pfx__printk+0x10/0x10 [ 937.335713][T20568] ? rcu_is_watching+0x15/0xb0 [ 937.335733][T20568] should_fail_ex+0x414/0x560 [ 937.335758][T20568] _copy_to_user+0x31/0xb0 [ 937.335780][T20568] ? __pfx_virtio_read+0x10/0x10 [ 937.335800][T20568] rng_dev_read+0x3f2/0x770 [ 937.335820][T20568] ? __pfx_rng_dev_read+0x10/0x10 [ 937.335837][T20568] ? common_file_perm+0x1b5/0x230 [ 937.335867][T20568] ? bpf_lsm_file_permission+0x9/0x20 [ 937.335889][T20568] ? security_file_permission+0x75/0x290 [ 937.335920][T20568] ? rw_verify_area+0x2a6/0x4d0 [ 937.335945][T20568] vfs_readv+0x5a7/0x850 [ 937.335962][T20568] ? __pfx_rng_dev_read+0x10/0x10 [ 937.335982][T20568] ? __pfx_vfs_readv+0x10/0x10 [ 937.335998][T20568] ? vfs_write+0x956/0xb30 [ 937.336024][T20568] ? lock_release+0x4b/0x3e0 [ 937.336053][T20568] ? __fget_files+0x3a0/0x420 [ 937.336069][T20568] ? __fget_files+0x2a/0x420 [ 937.336088][T20568] __x64_sys_preadv+0x197/0x2a0 [ 937.336114][T20568] ? __pfx___x64_sys_preadv+0x10/0x10 [ 937.336142][T20568] ? rcu_is_watching+0x15/0xb0 [ 937.336161][T20568] do_syscall_64+0xfa/0x3b0 [ 937.336186][T20568] ? rcu_is_watching+0x15/0xb0 [ 937.336204][T20568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.336223][T20568] ? clear_bhb_loop+0x60/0xb0 [ 937.336243][T20568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.336262][T20568] RIP: 0033:0x7fb2bd38ebe9 [ 937.336279][T20568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.336296][T20568] RSP: 002b:00007fb2be1b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 937.336318][T20568] RAX: ffffffffffffffda RBX: 00007fb2bd5b5fa0 RCX: 00007fb2bd38ebe9 [ 937.336333][T20568] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 937.336345][T20568] RBP: 00007fb2be1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 937.336358][T20568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.336368][T20568] R13: 00007fb2bd5b6038 R14: 00007fb2bd5b5fa0 R15: 00007fb2bd6dfa28 [ 937.336388][T20568] [ 937.585902][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.597549][ T8106] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 937.729657][ T92] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 937.760968][ T8106] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.772080][ T8106] usb 10-1: config 0 interface 0 has no altsetting 0 [ 937.776641][T20574] fuse: Bad value for 'fd' [ 937.778817][ T8106] usb 10-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 937.795998][ T8106] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.832300][ T8106] usb 10-1: config 0 descriptor?? [ 937.871000][T20579] binder: 20578:20579 ioctl 4018620d 0 returned -22 [ 937.896236][ T92] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 937.906264][ T92] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 937.921266][ T92] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 937.946303][ T92] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 937.968400][ T92] usb 9-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 938.030705][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4154'. [ 938.069723][ T92] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.077947][ T92] usb 9-1: Product: syz [ 938.125353][ T92] usb 9-1: Manufacturer: syz [ 938.155512][ T92] usb 9-1: SerialNumber: syz [ 938.256209][ T8106] usbhid 10-1:0.0: can't add hid device: -71 [ 938.267444][ T8106] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 938.273702][ T92] usb 9-1: config 0 descriptor?? [ 938.285664][ T92] kvaser_usb 9-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 938.313600][ T8106] usb 10-1: USB disconnect, device number 16 [ 938.548415][T20566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.558655][T20566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.219312][ T8106] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 939.379299][ T8106] usb 2-1: Using ep0 maxpacket: 8 [ 939.388387][ T8106] usb 2-1: unable to get BOS descriptor or descriptor too short [ 939.506552][ T8111] usb 9-1: USB disconnect, device number 16 [ 939.516082][ T8106] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 939.537732][ T8106] usb 2-1: config 4 has no interface number 0 [ 939.545823][ T8106] usb 2-1: config 4 interface 30 has no altsetting 0 [ 939.551213][T20602] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4160'. [ 939.556511][ T8106] usb 2-1: string descriptor 0 read error: -22 [ 939.710087][ T8106] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 939.720746][ T8106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.761936][ T8106] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 939.769044][ T8106] dw2102: su3000_power_ctrl: 1, initialized 0 [ 939.797188][ T8106] dvb-usb: bulk message failed: -22 (2/0) [ 939.818514][ T8106] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 939.818914][ T8106] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 939.818940][ T8106] usb 2-1: media controller created [ 939.818954][ T8106] dvb-usb: bulk message failed: -22 (6/0) [ 939.818963][ T8106] dw2102: i2c transfer failed. [ 939.818970][ T8106] dvb-usb: bulk message failed: -22 (6/0) [ 939.818979][ T8106] dw2102: i2c transfer failed. [ 939.818985][ T8106] dvb-usb: bulk message failed: -22 (6/0) [ 939.818993][ T8106] dw2102: i2c transfer failed. [ 939.818999][ T8106] dvb-usb: bulk message failed: -22 (6/0) [ 939.819006][ T8106] dw2102: i2c transfer failed. [ 939.819013][ T8106] dvb-usb: bulk message failed: -22 (6/0) [ 939.819021][ T8106] dw2102: i2c transfer failed. [ 939.819027][ T8106] dvb-usb: bulk message failed: -22 (6/0) [ 939.819035][ T8106] dw2102: i2c transfer failed. [ 939.819040][ T8106] dvb-usb: MAC address: 02:02:02:02:02:02 [ 939.844874][ T8106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 939.861560][ T8106] dvb-usb: bulk message failed: -22 (3/0) [ 939.965600][T20595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.974210][ T8106] dw2102: command 0x0e transfer failed. [ 939.980366][T20595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.994039][ T8106] dvb-usb: bulk message failed: -22 (3/0) [ 940.000584][ T8106] dw2102: command 0x0e transfer failed. [ 940.161543][T20613] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 940.309339][ T8106] dvb-usb: bulk message failed: -22 (3/0) [ 940.340417][ T8106] dw2102: command 0x0e transfer failed. [ 940.348624][ T8106] dvb-usb: bulk message failed: -22 (3/0) [ 940.355564][ T8106] dw2102: command 0x0e transfer failed. [ 940.371489][ T8106] dvb-usb: bulk message failed: -22 (1/0) [ 940.377654][ T8106] dw2102: command 0x51 transfer failed. [ 940.387505][ T8106] dvb-usb: bulk message failed: -22 (5/0) [ 940.412638][ T8106] dw2102: i2c probe for address 0x68 failed. [ 940.422119][ T8106] dvb-usb: bulk message failed: -22 (5/0) [ 940.429028][ T8106] dw2102: i2c probe for address 0x69 failed. [ 940.437626][ T8106] dvb-usb: bulk message failed: -22 (5/0) [ 940.446787][ T8106] dw2102: i2c probe for address 0x6a failed. [ 940.536716][T20609] dvb-usb: bulk message failed: -22 (3/0) [ 940.543044][T20609] dw2102: i2c transfer failed. [ 940.548156][ T8106] dw2102: probing for demodulator failed. Is the external power switched on? [ 940.548716][T20620] netlink: 'syz.2.4167': attribute type 4 has an invalid length. [ 940.564957][T20609] dvb-usb: bulk message failed: -22 (3/0) [ 940.571564][T20609] dw2102: i2c transfer failed. [ 940.591403][ T8106] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 940.675168][T20622] tipc: Started in network mode [ 940.680831][T20622] tipc: Node identity , cluster identity 4711 [ 940.687054][T20622] tipc: Failed to obtain node identity [ 940.694270][T20622] tipc: Enabling of bearer rejected, failed to enable media [ 940.759343][ T8106] rc_core: IR keymap rc-tt-1500 not found [ 940.779829][ T8106] Registered IR keymap rc-empty [ 940.796658][T20622] syzkaller0: entered promiscuous mode [ 940.802367][T20622] syzkaller0: entered allmulticast mode [ 940.815803][ T8106] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 940.866340][ T8106] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input52 [ 940.925154][ T8106] dvb-usb: schedule remote query interval to 250 msecs. [ 940.957496][ T8106] dw2102: su3000_power_ctrl: 0, initialized 1 [ 941.248314][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 941.260993][ T8106] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 941.272483][ T9] dw2102: i2c transfer failed. [ 941.293911][T20631] bridge1: entered promiscuous mode [ 941.300711][T20631] bridge1: entered allmulticast mode [ 941.529469][ T8106] dvb-usb: bulk message failed: -22 (1/0) [ 941.536149][ T8106] dw2102: i2c transfer failed. [ 941.799364][ T8106] dvb-usb: bulk message failed: -22 (1/0) [ 941.807521][ T8106] dw2102: i2c transfer failed. [ 941.962937][T20653] FAULT_INJECTION: forcing a failure. [ 941.962937][T20653] name failslab, interval 1, probability 0, space 0, times 0 [ 941.989574][T20653] CPU: 0 UID: 0 PID: 20653 Comm: syz.8.4177 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 941.989596][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 941.989605][T20653] Call Trace: [ 941.989610][T20653] [ 941.989615][T20653] dump_stack_lvl+0x189/0x250 [ 941.989635][T20653] ? __pfx____ratelimit+0x10/0x10 [ 941.989652][T20653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 941.989666][T20653] ? __pfx__printk+0x10/0x10 [ 941.989682][T20653] ? __pfx___might_resched+0x10/0x10 [ 941.989694][T20653] ? lock_acquire+0x5f/0x360 [ 941.989711][T20653] should_fail_ex+0x414/0x560 [ 941.989727][T20653] should_failslab+0xa8/0x100 [ 941.989756][T20653] __kmalloc_cache_noprof+0x70/0x3d0 [ 941.989772][T20653] ? tcf_exts_init_ex+0x110/0x750 [ 941.989791][T20653] tcf_exts_init_ex+0x110/0x750 [ 941.989816][T20653] mall_change+0x338/0x8f0 [ 941.989835][T20653] ? __pfx_mall_change+0x10/0x10 [ 941.989853][T20653] tc_new_tfilter+0xdca/0x15b0 [ 941.989869][T20653] ? __pfx_tc_new_tfilter+0x10/0x10 [ 941.989880][T20653] ? __dev_queue_xmit+0x1d79/0x3b50 [ 941.989896][T20653] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 