last executing test programs: 9.81209177s ago: executing program 4 (id=1434): unshare(0x2040400) syz_clone(0x80c0400, 0x0, 0x80000, 0x0, 0x0, 0x0) 9.579139493s ago: executing program 4 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r3, 0x7, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f0000000240)="9558f6dfd16dd1d54f023d0464a82c547bba15ab4239d5c61e2f2b0a16", 0x1d, 0x401, 0x0, 0x0, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f00000002c0)="3b46cbbdc3916100e02bae144f9d56ca092721dfc4220a75a2cfedf2b1bee5d7e65ca00e8542d1e9b9f0d15f3e4152e9476e8731334ddc1abb9113308bfea74f7fe0fa7e2c468cd4dfe597a6089e9b2b35c07be49511733d62e460ae66084693900ea79fcfc39c6e463eddb95b81701c5049d1740abe07aa5b157b2bb590ffe9191e329c15f0ad5843090aaf18641b588b265ae43f66029781b0f926ed527f6bcfb93cb698262cb3fcca97ce6d3de813f576c65e67274aa32e7f14acde0b8f497aeaa31c", 0xc4, 0x2, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000400)="1541ad1f110bae05aebf3d9bef85f5b376c8823ef86edd539ff64e1783d36527297ed0ecd5a2b416548faf577c59e4741bdd6f43281d3f419f4bb309ebcc6de6dae334ab24d695b63e0279e314b224b4385718230a9a71126c648702c6e73306944a1330acea6abbde929eaf0b081db150fd09d06d7857c3dbef70", 0x7b, 0x0, 0x0, 0x2, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f00000004c0)="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", 0xfa, 0x3, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000600)="e1d856f7cdfb6c0fcac6ec21ad6cd1be037b3c17120cc3e6f7b5ff2d29e9dedd7d9ce16e1121638820202f662e9155e55f34dec499e8bebf725fb9d6d62d90bbdb1ed745ac9748d1e9555a1ff6ff9858e0887128f804106c764a7c25545be127dc5252d9f64f0f3248b1213ca18e6b41bed66e156a491adf0e72da570683d574cd795647270dfc381004d0b3bbc40e228ec2", 0x92, 0xa}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xc, 0x4, r2, &(0x7f0000000700)="2b40abecc9eef1dd85946f523a8d48218b14d31a9ef5c6ca0f86d7e5f586fe0017f3607f0d456cdbce2e00c5fd0ad648f07c6d19a4f613a22fed197e0b54139204deb49cf67e0d9781e7aeb258781034a27bcc9bff89a7f5d7cbda872289c8101d3c46960a4360b5c0232f35cea56853428d06fc36a07cf1f71356af6ca28d279cc8f97ec60aefbfc23b50bc53e7a001579a2aaeed8c244bb31b7c2dfd5a2721f166a44eb9bdc4915d8ca91b5ba2", 0xae, 0x6, 0x0, 0x106d70adc743fc04, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x80, r0, &(0x7f00000083c0)="b3ed77e397ed238e0c09b939b1e6850f6ecc4bb127137767faffb0d1763bf712a2325f18fd366c6a1db38c2bd979c30d6d9b58299c9003651d9a5ae5ed21421f57c7e6ad8849498911d389e014ca47ae644d7824a933a58fb698ac789c80ca5202562ec8fc780c2192ebefd8e853c3323cba1d427a655533b530326d25a5eb55cd8b63354d46ec29eaa49f821fe6d6edb285d0dca62802dde491b08b83cd131c01aca90d48d781b747ffdbae9957991e6915518b71f71278a7c18a290deef5eb6bc2ea7c0205e55a1fb8c3e6431a1e0893f2af691f8ad0d0d15543835f1b88cbdbd9504f718fa3fa6aeb76906778f6dca9d27c9f7abc3efe8f7a861380c795c4503816377ba2a7da5eeb79613c1e96b5174b45586b08161c921d752f832e0cda6b4ff428037aec6eb60a31f882987799a10e741dee6c4cd7b338939b9db3d0ca90421026a3f2d72b7219d26beabdd5fee366e97570e0b224b414fec1d827be1468675131ba6dfd7e87206695723de956d7c954f0093d4e3ccf4f2d1ea00bc8725d7d65090b685733b84a9f84a8b3ee0ce1e25f7ed4430db738707b8578a5e5d605a6e650eaeb95ddab129176898ea35b0d7e1ac2b23eea23e6341859b9ed6a2c2248caed81f004a9fa8f703c8286ff2a8de68e867b8cacda31eb934b08cce32f25cf39467463eb8691f48479510483dc0e69df4d85110b95f17e4126fd09051e7971ccfa6585acfdc1cbca43666868971ceb63c52408c7f38e7967a75e9745b7a67eef931129cca7791ec6918a2520064d3d24a25debc3745c27517a8930aff430e15451975313089e5459a15a8cd67925eca0db88d1b97ad2eaff96e2a8d689eb5b498062946ebf2d6d4eafa85e362de0b418794532d5f87e37f1dcd06a508c8937e1522776a76cf05c7a06976318350eb6a7019a0fce74cd132f8da6ead245d3c890e7c71ecc1f8bc1519050bf544a247dca9084907b4c75578b2df654e0a5b13b46163bbe607d0fd60d00ad7d1fa7e6408a4453d723b9da2cfd96e16ddcccb6f11cdbcc68b5977ed16db231deba95b5f5acdf6f7641d017417f084664218588b776272407c95294cc2cdb7d97286f34cafc3df178fe53be4bf4d8325c53d359076766ca0962e6ac515faac27d9fd9aa56e80f1ee2fa9dfdbda225ad13f1fcdf9e8c953101e62e5fd3b8b9f2800d59c7ac80cf0dd552a3822467da69f05126b13c231c7e2fab17654c4c3bb4785eeed430b3b58978b001dca39cd1ddb538a27dd5dc1bf431a08c03af3074744803f29afd54d0be734d5ba483f718ba682ea8781edc4af4723a408da07e194a7ce8b6acbd3d00c77a428134898329b70ed4bdb175af84fd810e026cdbedfe6be0abb86f062c505489fa2fcc3cf4ad0c75ef7d244c4a96adaa0bdc047ab1a54ad07abdaf1570f01ed920ee08f956e55817b4bf3b9b4597cb0554ede2a8b70996e9c02e03a27928660f2ab087ad26e6c8e8c34bb7feb87e2df521f9e32f87775e3187e1bae78de2f377e494d23f9c6877a5acc4a9e39d5c730a688c928137f42a31efff65bfec12a73d96d8aca1fab5c3f79e86ca93a6e655b9d2136e4d68ce42d1876d121501482445223991cdf3abd2fa30046cc4c4c4df56202a1fa33527f6febb86dfa1773a07b8a6fdb35429b9a5243d34d3ef4fec24d27cecaffe2552a491e1549518f9651badec0d2b8d3761c22005d311f63da09536396fee82392c87ee3cb571c9eff4b7d27a8c395db8bd68bc6d34ef515853c6fcf5ea8c46438c1124abfd33cb4ee4a57b1ed9ef3407588f1c154e863ffd380febf9abb0598aa6a5ad61d93d062bc9274651c9456ed6ae5d768f716a4ab9b5e7c78c3a8694aed363e88fa98b42420b5550affc26e0c669e43bfe3ed3d6c3594aa90e626640f2ce46323b61ba56c20dd3b4da7fce118a7d594cb778b7dbe61119708f2ba4d87c784ceb66d251c6d1985e530d915f63269a2b96a5e075797bcc52872ccf8af177b52871d3da5b54d3e2a6d9f41de7c2c9e33be8fa9b246c36a83bede605d06b0d1b39b27d04e054be5dc17675fe1117d98e42f5b89390b8357895c7c5515a78c8ecd9200ed904c4abc719463716138b5317e1c090b98a4ee5e326575f7d3c69d22d056baf0832442116c714589a6e845efef43fcd241c10164256e0bcac796e4e52d578d2c20bc440c4b2516c2d34338341b5796a124eed8b294b3648bda5326c428f082efe77969b0d3fe2f759777a42ba495366b3f6d5d8f0b6612cb376d78610395ff8ad5343c7e1336a97175cbc254ae5fbf277fd00ed8e1227a1bd28861b2067197bbb1b31044d20442017d8cbbe45600f361ed10944ff8e804cf0c0e6da85ccb2775fc7025c6e43361cfe0e2759ef5bd4367dbdf8b047ec0f65869f1eb6f3152be85f5b117edde5d2c692a6cb20d013d8394898873a1416938ae44c79e51b5fc963caa8910159bdb801561e4d239be609257b9dc8898a1d3a7057b948b34a159d46705a0188ec9bcc5412d266237752439f82f7823045e94300089893d60390d693623d167632f042eee839b1cf1072da4ce4b84964d5fbecc15baf6e5f0b2ff12edcdc3de142fcc6c2811b5eefd4fffd3d1e4fd0e9610a34cc83a0bb0753dff4519a7f44ba7e6cd53a1ce87e30152c4fad7eec517cd6cd2d164771e663cbf846d4307d28ca14d463f1e72bfe347897f78be505d4e6eb14ad7ea6ac879e222df0b9c26014159a503e7c73d1864fbfc0caf04a368a5ca7175299823f00f59f229636f0d3800584fbc68e3398299c1040cca49f3b4222974e75fd6b6b22436dbc7aab8a0e6a2098672424e948721410b204aad844235d53e1ea878c4796034b0db9e480cf71aa306411575719832bee320f386bdc91a9c4da81d2257ee0825c2acf4880d7b6dff1bc5f42121f712119f84869241b728e0bf9b5934860029da93181b451a863107e1b3203d4e6038541cbc0aab82bc12108995b43ffebed8bf540ae05706271e7b07662cf3b07ffbafb92ad186daa9587105e2881b48a36d0058eff11b9422c152f283a5a4b7af42818456259231d0852154a1c2196199741c481c6f5037ba1e225cd0b06f621ee42e87594a3af983904cbfb7df2f24b5796891eb978448efd6c9012ae69f53f644bdb9b150d33f0c00e18ab9d83b7b9b34a0429bb87bfd13f8f42dc6e8dd6362a67a47cf3987c935369ae18b414e5d023f8e0c32a6471dba092a189fde995b3a0865e204336a17880b8973fca97f776d076401a1b6f937c5b6f8f96a01478f09fb195356317e10711caf58547448e8b058d81e35b1312b61ccc4cc3fa0cb296839e83b256fd521932ee2eb88b89bd1d994d9bde123005bab4aebcd4ee6e15650e65dd38e031fcf292b7d0f4776a67cede024ad1260f568320c777524d11bb655a4642e0dae3c902a702111ce9950ab9da00580a733f3560ff4a4edb0d9e3cf4096c40c1bfe445d36502ec5a9a8fa6b1284222dcc62e22f452b770a03699da717b6dc3d8cc3764950ad43abd28f5dadca23043216f458a5cbad4e27c9d84afb6ee2ce1fbb5a08d93b72aa4f05b15395ed54c959436b6f990a9eebaec9527e66c20e3b8abb4749afc3847a9f422802896a940a8f4563409227e04b45ecefe2f2113e0b70dbebbaad59ef3bd05940c7f9b340c6d10e0ed264b28aa3219aa318c01a01540868d345736136fad364a86534899cfab3d96d6ccc4c462533f10e3a340498880aa167d0d976478893ea713ecf6e86b8fad816008b2d184742f368989d9f0f7fa933b4a2ac8122bc02de69572bd020378c4952c8c2d13261e431fbe7b0d3e1bcb18b42c6bf68207e4aa1f0c892a80feadeec62f47b7ba16794e2ad596a66b24d4cff533d9b77b62169922ea24104181fbc3ea857a91ab3afc74187370cf04ba75a67a926293aed01fff9d349e47f7b3aea8f1b81c2e76ddf8aff6513628a0bdc22937e54e329575ea37de88723d03a9027123f9039869c959585e18bf8de184dbbd018925ca3197b052e285b8e36b180a72947d8ce965e1cf2c926a42aa03d88961a85d817ab5d6c2e62e8f01b0fa80d96aebff10f7c8b5f9ab1fdf39f4cef7efef74384f4c7d5ca21ed7075a73b78aa29c19aaf96807f30f2a521f048ba77ea0f2c56268197dc70abb74c5158e6772da56a64d0047945eefbb39982cf55c85b6cec1e845be1c41deaaccdddb155bdaf9dd49bae61fa53fdcd2183572978f5e378d1fc322d96e8b0af1b991a475a8b5f6fbdf4bb7f97ff3b563abdd4f7e578462d6a6b4882294bd56e609222c4bcf5dc4e8e6b0f362ddfdac2c9dda29a7b338756d8c378b81316238933f9d025f6ac29a88585adaa0e9061620d0b9f9eeabc682cea9888f0e6ca487814d39f461bd24a54a028ce6e09e13134ed7913ba70f4d14bf132211441409d12a41ccc817f6986cbf17a1ed2a696fc3580e14fc2293b22b8ddf85fb493f72a91c2c4875e33477ec46247e5ace5132ba711c07286d546e976157c480985bc5f9a336d2ba3898148e81dfecad90c4afe1b4ec00c7b5a4a7f8688bfe8414b7429539418de1c5c508c34da58eac0a217081ef8d701d259ddc84105b56524a972e7d83e6042b5b031e0cb8ed2876f35ee2bb407a426b956ca34931460a14c9253f219cf91d9b5181cf48f70332e19b48b20075a485306b669b75791551a67569c2a7cc392705a9a660263c9dd3ef4697abb16269d6436e833f928fbc31125503ff9f380bf5c93a6fa7896c53241a3b4869189ff5be08f91c32ca20dd651f94b0be13b18275d8335bbdf50578305188210cb9c87b77f569d5b8c2a4a565d383a053a7a2e08152ffcc95244f86e21e651298ca0734ebd557671035edd049488b6502849cf6d5ea94865fe12cdfe3ade6792af18b0d787dbe11217536de6066636787960f44eeb0c1367e11e4679bf64ccab0edb5197b81b0bdb4f73785f5db2a66c48e58f6e8e4d5af40789ebb55be593ea758d0a3eb90d2d9a410d11a5642f3ba689e2f0690d1d30747faf07f4751a82814fa5a352513f7d7379e0adf48f1fedd275ccd52809a8c456079bf34fc704cb44695c001acbf9408ddee46ffbfad5dd1a19c6af40d4bec24793b71db732b9149b9634b155a7320bed17d3020dc47aef89f5022c22209d856e01bb0d0d0c7fd925deab18cab1c8c6bd02b823d04b182ea5aa0f8667ed7602c6f411bfe7f06bd89b674775bd970fdc54e63cdd716f18b09991a1840294d927b0d5a387ab629e79f79505b2e327df9e19a1ff54ff027c1ef4a553258d69074567de18cd8cc8bcfd32adfa42440104474620cf06963e435bf73cc19fd8e5eb627a9fa1bb5e0c42d5c2135ab601f56384346a1d0623ced1a1e374a8fa35e2328e76725f0bec8e606a29c1d8a2fcd46767a00af85ee035c08eabd4e3ce816ebd8ff9a8443998c53136e5e16ea3d70a53869ca71d5158647087a32ca7bc52d07c2b31496db6e75b30c408ce217ad60a3b88f6dab817bef3d51d16a555d68b1acf4f007c9816302778f60f814f4a8f38d7074cc5a3002774631bf3a2924d89154c2ed920cc8552c4a492e9cbc09ceaaed5a9fbefffd4c11d509bd29ee7f6c2513e0a44fbbb7f2f1513af422380fd6492369c5462e389d994bdaa5b32bd2d00766d8b7d7a09725a07849cea913d1aa4e3f652c192187f2ac502b237acdbf26763fddd998b192d387c8f7cd897b0105d2e6c6c65c97cb65fd6c2a2fe0bd2b814ab4dc98257380b31022664410c35807201c354a5d9e0451252c", 0x1000, 0x9, 0x0, 0x1}]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$P9_RLERRORu(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1fee130d1000010000000000000000000000000a44000000090a010400000000000000000700000008000a000900020073797a31000000000900010073797a3000000000080005400000002108000f4000000001140000001000010000000000008000000084000a00000000"], 0x6c}}, 0x40000) 9.26475354s ago: executing program 2 (id=1441): r0 = userfaultfd(0x801) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "05000000889ab5ea", "00000000000020000000000000000200", "4845fff0", "071aabb360104a91"}, 0x28) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="8ef53529342eea82c298680d31e250fd18134bb0b9211d146ead8bcb8f07d5939811b8cc8feefdd1c6f52eb1680220b85528d6acf797075876a75a380673617968bb385ea3c1e6679a52018c2e7c8361600f9ba7fb977776fad941e3118c9141413f5a02577f1b268a2e5f58c3f74785db9cefbd42b2c3913936b9a36788dce6980ffdcdeb008f2f37f99b85f9af774113157ee96b8525d303ff5f326ab8fca73e9541b24146543596ae2e6b940d587da0c2f6428c564a72303e252e7e99f9cb57eb9054da7dde91ebe5375bcf7b", @ANYBLOB="91a2d168b20cd1c3af0d1fd672f184a88ecaf4e052b8f753986669f20e1dd07931cdacf73a7c5431300e5aa60014b7814d9ba1f974af88f2cc293f2bade0dff0540dc9c2b1739da327a2337ef5abe32c231bb62fa9ed6a33f00132cf81f6a17494567ebcbc685f3965137d948023b5ad1e22402b3a3d94f29f5691ec38dbb66425cb1a88de22dc11933e2c1885026dfc568d21f9ad0fa829afbcace898954cc9c476645f936c0382960a3d1136b42788b50f83da81238dfe7c1ef8"], 0x130}}, 0x40011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x13ef, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000140)="fae176bb97a0dc356ba15e383a46a8e0007aa34de065fccad914438378e4eee05d4811f7cc752b5f0b400e5941d25a15559121b51617543e6eda703c6bb1fdc75779ada83c9c71f42b6528abdca3cc1b0aa8c08b63554901117317318cea570643b0e911ac23395e4e6167b88efac9de95770bd9c0f1a9f3547d22409c7772418c3f085a64bb3ee2db978f6ace06a40ce699172f37c0fcc5663fb5315db1e7607a2d10e09853b59c4a", 0xa9) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 8.988525767s ago: executing program 4 (id=1442): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000080)=0x1, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000001c0)='./file0\x00', 0x7) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r4, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000400000000600000008"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x411be673, 0x0, "d853fff35dc006cf0cc250a9c49b03b731d5c7"}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xb0b0b0b}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[{}], r9, 0x0, '\x00', 0xa, 0x1}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x3ff, r8}, 0x38) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x100000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mlockall(0x7) 8.08395283s ago: executing program 0 (id=1447): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) (async, rerun: 64) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (rerun: 64) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000080)={0x20, 0x14, 0x2, "01e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r1}) 7.152808802s ago: executing program 1 (id=1448): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)='\x00', 0x1, 0x5, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000200)=""/7, 0x2, 0x40010000, 0x0, 0x54) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 6.237686559s ago: executing program 3 (id=1453): io_uring_setup(0x67bb, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 6.108695055s ago: executing program 1 (id=1454): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x4}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x4}]}}]}, 0x3c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x14, 0x10, 0x3, 0x5, 0x10, 0xa53, 0x10, 0x9, 0x1, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x14, 0x10, 0x3, 0x5, 0x10, 0xa53, 0x10, 0x9, 0x1, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={0x0}, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.080298909s ago: executing program 2 (id=1455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'geneve0\x00', &(0x7f0000000440)=@ethtool_eeprom={0xa, 0x1, 0x6}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRES64=r4, @ANYRESDEC=r0, @ANYRES32=r5, @ANYBLOB="565732189055496754c045", @ANYRES8=r0, @ANYRESDEC=r4], 0x3c}}, 0x4000080) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = open$dir(&(0x7f0000000200)='./file0\x00', 0x22080, 0x160) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', r6, &(0x7f0000000240)='./file0\x00', 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r13 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401000015cc1c009299db50134c"], 0x0) syz_usb_control_io(r13, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="200b0168670010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$can_raw(0x1d, 0x3, 0x1) r15 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r15, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r15, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) sendmmsg$inet6(r15, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @remote}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffff90}}], 0x1, 0x8000) socket$packet(0x11, 0x3, 0x300) recvfrom(r1, 0x0, 0x49, 0x40002170, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r14, 0x84, 0x74, 0x0, 0x0) 5.935024025s ago: executing program 3 (id=1456): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x100, 0x4) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000e00)="652f34d9d4f8b226fb80c361c316b6ec12586a08cd5e7aae893bd99d30a4511fe7713a09cc512a647da58811e242de40a40faf5c475195fea1c1bb45f512e3f3d22029fbe4c4331c5942d2ad7ffab41f591bdc772c365323e7d31b64a0e90937d56b5a4489e52fbbb35fd957cdf2cfa96611d92e2467580766def4dfee56b56040775981073db3f698f5b29c3b7cde03b31a510c84fe0d92d3bd809c26573906b183bac284b98764", 0xa8}], 0x1) (rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400540, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 5.716912076s ago: executing program 3 (id=1457): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x6}, {0xc, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 5.667150468s ago: executing program 4 (id=1458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x2f}, {}, {0x0, 0x0, 0x2}, 0xb, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a8, 0x374, 0x250, 0x198, 0x374, 0x374, 0x414, 0x414, 0x414, 0x414, 0x414, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}, @inet=@rpfilter={{0x24}, {0xa}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@empty, @loopback, 0xffffffff, 0xffffffff, '\x00', 'netpci0\x00', {0xff}, {0xff}, 0x89, 0x3, 0x22}, 0x0, 0x98, 0xbc, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x650f0000, 0x9}}]}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x81}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x20, 0x3, 0x3}}}, {{@uncond, 0x0, 0x100, 0x124, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x1, 0x2, 0x0, 0x6, 0xc, 0x1], 0x0, 0x2}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x1, 0x2}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@broadcast, @empty, 0xff000000, 0xff, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x88, 0x3, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x5, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x504) r4 = openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x2, @sliced={0x6, [0x7, 0xe, 0xcaef, 0x85, 0xbc, 0x1000, 0x6, 0xa, 0xf827, 0x7, 0x800, 0x4, 0x9, 0x1, 0x65, 0xed1, 0x5, 0x0, 0xd23, 0x86, 0x81, 0xa, 0x10, 0x5d30, 0xf, 0x4, 0xb, 0x101, 0xfff7, 0x9, 0x80, 0x6, 0x80, 0xd, 0x5, 0xfffa, 0x1, 0x7, 0x2, 0x0, 0x9, 0x101, 0x4, 0x7, 0x40, 0x400, 0x4, 0xfffa], 0xe}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001b80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xcc}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@tclass={{0x10, 