last executing test programs: 19.781904999s ago: executing program 2 (id=2240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c070100"], 0x340a) 19.209163657s ago: executing program 2 (id=2242): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) read$nci(r0, &(0x7f0000000040)=""/20, 0x14) (fail_nth: 2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 18.634704037s ago: executing program 1 (id=2243): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', 0x2007}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002540)={0x2c, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}}, 0x0) 18.588259165s ago: executing program 2 (id=2244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x4000) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x4000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x24000010) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x24000010) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x14) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r5, 0x100000000000f7) write$sndseq(r5, &(0x7f0000000100)=[{0x4, 0x7f, 0x2a, 0x1, @time={0x200, 0x74}, {0xd}, {0x40, 0x3a}, @queue={0x81, {0x7, 0x5149}}}], 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f00000000c0)=0x7ff) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x2fd, 0x0, 0x1, 0xfffffffd, 0x3, 0x0, 0xffffffff}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x2fd, 0x0, 0x1, 0xfffffffd, 0x3, 0x0, 0xffffffff}}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x5000) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x4a0, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x43c, 0x6, 0x0, 0x1, [@nested={0x438, 0xce, 0x0, 0x1, [@nested={0x434, 0x13e, 0x0, 0x1, [@nested={0x430, 0xa0, 0x0, 0x1, [@nested={0x42c, 0x61, 0x0, 0x1, [@nested={0x428, 0x9d, 0x0, 0x1, [@nested={0x421, 0x63, 0x0, 0x1, [@nested={0x99, 0x16, 0x0, 0x1, [@generic="0a5885771e643bb4f2cf1399f9a35aa759241f4897111a3edd19eff75dae07a7d5a8aec4d35c0818e64ae6e0b002c255a038d6d5057a5a1846938cc35a2053d20919e7b90c89c3d96fc6cb3734235e166bb3227b9a6b5efa0722164bb8a588d19ddb8d2b6eb882309a9b59b69868083f6b112f53025eb7ff7c795b4961aceafd71b035e13908fb2abbe10f7b2ba21e759cd4478afd"]}, @typed={0x4, 0xa5}, @nested={0x10, 0x90, 0x0, 0x1, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @fd=r9}]}]}, @nested={0x4, 0x70}, @nested={0x325, 0x6f, 0x0, 0x1, [@generic="6acc58d9202491e92517ecb6885e6fb334108aaf6595e649dc214d9b5121fd85e6a8e42f0d427c9ec0ee7283b6121243c38368885f758f62392091ccd6e60510ff26894e", @nested={0x61, 0x11f, 0x0, 0x1, [@generic="2d7ae25e993ee7529ec97935d342a18d066917758308fee4f4b067c56e07a0ff0775a004cf418246546008f43a5c7d7282149db942b3b5d98a6e38fdbcecb9195b8993daf03afa743d34432fc8688125f8", @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xf6}]}, @nested={0x4, 0x42}, @typed={0x8, 0x1b, 0x0, 0x0, @uid}, @nested={0xbd, 0x10, 0x0, 0x1, [@generic="99adf393fc45e21c8d95bed4ed918a8e6d824d1ea8559a370b9defd82e8a43554de92f65a2e076f8e931105adf06609499120fb381838067a39bef2ddd9791196a82a0ef2db6143519118233a6672c8e68820c11d8479fde1475e5b259ef10755391490e7a85f3b2b172a0a8328ef247792ee1773402e724006d31c615aaf46cc5b5abf4d4a39fee276e087ab3c803636a3997f0505927ffd5171d99fa9387155af2cdb118ff4652b94fee75c84afad85488ef74483f894177"]}, @generic="d67d5452c39944f4dc7ebd8daa76c8297417bd794f6382721eced14669ddfea8694aae3b059218d55e64a152af2d55120779fb918dd834f5dbd29eab726f315e1cf46152197a9deedbb1da21b878adf19cf7274412029433d230b0f32ec3cf9c4e08d14a0f89ba17eca3c70843e6836135557e8e65d8f87155e61ac870a58e695c", @nested={0x12b, 