941.989913][T20653] ? rcu_is_watching+0x15/0xb0 [ 941.989925][T20653] ? lock_release+0x4b/0x3e0 [ 941.989940][T20653] ? bpf_lsm_capable+0x9/0x20 [ 941.989956][T20653] ? security_capable+0x7e/0x2e0 [ 941.989973][T20653] ? __pfx_tc_new_tfilter+0x10/0x10 [ 941.989984][T20653] rtnetlink_rcv_msg+0x7cc/0xb70 [ 941.990001][T20653] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 941.990017][T20653] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 941.990032][T20653] ? ref_tracker_free+0x63a/0x7d0 [ 941.990048][T20653] ? __asan_memcpy+0x40/0x70 [ 941.990064][T20653] ? __pfx_ref_tracker_free+0x10/0x10 [ 941.990079][T20653] ? __skb_clone+0x63/0x7a0 [ 941.990093][T20653] netlink_rcv_skb+0x208/0x470 [ 941.990109][T20653] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 941.990126][T20653] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 941.990146][T20653] netlink_unicast+0x82c/0x9e0 [ 941.990162][T20653] ? __pfx_netlink_unicast+0x10/0x10 [ 941.990177][T20653] ? netlink_sendmsg+0x642/0xb30 [ 941.990193][T20653] ? skb_put+0x11b/0x210 [ 941.990204][T20653] netlink_sendmsg+0x805/0xb30 [ 941.990222][T20653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.990239][T20653] ? aa_sock_msg_perm+0xf1/0x1d0 [ 941.990251][T20653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 941.990264][T20653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.990280][T20653] __sock_sendmsg+0x219/0x270 [ 941.990295][T20653] ____sys_sendmsg+0x505/0x830 [ 941.990308][T20653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 941.990322][T20653] ? import_iovec+0x74/0xa0 [ 941.990336][T20653] ___sys_sendmsg+0x21f/0x2a0 [ 941.990348][T20653] ? __pfx____sys_sendmsg+0x10/0x10 [ 941.990367][T20653] ? __fget_files+0x2a/0x420 [ 941.990376][T20653] ? __fget_files+0x3a0/0x420 [ 941.990388][T20653] __x64_sys_sendmsg+0x19b/0x260 [ 941.990400][T20653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 941.990414][T20653] ? __pfx_ksys_write+0x10/0x10 [ 941.990428][T20653] ? rcu_is_watching+0x15/0xb0 [ 941.990440][T20653] ? rcu_is_watching+0x15/0xb0 [ 941.990452][T20653] do_syscall_64+0xfa/0x3b0 [ 941.990468][T20653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.990480][T20653] ? clear_bhb_loop+0x60/0xb0 [ 941.990498][T20653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.990517][T20653] RIP: 0033:0x7f8c2ff8ebe9 [ 941.990535][T20653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.990548][T20653] RSP: 002b:00007f8c30e76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.990563][T20653] RAX: ffffffffffffffda RBX: 00007f8c301b5fa0 RCX: 00007f8c2ff8ebe9 [ 941.990572][T20653] RDX: 0000000000008084 RSI: 0000200000000580 RDI: 0000000000000004 [ 941.990580][T20653] RBP: 00007f8c30e76090 R08: 0000000000000000 R09: 0000000000000000 [ 941.990588][T20653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.990596][T20653] R13: 00007f8c301b6038 R14: 00007f8c301b5fa0 R15: 00007f8c302dfa28 [ 941.990608][T20653] [ 942.399510][ T8111] dvb-usb: bulk message failed: -22 (1/0) [ 942.405290][ T8111] dw2102: i2c transfer failed. [ 942.524191][ T92] usb 2-1: USB disconnect, device number 102 [ 942.873715][ T92] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 943.360838][T20676] random: crng reseeded on system resumption [ 944.299300][ T8111] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 944.452193][ T8111] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 944.461474][ T8111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.500605][ T8111] usb 2-1: config 0 descriptor?? [ 944.701005][T20700] syz.2.4190: attempt to access beyond end of device [ 944.701005][T20700] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 944.755919][ T8111] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 945.671629][T17837] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 945.739306][T18218] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 945.940400][T17837] usb 10-1: Using ep0 maxpacket: 8 [ 945.945615][T18218] usb 3-1: Using ep0 maxpacket: 16 [ 945.952492][T17837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 945.981335][T18218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.005771][T18218] usb 3-1: config 0 has no interfaces? [ 946.016110][T18218] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 946.029200][T17837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 946.061642][T18218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.070117][T17837] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 946.126136][T18218] usb 3-1: config 0 descriptor?? [ 946.131268][T17837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 946.149564][T17837] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 946.192442][T17837] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 946.569093][T17837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.594055][T17837] usb 10-1: config 0 descriptor?? [ 946.705477][T20709] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 947.042158][T20745] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 947.050697][T20745] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 947.099819][T17837] usb 2-1: USB disconnect, device number 103 [ 947.145694][T20709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.168088][T20709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.023662][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 948.023857][ T92] usb 10-1: USB disconnect, device number 17 [ 948.385733][ T8111] usb 3-1: USB disconnect, device number 92 [ 949.055905][T20771] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4211'. [ 949.207924][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 949.207944][ T30] audit: type=1326 audit(1755475889.477:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.8.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2ff8ebe9 code=0x7ffc0000 [ 949.313173][ T30] audit: type=1326 audit(1755475889.477:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.8.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2ff8ebe9 code=0x7ffc0000 [ 949.341693][ T30] audit: type=1326 audit(1755475889.477:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.8.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f8c2ff8ebe9 code=0x7ffc0000 [ 949.840728][ T30] audit: type=1326 audit(1755475889.477:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.8.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2ff8ebe9 code=0x7ffc0000 [ 949.969906][ T30] audit: type=1326 audit(1755475889.477:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.8.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2ff8ebe9 code=0x7ffc0000 [ 949.995646][ T30] audit: type=1326 audit(1755475889.477:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.8.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8c2ff8ebe9 code=0x7ffc0000 [ 950.089451][ T30] audit: type=1326 audit(1755475889.477:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.8.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2ff8ebe9 code=0x7ffc0000 [ 950.099856][T17837] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 950.145096][ T30] audit: type=1326 audit(1755475889.477:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.8.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2ff8ebe9 code=0x7ffc0000 [ 950.199407][ T30] audit: type=1326 audit(1755475889.477:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.8.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8c2ff8ebe9 code=0x7ffc0000 [ 950.221867][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.340698][T17837] usb 10-1: config 0 has an invalid interface number: 3 but max is 0 [ 950.397823][T17837] usb 10-1: config 0 has no interface number 0 [ 950.430908][T17837] usb 10-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 950.509780][T17837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.675730][T17837] usb 10-1: config 0 descriptor?? [ 950.683596][T17837] hub 10-1:0.3: bad descriptor, ignoring hub [ 950.701400][T17837] hub 10-1:0.3: probe with driver hub failed with error -5 [ 950.715182][T17837] sierra 10-1:0.3: Sierra USB modem converter detected [ 951.099761][T17837] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 951.154083][T17837] usb 10-1: USB disconnect, device number 18 [ 951.209719][T17837] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 951.264626][T17837] sierra 10-1:0.3: device disconnected [ 951.701926][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4230'. [ 951.809331][ T92] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 951.963453][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 951.971519][ T92] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.983912][ T92] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 951.985951][T20848] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 952.002021][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.010178][ T92] usb 2-1: Product: syz [ 952.014385][ T92] usb 2-1: Manufacturer: syz [ 952.019003][ T92] usb 2-1: SerialNumber: syz [ 952.026950][ T92] usb 2-1: config 0 descriptor?? [ 952.209973][T20850] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 952.274852][ T9] usb 2-1: USB disconnect, device number 104 [ 952.517540][T20867] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4240'. [ 952.750471][ T92] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 952.832398][T20875] loop2: detected capacity change from 0 to 7 [ 952.878005][T17869] Dev loop2: unable to read RDB block 7 [ 952.908346][T17869] loop2: unable to read partition table [ 952.919811][T17869] loop2: partition table beyond EOD, truncated [ 953.338685][T20875] Dev loop2: unable to read RDB block 7 [ 953.348358][T20875] loop2: unable to read partition table [ 953.368837][T20875] loop2: partition table beyond EOD, truncated [ 953.399672][T20875] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 953.579548][T17837] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 953.761177][T17837] usb 9-1: Using ep0 maxpacket: 16 [ 953.776624][T17837] usb 9-1: config 255 has an invalid interface number: 47 but max is 0 [ 953.825145][T17837] usb 9-1: config 255 has no interface number 0 [ 953.832339][T17837] usb 9-1: config 255 interface 47 has no altsetting 0 [ 953.842452][T17837] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 953.851935][T17837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.860705][T17837] usb 9-1: Product: syz [ 953.864899][T17837] usb 9-1: Manufacturer: syz [ 953.870027][T17837] usb 9-1: SerialNumber: syz [ 954.086063][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4243'. [ 954.106756][T20886] bridge_slave_1: left allmulticast mode [ 954.114064][T20886] bridge_slave_1: left promiscuous mode [ 954.385649][T20899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.397261][T20886] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.561516][T20899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.605018][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 954.629863][T20899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.665777][T20899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.685260][T20886] bridge_slave_0: left allmulticast mode [ 954.694608][T20886] bridge_slave_0: left promiscuous mode [ 954.704112][T20886] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.716743][T20905] loop6: detected capacity change from 0 to 1 [ 954.732033][T18407] Dev loop6: unable to read RDB block 1 [ 954.735022][T20899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.746188][T18407] loop6: unable to read partition table [ 954.746407][T18407] loop6: partition table beyond EOD, [ 954.755245][T20899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.771631][T18407] truncated [ 954.771752][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 954.791330][ T9] usb 2-1: config 8 has too many interfaces: 240, using maximum allowed: 32 [ 954.801190][T20905] Dev loop6: unable to read RDB block 1 [ 954.807063][T20905] loop6: unable to read partition table [ 954.818581][T20905] loop6: partition table beyond EOD, truncated [ 954.824978][ T9] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 954.837912][ T9] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 954.849411][T20905] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 954.867268][ T9] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 240 [ 954.903856][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 954.918890][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.929460][ T9] usb 2-1: Product: syz [ 954.933679][ T9] usb 2-1: Manufacturer: syz [ 954.938313][ T9] usb 2-1: SerialNumber: syz [ 954.955941][T17837] legousbtower 9-1:255.47: interrupt endpoints not found [ 955.000207][T17837] usb 9-1: USB disconnect, device number 17 [ 955.008182][T20911] IPv6: addrconf: prefix option has invalid lifetime [ 955.098823][T20915] trusted_key: encrypted_key: keylen parameter is missing [ 955.175009][T20917] fuse: Bad value for 'fd' [ 955.198456][T20896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.259656][T20896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.293621][ T9] usb 2-1: USB disconnect, device number 105 [ 956.240752][T20946] fuse: Unknown parameter 'user00000000000000000000' [ 957.436650][T20964] syz.1.4263: attempt to access beyond end of device [ 957.436650][T20964] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 957.888943][T20978] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20003 [ 958.039316][ T24] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 958.195295][ T24] usb 10-1: config 0 has an invalid interface number: 194 but max is 0 [ 958.204098][ T24] usb 10-1: config 0 has no interface number 0 [ 958.219547][ T24] usb 10-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2 [ 958.230842][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.239176][ T24] usb 10-1: Product: syz [ 958.244126][ T24] usb 10-1: Manufacturer: syz [ 958.248844][ T24] usb 10-1: SerialNumber: syz [ 958.259533][ T24] usb 10-1: config 0 descriptor?? [ 958.538302][T20976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.040236][T20976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.071048][T20976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.085785][T20976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.374206][T20976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.385580][T20976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.612081][ T8109] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 959.782421][ T8109] usb 2-1: Using ep0 maxpacket: 8 [ 959.793170][ T8109] usb 2-1: unable to get BOS descriptor or descriptor too short [ 959.815170][ T8109] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 959.818860][T21011] netlink: 'syz.2.4277': attribute type 21 has an invalid length. [ 959.835031][ T8109] usb 2-1: config 4 has no interface number 0 [ 959.841585][ T8109] usb 2-1: config 4 interface 30 has no altsetting 0 [ 959.852196][ T8109] usb 2-1: string descriptor 0 read error: -22 [ 959.868929][ T8109] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 959.896971][ T8109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.933626][ T8109] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 959.951561][ T8109] dw2102: su3000_power_ctrl: 1, initialized 0 [ 959.957688][ T8109] dvb-usb: bulk message failed: -22 (2/0) [ 959.980309][ T9] usb 10-1: USB disconnect, device number 20 [ 960.001048][ T8109] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 960.019567][ T9] f81534a_ctrl 10-1:0.194: failed to set register 0x116: -19 [ 960.045434][ T9] f81534a_ctrl 10-1:0.194: failed to enable ports: -19 [ 960.059557][ T8109] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 960.075950][ T8109] usb 2-1: media controller created [ 960.089458][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 960.103901][ T8109] dw2102: i2c transfer failed. [ 960.118991][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 960.136801][T20995] FAULT_INJECTION: forcing a failure. [ 960.136801][T20995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.186807][T20995] CPU: 1 UID: 0 PID: 20995 Comm: syz.1.4272 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 960.186845][T20995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 960.186858][T20995] Call Trace: [ 960.186866][T20995] [ 960.186885][T20995] dump_stack_lvl+0x189/0x250 [ 960.186914][T20995] ? __pfx____ratelimit+0x10/0x10 [ 960.186942][T20995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 960.186964][T20995] ? __pfx__printk+0x10/0x10 [ 960.186989][T20995] ? __might_fault+0xb0/0x130 [ 960.187018][T20995] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 960.187048][T20995] ? rcu_is_watching+0x15/0xb0 [ 960.187069][T20995] should_fail_ex+0x414/0x560 [ 960.187097][T20995] _copy_from_user+0x2d/0xb0 [ 960.187121][T20995] i2cdev_ioctl+0x2e7/0x7f0 [ 960.187151][T20995] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 960.187182][T20995] ? __fget_files+0x3a0/0x420 [ 960.187200][T20995] ? __fget_files+0x2a/0x420 [ 960.187218][T20995] ? bpf_lsm_file_ioctl+0x9/0x20 [ 960.187242][T20995] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 960.187268][T20995] __se_sys_ioctl+0xf9/0x170 [ 960.187291][T20995] do_syscall_64+0xfa/0x3b0 [ 960.187320][T20995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.187340][T20995] ? clear_bhb_loop+0x60/0xb0 [ 960.187361][T20995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.187381][T20995] RIP: 0033:0x7f6347f8ebe9 [ 960.187399][T20995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.187417][T20995] RSP: 002b:00007f6348ddf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 960.187441][T20995] RAX: ffffffffffffffda RBX: 00007f63481b5fa0 RCX: 00007f6347f8ebe9 [ 960.187456][T20995] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 960.187470][T20995] RBP: 00007f6348ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 960.187484][T20995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.187497][T20995] R13: 00007f63481b6038 R14: 00007f63481b5fa0 R15: 00007f63482dfa28 [ 960.187519][T20995] [ 960.209080][ T8109] dw2102: i2c transfer failed. [ 960.579363][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 960.589366][ T8109] dw2102: i2c transfer failed. [ 960.709568][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 960.715353][ T8109] dw2102: i2c transfer failed. [ 960.720197][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 960.776275][ T8109] dw2102: i2c transfer failed. [ 960.860403][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 960.866193][ T8109] dw2102: i2c transfer failed. [ 960.989611][ T8109] dvb-usb: MAC address: 02:02:02:02:02:02 [ 961.025503][ T8109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 961.153087][ T8109] dvb-usb: bulk message failed: -22 (3/0) [ 961.180349][ T8109] dw2102: command 0x0e transfer failed. [ 961.259444][ T8109] dvb-usb: bulk message failed: -22 (3/0) [ 961.267058][ T8109] dw2102: command 0x0e transfer failed. [ 961.592297][ T8109] dvb-usb: bulk message failed: -22 (3/0) [ 961.598088][ T8109] dw2102: command 0x0e transfer failed. [ 961.614058][ T8109] dvb-usb: bulk message failed: -22 (3/0) [ 961.619870][ T8109] dw2102: command 0x0e transfer failed. [ 961.629259][ T8109] dvb-usb: bulk message failed: -22 (1/0) [ 961.635009][ T8109] dw2102: command 0x51 transfer failed. [ 961.640701][ T8109] dvb-usb: bulk message failed: -22 (5/0) [ 961.646411][ T8109] dw2102: i2c probe for address 0x68 failed. [ 961.659304][ T8109] dvb-usb: bulk message failed: -22 (5/0) [ 961.669300][ T8109] dw2102: i2c probe for address 0x69 failed. [ 961.675871][ T8109] dvb-usb: bulk message failed: -22 (5/0) [ 961.681822][ T8109] dw2102: i2c probe for address 0x6a failed. [ 961.687954][ T8109] dw2102: probing for demodulator failed. Is the external power switched on? [ 961.696778][ T8109] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 961.789140][ T8109] rc_core: IR keymap rc-tt-1500 not found [ 961.798528][ T8109] Registered IR keymap rc-empty [ 961.812042][ T8109] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 