0x29, 0x43, 0x7}}, @dontfrag={{0x10}}], 0x20}}], 0x1, 0x4000) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000006c0)={'tunl0\x00', {0x2, 0x0, @loopback}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002540)={0x28, r7, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="5f3bdf6cf57e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf3, 0x9c, 0xf5, 0x8, 0x8ca, 0x104, 0xe1db, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x6, 0x0, 0x5, [{{0x9, 0x4, 0xc1, 0x0, 0x0, 0x47, 0xa9, 0x29}}]}}]}}, 0x0) 5.578839553s ago: executing program 0 (id=1459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) (fail_nth: 9) 5.497683235s ago: executing program 3 (id=1460): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008}, 0x14) fsmount(0xffffffffffffffff, 0x1, 0x8) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x86d6ecc17d767e84) copy_file_range(r0, 0x0, r0, 0x0, 0x7, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcd69f205a04105201010102030109022400"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) chmod(0x0, 0x23f) r4 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) epoll_wait(r8, &(0x7f0000000240)=[{}], 0x1, 0x100) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.072311222s ago: executing program 0 (id=1461): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa101, 0x9, &(0x7f0000000000)) 4.628830942s ago: executing program 1 (id=1462): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="a8c8ab65", 0x4}], 0x1}}], 0x2, 0x6001) (async) shutdown(r0, 0x1) (async) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 4.306814339s ago: executing program 0 (id=1463): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r3, 0x7, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f0000000240)="9558f6dfd16dd1d54f023d0464a82c547bba15ab4239d5c61e2f2b0a16", 0x1d, 0x401, 0x0, 0x0, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f00000002c0)="3b46cbbdc3916100e02bae144f9d56ca092721dfc4220a75a2cfedf2b1bee5d7e65ca00e8542d1e9b9f0d15f3e4152e9476e8731334ddc1abb9113308bfea74f7fe0fa7e2c468cd4dfe597a6089e9b2b35c07be49511733d62e460ae66084693900ea79fcfc39c6e463eddb95b81701c5049d1740abe07aa5b157b2bb590ffe9191e329c15f0ad5843090aaf18641b588b265ae43f66029781b0f926ed527f6bcfb93cb698262cb3fcca97ce6d3de813f576c65e67274aa32e7f14acde0b8f497aeaa31c", 0xc4, 0x2, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000400)="1541ad1f110bae05aebf3d9bef85f5b376c8823ef86edd539ff64e1783d36527297ed0ecd5a2b416548faf577c59e4741bdd6f43281d3f419f4bb309ebcc6de6dae334ab24d695b63e0279e314b224b4385718230a9a71126c648702c6e73306944a1330acea6abbde929eaf0b081db150fd09d06d7857c3dbef70", 0x7b, 0x0, 0x0, 0x2, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f00000004c0)="295291fce188e62b816d9af3126d4c060784335c1305cc01fa670cf6d9355368658798afe45875d41e76f2865996f6adf820371647fcf540f4b1db9bbb8f38a55b56062eb07b485054d8875694b3705b7f6aea8b65ba48ff31b3d4755e6036a32f8d3687ae8dfd7a0091ae245ae1a33126b867a752fe7139a6da50ff732b284784df6e974bfbe9f8ed2de9f0a43a762bbcd5507dcf08910fa55a99b52eaa934a087a5a3de45228664d613048b4974a49bddd4a9cbacc472c0e3d4b8e5f672a7e49c0eacfd5b7dd29281963c6c85fb4a899b08677f392dcbd57c1ba81abed9f43afc7b6445eb463ea74b2a05f91f79983dbef6854974576995966", 0xfa, 0x3, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000600)="e1d856f7cdfb6c0fcac6ec21ad6cd1be037b3c17120cc3e6f7b5ff2d29e9dedd7d9ce16e1121638820202f662e9155e55f34dec499e8bebf725fb9d6d62d90bbdb1ed745ac9748d1e9555a1ff6ff9858e0887128f804106c764a7c25545be127dc5252d9f64f0f3248b1213ca18e6b41bed66e156a491adf0e72da570683d574cd795647270dfc381004d0b3bbc40e228ec2", 0x92, 0xa}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xc, 0x4, r2, &(0x7f0000000700)="2b40abecc9eef1dd85946f523a8d48218b14d31a9ef5c6ca0f86d7e5f586fe0017f3607f0d456cdbce2e00c5fd0ad648f07c6d19a4f613a22fed197e0b54139204deb49cf67e0d9781e7aeb258781034a27bcc9bff89a7f5d7cbda872289c8101d3c46960a4360b5c0232f35cea56853428d06fc36a07cf1f71356af6ca28d279cc8f97ec60aefbfc23b50bc53e7a001579a2aaeed8c244bb31b7c2dfd5a2721f166a44eb9bdc4915d8ca91b5ba2", 0xae, 0x6, 0x0, 0x106d70adc743fc04, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x80, r0, &(0x7f00000083c0)="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", 0x1000, 0x9, 0x0, 0x1}]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$P9_RLERRORu(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1fee130d1000010000000000000000000000000a44000000090a010400000000000000000700000008000a000900020073797a31000000000900010073797a3000000000080005400000002108000f4000000001140000001000010000000000008000000084000a00000000"], 0x6c}}, 0x40000) 4.217076568s ago: executing program 1 (id=1464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000a80)={0x8040, 0x4, 0x4}, 0x18) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000000)) ioctl$FBIO_WAITFORVSYNC(r1, 0x4601, 0x20000000) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000009040000160202000005c07fab6205240000000d240f010000000000000000000424020009058103400000000009"], 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0xe0100, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x2, {0x1, 0xff, 0x1}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3.652598108s ago: executing program 4 (id=1465): r0 = userfaultfd(0x801) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "05000000889ab5ea", "00000000000020000000000000000200", "4845fff0", "071aabb360104a91"}, 0x28) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="8ef53529342eea82c298680d31e250fd18134bb0b9211d146ead8bcb8f07d5939811b8cc8feefdd1c6f52eb1680220b85528d6acf797075876a75a380673617968bb385ea3c1e6679a52018c2e7c8361600f9ba7fb977776fad941e3118c9141413f5a02577f1b268a2e5f58c3f74785db9cefbd42b2c3913936b9a36788dce6980ffdcdeb008f2f37f99b85f9af774113157ee96b8525d303ff5f326ab8fca73e9541b24146543596ae2e6b940d587da0c2f6428c564a72303e252e7e99f9cb57eb9054da7dde91ebe5375bcf7b", @ANYBLOB="91a2d168b20cd1c3af0d1fd672f184a88ecaf4e052b8f753986669f20e1dd07931cdacf73a7c5431300e5aa60014b7814d9ba1f974af88f2cc293f2bade0dff0540dc9c2b1739da327a2337ef5abe32c231bb62fa9ed6a33f00132cf81f6a17494567ebcbc685f3965137d948023b5ad1e22402b3a3d94f29f5691ec38dbb66425cb1a88de22dc11933e2c1885026dfc568d21f9ad0fa829afbcace898954cc9c476645f936c0382960a3d1136b42788b50f83da81238dfe7c1ef8"], 0x130}}, 0x40011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x13ef, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000140)="fae176bb97a0dc356ba15e383a46a8e0007aa34de065fccad914438378e4eee05d4811f7cc752b5f0b400e5941d25a15559121b51617543e6eda703c6bb1fdc75779ada83c9c71f42b6528abdca3cc1b0aa8c08b63554901117317318cea570643b0e911ac23395e4e6167b88efac9de95770bd9c0f1a9f3547d22409c7772418c3f085a64bb3ee2db978f6ace06a40ce699172f37c0fcc5663fb5315db1e7607a2d10e09853b59c4a", 0xa9) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 3.642032253s ago: executing program 2 (id=1466): io_uring_setup(0x67bb, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3.424841045s ago: executing program 0 (id=1467): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x62, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0x2d, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c080, 0x0, 0x0) 3.412545438s ago: executing program 2 (id=1468): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000000000)) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x191300) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, 0x0) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = openat$dsp(0xffffff9c, 0x0, 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) 2.992044336s ago: executing program 2 (id=1469): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000002010400000000000000000a00000004000180040003e6803c0002800c00028005000100000000002c00018014000300fe88000000000000000000000000010114000400fe8000000000000000000000000000aa"], 0x58}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0008f1ffffff540b45d09427829cf558329e34e079"], 0x0}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x589881) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000300)={0x1, "be"}) 2.953428765s ago: executing program 0 (id=1470): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x9) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) iopl(0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x2c, 0x4, 'syz0\x00', 0x6}, 0x1, 0x20000000, 0x6, r4, 0x0, 0x4, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000ac0)={0x6, 0x1, 0x9, 0x10, '\x00', 0x35}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe2(0x0, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000580)='./file0\x00') syz_io_uring_setup(0x607c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) r7 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc, 0x63, 0xec, 0x8, 0xa168, 0x614, 0x1b10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xfa, 0x0, 0x0, 0x90, 0xba, 0x3e}}]}}]}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x10, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.849913604s ago: executing program 3 (id=1471): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000020901020000000000dc16f94dfd678f36000300686173683a69702c706f727400000000050001000700000044000780060004404e2000000500150005000000080006400000010008000b40000000021800018014020240fe8800000000000000000000000001010500030005000000"], 0x74}}, 0x4010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mkdirat(r3, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x80) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x60, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21ef6298cf91ec0fb1aeb32b49525ab57303bf5adfacc719"}]]}, 0x60}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x10, 0x0, 0x1300) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271f, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @local, 0x6, 0x2}, 0x20) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffff000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.728730348s ago: executing program 1 (id=1472): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x4788, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) (fail_nth: 14) 1.510169894s ago: executing program 3 (id=1473): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000140)=0xec62, 0x4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 76.567119ms ago: executing program 2 (id=1474): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x200000, &(0x7f00000001c0)="898daad2c55b060bf2cd986fdd55e72d5fad44af4029b1e71cb02fd0bc334ae5c57a6038858c5dc9f4efc9ee3307489eb941e2addee5d317799db34cad57579dd18bd2eba822854cba43318e6902bd7e9cfa363f6d7a1e1d0b07003115781cdc8e8d3fb7055118c2d9b74adefd857b87f30908c94e14674f489bdea047c4363a80516909d8ca764e6975ce02d5204420a8c47b62", 0x94, &(0x7f0000000040), 0x0, &(0x7f0000000140)="289f9b4014ed3e3fc5") madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1260e954e3cf3ff514a7010000000000086d040ec20000000000010902240001629d3c35090400000103000000092100000001220b00090581030000000000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r4, 0x1, 0x7fffffff, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x6d04642fbf6ce423}, 0x80) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 28.320912ms ago: executing program 1 (id=1475): r0 = creat(0x0, 0xecf86c37d53049cc) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x51, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000056c0)=[{{&(0x7f0000001440)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f0000001500)=""/131, 0x83}, 0x7f}, {{&(0x7f00000015c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001640)=""/226, 0xe2}, {&(0x7f0000001740)=""/199, 0xc7}, {&(0x7f0000001840)=""/252, 0xfc}], 0x3, &(0x7f0000001980)=""/66, 0x42}, 0xaa61}, {{&(0x7f0000001a00)=@generic, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/45, 0x2d}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/245, 0xf5}], 0x3, &(0x7f0000001cc0)=""/232, 0xe8}, 0x1ff}, {{&(0x7f0000001dc0)=@can, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/12, 0xc}, {&(0x7f0000002e80)=""/121, 0x79}, {&(0x7f0000002f00)=""/53, 0x35}, {&(0x7f00000057c0)=""/4097, 0x1001}, {&(0x7f0000003f40)=""/105, 0x69}], 0x6}, 0x1}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000004000)=""/101, 0x65}], 0x1}, 0x1}, {{&(0x7f00000040c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004140)=""/147, 0x93}, {&(0x7f0000004200)}, {&(0x7f0000004240)=""/172, 0xac}, {&(0x7f0000004300)=""/148, 0x94}], 0x4}, 0x9}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000004400)=""/106, 0x6a}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/128, 0x80}, {&(0x7f0000005500)=""/231, 0xe7}], 0x4, &(0x7f0000005640)=""/96, 0x60}, 0x14000}], 0x7, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101800) read(r7, &(0x7f00000003c0)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x2000}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) r9 = openat$vsock(0xffffff9c, &(0x7f0000000140), 0xc500, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r9, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x4, 0x77, [0x31, 0x0, 0x9, 0x1, 0xfffffffa, 0x1f], 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000240)=""/119}, &(0x7f0000000380)=0x50) 0s ago: executing program 4 (id=1476): unshare(0x4020400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x4) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0xb, 0x1, 0x3, 0x200, r3}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e23, 0x1ff, @mcast1, 0x1c000000}}, 0x4, 0x6, 0x4, 0x0, 0xf9e2df95e6e0e597, 0xa, 0x49}, 0x9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x206100, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f0000000200)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r9, &(0x7f0000000240)=[{&(0x7f0000000040)="00214717a707000000000365a381294b5ac79ebbaaa6", 0x16}], 0x1, 0x7, 0x0) r10 = dup(r8) ioctl$DRM_IOCTL_AGP_ALLOC(r10, 0xc0106434, &(0x7f0000000140)={0x2fba, 0x0, 0x2}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x20003, 'wrr\x00', 0x1, 0x7, 0x1a}, 0x2c) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x8a, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r12, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000020", @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25010000000800010037000000"], 0x1c}}, 0x8000) kernel console output (not intermixed with test programs): 0000206 ORIG_RAX: 000000000000011e [ 358.701512][ T9081] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000180 [ 358.701526][ T9081] RDX: 0000000080000100 RSI: 00000000000000ca RDI: 00000000fffffffe [ 358.701538][ T9081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.701548][ T9081] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 358.701560][ T9081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.701588][ T9081] [ 359.099851][ T9087] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1054'. [ 359.099923][ T9087] net_ratelimit: 2 callbacks suppressed [ 359.099956][ T9087] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 359.212818][ T9090] netlink: 4536 bytes leftover after parsing attributes in process `syz.2.1055'. [ 359.214766][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 359.214808][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1056'. [ 359.349023][ T9093] FAULT_INJECTION: forcing a failure. [ 359.349023][ T9093] name failslab, interval 1, probability 0, space 0, times 0 [ 359.349090][ T9093] CPU: 1 UID: 0 PID: 9093 Comm: syz.4.1057 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 359.349117][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 359.349129][ T9093] Call Trace: [ 359.349137][ T9093] [ 359.349146][ T9093] dump_stack_lvl+0x241/0x360 [ 359.349181][ T9093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.349207][ T9093] ? __pfx__printk+0x10/0x10 [ 359.349252][ T9093] ? __pfx___might_resched+0x10/0x10 [ 359.349283][ T9093] should_fail_ex+0x424/0x570 [ 359.349310][ T9093] should_failslab+0xac/0x100 [ 359.349339][ T9093] __kmalloc_cache_noprof+0x73/0x370 [ 359.349362][ T9093] ? nf_tables_newflowtable+0xaab/0x2470 [ 359.349396][ T9093] nf_tables_newflowtable+0xaab/0x2470 [ 359.349428][ T9093] ? nla_get_range_signed+0x312/0x370 [ 359.349463][ T9093] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 359.349514][ T9093] ? __nla_parse+0x40/0x60 [ 359.349541][ T9093] nfnetlink_rcv+0x12eb/0x28f0 [ 359.349602][ T9093] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 359.349680][ T9093] ? skb_clone+0x240/0x390 [ 359.349715][ T9093] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.349745][ T9093] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.349772][ T9093] netlink_unicast+0x7f8/0x9a0 [ 359.349805][ T9093] ? __pfx_netlink_unicast+0x10/0x10 [ 359.349831][ T9093] ? skb_put+0x114/0x1f0 [ 359.349854][ T9093] netlink_sendmsg+0x8c3/0xcd0 [ 359.349895][ T9093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.349923][ T9093] ? __import_iovec+0x585/0x830 [ 359.349947][ T9093] ? aa_sock_msg_perm+0x91/0x160 [ 359.349980][ T9093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.350004][ T9093] __sock_sendmsg+0x221/0x270 [ 359.350032][ T9093] ____sys_sendmsg+0x523/0x860 [ 359.350062][ T9093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.350101][ T9093] __sys_sendmsg+0x271/0x360 [ 359.350128][ T9093] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.350213][ T9093] __do_fast_syscall_32+0xb4/0x110 [ 359.350244][ T9093] ? exc_page_fault+0x5f8/0x920 [ 359.350272][ T9093] do_fast_syscall_32+0x34/0x80 [ 359.350296][ T9093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.350318][ T9093] RIP: 0023:0xf7f47579 [ 359.350336][ T9093] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 359.350351][ T9093] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 359.350372][ T9093] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 359.350386][ T9093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.350396][ T9093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.350407][ T9093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 359.350418][ T9093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 359.350448][ T9093] [ 359.595044][ T9099] netlink: 'syz.0.1059': attribute type 6 has an invalid length. [ 360.220321][ T5901] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 360.229332][ T120] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 360.373105][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 