0x136, 0x0, 0x1, [@nested={0x4, 0x2c}, @generic="2845b0f311dd6c1c44e3d5d2c8a6a99ef8cd52d6c61c1bf3b5aeccd7b704ffd370314d1c68a7a2cc785b65a7dcfa568caae80d0a51e25a05d1936681d8e7ad859561ca11c769b1accc349f7485d17fdb5ec1ba6f52d5ceebbb347ea9be14eeb466b6955083d278079410d914992b21830e64693b3d119c60972d375fe51fb85b4f5fa347da", @typed={0x8, 0xe, 0x0, 0x0, @uid}, @generic="06f3b75e0a8b7633463f10080cc168bf2d6bce9e871056df6a382190cec4d35660b5d4e261cc9667e583533f500343a98bf1e27977b328076e6cad4be63a02ef60b686ce081a2346c0c1afb1ad3846e7f80985aaecf12e7c8b2a2f30fc259beef92c17cdae19342bc80b34b2c91492903979eb6fa842b13d21d392e4fabf98324085", @typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0x28, 0xde, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @fd=r9}, @nested={0x1c, 0x132, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff7}, @nested={0x4, 0x88}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x14}]}]}, @generic="67bc0ca816bfd690a5b2bc965f642f86fc"]}]}]}]}]}]}]}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_connect(0x3, 0x187, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e336d40fd0b0b01b1ff010203010902750101000000000904d00002a4abf70009050402000000000009058802000000000074033965b4012cfcb6"], 0x0) 17.342569014s ago: executing program 1 (id=2249): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_clone(0x78503ef09497f070, &(0x7f0000000c80)="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", 0x447, 0x0, &(0x7f00000000c0), 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 16.767143349s ago: executing program 2 (id=2252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 16.640485392s ago: executing program 2 (id=2253): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44fc2, 0x20) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket(0x1d, 0x2, 0x6) epoll_create(0x2) r0 = socket(0x1d, 0x3, 0x1) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x82883, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000004f"]) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 16.478696563s ago: executing program 1 (id=2254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0xfffffffffffffe78, &(0x7f0000000080)=[{&(0x7f0000000200)={0x114, 0x17, 0x301, 0x0, 0x25dfdbfb, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="75ae89b29c2f3f8223c8e01770fdb6a5191e0c02f3f13d44f435d170f667074db0ada56ca8edaabe190cc3797e73b95b90923f585b5c1f66b29d9e32a335fa44ef62a5416cd043404fb693447de85400cdcc6db8071b4b36934d2e94340087b6c398003237a61eec3f56d046e45add06ca2703050b54fe589aee23cf8ead5555fbf60c1750decd341eb215b503507a", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x40, 0x0}}]}]}, 0x114}], 0x1}, 0x840) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4) r7 = getgid() r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/key-users\x00', 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000003b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(r1, &(0x7f0000001340)='./file0\x00', 