961.840696][ T8109] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input55 [ 961.869600][ T8109] dvb-usb: schedule remote query interval to 250 msecs. [ 961.888973][ T8109] dw2102: su3000_power_ctrl: 0, initialized 1 [ 961.906203][ T8109] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 961.946113][ T8109] usb 2-1: USB disconnect, device number 106 [ 962.506378][ T8109] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 963.217488][T21068] FAULT_INJECTION: forcing a failure. [ 963.217488][T21068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.260770][T21068] CPU: 1 UID: 0 PID: 21068 Comm: syz.8.4292 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 963.260803][T21068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 963.260817][T21068] Call Trace: [ 963.260825][T21068] [ 963.260835][T21068] dump_stack_lvl+0x189/0x250 [ 963.260875][T21068] ? __pfx____ratelimit+0x10/0x10 [ 963.260904][T21068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 963.260928][T21068] ? __pfx__printk+0x10/0x10 [ 963.260957][T21068] ? rcu_is_watching+0x15/0xb0 [ 963.260979][T21068] should_fail_ex+0x414/0x560 [ 963.261005][T21068] _copy_to_user+0x31/0xb0 [ 963.261030][T21068] simple_read_from_buffer+0xe1/0x170 [ 963.261062][T21068] proc_fail_nth_read+0x1b3/0x220 [ 963.261086][T21068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 963.261110][T21068] ? rw_verify_area+0x2a6/0x4d0 [ 963.261135][T21068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 963.261158][T21068] vfs_read+0x1fd/0xa30 [ 963.261182][T21068] ? fdget_pos+0x247/0x320 [ 963.261202][T21068] ? __pfx___mutex_lock+0x10/0x10 [ 963.261232][T21068] ? __pfx_vfs_read+0x10/0x10 [ 963.261260][T21068] ? __fget_files+0x3a0/0x420 [ 963.261277][T21068] ? __fget_files+0x2a/0x420 [ 963.261298][T21068] ksys_read+0x145/0x250 [ 963.261325][T21068] ? __pfx_ksys_read+0x10/0x10 [ 963.261349][T21068] ? rcu_is_watching+0x15/0xb0 [ 963.261371][T21068] ? rcu_is_watching+0x15/0xb0 [ 963.261392][T21068] do_syscall_64+0xfa/0x3b0 [ 963.261421][T21068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.261440][T21068] ? clear_bhb_loop+0x60/0xb0 [ 963.261460][T21068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.261477][T21068] RIP: 0033:0x7f8c2ff8d5fc [ 963.261496][T21068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 963.261515][T21068] RSP: 002b:00007f8c30e76030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 963.261539][T21068] RAX: ffffffffffffffda RBX: 00007f8c301b5fa0 RCX: 00007f8c2ff8d5fc [ 963.261556][T21068] RDX: 000000000000000f RSI: 00007f8c30e760a0 RDI: 000000000000000a [ 963.261570][T21068] RBP: 00007f8c30e76090 R08: 0000000000000000 R09: 0000000000000000 [ 963.261583][T21068] R10: 00004000000053d2 R11: 0000000000000246 R12: 0000000000000001 [ 963.261596][T21068] R13: 00007f8c301b6038 R14: 00007f8c301b5fa0 R15: 00007f8c302dfa28 [ 963.261618][T21068] [ 965.639286][ T8109] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 965.811754][ T8109] usb 2-1: Using ep0 maxpacket: 8 [ 965.822292][ T8109] usb 2-1: unable to get BOS descriptor or descriptor too short [ 965.835996][ T8109] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 965.848905][ T8109] usb 2-1: config 4 has no interface number 0 [ 965.855613][ T8109] usb 2-1: config 4 interface 30 has no altsetting 0 [ 965.865269][ T8109] usb 2-1: string descriptor 0 read error: -22 [ 965.872150][ T8109] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 965.881435][ T8109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.946879][ T8109] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 965.954257][ T8109] dw2102: su3000_power_ctrl: 1, initialized 0 [ 965.960965][ T8109] dvb-usb: bulk message failed: -22 (2/0) [ 966.030743][ T8109] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 966.061670][ T8109] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 966.071758][ T8109] usb 2-1: media controller created [ 966.077371][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 966.084609][ T8109] dw2102: i2c transfer failed. [ 966.089548][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 966.095398][ T8109] dw2102: i2c transfer failed. [ 966.102831][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 966.108687][ T8109] dw2102: i2c transfer failed. [ 966.113561][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 966.119403][ T8109] dw2102: i2c transfer failed. [ 966.124414][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 966.130201][ T8109] dw2102: i2c transfer failed. [ 966.134987][ T8109] dvb-usb: bulk message failed: -22 (6/0) [ 966.140944][ T8109] dw2102: i2c transfer failed. [ 966.145727][ T8109] dvb-usb: MAC address: 02:02:02:02:02:02 [ 966.148043][T21101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.161456][ T8109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 966.189367][ T8109] dvb-usb: bulk message failed: -22 (3/0) [ 966.195249][ T8109] dw2102: command 0x0e transfer failed. [ 966.200982][ T8109] dvb-usb: bulk message failed: -22 (3/0) [ 966.206709][ T8109] dw2102: command 0x0e transfer failed. [ 966.289451][T21101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.524078][ T8109] dvb-usb: bulk message failed: -22 (3/0) [ 966.535482][ T8109] dw2102: command 0x0e transfer failed. [ 966.566375][ T8109] dvb-usb: bulk message failed: -22 (3/0) [ 966.579152][ T8109] dw2102: command 0x0e transfer failed. [ 966.591155][ T8109] dvb-usb: bulk message failed: -22 (1/0) [ 966.598211][ T8109] dw2102: command 0x51 transfer failed. [ 966.642937][ T8109] dvb-usb: bulk message failed: -22 (5/0) [ 966.827785][ T8109] dw2102: i2c probe for address 0x68 failed. [ 966.925814][ T8109] dvb-usb: bulk message failed: -22 (5/0) [ 967.219420][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4304'. [ 967.230276][T21122] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4304'. [ 967.238641][ T8109] dw2102: i2c probe for address 0x69 failed. [ 967.276924][ T8109] dvb-usb: bulk message failed: -22 (5/0) [ 967.512224][ T8109] dw2102: i2c probe for address 0x6a failed. [ 967.518296][ T8109] dw2102: probing for demodulator failed. Is the external power switched on? [ 967.518389][T21112] dvb-usb: bulk message failed: -22 (3/0) [ 967.533958][T21112] dw2102: i2c transfer failed. [ 967.559493][ T8109] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 967.567048][T21112] dvb-usb: bulk message failed: -22 (3/0) [ 967.573723][T21112] dw2102: i2c transfer failed. [ 967.745714][T21123] syz.7.4304 (21123): drop_caches: 2 [ 968.066567][ T8109] rc_core: IR keymap rc-tt-1500 not found [ 968.079486][ T8109] Registered IR keymap rc-empty [ 968.085834][ T8109] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 968.161340][ T8109] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input56 [ 968.201916][ T8109] dvb-usb: schedule remote query interval to 250 msecs. [ 968.234981][ T8109] dw2102: su3000_power_ctrl: 0, initialized 1 [ 968.260838][ T8109] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 968.408035][T21134] fuse: Unknown parameter 'user_i00000000000000000000' [ 968.489446][ T8109] dvb-usb: bulk message failed: -22 (1/0) [ 968.496221][ T8109] dw2102: i2c transfer failed. [ 968.760352][ T8109] dvb-usb: bulk message failed: -22 (1/0) [ 968.766871][ T8109] dw2102: i2c transfer failed. [ 968.772337][ T8111] usb 2-1: USB disconnect, device number 107 [ 968.994010][ T8111] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 969.094427][ T30] audit: type=1800 audit(1755475909.357:1199): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4313" name="bus" dev="tmpfs" ino=659 res=0 errno=0 [ 970.803107][ T6201] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.892557][ T13] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.910356][ T13] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.919386][ T13] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.977326][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4325'. [ 971.253664][T21204] program syz.8.4328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 971.296136][T21199] geneve2: entered promiscuous mode [ 971.301577][T21199] geneve2: entered allmulticast mode [ 971.466183][T21200] vimc link validate: Scaler:src:16x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 971.938128][T21217] FAULT_INJECTION: forcing a failure. [ 971.938128][T21217] name failslab, interval 1, probability 0, space 0, times 0 [ 971.953104][T21217] CPU: 0 UID: 0 PID: 21217 Comm: syz.1.4331 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 971.953133][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 971.953146][T21217] Call Trace: [ 971.953154][T21217] [ 971.953163][T21217] dump_stack_lvl+0x189/0x250 [ 971.953190][T21217] ? __pfx____ratelimit+0x10/0x10 [ 971.953217][T21217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 971.953240][T21217] ? __pfx__printk+0x10/0x10 [ 971.953272][T21217] should_fail_ex+0x414/0x560 [ 971.953300][T21217] should_failslab+0xa8/0x100 [ 971.953328][T21217] kmem_cache_alloc_noprof+0x73/0x3c0 [ 971.953355][T21217] ? skb_clone+0x212/0x3a0 [ 971.953375][T21217] skb_clone+0x212/0x3a0 [ 971.953397][T21217] __netlink_deliver_tap+0x404/0x850 [ 971.953418][T21217] ? netlink_deliver_tap+0x2e/0x1b0 [ 971.953434][T21217] netlink_deliver_tap+0x19c/0x1b0 [ 971.953450][T21217] netlink_unicast+0x7fa/0x9e0 [ 971.953467][T21217] ? __pfx_netlink_unicast+0x10/0x10 [ 971.953481][T21217] ? netlink_sendmsg+0x642/0xb30 [ 971.953505][T21217] ? skb_put+0x11b/0x210 [ 971.953516][T21217] netlink_sendmsg+0x805/0xb30 [ 971.953534][T21217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.953551][T21217] ? aa_sock_msg_perm+0xf1/0x1d0 [ 971.953563][T21217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 971.953576][T21217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.953592][T21217] __sock_sendmsg+0x219/0x270 [ 971.953608][T21217] ____sys_sendmsg+0x505/0x830 [ 971.953620][T21217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 971.953634][T21217] ? import_iovec+0x74/0xa0 [ 