360.403229][ T120] usb 5-1: Using ep0 maxpacket: 32 [ 360.505118][ T5901] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 360.922442][ T5901] usb 1-1: config 8 has no interface number 0 [ 360.933453][ T5901] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 360.979577][ T5901] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 360.993675][ T5901] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 361.006918][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a84dc00: rx timeout, send abort [ 361.013042][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 361.016438][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a84dc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 361.234428][ T5901] usb 1-1: config 8 interface 39 has no altsetting 0 [ 361.243794][ T120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.273555][ T120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.288568][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=cc.10 [ 361.297897][ T120] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 361.298024][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.310807][ T120] usb 5-1: config 0 descriptor?? [ 361.347318][ T5901] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 361.360858][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.626290][ T120] hub 5-1:0.0: USB hub found [ 361.631861][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.645530][ T5901] usb 1-1: Product: syz [ 361.656809][ T9118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1066'. [ 361.666493][ T10] usb 3-1: Product: syz [ 361.671194][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 361.672972][ T5901] usb 1-1: Manufacturer: syz [ 361.690581][ T10] usb 3-1: Manufacturer: syz [ 361.702378][ T10] usb 3-1: SerialNumber: syz [ 361.711046][ T5901] usb 1-1: SerialNumber: syz [ 361.775672][ T10] usb 3-1: config 0 descriptor?? [ 361.789824][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 362.027794][ T5901] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 362.136271][ T5901] ipheth 1-1:8.39: probe with driver ipheth failed with error -71 [ 362.218781][ T5901] usb 1-1: USB disconnect, device number 87 [ 362.492216][ T5199] bcm5974 3-1:0.0: could not read from device [ 362.526226][ T5199] bcm5974 3-1:0.0: could not read from device [ 362.547089][ T10] usb 3-1: USB disconnect, device number 65 [ 362.555848][ T5199] bcm5974 3-1:0.0: could not read from device [ 362.582237][ T5199] bcm5974 3-1:0.0: could not read from device [ 362.612550][ T30] audit: type=1800 audit(1743994651.664:57): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1061" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 362.812095][ T120] hub 5-1:0.0: 1 port detected [ 363.723068][ T5901] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 363.836138][ T120] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 363.877728][ T120] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 363.902006][ T120] usbhid 5-1:0.0: can't add hid device: -32 [ 363.915177][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 363.915404][ T120] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 363.971006][ T5901] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.023151][ T5901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 364.139764][ T5901] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 364.216170][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.242132][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 364.325954][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1071'. [ 364.327549][ T5901] usb 1-1: config 0 descriptor?? [ 364.363355][ T10] usb 5-1: USB disconnect, device number 52 [ 364.554489][ T9135] netlink: 'syz.3.1072': attribute type 6 has an invalid length. [ 364.577287][ T9129] Lens A: ================= START STATUS ================= [ 364.627600][ T9129] Lens A: Focus, Absolute: 0 [ 364.666150][ T9129] Lens A: ================== END STATUS ================== [ 364.737787][ T30] audit: type=1326 audit(1743994653.784:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000 [ 364.863186][ T30] audit: type=1326 audit(1743994653.824:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 364.939146][ T30] audit: type=1326 audit(1743994653.824:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000 [ 364.966188][ T30] audit: type=1326 audit(1743994653.824:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 364.967103][ T5901] bigben 0003:146B:0902.000F: unexpected rdesc, please submit for review [ 364.992664][ T30] audit: type=1326 audit(1743994653.824:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000 [ 365.026212][ T5901] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 365.052814][ T5901] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 365.069715][ T5901] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 365.078964][ T5901] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 365.094532][ T30] audit: type=1326 audit(1743994653.824:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000 [ 365.113913][ T5901] bigben 0003:146B:0902.000F: unknown main item tag 0x0 [ 365.119627][ T30] audit: type=1326 audit(1743994653.824:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000 [ 365.149614][ T120] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 365.167413][ T9147] input: syz1 as /devices/virtual/input/input21 [ 365.190214][ T30] audit: type=1326 audit(1743994653.824:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 365.303160][ T120] usb 3-1: device descriptor read/64, error -71 [ 365.313633][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 365.339867][ T30] audit: type=1326 audit(1743994653.824:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000 [ 365.358202][ T5901] bigben 0003:146B:0902.000F: hidraw0: USB HID v0.05 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 365.420273][ T5901] bigben 0003:146B:0902.000F: missing HID_OUTPUT_REPORT 0 [ 365.433359][ T5901] bigben 0003:146B:0902.000F: no output report found [ 365.573403][ T120] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 365.733368][ T120] usb 3-1: device descriptor read/64, error -71 [ 365.864110][ T120] usb usb3-port1: attempt power cycle [ 366.223320][ T120] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 366.262336][ T120] usb 3-1: device descriptor read/8, error -71 [ 366.357506][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c4cf800: rx timeout, send abort [ 366.366064][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c4cf800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 366.513219][ T120] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 366.595689][ T120] usb 3-1: device descriptor read/8, error -71 [ 366.724411][ T120] usb usb3-port1: unable to enumerate USB device [ 366.744845][ T5900] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 366.957725][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 366.993473][ T5900] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 367.001876][ T5900] usb 5-1: config 0 has no interface number 0 [ 367.060933][ T5900] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 367.088383][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.130555][ T5900] usb 5-1: Product: syz [ 367.137706][ T5900] usb 5-1: Manufacturer: syz [ 367.142596][ T5900] usb 5-1: SerialNumber: syz [ 367.179065][ T5900] usb 5-1: config 0 descriptor?? [ 367.713134][ T5900] radio-si470x 5-1:0.35: this is not a si470x device. [ 367.776565][ T5900] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 367.883081][ T10] usb 1-1: USB disconnect, device number 88 [ 368.048042][ T9167] FAULT_INJECTION: forcing a failure. [ 368.048042][ T9167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.120762][ T9167] CPU: 0 UID: 0 PID: 9167 Comm: syz.2.1083 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 368.120793][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 368.120804][ T9167] Call Trace: [ 368.120811][ T9167] [ 368.120820][ T9167] dump_stack_lvl+0x241/0x360 [ 368.120854][ T9167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.120879][ T9167] ? __pfx__printk+0x10/0x10 [ 368.120915][ T9167] should_fail_ex+0x424/0x570 [ 368.120941][ T9167] _copy_to_user+0x31/0xb0 [ 368.120968][ T9167] simple_read_from_buffer+0xc4/0x170 [ 368.120998][ T9167] proc_fail_nth_read+0x1ef/0x260 [ 368.121021][ T9167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.121043][ T9167] ? rw_verify_area+0x246/0x630 [ 368.121062][ T9167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.121082][ T9167] vfs_read+0x21f/0xb90 [ 368.121107][ T9167] ? __pfx___mutex_lock+0x10/0x10 [ 368.121131][ T9167] ? __pfx_vfs_read+0x10/0x10 [ 368.121154][ T9167] ? __fget_files+0x2a/0x420 [ 368.121174][ T9167] ? __fget_files+0x39d/0x420 [ 368.121189][ T9167] ? __fget_files+0x2a/0x420 [ 368.121216][ T9167] ksys_read+0x19d/0x2d0 [ 368.121239][ T9167] ? __pfx_ksys_read+0x10/0x10 [ 368.121262][ T9167] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 368.121282][ T9167] ? lockdep_hardirqs_on+0x9d/0x150 [ 368.121314][ T9167] __do_fast_syscall_32+0xb4/0x110 [ 368.121336][ T9167] ? exc_page_fault+0x5f8/0x920 [ 368.121362][ T9167] do_fast_syscall_32+0x34/0x80 [ 368.121384][ T9167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.121405][ T9167] RIP: 0023:0xf7fc1579 [ 368.121422][ T9167] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 368.121437][ T9167] RSP: 002b:00000000f50e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 368.121459][ T9167] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50e6620 [ 368.121472][ T9167] RDX: 000000000000000f RSI: 00000000f744cff4 RDI: 0000000000000000 [ 368.121483][ T9167] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 368.121493][ T9167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 368.121505][ T9167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.121534][ T9167] [ 368.345469][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.651993][ T9175] netlink: 'syz.3.1086': attribute type 6 has an invalid length. [ 369.150068][ T120] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 369.324058][ T120] usb 1-1: Using ep0 maxpacket: 32 [ 369.337463][ T120] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.361634][ T120] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.650168][ T120] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 369.681354][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.682233][ T5900] usb 5-1: USB disconnect, device number 53 [ 369.709011][ T120] usb 1-1: config 0 descriptor?? [ 369.755517][ T120] hub 1-1:0.0: USB hub found [ 370.224129][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.287433][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.426105][ T120] hub 1-1:0.0: 1 port detected [ 370.564727][ T5900] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 370.629988][ T120] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 370.641462][ T120] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 370.682645][ T120] usbhid 1-1:0.0: can't add hid device: -71 [ 370.689913][ T120] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 370.741471][ T5900] usb 4-1: config 0 has no interfaces? [ 370.759690][ T120] usb 1-1: USB disconnect, device number 89 [ 370.774215][ T5900] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 370.817307][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.834951][ T5900] usb 4-1: Product: syz [ 370.851300][ T5900] usb 4-1: Manufacturer: syz [ 370.874792][ T5900] usb 4-1: SerialNumber: syz [ 370.920705][ T5900] usb 4-1: config 0 descriptor?? [ 371.471489][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'. [ 371.532019][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.547161][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.574866][ T9204] FAULT_INJECTION: forcing a failure. [ 371.574866][ T9204] name failslab, interval 1, probability 0, space 0, times 0 [ 371.630449][ T9204] CPU: 0 UID: 0 PID: 9204 Comm: syz.0.1094 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 371.630479][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 371.630490][ T9204] Call Trace: [ 371.630497][ T9204] [ 371.630505][ T9204] dump_stack_lvl+0x241/0x360 [ 371.630539][ T9204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.630564][ T9204] ? __pfx__printk+0x10/0x10 [ 371.630593][ T9204] ? __pfx___might_resched+0x10/0x10 [ 371.630618][ T9204] should_fail_ex+0x424/0x570 [ 371.630643][ T9204] should_failslab+0xac/0x100 [ 371.630669][ T9204] __kmalloc_noprof+0xdf/0x4d0 [ 371.630693][ T9204] ? iovec_from_user+0x87/0x240 [ 371.630716][ T9204] ? __lock_acquire+0xad5/0xd80 [ 371.630738][ T9204] iovec_from_user+0x87/0x240 [ 371.630768][ T9204] __import_iovec+0x175/0x830 [ 371.630804][ T9204] import_iovec+0xeb/0x120 [ 371.630835][ T9204] get_compat_msghdr+0x45e/0x730 [ 371.630868][ T9204] ? __pfx_get_compat_msghdr+0x10/0x10 [ 371.630906][ T9204] do_recvmmsg+0x4d5/0xab0 [ 371.630939][ T9204] ? __pfx_do_recvmmsg+0x10/0x10 [ 371.630980][ T9204] ? __lock_acquire+0xad5/0xd80 [ 371.631041][ T9204] ? get_old_timespec32+0x18d/0x280 [ 371.631077][ T9204] __sys_recvmmsg+0x140/0x280 [ 371.631100][ T9204] ? __pfx___sys_recvmmsg+0x10/0x10 [ 371.631116][ T9204] ? ksys_write+0x275/0x2d0 [ 371.631147][ T9204] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 371.631178][ T9204] __do_fast_syscall_32+0xb4/0x110 [ 371.631199][ T9204] ? exc_page_fault+0x5f8/0x920 [ 371.631225][ T9204] do_fast_syscall_32+0x34/0x80 [ 371.631246][ T9204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.631266][ T9204] RIP: 0023:0xf739d579 [ 371.631283][ T9204] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 371.631298][ T9204] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 371.631320][ T9204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 371.631332][ T9204] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 371.631343][ T9204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.631354][ T9204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 371.631365][ T9204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.631392][ T9204] [ 371.865002][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.980543][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079e13800: rx timeout, send abort [ 371.989210][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079e13800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 372.153343][ T120] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 372.166912][ T9211] netlink: 'syz.2.1098': attribute type 6 has an invalid length. [ 372.349232][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 372.393366][ T120] usb 2-1: unable to get BOS descriptor or descriptor too short [ 372.432427][ T120] usb 2-1: too many configurations: 220, using maximum allowed: 8 [ 372.469620][ T120] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 372.489440][ T120] usb 2-1: can't read configurations, error -71 [ 372.737565][ T9222] netlink: 'syz.4.1101': attribute type 1 has an invalid length. [ 372.787716][ T5900] usb 4-1: USB disconnect, device number 76 [ 373.001312][ T9226] FAULT_INJECTION: forcing a failure. [ 373.001312][ T9226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 373.042553][ T9226] CPU: 0 UID: 0 PID: 9226 Comm: syz.0.1102 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 373.042583][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 373.042594][ T9226] Call Trace: [ 373.042602][ T9226] [ 373.042610][ T9226] dump_stack_lvl+0x241/0x360 [ 373.042644][ T9226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.042671][ T9226] ? __pfx__printk+0x10/0x10 [ 373.042708][ T9226] should_fail_ex+0x424/0x570 [ 373.042734][ T9226] prepare_alloc_pages+0x220/0x610 [ 373.042763][ T9226] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 373.042788][ T9226] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 373.042831][ T9226] __alloc_pages_noprof+0xa/0x30 [ 373.042849][ T9226] ___kmalloc_large_node+0x92/0x210 [ 373.042882][ T9226] __kmalloc_large_node_noprof+0x1a/0x80 [ 373.042910][ T9226] __kmalloc_noprof+0x33d/0x4d0 [ 373.042934][ T9226] ? dns_resolver_preparse+0x797/0xe30 [ 373.042959][ T9226] dns_resolver_preparse+0x797/0xe30 [ 373.042978][ T9226] ? down_read+0x813/0xa50 [ 373.043002][ T9226] ? __pfx_dns_resolver_preparse+0x10/0x10 [ 373.043025][ T9226] ? __pfx_down_read+0x10/0x10 [ 373.043053][ T9226] ? __pfx___might_resched+0x10/0x10 [ 373.043076][ T9226] ? __pfx_keyring_search_iterator+0x10/0x10 [ 373.043102][ T9226] __key_create_or_update+0x523/0xdc0 [ 373.043141][ T9226] ? __pfx___key_create_or_update+0x10/0x10 [ 373.043184][ T9226] ? __pfx_keyring_search_iterator+0x10/0x10 [ 373.043215][ T9226] key_create_or_update+0x42/0x60 [ 373.043254][ T9226] __se_sys_add_key+0x345/0x4b0 [ 373.043277][ T9226] ? __pfx___se_sys_add_key+0x10/0x10 [ 373.043305][ T9226] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 373.043327][ T9226] ? lockdep_hardirqs_on+0x9d/0x150 [ 373.043344][ T9226] ? __ia32_sys_add_key+0x20/0xc0 [ 373.043367][ T9226] __do_fast_syscall_32+0xb4/0x110 [ 373.043388][ T9226] ? exc_page_fault+0x5f8/0x920 [ 373.043414][ T9226] do_fast_syscall_32+0x34/0x80 [ 373.043436][ T9226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 373.043458][ T9226] RIP: 0023:0xf739d579 [ 373.043474][ T9226] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 373.043491][ T9226] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 373.043512][ T9226] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000080000400 [ 373.043526][ T9226] RDX: 0000000080000080 RSI: 00000000000fffff RDI: 00000000348dbc30 [ 373.043537][ T9226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 373.043549][ T9226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 373.043559][ T9226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.043589][ T9226] [ 373.311118][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.797656][ T9247] netlink: 'syz.3.1110': attribute type 6 has an invalid length. [ 373.825188][ T5900] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 373.963194][ T9251] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 374.008099][ T5900] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.022431][ T5900] usb 5-1: config 0 has no interface number 0 [ 374.030324][ T5900] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 