0x2000, 0x10, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001480)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000014c0)=0x1c, 0x0) r13 = fcntl$getown(r0, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001500)={0x80000001, 0x68, {}, {0x0}, 0x8, 0x5}) r15 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgid(r16) sendmsg$netlink(r1, &(0x7f0000001640)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc, &(0x7f00000012c0)=[{&(0x7f00000003c0)={0x2a4, 0x20, 0x100, 0x70bd29, 0x25dfdbff, "", [@generic="064ff9094ed8132b6a0534f7fe9b3b8dc7f459855b0a61df8688433cbe1cb041d66c16d5195333f72c650ed308b71136c518aef2ba159c5b952e07a3af0843cbd3cd1e494ee86b585d6dd84caa6081c5d9c88f8cb66b57fa333736c902048daab8af412aff5e3f0140522f674fd7e264f17d752b05d315713c8adec7920ca0fd8dbffd125354156a1db2da8d8a9aec59b76fabae", @nested={0x119, 0x139, 0x0, 0x1, [@generic="0637dcdfc5f086debe15c62b6bc38eb164321735a3de4a9aa83c3aa5a815470dd24972e3501c5e6e2ad175ca204b36d938d61dbaf6331dbe965de70f3cb36b9e8c9039ff64b1f7afff2e127b59556d310f4f10d2791e0edf21e3171c804de047b468965f79e9ee3f29cf36f29437eda5c6e59d337e5cc9eaa90fc6d5c739806a29c9ccde8eb8add14dc78d63a21fc9e2c66ed29525c3aafbf5b979a4ad4ef6d2b85c321457a7afb112db18d7c2c3229bef5246a75055c7e656770fed1d86814fd63f472d1755163f7a9c", @generic="4755055ff9855e6c560f2b3e11007f70fc86174c79ea5c514a4aa3f66e83e9133ed3197a87f7311f16afc7f0884731a77784b13a656e3a71e5ba0c849e6a38eb25e3f1f4df3eeb912e1d6a"]}, @generic="55b3ccb81a3de689ca34523e0a3f79fb3acd81", @typed={0x4, 0x7e}, @generic="683be5e7c09ca0d14de7378a4dbe03629167c3316892ae35ef9348ab629e6c8821c99e8afa698c964399ba1e6a382cc681be4094bee32edadee35b390180ae3a9f1e4babb5c048ae7798feb9100e4fae2d58063a13d2a1a12c698d7898c6618133a2b0e63847c24ec3559c11c6b5665138c7e905034a861dba4d2256ca7294f8a01fba7bc0cc1b4e75ab28ab4e76a95b9b518ff6db9e82b65a92638d1ec11c3512d9916383753a121ab891a6c29ec63e3300f9addf79ab9a1d8b2ddf11a137c3d6df9d77741ca03c33a7b26d50"]}, 0x2a4}, {&(0x7f0000000680)={0x18c, 0x3b, 0x410, 0x70bd25, 0x25dfdbfc, "", [@generic="1ad116e07788faca934952ad88db31112fca99", @nested={0x165, 0x121, 0x0, 0x1, [@typed={0x14, 0x143, 0x0, 0x0, @ipv6=@empty}, @generic="0f27a875615a57d65cc7d083bec5a7e824a3a5c63bebaf022b3c829faad1da9e03e8b5a3a5ff2f92123a56cbf4955269694c1d2fbdb44b6a589d9e88ae9109fdea1200b31c86bffba9", @typed={0x4, 0x34}, @generic="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", @nested={0x4, 0x3a}]}]}, 0x18c}, {&(0x7f0000000a80)={0x66c, 0x1d, 0x8, 0x70bd27, 0x25dfdbfd, "", [@typed={0x97, 0x13, 0x0, 0x0, @binary="7aa7754af3d16763917b1ed58322c6f20953d8cc3cdfcc32c03d91aaf3e50f0f11953619c210f9949e25a2f53179180a5b52fc7dab658328da832a0b472d4ae84c6579d4ddb7729f910faf78aff8c09b532d4bbccc31907f134cbd1716a557e02230c56654c7c658a163e0dd79f009ec0013e06172e1e4708d59b724a26503e491955f169eb56912d2f566f4e64ee23ecae4a2"}, @generic="14fb14c63092b4c6e62d6fe499407cd2e4516b8be7d5f34df7270d9e727fe3e5feefadb8bea0fc7c3e8694ec1f3b428648bbd399380ea94b9f3a8ee86a9aeefce4dc5c5fce182b5a23278e4a3725ec70968e4a587116acf7d0fd9bc0e775bf8da4e0347d61ded507c58d4f9355eed5ffd73d4e30101de81939a31ef20944bb10523ae42faefc3136acd032475adb7ce37215d6d70da21f5e96a532ab1a4225b319a8095e0d5a3c4740fb12f4ebdbbd51e5c0f235ad3e64e6fe92e9b90da63cd72e4c0ef0deac776259b5c437c72ae40bbaf61c096b6ac9c0", @nested={0x9f, 