971.953648][T21217] ___sys_sendmsg+0x21f/0x2a0 [ 971.953659][T21217] ? __pfx____sys_sendmsg+0x10/0x10 [ 971.953678][T21217] ? __fget_files+0x2a/0x420 [ 971.953689][T21217] ? __fget_files+0x3a0/0x420 [ 971.953701][T21217] __x64_sys_sendmsg+0x19b/0x260 [ 971.953713][T21217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 971.953727][T21217] ? __pfx_ksys_write+0x10/0x10 [ 971.953743][T21217] ? rcu_is_watching+0x15/0xb0 [ 971.953758][T21217] do_syscall_64+0xfa/0x3b0 [ 971.953774][T21217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.953786][T21217] ? clear_bhb_loop+0x60/0xb0 [ 971.953799][T21217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.953810][T21217] RIP: 0033:0x7f6347f8ebe9 [ 971.953822][T21217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.953833][T21217] RSP: 002b:00007f6348ddf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.953848][T21217] RAX: ffffffffffffffda RBX: 00007f63481b5fa0 RCX: 00007f6347f8ebe9 [ 971.953857][T21217] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 971.953865][T21217] RBP: 00007f6348ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 971.953873][T21217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.953880][T21217] R13: 00007f63481b6038 R14: 00007f63481b5fa0 R15: 00007f63482dfa28 [ 971.953892][T21217] [ 972.799415][T17837] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 973.002353][T17837] usb 3-1: Using ep0 maxpacket: 32 [ 973.042413][T17837] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 973.470324][T17837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.518868][T17837] usb 3-1: config 0 descriptor?? [ 973.821596][T21248] netlink: 'syz.1.4338': attribute type 30 has an invalid length. [ 973.830232][T21248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4338'. [ 973.873913][ T8109] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 974.059717][ T8109] usb 10-1: Using ep0 maxpacket: 8 [ 974.070102][ T8109] usb 10-1: unable to get BOS descriptor or descriptor too short [ 974.079808][ T8109] usb 10-1: config 5 has an invalid interface number: 184 but max is 3 [ 974.158259][ T8109] usb 10-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 974.187165][ T8109] usb 10-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 974.247643][ T8109] usb 10-1: config 5 has no interface number 0 [ 974.274476][ T8109] usb 10-1: config 5 interface 184 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 974.638454][ T8109] usb 10-1: config 5 interface 184 has no altsetting 0 [ 974.671365][ T8109] usb 10-1: New USB device found, idVendor=1b3d, idProduct=018d, bcdDevice=ee.07 [ 974.689577][ T8109] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.709314][T17734] Bluetooth: hci0: command 0x0406 tx timeout [ 974.715457][ T8109] usb 10-1: Product: syz [ 974.740962][ T8109] usb 10-1: Manufacturer: syz [ 974.891245][ T8109] usb 10-1: SerialNumber: syz [ 975.074929][T17837] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 975.086597][T17837] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 975.095727][T17837] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 975.126112][T21243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 975.247272][T21264] tipc: MTU too low for tipc bearer [ 975.368305][ T8109] ftdi_sio 10-1:5.184: FTDI USB Serial Device converter detected [ 975.399310][ T8109] ftdi_sio ttyUSB0: unknown device type: 0xee07 [ 975.412761][ T8109] usb 10-1: USB disconnect, device number 21 [ 975.428724][ T8109] ftdi_sio 10-1:5.184: device disconnected [ 975.452605][T21269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4343'. [ 975.470905][T21269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4343'. [ 975.480667][T21269] netlink: 'syz.8.4343': attribute type 14 has an invalid length. [ 975.488519][T21269] netlink: 'syz.8.4343': attribute type 13 has an invalid length. [ 975.679326][ T24] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 976.123872][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 976.134533][ T24] usb 2-1: config 182 has an invalid interface number: 132 but max is 0 [ 976.150707][ T24] usb 2-1: config 182 has no interface number 0 [ 976.240270][ T24] usb 2-1: config 182 interface 132 has no altsetting 0 [ 976.391638][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 976.401226][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.449921][ T24] usb 2-1: Product: syz [ 976.454210][ T24] usb 2-1: Manufacturer: syz [ 976.459955][ T24] usb 2-1: SerialNumber: syz [ 976.589678][T18218] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 976.690669][T21270] syz.1.4345: attempt to access beyond end of device [ 976.690669][T21270] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 976.715931][ T24] usb 2-1: USB disconnect, device number 108 [ 976.782949][T18218] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 976.792870][T18218] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.829494][T18218] usb 10-1: Product: syz [ 976.850726][T18218] usb 10-1: Manufacturer: syz [ 976.860938][T18218] usb 10-1: SerialNumber: syz [ 976.881519][T18218] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 976.897175][ T92] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 977.143231][ T30] audit: type=1800 audit(1755475917.417:1200): pid=21296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4350" name="file1" dev="tmpfs" ino=669 res=0 errno=0 [ 977.252042][ T8111] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 977.381457][ T24] usb 10-1: USB disconnect, device number 22 [ 977.409469][ T8111] usb 9-1: Using ep0 maxpacket: 8 [ 977.416708][ T8111] usb 9-1: unable to get BOS descriptor or descriptor too short [ 977.426847][ T8111] usb 9-1: config 4 has an invalid interface number: 30 but max is 0 [ 977.435125][ T8111] usb 9-1: config 4 has no interface number 0 [ 977.442259][ T8111] usb 9-1: config 4 interface 30 has no altsetting 0 [ 977.456158][ T8111] usb 9-1: string descriptor 0 read error: -22 [ 977.462603][ T8111] usb 9-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 977.471799][ T8111] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.495240][ T8111] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 977.511575][ T8111] dw2102: su3000_power_ctrl: 1, initialized 0 [ 977.517939][ T8111] dvb-usb: bulk message failed: -22 (2/0) [ 977.530907][ T8111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 977.540812][ T8111] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 977.548726][ T8111] usb 9-1: media controller created [ 977.554719][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 977.561351][ T8111] dw2102: i2c transfer failed. [ 977.566372][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 977.572197][ T8111] dw2102: i2c transfer failed. [ 977.577104][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 977.582976][ T8111] dw2102: i2c transfer failed. [ 977.587983][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 977.596998][ T8111] dw2102: i2c transfer failed. [ 977.602035][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 977.609382][ T8111] dw2102: i2c transfer failed. [ 977.614655][ T8111] dvb-usb: bulk message failed: -22 (6/0) [ 977.620694][ T8111] dw2102: i2c transfer failed. [ 977.626018][ T8111] dvb-usb: MAC address: 02:02:02:02:02:02 [ 977.638053][ T8111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.651403][ T8123] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 977.661688][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 977.667428][ T8111] dw2102: command 0x0e transfer failed. [ 977.673109][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 977.678829][ T8111] dw2102: command 0x0e transfer failed. [ 977.695698][T21294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.707310][T21294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.809427][ T8123] usb 2-1: Using ep0 maxpacket: 32 [ 977.819771][ T8123] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 977.828713][ T8123] usb 2-1: config 0 has no interface number 0 [ 977.838342][ T8123] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 977.853521][ T8123] usb 2-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 977.863088][ T8123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.871639][ T8123] usb 2-1: Product: syz [ 977.876179][ T8123] usb 2-1: Manufacturer: syz [ 977.881355][ T8123] usb 2-1: SerialNumber: syz [ 977.888040][ T8123] usb 2-1: config 0 descriptor?? [ 977.894057][T21301] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 977.904189][ T8123] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 977.991198][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 977.996955][ T8111] dw2102: command 0x0e transfer failed. [ 978.003093][ T8111] dvb-usb: bulk message failed: -22 (3/0) [ 978.008897][ T8111] dw2102: command 0x0e transfer failed. [ 978.017259][ T8111] dvb-usb: bulk message failed: -22 (1/0) [ 978.023341][ T8111] dw2102: command 0x51 transfer failed. [ 978.029098][ T8111] dvb-usb: bulk message failed: -22 (5/0) [ 978.036375][ T8111] dw2102: i2c probe for address 0x68 failed. [ 978.044807][ T8111] dvb-usb: bulk message failed: -22 (5/0) [ 978.095054][ T8111] dw2102: i2c probe for address 0x69 failed. [ 978.106271][ T9] usb 2-1: USB disconnect, device number 109 [ 978.123400][ T8111] dvb-usb: bulk message failed: -22 (5/0) [ 978.129380][ T8111] dw2102: i2c probe for address 0x6a failed. [ 978.136757][ T8111] dw2102: probing for demodulator failed. Is the external power switched on? [ 978.136787][T21307] dvb-usb: bulk message failed: -22 (3/0) [ 978.152208][ T92] usb 10-1: Service connection timeout for: 256 [ 978.159114][ T92] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 978.173834][ T92] ath9k_htc: Failed to initialize the device [ 978.174212][ T8111] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 978.180453][ T24] usb 10-1: ath9k_htc: USB layer deinitialized [ 978.193995][T21307] dw2102: i2c transfer failed. [ 978.199328][T21307] dvb-usb: bulk message failed: -22 (3/0) [ 978.206647][T21307] dw2102: i2c transfer failed. [ 978.310832][ T8111] rc_core: IR keymap rc-tt-1500 not found [ 978.316731][ T8111] Registered IR keymap rc-empty [ 978.324093][ T8111] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 978.341598][ T8111] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input57 [ 978.357488][ T8111] dvb-usb: schedule remote query interval to 250 msecs. [ 978.366084][ T8111] dw2102: su3000_power_ctrl: 0, initialized 1 [ 978.372841][ T8111] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 978.531054][ T24] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 978.622629][ T8111] dvb-usb: bulk message failed: -22 (1/0) [ 978.631727][ T8111] dw2102: i2c transfer failed. [ 978.689542][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 978.697701][ T24] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 978.714154][ T24] usb 10-1: config 0 has no interface number 0 [ 978.721752][ T24] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 978.746128][ T24] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 978.761446][ T24] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 978.885394][ T24] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 978.909346][ T8111] dvb-usb: bulk message failed: -22 (1/0) [ 978.909393][ T24] usb 10-1: Product: syz [ 978.915114][ T8111] dw2102: i2c transfer failed. [ 979.103406][ T24] usb 10-1: SerialNumber: syz [ 979.123864][ T24] usb 10-1: config 0 descriptor?? [ 979.152342][ T24] cm109 10-1:0.8: invalid payload size 1024, expected 4 [ 979.169503][ T8111] dvb-usb: bulk message failed: -22 (1/0) [ 979.175513][ T8111] dw2102: i2c transfer failed. [ 979.200152][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input58 [ 979.353073][T21309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.368626][T21309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.383429][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 979.383693][ T9] usb 10-1: USB disconnect, device number 23 [ 979.390506][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 979.418583][ T9] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 979.440909][ T8111] dvb-usb: bulk message failed: -22 (1/0) [ 979.447525][ T8111] dw2102: i2c transfer failed. [ 979.709364][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 979.715172][ T9] dw2102: i2c transfer failed. [ 979.982512][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 979.988389][ T9] dw2102: i2c transfer failed. [ 980.086301][ T92] usb 9-1: USB disconnect, device number 18 [ 980.443218][ T92] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 981.089853][ T92] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 981.277335][ T92] usb 9-1: Using ep0 maxpacket: 32 [ 981.324363][ T92] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 981.341222][ T92] usb 9-1: config 0 has no interface number 0 [ 981.349432][ T92] usb 9-1: config 0 interface 85 has no altsetting 0 [ 981.608916][ T92] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 981.629522][ T92] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.666303][ T92] usb 9-1: Product: syz [ 981.682724][ T92] usb 9-1: Manufacturer: syz [ 981.691062][ T92] usb 9-1: SerialNumber: syz [ 981.731121][ T92] usb 9-1: config 0 descriptor?? [ 981.746486][ T92] appletouch 9-1:0.85: Could not find int-in endpoint [ 981.755114][ T92] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 981.836765][ T92] usbhid 9-1:0.85: couldn't find an input interrupt endpoint [ 981.897142][T21368] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4370'. [ 981.992307][T21360] netlink: 136 bytes leftover after parsing attributes in process `syz.8.4368'. [ 982.007154][T21386] netlink: 'syz.1.4375': attribute type 1 has an invalid length. [ 982.048546][T21360] syzkaller0: entered promiscuous mode [ 982.054867][T21360] syzkaller0: entered allmulticast mode [ 982.096032][ T9] usb 9-1: USB disconnect, device number 19 [ 982.147169][T21389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 982.419304][ T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 982.652005][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.671441][ T24] usb 2-1: config 0 has no interfaces? [ 982.697347][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 982.718712][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.920124][ T24] usb 2-1: config 0 descriptor?? [ 983.128974][ T24] usb 2-1: USB disconnect, device number 110 [ 983.135323][T18218] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 983.303047][T21414] kvm: pic: non byte read [ 983.307733][T21414] kvm: pic: level sensitive irq not supported [ 983.307792][T21414] kvm: pic: non byte read [ 983.318689][T21414] kvm: pic: level sensitive irq not supported [ 983.318765][T21414] kvm: pic: non byte read [ 983.319148][T18218] usb 10-1: Using ep0 maxpacket: 16 [ 983.325441][T21414] kvm: pic: level sensitive irq not supported [ 983.335489][T21414] kvm: pic: non byte read [ 983.413282][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4379'. [ 986.179590][T18218] usb 10-1: unable to get BOS descriptor or descriptor too short [ 986.193589][T18218] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 986.209306][T18218] usb 10-1: can't read configurations, error -71 [ 986.279869][T21463] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4393'. [ 986.868087][T21475] FAULT_INJECTION: forcing a failure. [ 986.868087][T21475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.883433][T21475] CPU: 0 UID: 0 PID: 21475 Comm: syz.1.4398 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 986.883453][T21475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 986.883461][T21475] Call Trace: [ 986.883466][T21475] [ 986.883471][T21475] dump_stack_lvl+0x189/0x250 [ 986.883492][T21475] ? __pfx____ratelimit+0x10/0x10 [ 986.883508][T21475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 986.883522][T21475] ? __pfx__printk+0x10/0x10 [ 986.883544][T21475] ? __might_fault+0xb0/0x130 [ 986.883562][T21475] ? rcu_is_watching+0x15/0xb0 [ 986.883575][T21475] should_fail_ex+0x414/0x560 [ 986.883592][T21475] _copy_from_iter+0x1db/0x16f0 [ 986.883604][T21475] ? rcu_is_watching+0x15/0xb0 [ 986.883616][T21475] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 986.883632][T21475] ? __pfx__copy_from_iter+0x10/0x10 [ 986.883643][T21475] ? __build_skb_around+0x257/0x3e0 [ 986.883661][T21475] ? netlink_sendmsg+0x642/0xb30 [ 986.883678][T21475] ? skb_put+0x11b/0x210 [ 986.883688][T21475] netlink_sendmsg+0x6b2/0xb30 [ 986.883707][T21475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 986.883724][T21475] ? aa_sock_msg_perm+0xf1/0x1d0 [ 986.883735][T21475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 986.883748][T21475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 986.883765][T21475] __sock_sendmsg+0x219/0x270 [ 986.883780][T21475] ____sys_sendmsg+0x505/0x830 [ 986.883793][T21475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 986.883807][T21475] ? import_iovec+0x74/0xa0 [ 986.883820][T21475] ___sys_sendmsg+0x21f/0x2a0 [ 986.883832][T21475] ? __pfx____sys_sendmsg+0x10/0x10 [ 986.883850][T21475] ? __fget_files+0x2a/0x420 [ 986.883861][T21475] ? __fget_files+0x3a0/0x420 [ 986.883873][T21475] __x64_sys_sendmsg+0x19b/0x260 [ 986.883885][T21475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 986.883898][T21475] ? __pfx_ksys_write+0x10/0x10 [ 986.883913][T21475] ? rcu_is_watching+0x15/0xb0 [ 986.883925][T21475] ? rcu_is_watching+0x15/0xb0 [ 986.883937][T21475] do_syscall_64+0xfa/0x3b0 [ 986.883953][T21475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.883966][T21475] ? clear_bhb_loop+0x60/0xb0 [ 986.883978][T21475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.883990][T21475] RIP: 0033:0x7f6347f8ebe9 [ 986.884001][T21475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.884012][T21475] RSP: 002b:00007f6348dbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.884027][T21475] RAX: ffffffffffffffda RBX: 00007f63481b6090 RCX: 00007f6347f8ebe9 [ 986.884036][T21475] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 986.884044][T21475] RBP: 00007f6348dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 986.884052][T21475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.884059][T21475] R13: 00007f63481b6128 R14: 00007f63481b6090 R15: 00007f63482dfa28 [ 986.884072][T21475] [ 987.176359][T18218] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 987.329382][T18218] usb 10-1: Using ep0 maxpacket: 16 [ 987.368921][T18218] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.381048][T18218] usb 10-1: config 0 has no interfaces? [ 987.386721][T18218] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 987.461404][T18218] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.473332][T18218] usb 10-1: config 0 descriptor?? [ 987.699400][ T8123] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 987.869494][ T8123] usb 9-1: Using ep0 maxpacket: 8 [ 987.879892][ T8123] usb 9-1: unable to get BOS descriptor or descriptor too short [ 987.895017][ T8123] usb 9-1: config 4 has an invalid interface number: 30 but max is 0 [ 987.903706][ T8123] usb 9-1: config 4 has no interface number 0 [ 987.909904][T18218] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 987.920617][ T8123] usb 9-1: config 4 interface 30 has no altsetting 0 [ 987.937174][ T8123] usb 9-1: string descriptor 0 read error: -22 [ 987.953563][ T8123] usb 9-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 987.964900][ T8123] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.979112][ T8123] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 987.988117][ T8123] dw2102: su3000_power_ctrl: 1, initialized 0 [ 988.004724][ T8123] dvb-usb: bulk message failed: -22 (2/0) [ 988.021013][ T8123] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 988.033274][ T8123] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 988.064778][ T8123] usb 9-1: media controller created [ 988.073767][ T8123] dvb-usb: bulk message failed: -22 (6/0) [ 988.079793][T18218] usb 2-1: Using ep0 maxpacket: 16 [ 988.085838][ T8123] dw2102: i2c transfer failed. [ 