374.041362][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.048841][ T9251] bond2: entered allmulticast mode [ 374.056297][ T5900] usb 5-1: config 0 descriptor?? [ 374.065705][ T5900] usb 5-1: selecting invalid altsetting 1 [ 374.076043][ T5900] dvb_ttusb_budget: ttusb_init_controller: error [ 374.082410][ T5900] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 374.123582][ T9251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.257118][ T5900] DVB: Unable to find symbol cx22700_attach() [ 374.266362][ T9243] FAULT_INJECTION: forcing a failure. [ 374.266362][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.309236][ T9255] bond2: (slave ip6gretap1): making interface the new active one [ 374.320721][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.4.1107 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 374.320750][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 374.320761][ T9243] Call Trace: [ 374.320769][ T9243] [ 374.320777][ T9243] dump_stack_lvl+0x241/0x360 [ 374.320812][ T9243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.320837][ T9243] ? __pfx__printk+0x10/0x10 [ 374.320876][ T9243] should_fail_ex+0x424/0x570 [ 374.320901][ T9243] _copy_from_user+0x2d/0xb0 [ 374.320928][ T9243] compat_i2cdev_ioctl+0x4ba/0x8f0 [ 374.320963][ T9243] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 374.320980][ T9243] ? __fget_files+0x2a/0x420 [ 374.321001][ T9243] ? __fget_files+0x2a/0x420 [ 374.321026][ T9243] __se_compat_sys_ioctl+0x50e/0xc30 [ 374.321052][ T9243] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 374.321075][ T9243] ? __fget_files+0x2a/0x420 [ 374.321096][ T9243] ? fput+0x9b/0xd0 [ 374.321114][ T9243] ? ksys_write+0x275/0x2d0 [ 374.321143][ T9243] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 374.321164][ T9243] ? lockdep_hardirqs_on+0x9d/0x150 [ 374.321188][ T9243] __do_fast_syscall_32+0xb4/0x110 [ 374.321209][ T9243] ? exc_page_fault+0x5f8/0x920 [ 374.321234][ T9243] do_fast_syscall_32+0x34/0x80 [ 374.321280][ T9243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.321302][ T9243] RIP: 0023:0xf7f47579 [ 374.321318][ T9243] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 374.321333][ T9243] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 374.321355][ T9243] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 374.321368][ T9243] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.321379][ T9243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.321389][ T9243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 374.321399][ T9243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.321433][ T9243] [ 374.526505][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.538094][ T9255] ip6gretap1: entered allmulticast mode [ 374.545032][ T9255] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 374.641680][ T5900] DVB: Unable to find symbol tda10046_attach() [ 374.648070][ T5900] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 374.659001][ T5900] usb 5-1: USB disconnect, device number 54 [ 375.064998][ T5901] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 375.170973][ T9276] ALSA: mixer_oss: invalid OSS volume '' [ 375.213031][ T5901] usb 4-1: device descriptor read/64, error -71 [ 375.228529][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024c5f000: rx timeout, send abort [ 375.237186][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024c5f000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 375.453201][ T5901] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 375.593038][ T5901] usb 4-1: device descriptor read/64, error -71 [ 375.595749][ T120] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 375.724475][ T5901] usb usb4-port1: attempt power cycle [ 375.753459][ T120] usb 1-1: device descriptor read/64, error -71 [ 375.771385][ T9284] trusted_key: encrypted_key: insufficient parameters specified [ 375.930019][ T9288] netlink: 'syz.1.1121': attribute type 6 has an invalid length. [ 376.035788][ T120] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 376.073225][ T5901] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 376.113815][ T5901] usb 4-1: device descriptor read/8, error -71 [ 376.223227][ T120] usb 1-1: device descriptor read/64, error -71 [ 376.343780][ T120] usb usb1-port1: attempt power cycle [ 376.403011][ T5901] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 376.444099][ T5901] usb 4-1: device descriptor read/8, error -71 [ 376.564803][ T5901] usb usb4-port1: unable to enumerate USB device [ 376.682530][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'. [ 376.713429][ T120] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 376.795547][ T120] usb 1-1: device descriptor read/8, error -71 [ 377.215313][ T120] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 377.309683][ T120] usb 1-1: device descriptor read/8, error -71 [ 377.431086][ T120] usb usb1-port1: unable to enumerate USB device [ 378.777344][ T9319] erspan0: entered promiscuous mode [ 378.798535][ T9319] macsec1: entered allmulticast mode [ 378.804603][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.811084][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.831946][ T9319] erspan0: entered allmulticast mode [ 378.858325][ T9319] erspan0: left allmulticast mode [ 378.874241][ T9319] erspan0: left promiscuous mode [ 378.993005][ T5900] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 379.142952][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 379.189556][ T5900] usb 1-1: config 128 has an invalid interface number: 163 but max is 3 [ 379.211990][ T5900] usb 1-1: config 128 has an invalid interface number: 37 but max is 3 [ 379.254861][ T5900] usb 1-1: config 128 has an invalid interface number: 12 but max is 3 [ 379.279210][ T5900] usb 1-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 379.288822][ T5900] usb 1-1: config 128 has an invalid descriptor of length 87, skipping remainder of the config [ 379.300037][ T5900] usb 1-1: config 128 has 3 interfaces, different from the descriptor's value: 4 [ 379.325367][ T9327] netlink: 'syz.2.1132': attribute type 6 has an invalid length. [ 379.329670][ T5900] usb 1-1: config 128 has no interface number 0 [ 379.339793][ T5900] usb 1-1: config 128 has no interface number 1 [ 379.355482][ T5900] usb 1-1: config 128 has no interface number 2 [ 379.364750][ T5900] usb 1-1: config 128 interface 37 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 379.376620][ T5900] usb 1-1: config 128 interface 37 altsetting 2 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 379.388689][ T5901] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 379.404623][ T5900] usb 1-1: config 128 interface 37 altsetting 2 has an endpoint descriptor with address 0x39, changing to 0x9 [ 379.417345][ T5900] usb 1-1: config 128 interface 12 altsetting 16 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 379.429141][ T5900] usb 1-1: config 128 interface 12 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 379.450199][ T5900] usb 1-1: config 128 interface 12 altsetting 16 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 379.461976][ T5900] usb 1-1: config 128 interface 12 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 379.545483][ T5901] usb 2-1: device descriptor read/64, error -71 [ 379.564898][ T5900] usb 1-1: config 128 interface 12 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 379.617433][ T5900] usb 1-1: config 128 interface 12 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 379.654248][ T5900] usb 1-1: config 128 interface 12 altsetting 16 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 379.677928][ T5900] usb 1-1: config 128 interface 12 altsetting 16 has a duplicate endpoint with address 0x9, skipping [ 379.702576][ T5900] usb 1-1: config 128 interface 12 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 379.724512][ T5900] usb 1-1: config 128 interface 163 has no altsetting 0 [ 379.731661][ T5900] usb 1-1: config 128 interface 37 has no altsetting 0 [ 379.741918][ T5900] usb 1-1: config 128 interface 12 has no altsetting 0 [ 379.748912][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803183b000: rx timeout, send abort [ 379.757420][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803183b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 379.795151][ T5901] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 379.875094][ T5900] usb 1-1: Dual-Role OTG device on HNP port [ 379.882503][ T5900] usb 1-1: New USB device found, idVendor=09c0, idProduct=0204, bcdDevice=7e.22 [ 379.902107][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.931019][ T5900] usb 1-1: Product: ࠔ [ 379.947203][ T5900] usb 1-1: Manufacturer: ⠉ [ 379.953154][ T5901] usb 2-1: device descriptor read/64, error -71 [ 379.974672][ T5900] usb 1-1: SerialNumber: Э [ 380.069789][ T5901] usb usb2-port1: attempt power cycle [ 380.213551][ T5899] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 380.413393][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 380.433137][ T5901] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 380.435641][ T5899] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a [ 380.451933][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.461405][ T5899] usb 5-1: Product: syz [ 380.470900][ T5899] usb 5-1: Manufacturer: syz [ 380.489780][ T5899] usb 5-1: SerialNumber: syz [ 380.513785][ T5901] usb 2-1: device descriptor read/8, error -71 [ 380.536867][ T5899] usb 5-1: config 0 descriptor?? [ 380.546652][ T5899] mcba_usb 5-1:0.0: Can't find endpoints [ 380.752979][ T5901] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 380.769677][ T5899] usb 5-1: USB disconnect, device number 55 [ 380.773636][ T5901] usb 2-1: device descriptor read/8, error -71 [ 380.893439][ T5901] usb usb2-port1: unable to enumerate USB device [ 381.503139][ T5901] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 381.653410][ T5901] usb 4-1: device descriptor read/64, error -71 [ 381.756897][ T9353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1142'. [ 381.780033][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1142'. [ 381.888475][ T9355] netlink: 'syz.4.1143': attribute type 6 has an invalid length. [ 381.893115][ T5901] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 382.024965][ T5899] usb 1-1: USB disconnect, device number 94 [ 382.034846][ T5901] usb 4-1: device descriptor read/64, error -71 [ 382.145735][ T5901] usb usb4-port1: attempt power cycle [ 382.356370][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'. [ 382.391732][ T9364] vlan2: entered allmulticast mode [ 382.399231][ T9364] vlan0: entered allmulticast mode [ 382.405869][ T9364] veth0_vlan: entered allmulticast mode [ 382.523101][ T5901] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 382.564131][ T5901] usb 4-1: device descriptor read/8, error -71 [ 382.570650][ T5899] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 382.602724][ T9368] netlink: 'syz.4.1147': attribute type 15 has an invalid length. [ 382.620458][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1147'. [ 382.734065][ T5899] usb 1-1: device descriptor read/64, error -71 [ 382.833021][ T5901] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 382.876463][ T5901] usb 4-1: device descriptor read/8, error -71 [ 382.884877][ T5932] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 382.989294][ T5901] usb usb4-port1: unable to enumerate USB device [ 383.003220][ T5899] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 383.143629][ T5899] usb 1-1: device descriptor read/64, error -71 [ 383.163109][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 383.188769][ T5932] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a [ 383.208326][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.218713][ T5932] usb 2-1: Product: syz [ 383.229522][ T5932] usb 2-1: Manufacturer: syz [ 383.236415][ T5932] usb 2-1: SerialNumber: syz [ 383.254876][ T5899] usb usb1-port1: attempt power cycle [ 383.254893][ T5932] usb 2-1: config 0 descriptor?? [ 383.272806][ T5932] mcba_usb 2-1:0.0: Can't find endpoints [ 383.493215][ T5932] usb 2-1: USB disconnect, device number 69 [ 383.531471][ T9386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.615589][ T5899] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 383.652010][ T9387] netlink: 'syz.4.1153': attribute type 3 has an invalid length. [ 383.664538][ T5899] usb 1-1: device descriptor read/8, error -71 [ 384.103205][ T5899] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 384.137445][ T5899] usb 1-1: device descriptor read/8, error -71 [ 384.218056][ T9389] netlink: 'syz.2.1154': attribute type 6 has an invalid length. [ 384.264164][ T5899] usb usb1-port1: unable to enumerate USB device [ 384.302282][ T9391] syzkaller1: entered promiscuous mode [ 384.324832][ T9391] syzkaller1: entered allmulticast mode [ 386.103979][ T5901] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 386.265336][ T5901] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 386.277501][ T5901] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 386.325653][ T5901] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.430266][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.479552][ T9415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 386.507303][ T5901] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.742039][ T120] usb 2-1: USB disconnect, device number 70 [ 387.248728][ T8230] udevd[8230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.783937][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1171'. [ 388.286710][ T5900] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 388.303874][ T5901] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 388.443986][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 388.456014][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 388.472023][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 388.489050][ T5901] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 388.502107][ T5900] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 388.502139][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.502160][ T5900] usb 4-1: Product: syz [ 388.502175][ T5900] usb 4-1: Manufacturer: syz [ 388.502188][ T5900] usb 4-1: SerialNumber: syz [ 388.509553][ T5900] usb 4-1: config 0 descriptor?? [ 388.513489][ T5900] hub 4-1:0.0: bad descriptor, ignoring hub [ 388.513517][ T5900] hub 4-1:0.0: probe with driver hub failed with error -5 [ 388.528849][ T5900] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.583033][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.621969][ T5901] usb 5-1: config 0 descriptor?? [ 388.633749][ T9449] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 388.839352][ T5900] usb 4-1: USB disconnect, device number 85 [ 389.154870][ T5901] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 389.170508][ T8263] udevd[8263]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.227302][ T10] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 389.400632][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 389.438018][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 389.453301][ T9449] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 389.462485][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 389.480690][ T9449] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 389.490635][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 389.507411][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 389.572191][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 389.600956][ T5901] usb 5-1: USB disconnect, device number 56 [ 389.622061][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 389.647353][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 389.661908][ T10] usb 1-1: Product: syz [ 389.670571][ T10] usb 1-1: Manufacturer: syz [ 389.703789][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 389.718757][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 389.749727][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 389.768809][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 390.013205][ T5900] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 390.173087][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 390.196621][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.231975][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.254851][ T5900] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 390.286300][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.306745][ T5900] usb 4-1: config 0 descriptor?? [ 390.750773][ T5900] savu 0003:1E7D:2D5A.0011: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 391.043824][ T120] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 391.059550][ T5900] usb 4-1: USB disconnect, device number 86 [ 391.220737][ T120] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 391.235869][ T120] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.251965][ T120] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 391.265601][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.276936][ T120] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.287481][ T120] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 391.300053][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.310952][ T120] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.321469][ T120] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 391.333892][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.345852][ T120] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.359971][ T120] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 391.373305][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.385724][ T120] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.397306][ T120] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 391.461036][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.475078][ T120] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.486159][ T120] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 391.499156][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.510996][ T120] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.523524][ T120] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 391.536623][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.550146][ T9506] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1197'. [ 391.550343][ T120] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.570910][ T120] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 391.611232][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.632173][ T120] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 391.644364][ T120] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 391.657333][ T120] usb 2-1: Product: syz [ 391.662256][ T120] usb 2-1: Manufacturer: syz [ 391.688375][ T120] usb 2-1: SerialNumber: syz [ 391.720903][ T120] usb 2-1: config 0 descriptor?? [ 391.763765][ T120] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 392.108637][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.115478][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.116680][ T120] usb 1-1: USB disconnect, device number 99 [ 392.121570][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 392.145009][ T5901] usb 2-1: USB disconnect, device number 71 [ 392.155389][ T9516] FAULT_INJECTION: forcing a failure. [ 392.155389][ T9516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.195464][ T5901] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 392.208699][ T9516] CPU: 0 UID: 0 PID: 9516 Comm: syz.4.1200 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 392.208728][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 392.208739][ T9516] Call Trace: [ 392.208747][ T9516] [ 392.208755][ T9516] dump_stack_lvl+0x241/0x360 [ 392.208789][ T9516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.208816][ T9516] ? __pfx__printk+0x10/0x10 [ 392.208853][ T9516] should_fail_ex+0x424/0x570 [ 392.208876][ T9516] _copy_from_user+0x2d/0xb0 [ 392.208901][ T9516] compat_i2cdev_ioctl+0x4ba/0x8f0 [ 392.208935][ T9516] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 392.208952][ T9516] ? __fget_files+0x2a/0x420 [ 392.208972][ T9516] ? __fget_files+0x2a/0x420 [ 392.208998][ T9516] __se_compat_sys_ioctl+0x50e/0xc30 [ 392.209023][ T9516] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 392.209045][ T9516] ? __fget_files+0x2a/0x420 [ 392.209066][ T9516] ? fput+0x9b/0xd0 [ 392.209091][ T9516] ? ksys_write+0x275/0x2d0 [ 392.209120][ T9516] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 392.209141][ T9516] ? lockdep_hardirqs_on+0x9d/0x150 [ 392.209164][ T9516] __do_fast_syscall_32+0xb4/0x110 [ 392.209186][ T9516] ? exc_page_fault+0x5f8/0x920 [ 392.209210][ T9516] do_fast_syscall_32+0x34/0x80 [ 392.209232][ T9516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.209253][ T9516] RIP: 0023:0xf7f47579 [ 392.209269][ T9516] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 392.209285][ T9516] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 392.209305][ T9516] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707 [ 392.209317][ T9516] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.209327][ T9516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.209338][ T9516] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 392.209349][ T9516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.209377][ T9516] [ 392.627135][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'. [ 392.873447][ T5900] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 393.064411][ T5900] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 393.115355][ T5900] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.222939][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.245637][ T5900] usb 1-1: SerialNumber: syz [ 393.274728][ T9537] FAULT_INJECTION: forcing a failure. [ 393.274728][ T9537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.290977][ T9537] CPU: 1 UID: 0 PID: 9537 Comm: syz.1.1208 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 393.291020][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.291033][ T9537] Call Trace: [ 393.291041][ T9537] [ 393.291050][ T9537] dump_stack_lvl+0x241/0x360 [ 393.291085][ T9537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.291111][ T9537] ? __pfx__printk+0x10/0x10 [ 393.291150][ T9537] should_fail_ex+0x424/0x570 [ 393.291177][ T9537] _copy_from_iter+0x211/0x1c70 [ 393.291203][ T9537] ? _copy_from_iter+0x288/0x1c70 [ 393.291230][ T9537] ? skb_set_owner_w+0x246/0x380 [ 393.291254][ T9537] ? sock_alloc_send_pskb+0x944/0xa70 [ 393.291275][ T9537] ? __pfx__copy_from_iter+0x10/0x10 [ 393.291300][ T9537] ? __pfx__copy_from_iter+0x10/0x10 [ 393.291332][ T9537] ? page_copy_sane+0x154/0x260 [ 393.291359][ T9537] copy_page_from_iter+0x7a/0x100 [ 393.291386][ T9537] skb_copy_datagram_from_iter+0x2e0/0x6c0 [ 393.291422][ T9537] unix_dgram_sendmsg+0x7a5/0x1ea0 [ 393.291463][ T9537] ? irqentry_exit+0x63/0x90 [ 393.291488][ T9537] ? aa_sk_perm+0x96f/0xac0 [ 393.291518][ T9537] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 393.291540][ T9537] ? aa_sock_msg_perm+0x5c/0x160 [ 393.291565][ T9537] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 393.291595][ T9537] ? __pfx_aa_file_perm+0x10/0x10 [ 393.291619][ T9537] ? aa_sock_msg_perm+0x91/0x160 [ 393.291651][ T9537] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 393.291675][ T9537] __sock_sendmsg+0x221/0x270 [ 393.291707][ T9537] sock_write_iter+0x2d9/0x3f0 [ 393.291732][ T9537] ? __pfx_sock_write_iter+0x10/0x10 [ 393.291765][ T9537] ? bpf_lsm_file_permission+0x9/0x10 [ 393.291796][ T9537] vfs_write+0x70f/0xd10 [ 393.291827][ T9537] ? __pfx_sock_write_iter+0x10/0x10 [ 393.291849][ T9537] ? __pfx_vfs_write+0x10/0x10 [ 393.291873][ T9537] ? __fget_files+0x2a/0x420 [ 393.291895][ T9537] ? __fget_files+0x2a/0x420 [ 393.291922][ T9537] ksys_write+0x19d/0x2d0 [ 393.291947][ T9537] ? __pfx_ksys_write+0x10/0x10 [ 393.291972][ T9537] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 393.291993][ T9537] ? lockdep_hardirqs_on+0x9d/0x150 [ 393.292024][ T9537] __do_fast_syscall_32+0xb4/0x110 [ 393.292046][ T9537] ? exc_page_fault+0x5f8/0x920 [ 393.292073][ T9537] do_fast_syscall_32+0x34/0x80 [ 393.292096][ T9537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.292119][ T9537] RIP: 0023:0xf7f87579 [ 393.292137][ T9537] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 393.292153][ T9537] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 393.292174][ T9537] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 393.292187][ T9537] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 393.292199][ T9537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.292210][ T9537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 393.292222][ T9537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.292251][ T9537] [ 394.123665][ T9522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1202'. [ 394.137626][ T5900] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 394.233058][ T5900] usb 1-1: USB disconnect, device number 100 [ 394.659334][ T9549] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.1211'. [ 394.679502][ T5845] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 394.734383][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 394.878490][ T5845] usb 2-1: config 0 has no interfaces? [ 394.893832][ T5845] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 394.917816][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.943078][ T5845] usb 2-1: Product: syz [ 394.965207][ T5845] usb 2-1: Manufacturer: syz [ 394.970626][ T5845] usb 2-1: SerialNumber: syz [ 395.028998][ T5845] usb 2-1: config 0 descriptor?? [ 395.276637][ T9546] netlink: 'syz.1.1209': attribute type 10 has an invalid length. [ 395.458757][ T9546] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 395.653228][ T9567] netlink: 'syz.3.1217': attribute type 39 has an invalid length. [ 395.804026][ T5845] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 396.004761][ T5845] usb 1-1: config index 0 descriptor too short (expected 63186, got 210) [ 396.123450][ T5900] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 396.143901][ T5845] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 396.167162][ T5845] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.179886][ T5845] usb 1-1: config 0 has no interface number 0 [ 396.187425][ T5845] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 396.199019][ T5845] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.244360][ T5845] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 396.291587][ T5845] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 396.302397][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.391983][ T5845] usb 1-1: config 0 descriptor?? [ 396.490419][ T5845] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 396.721832][ T53] usb 1-1: Failed to submit usb control message: -71 [ 396.721976][ T5901] usb 1-1: USB disconnect, device number 101 [ 396.756332][ T53] usb 1-1: unable to send the bmi data to the device: -71 [ 396.774713][ T53] usb 1-1: unable to get target info from device [ 396.802571][ T53] usb 1-1: could not get target info (-71) [ 396.822291][ T53] usb 1-1: could not probe fw (-71) [ 397.249740][ T5901] usb 2-1: USB disconnect, device number 72 [ 397.750008][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 397.933786][ T5901] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 398.153070][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 398.164154][ T5901] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 398.173915][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 398.196860][ T5901] usb 1-1: Manufacturer: syz [ 398.230191][ T5901] usb 1-1: config 0 descriptor?? [ 398.278522][ T9593] FAULT_INJECTION: forcing a failure. [ 398.278522][ T9593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.311137][ T5901] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 398.596627][ T9593] CPU: 0 UID: 0 PID: 9593 Comm: syz.1.1224 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 398.596662][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 398.596674][ T9593] Call Trace: [ 398.596683][ T9593] [ 398.596691][ T9593] dump_stack_lvl+0x241/0x360 [ 398.596726][ T9593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.596752][ T9593] ? __pfx__printk+0x10/0x10 [ 398.596792][ T9593] should_fail_ex+0x424/0x570 [ 398.596818][ T9593] _copy_from_iter+0x211/0x1c70 [ 398.596858][ T9593] ? __pfx__copy_from_iter+0x10/0x10 [ 398.596885][ T9593] ? rcu_is_watching+0x15/0xb0 [ 398.596908][ T9593] ? trace_kmalloc+0x1f/0xd0 [ 398.596932][ T9593] ? kernfs_fop_write_iter+0x15a/0x510 [ 398.596961][ T9593] kernfs_fop_write_iter+0x1a1/0x510 [ 398.596994][ T9593] vfs_write+0x70f/0xd10 [ 398.597024][ T9593] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 398.597056][ T9593] ? __pfx_vfs_write+0x10/0x10 [ 398.597080][ T9593] ? __fget_files+0x2a/0x420 [ 398.597101][ T9593] ? __fget_files+0x2a/0x420 [ 398.597127][ T9593] ksys_write+0x19d/0x2d0 [ 398.597150][ T9593] ? __pfx_ksys_write+0x10/0x10 [ 398.597174][ T9593] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 398.597196][ T9593] ? lockdep_hardirqs_on+0x9d/0x150 [ 398.597221][ T9593] __do_fast_syscall_32+0xb4/0x110 [ 398.597242][ T9593] ? exc_page_fault+0x5f8/0x920 [ 398.597267][ T9593] do_fast_syscall_32+0x34/0x80 [ 398.597288][ T9593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.597310][ T9593] RIP: 0023:0xf7f87579 [ 398.597328][ T9593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 398.597343][ T9593] RSP: 002b:00000000f508555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 398.597366][ T9593] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 398.597379][ T9593] RDX: 0000000000006e8a RSI: 0000000000000000 RDI: 0000000000000000 [ 398.597391][ T9593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.597403][ T9593] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 398.597413][ T9593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.597443][ T9593] [ 398.822116][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.975768][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 399.074169][ T9606] xt_HMARK: proto mask must be zero with L3 mode [ 399.409982][ T9601] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 399.419198][ T9601] netlink: 'syz.3.1226': attribute type 2 has an invalid length. [ 399.915084][ T5901] gspca_ov534_9: reg_w failed -110 [ 400.286671][ T5901] gspca_ov534_9: Unknown sensor 0000 [ 400.286824][ T5901] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 401.008816][ T5900] usb 1-1: USB disconnect, device number 102 [ 401.476920][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1237'. [ 401.503289][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1237'. [ 401.835779][ T9641] sctp: failed to load transform for md5: -2 [ 402.175957][ T9651] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 402.186606][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1238'. [ 403.014536][ T9667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.022160][ T9667] IPv6: NLM_F_CREATE should be set when creating new route [ 403.029489][ T9667] IPv6: NLM_F_CREATE should be set when creating new route [ 403.063009][ T5900] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 403.225572][ T5900] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 403.241257][ T5900] usb 2-1: config 0 has no interface number 0 [ 403.276134][ T5900] usb 2-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 403.301260][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.332251][ T5900] usb 2-1: Product: syz [ 403.343117][ T5900] usb 2-1: Manufacturer: syz [ 403.361070][ T5900] usb 2-1: SerialNumber: syz [ 403.390161][ T5900] usb 2-1: config 0 descriptor?? [ 403.411102][ T5900] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 403.763307][ T5845] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 403.849799][ T5900] gspca_sn9c20x: Write register 1001 failed -71 [ 403.882457][ T5900] gspca_sn9c20x: Device initialization failed [ 403.916936][ T5900] gspca_sn9c20x 2-1:0.217: probe with driver gspca_sn9c20x failed with error -71 [ 403.958963][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 403.959997][ T5900] usb 2-1: USB disconnect, device number 73 [ 403.968703][ T5845] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 403.981114][ T5845] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 403.990882][ T5845] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 404.042984][ T5845] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 404.083096][ T5845] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 404.114650][ T5845] usb 3-1: config 0 has no interface number 0 [ 404.153448][ T5845] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 404.187129][ T5845] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 404.216779][ T5845] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 404.228444][ T5845] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.243932][ T5845] usb 3-1: config 0 interface 125 has no altsetting 0 [ 404.251255][ T5845] usb 3-1: config 0 interface 125 has no altsetting 2 [ 404.290468][ T5845] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 404.300396][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.310192][ T5845] usb 3-1: Product: syz [ 404.316074][ T5845] usb 3-1: Manufacturer: syz [ 404.321543][ T5845] usb 3-1: SerialNumber: syz [ 404.344417][ T5845] usb 3-1: config 0 descriptor?? [ 404.355939][ T5845] usb 3-1: selecting invalid altsetting 2 [ 404.371057][ T9686] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1249'. [ 404.407541][ T9686] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1249'. [ 404.453158][ T5901] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 404.650779][ T5901] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 404.689701][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 404.728708][ T5901] usb 4-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 404.750871][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.779026][ T5901] usb 4-1: config 0 descriptor?? [ 405.226937][ T5901] thrustmaster 0003:044F:B320.0012: hidraw0: USB HID v0.00 Device [HID 044f:b320] on usb-dummy_hcd.3-1/input0 [ 405.281243][ T5901] thrustmaster 0003:044F:B320.0012: no inputs found [ 405.333777][ T5899] usb 4-1: USB disconnect, device number 87 [ 405.401762][ T9707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.437196][ T5845] get_1284_register timeout [ 405.442295][ T9707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.475461][ C1] usb 3-1: async_complete: urb error -104 [ 405.481487][ C1] usb 3-1: async_complete: urb error -104 [ 405.487415][ C1] usb 3-1: async_complete: urb error -104 [ 405.493318][ C1] usb 3-1: async_complete: urb error -104 [ 405.512040][ T5845] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 405.633135][ T5901] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 405.848251][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.885578][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.915444][ T5901] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 405.940680][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 405.971402][ T5901] usb 2-1: SerialNumber: syz [ 406.005879][ T9724] FAULT_INJECTION: forcing a failure. [ 406.005879][ T9724] name failslab, interval 1, probability 0, space 0, times 0 [ 406.023359][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.4.1262 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 406.023390][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.023403][ T9724] Call Trace: [ 406.023412][ T9724] [ 406.023421][ T9724] dump_stack_lvl+0x241/0x360 [ 406.023457][ T9724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.023483][ T9724] ? __pfx__printk+0x10/0x10 [ 406.023515][ T9724] ? __pfx___might_resched+0x10/0x10 [ 406.023543][ T9724] should_fail_ex+0x424/0x570 [ 406.023572][ T9724] should_failslab+0xac/0x100 [ 406.023600][ T9724] __kmalloc_cache_noprof+0x73/0x370 [ 406.023624][ T9724] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 406.023667][ T9724] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 406.023704][ T9724] sctp_association_new+0x15ad/0x2540 [ 406.023741][ T9724] sctp_connect_new_asoc+0x31c/0x700 [ 406.023763][ T9724] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 406.023780][ T9724] ? sctp_sendmsg+0xf30/0x3620 [ 406.023813][ T9724] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 406.023839][ T9724] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 406.023862][ T9724] sctp_sendmsg+0x2009/0x3620 [ 406.023912][ T9724] ? __pfx_sctp_sendmsg+0x10/0x10 [ 406.023941][ T9724] ? aa_sk_perm+0x96f/0xac0 [ 406.023984][ T9724] ? inet_sendmsg+0x330/0x390 [ 406.024010][ T9724] __sock_sendmsg+0x1a6/0x270 [ 406.024039][ T9724] __sys_sendto+0x365/0x4c0 [ 406.024062][ T9724] ? __pfx___sys_sendto+0x10/0x10 [ 406.024095][ T9724] ? __fget_files+0x2a/0x420 [ 406.024125][ T9724] ? ksys_write+0x275/0x2d0 [ 406.024158][ T9724] __ia32_sys_sendto+0xdd/0x100 [ 406.024181][ T9724] __do_fast_syscall_32+0xb4/0x110 [ 406.024202][ T9724] ? exc_page_fault+0x5f8/0x920 [ 406.024229][ T9724] do_fast_syscall_32+0x34/0x80 [ 406.024252][ T9724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.024276][ T9724] RIP: 0023:0xf7f47579 [ 406.024293][ T9724] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 406.024310][ T9724] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 406.024332][ T9724] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 406.024346][ T9724] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000080000100 [ 406.024358][ T9724] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 406.024369][ T9724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 406.024381][ T9724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.024412][ T9724] [ 406.332713][ T5901] usb 2-1: 0:2 : does not exist [ 406.422499][ T5901] usb 2-1: USB disconnect, device number 74 [ 406.588272][ T9732] xt_TPROXY: Can be used only with -p tcp or -p udp [ 406.811318][ T5900] usb 3-1: USB disconnect, device number 71 [ 406.844492][ T30] kauditd_printk_skb: 445 callbacks suppressed [ 406.844538][ T30] audit: type=1326 audit(1743994695.904:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 406.973911][ T30] audit: type=1326 audit(1743994695.944:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 407.075883][ T30] audit: type=1326 audit(1743994695.944:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 407.113599][ T30] audit: type=1326 audit(1743994695.944:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 407.289824][ T30] audit: type=1326 audit(1743994695.944:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 407.402523][ T30] audit: type=1326 audit(1743994695.944:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 407.407345][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'. [ 407.486501][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 407.533037][ T30] audit: type=1326 audit(1743994695.944:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f47598 code=0x7ffc0000 [ 407.695420][ T30] audit: type=1326 audit(1743994695.954:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f47598 code=0x7ffc0000 [ 407.821348][ T9748] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 407.847120][ T30] audit: type=1326 audit(1743994695.954:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f47598 code=0x7ffc0000 [ 408.003552][ T30] audit: type=1326 audit(1743994695.954:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f47598 code=0x7ffc0000 [ 409.135718][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 409.223051][ T5900] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 409.255361][ T9761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.264302][ T9761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.319637][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.714671][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 409.837004][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.284541][ T10] usb 5-1: config 0 descriptor?? [ 410.515125][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 410.600240][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 410.651484][ T10] usb 5-1: USB disconnect, device number 57 [ 411.040751][ T9745] syz.0.1267 (9745): drop_caches: 1 [ 411.046600][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 411.205376][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.219949][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 411.308683][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.375702][ T10] usb 5-1: config 0 descriptor?? [ 411.842493][ T10] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 411.968073][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input22 [ 412.297762][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.309963][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.575585][ T10] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 412.711266][ T10] usb 5-1: USB disconnect, device number 58 [ 413.105787][ T5899] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 413.283161][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 413.377204][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 413.412991][ T5899] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 413.442023][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.568081][ T5899] usb 2-1: config 0 descriptor?? [ 413.592163][ T9790] tipc: Started in network mode [ 413.601355][ T9790] tipc: Node identity 00000000000000000079940000000001, cluster identity 4711 [ 413.611965][ T9790] tipc: Enabling of bearer rejected, failed to enable media [ 413.813074][ T5932] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 413.975787][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 414.003576][ T5932] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 414.029321][ T5899] ryos 0003:1E7D:31CE.0014: unknown main item tag 0x0 [ 414.046696][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.074404][ T5932] usb 1-1: config 0 descriptor?? [ 414.088799][ T5932] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 414.105771][ T5899] ryos 0003:1E7D:31CE.0014: unknown main item tag 0x0 [ 414.120710][ T5932] usb 1-1: Detected FT2233HP [ 414.153342][ T5899] ryos 0003:1E7D:31CE.0014: unknown main item tag 0x0 [ 414.161490][ T5899] ryos 0003:1E7D:31CE.0014: unknown main item tag 0x0 [ 414.169423][ T5899] ryos 0003:1E7D:31CE.0014: unknown main item tag 0x0 [ 414.177691][ T5899] ryos 0003:1E7D:31CE.0014: unknown main item tag 0x0 [ 414.185857][ T5899] ryos 0003:1E7D:31CE.0014: unknown main item tag 0x0 [ 414.208262][ T5899] ryos 0003:1E7D:31CE.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 414.355855][ T5899] usb 2-1: USB disconnect, device number 75 [ 414.373362][ T5900] usb 3-1: device descriptor read/64, error -71 [ 414.532376][ T5932] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 414.550108][ T5932] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 414.579201][ T5932] usb 1-1: USB disconnect, device number 103 [ 414.610240][ T5932] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 414.637644][ T5900] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 414.646272][ T5932] ftdi_sio 1-1:0.0: device disconnected [ 414.827629][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 414.837822][ T5900] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 414.865613][ T5900] usb 3-1: config 0 has no interface number 0 [ 414.884503][ T5900] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 414.920587][ T5900] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 414.966630][ T5900] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 415.003155][ T5900] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 415.052210][ T5900] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 415.103389][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.140929][ T5900] usb 3-1: config 0 descriptor?? [ 415.165272][ T5900] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 415.432260][ T9801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.531102][ T9801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.864219][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.874618][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.413067][ T5932] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 417.373796][ T9814] syz.1.1286 (9814): drop_caches: 1 [ 419.737493][ T5901] usb 3-1: USB disconnect, device number 73 [ 419.743569][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 419.855086][ T5901] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 420.372184][ T9836] netlink: 'syz.4.1295': attribute type 3 has an invalid length. [ 420.578326][ T9836] veth1_vlan: left allmulticast mode [ 420.886556][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1298'. [ 420.913840][ T5845] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 421.103663][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 421.126180][ T5845] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 421.253020][ T5845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.283199][ T5845] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.304096][ T5845] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 421.314616][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.333928][ T5845] usb 3-1: Product: syz [ 421.346740][ T5845] usb 3-1: Manufacturer: syz [ 421.363123][ T5845] usb 3-1: SerialNumber: syz [ 421.373203][ T5932] usb 4-1: device descriptor read/64, error -71 [ 421.400079][ T5845] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 421.481157][ T5900] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 421.512452][ T5845] usb 3-1: no configuration chosen from 1 choice [ 421.534171][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 421.638222][ T5932] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 421.864625][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 421.880897][ T5932] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a [ 421.902268][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.083641][ T5900] usb 5-1: config 0 has no interfaces? [ 422.269692][ T5900] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 422.280080][ T5932] usb 4-1: Product: syz [ 422.297160][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.314827][ T5932] usb 4-1: Manufacturer: syz [ 422.319553][ T5932] usb 4-1: SerialNumber: syz [ 422.330892][ T5900] usb 5-1: Product: syz [ 422.341231][ T5900] usb 5-1: Manufacturer: syz [ 422.347053][ T5932] usb 4-1: config 0 descriptor?? [ 422.362202][ T5900] usb 5-1: SerialNumber: syz [ 422.369792][ T5932] mcba_usb 4-1:0.0: Can't find endpoints [ 422.413162][ T5900] usb 5-1: config 0 descriptor?? [ 422.924878][ T5845] usb 4-1: USB disconnect, device number 89 [ 423.012750][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.092709][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.614445][ T5845] usb 3-1: USB disconnect, device number 74 [ 424.171000][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 424.181623][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 424.542637][ T5932] usb 5-1: USB disconnect, device number 59 [ 424.794284][ T5932] IPVS: starting estimator thread 0... [ 424.848752][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 424.937915][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 424.952939][ T9887] IPVS: using max 28 ests per chain, 67200 per kthread [ 425.033231][ T5900] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 425.101294][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1312'. [ 425.248240][ T5900] usb 5-1: config 0 has no interfaces? [ 425.269251][ T5900] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 425.291327][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.302210][ T5900] usb 5-1: Product: syz [ 425.309972][ T5900] usb 5-1: Manufacturer: syz [ 425.320044][ T5900] usb 5-1: SerialNumber: syz [ 425.343728][ T5900] usb 5-1: config 0 descriptor?? [ 425.603107][ T5899] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 425.921579][ T5899] usb 1-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 426.024568][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.053333][ T5899] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 426.235325][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.265663][ T5899] usb 1-1: config 0 descriptor?? [ 426.282650][ T5899] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 426.343430][ T5845] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 426.639099][ T9893] 8021q: VLANs not supported on sit0 [ 426.679138][ T9893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1313'. [ 427.139624][ T5845] usb 2-1: config 0 has no interfaces? [ 427.160728][ T5845] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 427.170702][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.189272][ T5845] usb 2-1: Product: syz [ 427.195629][ T5845] usb 2-1: Manufacturer: syz [ 427.251141][ T5845] usb 2-1: SerialNumber: syz [ 427.332664][ T5845] usb 2-1: config 0 descriptor?? [ 427.514979][ T9906] syzkaller1: entered promiscuous mode [ 427.521434][ T9906] syzkaller1: entered allmulticast mode [ 427.715941][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.797917][ T5900] usb 5-1: USB disconnect, device number 60 [ 427.828995][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.346854][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 428.364435][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'. [ 428.837457][ T5900] usb 1-1: USB disconnect, device number 104 [ 428.910873][ T9926] syz.3.1320 (9926): drop_caches: 1 [ 428.981551][ T5932] usb 2-1: USB disconnect, device number 76 [ 429.511326][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1324'. [ 429.703196][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 429.723496][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 429.876006][ T5900] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 429.910950][ T5845] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 430.054297][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 430.076795][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.080253][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 430.098421][ T5845] usb 5-1: device descriptor read/64, error -71 [ 430.110508][ T5900] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 430.132557][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.143206][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 430.153498][ T5900] usb 3-1: Product: syz [ 430.153521][ T5900] usb 3-1: Manufacturer: syz [ 430.153539][ T5900] usb 3-1: SerialNumber: syz [ 430.174674][ T5900] usb 3-1: config 0 descriptor?? [ 430.189640][ T5900] usb 3-1: no audio or video endpoints found [ 430.359486][ T5845] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 430.522295][ T5845] usb 5-1: device descriptor read/64, error -71 [ 430.628241][ T9967] netlink: 'syz.0.1334': attribute type 3 has an invalid length. [ 430.654783][ T5845] usb usb5-port1: attempt power cycle [ 431.003240][ T5900] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 431.039804][ T5845] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 431.107019][ T5932] usb 3-1: USB disconnect, device number 75 [ 431.114186][ T5845] usb 5-1: device descriptor read/8, error -71 [ 431.196888][ T5900] usb 2-1: config 0 has no interfaces? [ 431.219466][ T5900] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 431.297454][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.353213][ T5900] usb 2-1: Product: syz [ 431.409324][ T5845] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 431.417028][ T5900] usb 2-1: Manufacturer: syz [ 431.461989][ T5900] usb 2-1: SerialNumber: syz [ 431.481122][ T5845] usb 5-1: device descriptor read/8, error -71 [ 431.482090][ T5900] usb 2-1: config 0 descriptor?? [ 431.603743][ T5845] usb usb5-port1: unable to enumerate USB device [ 431.830100][ T9963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.913095][ T9963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.941969][ T9979] syz.0.1337 (9979): drop_caches: 1 [ 433.514880][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 433.542356][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 433.781939][ T5900] usb 2-1: USB disconnect, device number 77 [ 433.951951][T10005] netlink: 'syz.3.1346': attribute type 3 has an invalid length. [ 434.229219][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 435.017873][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 435.161681][T10022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1352'. [ 435.477971][T10017] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1340'. [ 436.823049][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 436.931916][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.942831][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.291871][T10048] netlink: 'syz.3.1359': attribute type 3 has an invalid length. [ 438.755678][T10062] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1363'. [ 438.774822][T10062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.238834][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.249967][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.036818][T10056] syz.4.1362 (10056): drop_caches: 2 [ 441.883841][ T5899] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 442.087389][ T5899] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 442.096408][ T5899] usb 1-1: config 0 has no interface number 0 [ 442.104406][ T5899] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 442.114590][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.133074][ T5899] usb 1-1: config 0 descriptor?? [ 442.150116][ T5899] hub 1-1:0.3: bad descriptor, ignoring hub [ 442.209472][ T5899] hub 1-1:0.3: probe with driver hub failed with error -5 [ 442.255107][ T5899] sierra 1-1:0.3: Sierra USB modem converter detected [ 442.444117][ T5899] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 442.535566][ T5899] usb 1-1: USB disconnect, device number 105 [ 442.551236][ T5899] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 442.577609][ T5899] sierra 1-1:0.3: device disconnected [ 442.643190][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 442.823263][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.832398][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.901664][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 444.910918][T10110] netlink: 'syz.2.1376': attribute type 3 has an invalid length. [ 445.610386][ T120] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 446.000150][ T120] usb 1-1: config 0 has no interfaces? [ 446.163995][ T120] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 446.182318][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.193611][ T120] usb 1-1: Product: syz [ 446.198305][ T120] usb 1-1: Manufacturer: syz [ 446.223156][ T120] usb 1-1: SerialNumber: syz [ 446.250071][ T120] usb 1-1: config 0 descriptor?? [ 447.173089][ T5932] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 447.430157][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.447599][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.993582][ T10] usb 2-1: device descriptor read/all, error -110 [ 448.777219][T10126] bridge_slave_1: left allmulticast mode [ 448.838848][T10126] bridge_slave_1: left promiscuous mode [ 448.883563][T10126] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.185782][T10126] bond0: (slave bond_slave_0): Releasing backup interface [ 449.302216][T10126] bond0: (slave bond_slave_1): Releasing backup interface [ 449.390564][ T120] usb 1-1: USB disconnect, device number 106 [ 449.467726][T10126] team0: Port device team_slave_0 removed [ 449.619288][T10126] team0: Port device team_slave_1 removed [ 449.664770][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.749249][T10126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.839452][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.856026][T10126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.950344][T10126] bond2: (slave ip6gretap1): Releasing active interface [ 449.961088][T10126] ip6gretap1: left allmulticast mode [ 452.183373][ T5932] usb 5-1: device descriptor read/64, error -71 [ 452.456774][ T5932] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 452.660558][T10166] FAULT_INJECTION: forcing a failure. [ 452.660558][T10166] name failslab, interval 1, probability 0, space 0, times 0 [ 452.703160][ T5932] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 452.718847][ T5932] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 452.737671][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.1.1396 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 452.737702][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 452.737715][T10166] Call Trace: [ 452.737723][T10166] [ 452.737731][T10166] dump_stack_lvl+0x241/0x360 [ 452.737768][T10166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.737796][T10166] ? __pfx__printk+0x10/0x10 [ 452.737827][T10166] ? __pfx___might_resched+0x10/0x10 [ 452.737856][T10166] should_fail_ex+0x424/0x570 [ 452.737882][T10166] should_failslab+0xac/0x100 [ 452.737909][T10166] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 452.737936][T10166] ? __alloc_skb+0x1c2/0x480 [ 452.737959][T10166] __alloc_skb+0x1c2/0x480 [ 452.737983][T10166] ? __pfx___alloc_skb+0x10/0x10 [ 452.738004][T10166] ? netlink_autobind+0xd6/0x2f0 [ 452.738028][T10166] ? netlink_autobind+0x2b0/0x2f0 [ 452.738059][T10166] netlink_sendmsg+0x638/0xcd0 [ 452.738097][T10166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.738128][T10166] ? __import_iovec+0x585/0x830 [ 452.738160][T10166] ? aa_sock_msg_perm+0x91/0x160 [ 452.738191][T10166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.738214][T10166] __sock_sendmsg+0x221/0x270 [ 452.738242][T10166] ____sys_sendmsg+0x523/0x860 [ 452.738271][T10166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.738310][T10166] __sys_sendmsg+0x271/0x360 [ 452.738336][T10166] ? __pfx___sys_sendmsg+0x10/0x10 [ 452.738408][T10166] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 452.738430][T10166] ? lockdep_hardirqs_on+0x9d/0x150 [ 452.738454][T10166] __do_fast_syscall_32+0xb4/0x110 [ 452.738476][T10166] ? exc_page_fault+0x5f8/0x920 [ 452.738502][T10166] do_fast_syscall_32+0x34/0x80 [ 452.738525][T10166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.738548][T10166] RIP: 0023:0xf7f87579 [ 452.738566][T10166] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 452.738583][T10166] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 452.738605][T10166] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800007c0 [ 452.738620][T10166] RDX: 0000000020040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.738632][T10166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.738644][T10166] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 452.738656][T10166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.738684][T10166] [ 453.263453][ T5932] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 453.344397][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.434748][T10169] netlink: 'syz.2.1397': attribute type 3 has an invalid length. [ 453.790868][T10158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.800074][T10158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.513116][ T5845] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 454.595153][T10181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.604732][T10181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.696291][ T120] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 454.796163][ T5845] usb 4-1: unable to get BOS descriptor or descriptor too short [ 454.839983][ T5845] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 454.879558][ T5845] usb 4-1: can't read configurations, error -71 [ 455.693677][ T5899] usb 5-1: USB disconnect, device number 66 [ 456.043061][ T5898] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 456.366806][ T5898] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 456.527203][ T5898] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 456.632181][ T5898] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 456.666503][ T5898] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 456.698046][ T5898] usb 2-1: config 220 has no interface number 2 [ 456.718406][ T5898] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 456.759629][ T5898] usb 2-1: config 220 interface 0 has no altsetting 0 [ 456.786835][ T5898] usb 2-1: config 220 interface 76 has no altsetting 0 [ 456.859207][ T5898] usb 2-1: config 220 interface 1 has no altsetting 0 [ 456.908657][ T5898] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 456.942635][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.984639][ T5898] usb 2-1: Product: syz [ 456.998007][ T5898] usb 2-1: Manufacturer: syz [ 457.012985][ T5898] usb 2-1: SerialNumber: syz [ 457.467328][T10194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.619955][T10203] FAULT_INJECTION: forcing a failure. [ 457.619955][T10203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.705896][T10203] CPU: 0 UID: 0 PID: 10203 Comm: syz.2.1408 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 457.705928][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.705940][T10203] Call Trace: [ 457.705947][T10203] [ 457.705955][T10203] dump_stack_lvl+0x241/0x360 [ 457.705990][T10203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.706016][T10203] ? __pfx__printk+0x10/0x10 [ 457.706055][T10203] should_fail_ex+0x424/0x570 [ 457.706081][T10203] _copy_from_user+0x2d/0xb0 [ 457.706107][T10203] rfkill_fop_write+0x127/0x7c0 [ 457.706133][T10203] ? common_file_perm+0x1a6/0x210 [ 457.706160][T10203] ? __pfx_rfkill_fop_write+0x10/0x10 [ 457.706183][T10203] ? __pfx_bpf_lsm_inode_setintegrity+0x10/0x10 [ 457.706206][T10203] ? rw_verify_area+0x246/0x630 [ 457.706232][T10203] vfs_writev+0x5ba/0xbc0 [ 457.706257][T10203] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 457.706292][T10203] ? __pfx_rfkill_fop_write+0x10/0x10 [ 457.706314][T10203] ? __pfx_vfs_writev+0x10/0x10 [ 457.706367][T10203] ? __fget_files+0x2a/0x420 [ 457.706386][T10203] ? __fget_files+0x39d/0x420 [ 457.706401][T10203] ? __fget_files+0x2a/0x420 [ 457.706428][T10203] do_writev+0x1b8/0x360 [ 457.706459][T10203] ? __pfx_do_writev+0x10/0x10 [ 457.706488][T10203] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 457.706509][T10203] ? lockdep_hardirqs_on+0x9d/0x150 [ 457.706534][T10203] __do_fast_syscall_32+0xb4/0x110 [ 457.706556][T10203] ? exc_page_fault+0x5f8/0x920 [ 457.706582][T10203] do_fast_syscall_32+0x34/0x80 [ 457.706604][T10203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.706626][T10203] RIP: 0023:0xf7fc1579 [ 457.706644][T10203] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 457.706660][T10203] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 457.706682][T10203] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 457.706695][T10203] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.706706][T10203] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.706717][T10203] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 457.706728][T10203] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.706756][T10203] [ 457.969459][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.266336][T10225] capability: warning: `syz.0.1416' uses 32-bit capabilities (legacy support in use) [ 459.287894][T10226] fuse: Unknown parameter 'ro/tmode' [ 459.302430][T10227] fuse: Unknown parameter 'ro/tmode' [ 459.383590][ T5898] usb 2-1: selecting invalid altsetting 0 [ 459.401842][ T5898] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 459.409318][ T5898] usb 2-1: No valid video chain found. [ 459.596510][ T5898] usb 2-1: selecting invalid altsetting 0 [ 459.635932][ T5898] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 459.857214][ T5898] usb 2-1: USB disconnect, device number 81 [ 460.085565][T10242] bridge_slave_0: left allmulticast mode [ 460.106859][T10242] bridge_slave_0: left promiscuous mode [ 460.112735][T10242] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.230382][ T5932] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 460.563529][T10242] bridge_slave_1: left allmulticast mode [ 460.595977][T10242] bridge_slave_1: left promiscuous mode [ 460.655018][ T5932] usb 4-1: config 0 has no interfaces? [ 460.744506][ T5932] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 460.791174][T10242] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.800891][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.827831][ T5932] usb 4-1: Product: syz [ 460.917514][ T5932] usb 4-1: Manufacturer: syz [ 460.952054][ T5932] usb 4-1: SerialNumber: syz [ 460.963471][T10242] bond0: (slave bond_slave_0): Releasing backup interface [ 460.990560][ T5932] usb 4-1: config 0 descriptor?? [ 461.339948][T10242] bond0: (slave bond_slave_1): Releasing backup interface [ 461.506855][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.610675][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.635841][T10242] team0: Port device team_slave_0 removed [ 461.875332][T10242] team0: Port device team_slave_1 removed [ 461.927297][T10242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.009282][T10242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.028585][T10242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.094890][T10242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.201635][T10242] bond0: (slave wlan1): Releasing backup interface [ 462.255995][T10252] netlink: 'syz.2.1424': attribute type 12 has an invalid length. [ 462.280655][T10252] netlink: 'syz.2.1424': attribute type 3 has an invalid length. [ 462.292412][T10252] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1424'. [ 462.800661][T10268] netlink: 'syz.0.1427': attribute type 3 has an invalid length. [ 463.279634][ T5900] usb 4-1: USB disconnect, device number 92 [ 463.397520][T10276] FAULT_INJECTION: forcing a failure. [ 463.397520][T10276] name failslab, interval 1, probability 0, space 0, times 0 [ 463.492129][T10276] CPU: 0 UID: 0 PID: 10276 Comm: syz.3.1431 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 463.492161][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.492172][T10276] Call Trace: [ 463.492181][T10276] [ 463.492189][T10276] dump_stack_lvl+0x241/0x360 [ 463.492225][T10276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.492251][T10276] ? __pfx__printk+0x10/0x10 [ 463.492291][T10276] ? __pfx___might_resched+0x10/0x10 [ 463.492320][T10276] should_fail_ex+0x424/0x570 [ 463.492347][T10276] should_failslab+0xac/0x100 [ 463.492375][T10276] __kmalloc_cache_noprof+0x73/0x370 [ 463.492400][T10276] ? alloc_netdev_mqs+0xc7c/0x1210 [ 463.492428][T10276] alloc_netdev_mqs+0xc7c/0x1210 [ 463.492459][T10276] rtnl_create_link+0x2f9/0xc90 [ 463.492489][T10276] rtnl_newlink_create+0x2f2/0xcb0 [ 463.492518][T10276] ? __mutex_lock+0x380/0x10c0 [ 463.492543][T10276] ? __pfx_aa_get_newest_label+0x10/0x10 [ 463.492574][T10276] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 463.492606][T10276] ? __pfx___mutex_lock+0x10/0x10 [ 463.492639][T10276] ? ns_capable+0x8a/0xf0 [ 463.492663][T10276] rtnl_newlink+0x18b0/0x1fe0 [ 463.492691][T10276] ? stack_depot_save_flags+0x44/0x940 [ 463.492727][T10276] ? __pfx_rtnl_newlink+0x10/0x10 [ 463.492749][T10276] ? __netlink_deliver_tap+0x561/0x7f0 [ 463.492774][T10276] ? netlink_deliver_tap+0x19d/0x1b0 [ 463.492797][T10276] ? netlink_unicast+0x7c6/0x9a0 [ 463.492827][T10276] ? netlink_sendmsg+0x8c3/0xcd0 [ 463.492848][T10276] ? __sock_sendmsg+0x221/0x270 [ 463.492869][T10276] ? ____sys_sendmsg+0x523/0x860 [ 463.492886][T10276] ? __sys_sendmsg+0x271/0x360 [ 463.492901][T10276] ? __do_fast_syscall_32+0xb4/0x110 [ 463.492922][T10276] ? do_fast_syscall_32+0x34/0x80 [ 463.492941][T10276] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.493039][T10276] ? kasan_quarantine_put+0xdc/0x230 [ 463.493059][T10276] ? lockdep_hardirqs_on+0x9d/0x150 [ 463.493084][T10276] ? nlmon_xmit+0xaf/0x100 [ 463.493120][T10276] ? __local_bh_enable_ip+0x168/0x200 [ 463.493138][T10276] ? lockdep_hardirqs_on+0x9d/0x150 [ 463.493167][T10276] ? aa_get_newest_label+0x101/0x6f0 [ 463.493200][T10276] ? __lock_acquire+0xad5/0xd80 [ 463.493244][T10276] ? __pfx_rtnl_newlink+0x10/0x10 [ 463.493270][T10276] rtnetlink_rcv_msg+0x80f/0xd70 [ 463.493292][T10276] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 463.493323][T10276] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 463.493356][T10276] ? ref_tracker_free+0x63e/0x7e0 [ 463.493384][T10276] netlink_rcv_skb+0x208/0x480 [ 463.493410][T10276] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 463.493437][T10276] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.493482][T10276] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.493509][T10276] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.493536][T10276] netlink_unicast+0x7f8/0x9a0 [ 463.493568][T10276] ? __pfx_netlink_unicast+0x10/0x10 [ 463.493594][T10276] ? skb_put+0x114/0x1f0 [ 463.493618][T10276] netlink_sendmsg+0x8c3/0xcd0 [ 463.493656][T10276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.493685][T10276] ? __import_iovec+0x585/0x830 [ 463.493709][T10276] ? aa_sock_msg_perm+0x91/0x160 [ 463.493739][T10276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.493762][T10276] __sock_sendmsg+0x221/0x270 [ 463.493789][T10276] ____sys_sendmsg+0x523/0x860 [ 463.493819][T10276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.493857][T10276] __sys_sendmsg+0x271/0x360 [ 463.493884][T10276] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.493960][T10276] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 463.493981][T10276] ? lockdep_hardirqs_on+0x9d/0x150 [ 463.494017][T10276] __do_fast_syscall_32+0xb4/0x110 [ 463.494039][T10276] ? exc_page_fault+0x5f8/0x920 [ 463.494065][T10276] do_fast_syscall_32+0x34/0x80 [ 463.494088][T10276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.494110][T10276] RIP: 0023:0xf747d579 [ 463.494127][T10276] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 463.494143][T10276] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 463.494166][T10276] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 463.494180][T10276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.494191][T10276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.494202][T10276] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 463.494214][T10276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.494243][T10276] [ 464.956325][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1439'. [ 465.280002][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 465.325753][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 465.431340][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'. [ 465.800806][T10323] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1445'. [ 466.168432][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1446'. [ 466.269482][T10325] FAULT_INJECTION: forcing a failure. [ 466.269482][T10325] name failslab, interval 1, probability 0, space 0, times 0 [ 466.289193][T10325] CPU: 1 UID: 0 PID: 10325 Comm: syz.3.1446 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 466.289223][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 466.289235][T10325] Call Trace: [ 466.289244][T10325] [ 466.289253][T10325] dump_stack_lvl+0x241/0x360 [ 466.289295][T10325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.289321][T10325] ? __pfx__printk+0x10/0x10 [ 466.289352][T10325] ? ref_tracker_alloc+0x316/0x4c0 [ 466.289378][T10325] should_fail_ex+0x424/0x570 [ 466.289404][T10325] should_failslab+0xac/0x100 [ 466.289433][T10325] kmem_cache_alloc_noprof+0x78/0x390 [ 466.289458][T10325] ? skb_clone+0x20c/0x390 [ 466.289486][T10325] skb_clone+0x20c/0x390 [ 466.289511][T10325] __netlink_deliver_tap+0x3c4/0x7f0 [ 466.289551][T10325] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.289576][T10325] netlink_deliver_tap+0x19d/0x1b0 [ 466.289603][T10325] netlink_sendskb+0x68/0x140 [ 466.289630][T10325] netlink_unicast+0x39f/0x9a0 [ 466.289651][T10325] ? __asan_memcpy+0x40/0x70 [ 466.289680][T10325] ? __pfx_netlink_unicast+0x10/0x10 [ 466.289715][T10325] nfnetlink_rcv+0x2366/0x28f0 [ 466.289775][T10325] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 466.289853][T10325] ? skb_clone+0x240/0x390 [ 466.289887][T10325] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.289916][T10325] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.289944][T10325] netlink_unicast+0x7f8/0x9a0 [ 466.289965][T10325] ? irqentry_exit+0x63/0x90 [ 466.289996][T10325] ? __pfx_netlink_unicast+0x10/0x10 [ 466.290019][T10325] ? netlink_sendmsg+0x834/0xcd0 [ 466.290053][T10325] netlink_sendmsg+0x8c3/0xcd0 [ 466.290092][T10325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.290122][T10325] ? aa_sock_msg_perm+0x91/0x160 [ 466.290154][T10325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.290177][T10325] __sock_sendmsg+0x221/0x270 [ 466.290203][T10325] ____sys_sendmsg+0x523/0x860 [ 466.290232][T10325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.290278][T10325] __sys_sendmsg+0x271/0x360 [ 466.290305][T10325] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.290321][T10325] ? net_tx_action+0x9d7/0xa50 [ 466.290380][T10325] ? __irq_exit_rcu+0xfb/0x220 [ 466.290419][T10325] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 466.290440][T10325] ? lockdep_hardirqs_on+0x9d/0x150 [ 466.290465][T10325] __do_fast_syscall_32+0xb4/0x110 [ 466.290490][T10325] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.290509][T10325] ? lockdep_hardirqs_on+0x9d/0x150 [ 466.290534][T10325] do_fast_syscall_32+0x34/0x80 [ 466.290558][T10325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 466.290580][T10325] RIP: 0023:0xf747d579 [ 466.290597][T10325] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 466.290613][T10325] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 466.290635][T10325] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 466.290649][T10325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.290660][T10325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.290672][T10325] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 466.290683][T10325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.290714][T10325] [ 466.462943][ T5932] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 466.468091][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.635974][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.752185][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.036924][ T5932] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 467.047656][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.060449][ T5932] usb 1-1: config 0 descriptor?? [ 467.069108][ T5932] cp210x 1-1:0.0: cp210x converter detected [ 467.268201][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.299955][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.325495][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.339506][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.388113][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.420296][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.438715][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.465102][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.486518][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.502386][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.658024][ T5932] usb 1-1: cp210x converter now attached to ttyUSB0 [ 467.881248][ T5932] usb 1-1: USB disconnect, device number 107 [ 467.964765][ T5932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 468.005681][ T5932] cp210x 1-1:0.0: device disconnected [ 468.314866][T10347] veth3: entered promiscuous mode [ 468.367680][T10352] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1457'. [ 468.423016][ T5900] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 468.515886][ T5932] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 468.518024][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 468.585528][T10354] x_tables: duplicate underflow at hook 1 [ 468.602362][ T5900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.623584][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.652389][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.679152][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.693480][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 468.711973][ T5932] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 468.734547][T10356] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 468.742025][ T5900] usb 2-1: Product: syz [ 468.756838][ T5900] usb 2-1: Manufacturer: syz [ 468.761679][ T5932] usb 3-1: config 0 has no interface number 0 [ 468.778280][ T5900] usb 2-1: SerialNumber: syz [ 468.779675][T10356] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 468.786775][ T5932] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 468.852082][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.881473][ T5932] usb 3-1: Product: syz [ 468.887512][ T5932] usb 3-1: Manufacturer: syz [ 468.893541][ T120] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 468.912566][ T5932] usb 3-1: SerialNumber: syz [ 468.933689][ T5932] usb 3-1: config 0 descriptor?? [ 468.952364][ T5932] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 468.972553][ T5932] usb 3-1: selecting invalid altsetting 1 [ 468.988259][ T5932] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 469.054465][ T5932] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 469.073414][ T5898] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 469.073607][ T5932] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 469.090055][ T5932] usb 3-1: media controller created [ 469.122457][ T120] usb 5-1: config 253 has an invalid interface number: 193 but max is 0 [ 469.125817][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.183607][ T120] usb 5-1: config 253 has no interface number 0 [ 469.188898][T10361] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 469.188898][T10361] program syz.0.1461 not setting count and/or reply_len properly [ 469.191085][ T120] usb 5-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=e1.db [ 469.243134][ T5900] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 469.303055][ T5900] cdc_ncm 2-1:1.0: bind() failure [ 469.315075][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.331351][ T5900] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 469.375717][ T5900] cdc_ncm 2-1:1.1: bind() failure [ 469.407673][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.423319][ T5900] usb 2-1: USB disconnect, device number 82 [ 469.445157][ T5898] usb 4-1: config 0 has no interfaces? [ 469.499518][ T5898] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 469.552023][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.566408][ T5932] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 469.600417][ T120] usb 5-1: string descriptor 0 read error: -71 [ 469.637703][ T5898] usb 4-1: Product: syz [ 469.642682][ T5898] usb 4-1: Manufacturer: syz [ 469.680402][ T120] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 469.692921][ T5898] usb 4-1: SerialNumber: syz [ 469.723499][ T120] gspca_sunplus: reg_r err -71 [ 469.731158][ T5898] usb 4-1: config 0 descriptor?? [ 469.743160][ T120] sunplus 5-1:253.193: probe with driver sunplus failed with error -71 [ 469.794337][ T120] usb 5-1: USB disconnect, device number 67 [ 469.865140][ T5932] usb 3-1: USB disconnect, device number 77 [ 470.373048][ T5900] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 470.569060][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 470.589621][ T5900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.630181][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.682193][ T5900] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 470.833137][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.854472][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.866665][ T5900] usb 2-1: SerialNumber: syz [ 470.888659][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 470.888718][ T30] audit: type=1326 audit(1743994759.944:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 470.898362][ T5900] cdc_acm 2-1:1.0: skipping garbage [ 470.918444][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.018610][ T30] audit: type=1326 audit(1743994759.974:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 471.118081][ T30] audit: type=1326 audit(1743994759.984:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 471.194541][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 471.243818][ T30] audit: type=1326 audit(1743994759.984:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 471.275384][ T30] audit: type=1326 audit(1743994759.984:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 471.306614][ T30] audit: type=1326 audit(1743994759.984:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 471.340593][ T30] audit: type=1326 audit(1743994759.984:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 471.369889][ T30] audit: type=1326 audit(1743994759.984:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 471.401708][ T30] audit: type=1326 audit(1743994759.984:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 471.427428][ T5900] usb 2-1: USB disconnect, device number 83 [ 471.464682][ T30] audit: type=1326 audit(1743994759.994:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 471.486796][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.514264][ T120] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 471.677612][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.694542][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.715586][ T120] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.782697][ T120] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.807503][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.850960][ T120] usb 3-1: config 0 descriptor?? [ 471.859570][T10393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.923313][ T5900] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 471.980901][T10393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.163849][ T5899] usb 4-1: USB disconnect, device number 93 [ 472.419059][T10388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1469'. [ 472.431424][T10397] netlink: 'syz.3.1471': attribute type 3 has an invalid length. [ 472.451068][ T120] usbhid 3-1:0.0: can't add hid device: -71 [ 472.460180][ T120] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 472.615627][T10399] FAULT_INJECTION: forcing a failure. [ 472.615627][T10399] name failslab, interval 1, probability 0, space 0, times 0 [ 472.630160][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz.1.1472 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 472.630188][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.630200][T10399] Call Trace: [ 472.630208][T10399] [ 472.630216][T10399] dump_stack_lvl+0x241/0x360 [ 472.630252][T10399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.630278][T10399] ? __pfx__printk+0x10/0x10 [ 472.630317][T10399] should_fail_ex+0x424/0x570 [ 472.630345][T10399] should_failslab+0xac/0x100 [ 472.630370][T10399] __kmalloc_cache_noprof+0x73/0x370 [ 472.630393][T10399] ? br_vlan_add+0x208/0x970 [ 472.630424][T10399] br_vlan_add+0x208/0x970 [ 472.630456][T10399] ? is_bpf_text_address+0x288/0x2a0 [ 472.630487][T10399] br_vlan_info+0x1f4/0x520 [ 472.630517][T10399] ? __pfx_br_vlan_info+0x10/0x10 [ 472.630542][T10399] ? arch_stack_walk+0xff/0x150 [ 472.630569][T10399] ? br_process_vlan_info+0x5d8/0xc30 [ 472.630602][T10399] br_process_vlan_info+0x84c/0xc30 [ 472.630638][T10399] ? __pfx_stack_trace_save+0x10/0x10 [ 472.630667][T10399] ? __pfx_br_process_vlan_info+0x10/0x10 [ 472.630707][T10399] br_afspec+0x3d0/0x650 [ 472.630733][T10399] ? nlmon_xmit+0xaf/0x100 [ 472.630767][T10399] ? __pfx_br_afspec+0x10/0x10 [ 472.630791][T10399] ? do_fast_syscall_32+0x34/0x80 [ 472.630827][T10399] ? nla_find+0x124/0x140 [ 472.630852][T10399] br_setlink+0x37e/0x8c0 [ 472.630886][T10399] ? __pfx_br_setlink+0x10/0x10 [ 472.630954][T10399] ? aa_get_newest_label+0x101/0x6f0 [ 472.630987][T10399] ? nla_find+0x124/0x140 [ 472.631020][T10399] rtnl_bridge_setlink+0x71c/0xa10 [ 472.631055][T10399] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 472.631088][T10399] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 472.631115][T10399] rtnetlink_rcv_msg+0x7c2/0xd70 [ 472.631139][T10399] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 472.631171][T10399] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.631205][T10399] ? ref_tracker_free+0x63e/0x7e0 [ 472.631234][T10399] netlink_rcv_skb+0x208/0x480 [ 472.631259][T10399] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.631287][T10399] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.631335][T10399] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.631364][T10399] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.631390][T10399] netlink_unicast+0x7f8/0x9a0 [ 472.631424][T10399] ? __pfx_netlink_unicast+0x10/0x10 [ 472.631451][T10399] ? skb_put+0x114/0x1f0 [ 472.631476][T10399] netlink_sendmsg+0x8c3/0xcd0 [ 472.631516][T10399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.631545][T10399] ? __import_iovec+0x585/0x830 [ 472.631569][T10399] ? aa_sock_msg_perm+0x91/0x160 [ 472.631599][T10399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.631623][T10399] __sock_sendmsg+0x221/0x270 [ 472.631652][T10399] ____sys_sendmsg+0x523/0x860 [ 472.631681][T10399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.631721][T10399] __sys_sendmsg+0x271/0x360 [ 472.631747][T10399] ? __pfx___sys_sendmsg+0x10/0x10 [ 472.631823][T10399] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 472.631846][T10399] ? lockdep_hardirqs_on+0x9d/0x150 [ 472.631871][T10399] __do_fast_syscall_32+0xb4/0x110 [ 472.631893][T10399] ? exc_page_fault+0x5f8/0x920 [ 472.631920][T10399] do_fast_syscall_32+0x34/0x80 [ 472.631943][T10399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.631966][T10399] RIP: 0023:0xf7f87579 [ 472.631983][T10399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 472.631999][T10399] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 472.632028][T10399] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 472.632042][T10399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.632053][T10399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.632064][T10399] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 472.632075][T10399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.632106][T10399] [ 473.018557][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.057780][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.657393][ T120] usb 3-1: USB disconnect, device number 78 [ 474.373472][ T12] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 474.378374][T10410] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1476'. [ 474.379605][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 474.379633][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 474.410452][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 474.416712][ T12] RIP: 0010:mac80211_hwsim_link_info_changed+0x42a/0xf10 [ 474.423773][ T12] Code: 00 49 89 c5 74 08 4c 89 ff e8 22 25 cf fa 49 8b 0f 89 ce 48 89 d8 48 c1 e8 20 4c 8b 74 24 10 0f 84 18 01 00 00 48 89 d8 31 d2 <48> f7 f6 e9 11 01 00 00 e8 89 fb 64 fa eb 05 e8 82 fb 64 fa 4c 8d [ 474.443397][ T12] RSP: 0018:ffffc90000117700 EFLAGS: 00010246 [ 474.449473][ T12] RAX: 000632276c5d693b RBX: 000632276c5d693b RCX: 0000000000000000 [ 474.457447][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000040 [ 474.465419][ T12] RBP: ffffc900001177f0 R08: ffffffff81b0eef1 R09: 1ffffffff20bfbee [ 474.473421][ T12] R10: dffffc0000000000 R11: ffffffff81624770 R12: 0000000000000200 [ 474.481854][ T12] R13: dffffc0000000000 R14: 1ffff92000022eec R15: ffff88807a30f040 [ 474.489851][ T12] FS: 0000000000000000(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 474.498785][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.505374][ T12] CR2: 000000008000579c CR3: 0000000068a92000 CR4: 00000000003526f0 [ 474.513365][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.521350][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.529329][ T12] Call Trace: [ 474.532664][ T12] [ 474.535633][ T12] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 474.542434][ T12] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 474.549202][ T12] drv_link_info_changed+0x53d/0x8b0 [ 474.554497][ T12] ieee80211_offchannel_return+0x3a4/0x530 [ 474.560312][ T12] ? __pfx_mac80211_hwsim_sw_scan_complete+0x10/0x10 [ 474.567000][ T12] __ieee80211_scan_completed+0x77f/0xb60 [ 474.572734][ T12] ieee80211_scan_work+0x1d6/0x1dd0 [ 474.577963][ T12] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 474.583621][ T12] ? rcu_is_watching+0x15/0xb0 [ 474.588392][ T12] cfg80211_wiphy_work+0x2f0/0x490 [ 474.593515][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 474.599256][ T12] process_scheduled_works+0xac3/0x18e0 [ 474.604829][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 474.610821][ T12] ? assign_work+0x367/0x3d0 [ 474.615416][ T12] worker_thread+0x870/0xd50 [ 474.620017][ T12] ? __kthread_parkme+0x1a8/0x200 [ 474.625052][ T12] ? __pfx_worker_thread+0x10/0x10 [ 474.630185][ T12] kthread+0x7b7/0x940 [ 474.634272][ T12] ? __pfx_worker_thread+0x10/0x10 [ 474.639390][ T12] ? __pfx_kthread+0x10/0x10 [ 474.644107][ T12] ? __pfx_kthread+0x10/0x10 [ 474.648706][ T12] ? __pfx_kthread+0x10/0x10 [ 474.653301][ T12] ? __pfx_kthread+0x10/0x10 [ 474.657895][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.663183][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 474.668424][ T12] ? __pfx_kthread+0x10/0x10 [ 474.673077][ T12] ret_from_fork+0x4b/0x80 [ 474.677503][ T12] ? __pfx_kthread+0x10/0x10 [ 474.682274][ T12] ret_from_fork_asm+0x1a/0x30 [ 474.687059][ T12] [ 474.690084][ T12] Modules linked in: [ 474.710939][ T12] ---[ end trace 0000000000000000 ]--- [ 474.957496][ T12] RIP: 0010:mac80211_hwsim_link_info_changed+0x42a/0xf10 [ 474.967489][ T12] Code: 00 49 89 c5 74 08 4c 89 ff e8 22 25 cf fa 49 8b 0f 89 ce 48 89 d8 48 c1 e8 20 4c 8b 74 24 10 0f 84 18 01 00 00 48 89 d8 31 d2 <48> f7 f6 e9 11 01 00 00 e8 89 fb 64 fa eb 05 e8 82 fb 64 fa 4c 8d [ 474.988518][ T12] RSP: 0018:ffffc90000117700 EFLAGS: 00010246 [ 474.995170][ T12] RAX: 000632276c5d693b RBX: 000632276c5d693b RCX: 0000000000000000 [ 475.049962][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000040 [ 475.058951][ T12] RBP: ffffc900001177f0 R08: ffffffff81b0eef1 R09: 1ffffffff20bfbee [ 475.074948][ T5901] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 475.093274][ T12] R10: dffffc0000000000 R11: ffffffff81624770 R12: 0000000000000200 [ 475.125980][ T12] R13: dffffc0000000000 R14: 1ffff92000022eec R15: ffff88807a30f040 [ 475.139803][ T12] FS: 0000000000000000(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 475.610679][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.618684][ T12] CR2: 0000000080065018 CR3: 000000005144e000 CR4: 00000000003526f0 [ 475.628099][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 475.643190][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 475.652103][ T12] Kernel panic - not syncing: Fatal exception [ 475.658375][ T12] Kernel Offset: disabled [ 475.662721][ T12] Rebooting in 86400 seconds..