988.094317][T18218] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 988.102662][T18218] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 988.114036][T18218] usb 2-1: config 8 has no interface number 0 [ 988.120428][ T8123] dvb-usb: bulk message failed: -22 (6/0) [ 988.127407][T18218] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 988.140922][ T8123] dw2102: i2c transfer failed. [ 988.149346][ T8123] dvb-usb: bulk message failed: -22 (6/0) [ 988.155081][ T8123] dw2102: i2c transfer failed. [ 988.176962][T18218] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 988.187218][ T8123] dvb-usb: bulk message failed: -22 (6/0) [ 988.194416][T18218] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 988.204425][ T8123] dw2102: i2c transfer failed. [ 988.224656][ T8123] dvb-usb: bulk message failed: -22 (6/0) [ 988.232445][T18218] usb 2-1: config 8 interface 39 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 988.245464][ T8123] dw2102: i2c transfer failed. [ 988.250276][ T8123] dvb-usb: bulk message failed: -22 (6/0) [ 988.279301][T18218] usb 2-1: config 8 interface 39 has no altsetting 0 [ 988.286226][ T8123] dw2102: i2c transfer failed. [ 988.291444][ T8123] dvb-usb: MAC address: 02:02:02:02:02:02 [ 988.303521][T21479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.313721][T21479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.350214][T18218] usb 2-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77 [ 988.371383][T18218] usb 2-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 988.381737][ T8123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 988.390484][T18218] usb 2-1: Product: syz [ 988.399950][T18218] usb 2-1: Manufacturer: syz [ 988.427519][T18218] usb 2-1: SerialNumber: syz [ 988.441693][T21487] dvb-usb: bulk message failed: -22 (3/0) [ 988.447673][T21487] dw2102: i2c transfer failed. [ 988.460097][T21487] dvb-usb: bulk message failed: -22 (3/0) [ 988.465927][T21487] dw2102: i2c transfer failed. [ 988.483921][ T8123] dvb-usb: bulk message failed: -22 (3/0) [ 988.491639][ T8123] dw2102: command 0x0e transfer failed. [ 988.497344][ T8123] dvb-usb: bulk message failed: -22 (3/0) [ 988.507771][ T8123] dw2102: command 0x0e transfer failed. [ 988.561524][T21489] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 988.569106][T21489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 988.685128][T18218] ipheth 2-1:8.39: Unable to find endpoints [ 988.715140][T18218] usb 2-1: USB disconnect, device number 111 [ 988.819430][ T8123] dvb-usb: bulk message failed: -22 (3/0) [ 988.826253][ T8123] dw2102: command 0x0e transfer failed. [ 988.832875][ T8123] dvb-usb: bulk message failed: -22 (3/0) [ 988.838964][ T8123] dw2102: command 0x0e transfer failed. [ 988.848523][ T8123] dvb-usb: bulk message failed: -22 (1/0) [ 988.855814][ T8123] dw2102: command 0x51 transfer failed. [ 988.861626][ T8123] dvb-usb: bulk message failed: -22 (5/0) [ 988.868089][ T8123] dw2102: i2c probe for address 0x68 failed. [ 988.874438][ T8123] dvb-usb: bulk message failed: -22 (5/0) [ 988.880716][ T8123] dw2102: i2c probe for address 0x69 failed. [ 988.886975][ T8123] dvb-usb: bulk message failed: -22 (5/0) [ 988.928826][ T8123] dw2102: i2c probe for address 0x6a failed. [ 988.935244][ T8123] dw2102: probing for demodulator failed. Is the external power switched on? [ 988.944573][ T8123] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 989.040057][ T8123] rc_core: IR keymap rc-tt-1500 not found [ 989.046891][ T8123] Registered IR keymap rc-empty [ 989.053662][ T8123] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 989.066890][ T8123] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input59 [ 989.087554][ T8123] dvb-usb: schedule remote query interval to 250 msecs. [ 989.094945][ T8123] dw2102: su3000_power_ctrl: 0, initialized 1 [ 989.101333][ T8123] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 989.349336][ T8123] dvb-usb: bulk message failed: -22 (1/0) [ 989.355224][ T8123] dw2102: i2c transfer failed. [ 989.448766][ T8123] usb 10-1: USB disconnect, device number 25 [ 989.630042][T18218] dvb-usb: bulk message failed: -22 (1/0) [ 989.640251][T18218] dw2102: i2c transfer failed. [ 989.774083][T21516] dvb-usb: bulk message failed: -22 (3/0) [ 989.780154][T21516] dw2102: i2c transfer failed. [ 989.784936][T21516] dvb-usb: bulk message failed: -22 (3/0) [ 989.791193][T21516] dw2102: i2c transfer failed. [ 989.909427][ T8123] dvb-usb: bulk message failed: -22 (1/0) [ 989.915400][ T8123] dw2102: i2c transfer failed. [ 989.939128][T21518] program syz.7.4414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.199874][ T8123] dvb-usb: bulk message failed: -22 (1/0) [ 990.243922][ T8123] dw2102: i2c transfer failed. [ 990.538206][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 990.799344][ T8111] usb 9-1: USB disconnect, device number 20 [ 990.809608][ T24] dw2102: i2c transfer failed. [ 990.851545][ T8111] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 990.984490][T21535] vimc link validate: Scaler:src:16x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 992.774021][T21568] fuse: Unknown parameter 'user_i00000000000000000000' [ 993.190249][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.199373][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.466377][T21582] FAULT_INJECTION: forcing a failure. [ 993.466377][T21582] name failslab, interval 1, probability 0, space 0, times 0 [ 993.529153][T21582] CPU: 1 UID: 0 PID: 21582 Comm: syz.2.4430 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 993.529184][T21582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 993.529200][T21582] Call Trace: [ 993.529216][T21582] [ 993.529225][T21582] dump_stack_lvl+0x189/0x250 [ 993.529253][T21582] ? __pfx____ratelimit+0x10/0x10 [ 993.529279][T21582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.529302][T21582] ? __pfx__printk+0x10/0x10 [ 993.529328][T21582] ? fs_reclaim_acquire+0x7d/0x100 [ 993.529356][T21582] ? rcu_is_watching+0x15/0xb0 [ 993.529376][T21582] ? __pfx___might_resched+0x10/0x10 [ 993.529394][T21582] ? lock_acquire+0x5f/0x360 [ 993.529422][T21582] should_fail_ex+0x414/0x560 [ 993.529451][T21582] should_failslab+0xa8/0x100 [ 993.529479][T21582] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 993.529505][T21582] ? __alloc_skb+0x112/0x2d0 [ 993.529535][T21582] __alloc_skb+0x112/0x2d0 [ 993.529564][T21582] netlink_sendmsg+0x5c6/0xb30 [ 993.529598][T21582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 993.529628][T21582] ? aa_sock_msg_perm+0xf1/0x1d0 [ 993.529646][T21582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 993.529667][T21582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 993.529695][T21582] __sock_sendmsg+0x219/0x270 [ 993.529721][T21582] ____sys_sendmsg+0x505/0x830 [ 993.529743][T21582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 993.529767][T21582] ? import_iovec+0x74/0xa0 [ 993.529791][T21582] ___sys_sendmsg+0x21f/0x2a0 [ 993.529811][T21582] ? __pfx____sys_sendmsg+0x10/0x10 [ 993.529845][T21582] ? __fget_files+0x2a/0x420 [ 993.529862][T21582] ? __fget_files+0x3a0/0x420 [ 993.529882][T21582] __x64_sys_sendmsg+0x19b/0x260 [ 993.529904][T21582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 993.529928][T21582] ? __pfx_ksys_write+0x10/0x10 [ 993.529952][T21582] ? rcu_is_watching+0x15/0xb0 [ 993.529973][T21582] ? rcu_is_watching+0x15/0xb0 [ 993.529994][T21582] do_syscall_64+0xfa/0x3b0 [ 993.530022][T21582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.530043][T21582] ? clear_bhb_loop+0x60/0xb0 [ 993.530064][T21582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.530084][T21582] RIP: 0033:0x7fb2bd38ebe9 [ 993.530101][T21582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.530119][T21582] RSP: 002b:00007fb2be1b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 993.530143][T21582] RAX: ffffffffffffffda RBX: 00007fb2bd5b5fa0 RCX: 00007fb2bd38ebe9 [ 993.530159][T21582] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 993.530172][T21582] RBP: 00007fb2be1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 993.530185][T21582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.530198][T21582] R13: 00007fb2bd5b6038 R14: 00007fb2bd5b5fa0 R15: 00007fb2bd6dfa28 [ 993.530228][T21582] [ 994.359875][T21599] vimc link validate: Scaler:src:16x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 994.452192][T21598] pim6reg: entered allmulticast mode [ 995.996285][T21623] delete_channel: no stack [ 996.008029][T21626] program syz.7.4443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.021747][T21626] FAULT_INJECTION: forcing a failure. [ 996.021747][T21626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.036420][T21626] CPU: 1 UID: 0 PID: 21626 Comm: syz.7.4443 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 996.036449][T21626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 996.036462][T21626] Call Trace: [ 996.036470][T21626] [ 996.036478][T21626] dump_stack_lvl+0x189/0x250 [ 996.036508][T21626] ? __pfx____ratelimit+0x10/0x10 [ 996.036544][T21626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 996.036566][T21626] ? __pfx__printk+0x10/0x10 [ 996.036595][T21626] ? rcu_is_watching+0x15/0xb0 [ 996.036616][T21626] should_fail_ex+0x414/0x560 [ 996.036643][T21626] _copy_to_user+0x31/0xb0 [ 996.036665][T21626] simple_read_from_buffer+0xe1/0x170 [ 996.036695][T21626] proc_fail_nth_read+0x1b3/0x220 [ 996.036718][T21626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 996.036740][T21626] ? rw_verify_area+0x2a6/0x4d0 [ 996.036764][T21626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 996.036786][T21626] vfs_read+0x1fd/0xa30 [ 996.036808][T21626] ? fdget_pos+0x247/0x320 [ 996.036828][T21626] ? __pfx___mutex_lock+0x10/0x10 [ 996.036856][T21626] ? __pfx_vfs_read+0x10/0x10 [ 996.036883][T21626] ? __fget_files+0x3a0/0x420 [ 996.036901][T21626] ? __fget_files+0x2a/0x420 [ 996.036921][T21626] ksys_read+0x145/0x250 [ 996.036946][T21626] ? __pfx_ksys_read+0x10/0x10 [ 996.036968][T21626] ? rcu_is_watching+0x15/0xb0 [ 996.036989][T21626] ? rcu_is_watching+0x15/0xb0 [ 996.037009][T21626] do_syscall_64+0xfa/0x3b0 [ 996.037035][T21626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.037055][T21626] ? clear_bhb_loop+0x60/0xb0 [ 996.037076][T21626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.037097][T21626] RIP: 0033:0x7fcf23f8d5fc [ 996.037114][T21626] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 996.037131][T21626] RSP: 002b:00007fcf24db5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 996.037153][T21626] RAX: ffffffffffffffda RBX: 00007fcf241b5fa0 RCX: 00007fcf23f8d5fc [ 996.037169][T21626] RDX: 000000000000000f RSI: 00007fcf24db50a0 RDI: 0000000000000004 [ 996.037182][T21626] RBP: 00007fcf24db5090 R08: 0000000000000000 R09: 0000000000000000 [ 996.037194][T21626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.037206][T21626] R13: 00007fcf241b6038 R14: 00007fcf241b5fa0 R15: 00007fcf242dfa28 [ 996.037227][T21626] [ 996.539402][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 996.622918][T21646] FAULT_INJECTION: forcing a failure. [ 996.622918][T21646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.655051][T21646] CPU: 0 UID: 0 PID: 21646 Comm: syz.7.4451 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 996.655073][T21646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 996.655081][T21646] Call Trace: [ 996.655086][T21646] [ 996.655092][T21646] dump_stack_lvl+0x189/0x250 [ 996.655111][T21646] ? __pfx____ratelimit+0x10/0x10 [ 996.655128][T21646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 996.655141][T21646] ? __pfx__printk+0x10/0x10 [ 996.655158][T21646] ? rcu_is_watching+0x15/0xb0 [ 996.655171][T21646] should_fail_ex+0x414/0x560 [ 996.655190][T21646] _copy_to_user+0x31/0xb0 [ 996.655204][T21646] simple_read_from_buffer+0xe1/0x170 [ 996.655223][T21646] proc_fail_nth_read+0x1b3/0x220 [ 996.655237][T21646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 996.655250][T21646] ? rw_verify_area+0x2a6/0x4d0 [ 996.655264][T21646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 996.655277][T21646] vfs_read+0x1fd/0xa30 [ 996.655291][T21646] ? fdget_pos+0x247/0x320 [ 996.655302][T21646] ? __pfx___mutex_lock+0x10/0x10 [ 996.655318][T21646] ? __pfx_vfs_read+0x10/0x10 [ 996.655334][T21646] ? __fget_files+0x3a0/0x420 [ 996.655344][T21646] ? __fget_files+0x2a/0x420 [ 996.655355][T21646] ksys_read+0x145/0x250 [ 996.655370][T21646] ? __pfx_ksys_read+0x10/0x10 [ 996.655384][T21646] ? rcu_is_watching+0x15/0xb0 [ 996.655396][T21646] ? rcu_is_watching+0x15/0xb0 [ 996.655407][T21646] do_syscall_64+0xfa/0x3b0 [ 996.655424][T21646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.655442][T21646] ? clear_bhb_loop+0x60/0xb0 [ 996.655455][T21646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.655467][T21646] RIP: 0033:0x7fcf23f8d5fc [ 996.655478][T21646] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 996.655489][T21646] RSP: 002b:00007fcf24db5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 996.655504][T21646] RAX: ffffffffffffffda RBX: 00007fcf241b5fa0 RCX: 00007fcf23f8d5fc [ 996.655513][T21646] RDX: 000000000000000f RSI: 00007fcf24db50a0 RDI: 0000000000000006 [ 996.655521][T21646] RBP: 00007fcf24db5090 R08: 0000000000000000 R09: 0000000000000000 [ 996.655528][T21646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 996.655536][T21646] R13: 00007fcf241b6038 R14: 00007fcf241b5fa0 R15: 00007fcf242dfa28 [ 996.655548][T21646] [ 996.919451][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 996.926110][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 996.934618][ T9] usb 9-1: config 4 has an invalid interface number: 30 but max is 0 [ 996.967386][ T9] usb 9-1: config 4 has no interface number 0 [ 996.974032][ T9] usb 9-1: config 4 interface 30 has no altsetting 0 [ 996.985318][ T9] usb 9-1: string descriptor 0 read error: -22 [ 996.992826][ T9] usb 9-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 997.002207][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.084527][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 997.091915][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 997.098064][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 997.106372][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 997.116556][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 997.124255][ T9] usb 9-1: media controller created [ 997.129775][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 997.135517][ T9] dw2102: i2c transfer failed. [ 997.140357][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 997.149414][ T9] dw2102: i2c transfer failed. [ 997.154217][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 997.160497][ T9] dw2102: i2c transfer failed. [ 997.165284][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 997.180864][ T9] dw2102: i2c transfer failed. [ 997.187901][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 997.194065][ T9] dw2102: i2c transfer failed. [ 997.198930][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 997.205918][ T9] dw2102: i2c transfer failed. [ 997.210980][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 997.226375][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 997.263726][T21648] vimc link validate: Scaler:src:16x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 997.291951][T21629] dvb-usb: bulk message failed: -22 (1/0) [ 997.298675][T21629] dw2102: i2c transfer failed. [ 997.312663][T21629] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 997.324567][T21629] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 997.332991][T21629] CPU: 1 UID: 0 PID: 21629 Comm: syz.8.4445 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 997.345128][T21629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 997.355176][T21629] RIP: 0010:su3000_i2c_transfer+0x2e3/0x1040 [ 997.361174][T21629] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 5a b5 3c fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 e6 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 997.380790][T21629] RSP: 0018:ffffc90013be7aa8 EFLAGS: 00010202 [ 997.386853][T21629] RAX: 0000000000000002 RBX: 0000000000000010 RCX: f8d402570a6d1400 [ 997.394814][T21629] RDX: ffffc9001041e000 RSI: 000000000000333a RDI: 000000000000333b [ 997.402783][T21629] RBP: 0000000000000000 R08: ffffc90013be77c7 R09: 1ffff9200277cef8 [ 997.410756][T21629] R10: dffffc0000000000 R11: fffff5200277cef9 R12: 0000000000000001 [ 997.418718][T21629] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff88803e1b55c8 [ 997.426679][T21629] FS: 00007f8c30e766c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 997.435613][T21629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 997.442184][T21629] CR2: 0000555591b6e808 CR3: 0000000061b8a000 CR4: 00000000003526f0 [ 997.450149][T21629] Call Trace: [ 997.453443][T21629] [ 997.456363][T21629] ? i2cdev_ioctl+0x64b/0x7f0 [ 997.461039][T21629] __i2c_transfer+0x871/0x2170 [ 997.465806][T21629] ? __pfx___i2c_transfer+0x10/0x10 [ 997.470994][T21629] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 997.476359][T21629] ? i2c_transfer+0x120/0x3a0 [ 997.481031][T21629] i2c_transfer+0x25b/0x3a0 [ 997.485530][T21629] ? lock_release+0x4b/0x3e0 [ 997.490118][T21629] ? __pfx_i2c_transfer+0x10/0x10 [ 997.495132][T21629] ? __might_fault+0xcc/0x130 [ 997.499811][T21629] ? _copy_from_user+0x94/0xb0 [ 997.504564][T21629] i2cdev_ioctl_rdwr+0x460/0x740 [ 997.509507][T21629] i2cdev_ioctl+0x64b/0x7f0 [ 997.514029][T21629] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 997.519150][T21629] ? __fget_files+0x3a0/0x420 [ 997.523830][T21629] ? __fget_files+0x2a/0x420 [ 997.528421][T21629] ? bpf_lsm_file_ioctl+0x9/0x20 [ 997.533349][T21629] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 997.538369][T21629] __se_sys_ioctl+0xf9/0x170 [ 997.542951][T21629] do_syscall_64+0xfa/0x3b0 [ 997.547451][T21629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.553504][T21629] ? clear_bhb_loop+0x60/0xb0 [ 997.558260][T21629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.564153][T21629] RIP: 0033:0x7f8c2ff8ebe9 [ 997.568581][T21629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.588202][T21629] RSP: 002b:00007f8c30e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.596631][T21629] RAX: ffffffffffffffda RBX: 00007f8c301b5fa0 RCX: 00007f8c2ff8ebe9 [ 997.604596][T21629] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 997.612568][T21629] RBP: 00007f8c30011e19 R08: 0000000000000000 R09: 0000000000000000 [ 997.620568][T21629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.628537][T21629] R13: 00007f8c301b6038 R14: 00007f8c301b5fa0 R15: 00007f8c302dfa28 [ 997.636506][T21629] [ 997.639518][T21629] Modules linked in: [ 997.644421][T21629] ---[ end trace 0000000000000000 ]--- [ 997.674551][T21629] RIP: 0010:su3000_i2c_transfer+0x2e3/0x1040 [ 997.680974][T21629] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 5a b5 3c fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 e6 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 997.714521][T21629] RSP: 0018:ffffc90013be7aa8 EFLAGS: 00010202 [ 997.722202][T21629] RAX: 0000000000000002 RBX: 0000000000000010 RCX: f8d402570a6d1400 [ 997.734849][T21629] RDX: ffffc9001041e000 RSI: 000000000000333a RDI: 000000000000333b [ 997.746928][T21629] RBP: 0000000000000000 R08: ffffc90013be77c7 R09: 1ffff9200277cef8 [ 997.755533][T21629] R10: dffffc0000000000 R11: fffff5200277cef9 R12: 0000000000000001 [ 997.759401][ T24] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 997.764120][T21629] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff88803e1b55c8 [ 997.780534][T21629] FS: 00007f8c30e766c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 997.789748][T21629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 997.799458][T21629] CR2: 0000555591b895c8 CR3: 0000000061b8a000 CR4: 00000000003526f0 [ 997.808742][T21629] Kernel panic - not syncing: Fatal exception [ 997.815141][T21629] Kernel Offset: disabled [ 997.819528][T21629] Rebooting in 86400 seconds..