0x119, 0x0, 0x1, [@generic="a80ea0333d2f489d89ff6bd9a3bd0162b8301e05d048b0fa532b6de75ec63024a268e87ee2c4130dc4cbc5744c10b2f5d189c7969a1b99bd71665b06e43b", @typed={0xc, 0x72, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x151, 0x0, 0x0, @uid}, @typed={0x14, 0xe3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="6ee6227f2a8ec8a67d990ab7e63e9bccf5ca455eb6ab9385df46c349cde77900654d4b5b3c", @typed={0x8, 0x12c, 0x0, 0x0, @uid}, @nested={0x4, 0x135}, @nested={0x4, 0xcb}]}, @generic="f604cf30b6d0b5cb3b26f2a303f9eb219c65ea02197a7b5ff68b435161dbe45622cbf9b8c018fc863aacf4030c27465ccdc8499002196b6a4a1c8db2c6cbfef70e3edf1d62033cab2d80e03e554ad8c10a28c99b2869e9c75f82ed8538befc69c519ba934132414a46c08ea91063b4a1e614517766e0730525cae9bd483226fb7c00a4bd7ae3d02f9b2dcb76d8a52d718e601c2a66f645040eb0f2907bf98a41066c7c4bc57573650d301e9c0eac8b7c89b870a4df9849", @generic="4ad5e6d60b270196e305f6224c0487d943a7cf123d648aa46d314e4a76957d2704bddd74692dfb743a425f8bfe148983de1d52359f387db2c84e974b679aeb8ec90867f058803b0434df78e85af1af7a3b8e00dc818af2db337d2de806629b6d6e4c7f80dd5d37723df7a539d9120529365d94868ffeff2b2a0613fc603d814ca1dfdec9782b1cbffdf6ce67ff69fc34d59b5803a22d431d2fbec9da669560f1b7a769395693b726313505f2295a48a0e935cb693ed33103c1c93375707092e4498e15e90771a249cd82966cb0bbb51f1e152b2f90ed2ca1a20c", @nested={0x1d8, 0x7f, 0x0, 0x1, [@generic="8431a6f2fc90609ecb2258eb81dec582a9a4c18cfbdcd182d55c11c255db7b2b9b1b6c86", @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="8478afb06c2cb7a3746281753929691d6064bc68cd712093b311a7c3d0cfa9ef63f1641a8c16adf8a2395d8d46371bca08ecade0de35a64cecaf5fce808ac9995610529a9f3e9f1c2125f64516ed073f09bb1cfee8c4c0303b05ac7028230d49ebe4a166e75b9e7334c5bc3887c62f2eec1bfe3786735ab181f0f60c91bb9931124de68e7fa6a2bc5395bba1545af2f9a1284bb0815220e58bf24a11b0bf609f2abb81e130fbaa1c86e755b55b46d43aebd9cf9b01d6fbd843d1", @generic="269f2c0cbe0510e2a5f31523e847e2140efc65ed205a0fdbc3efe38c515a17e8eba3de3d3ce6f4cd45", @generic="7f6c7476f6c2907d12824cf95483c86817", @nested={0x4, 0xbe}, @typed={0xa1, 0x136, 0x0, 0x0, @binary="33e9d7afdfa6f5713a689504dd7aff7b30d599ab2a32db337f51b2501f534f4c58626008d0fc63c0678743772034996d39b2ae0ee2d02ce2bd8090947f710be4156d07885f9d1134bcc720de036bae43e97c7a4b1ba8fcfc4d430e5858e20f61a1bf11397bedce81472c3d3c2cad9108013463cb94e6927823d4ed10f0d28d1cad7464907bce94e141102a9f143c7fb292643699cd84899457491ce987"}, @nested={0x4, 0xdb}, @typed={0x8, 0xfe, 0x0, 0x0, @pid}]}, @generic="777806e5cdca518038a8c6229723254d39360b90ccc11dc356bb1ca6a006705c643dd807da9f94567ce8990b5dffa9eefcb50aa2e77e422f2d3c140abb96d4a43171b26127b4ffb74368c1b81b7da2dc365610068aeef05f58c5fdd97a5b37250facb655adc313752fcb78f37dcc8e205a613fc040ada10c20b153aae2371a23ed333309123c91ab17949f9ae6b738ccc9c9d73029a1533d94186149e137b3e91a1d900155b61c28b2b95005b0755307037c7ae9669aca72e4add30a2011ab721c39c410834cde705c56b50485b62b1a0c34fe623621e42a2987f29b205297b6"]}, 0x66c}, {&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="410870d58870fac56a280d24d5a769b3f40ae4c10e33ba5dba0c2231c4413af275716d72e5c2c4020924c00a143c96e629036c88b929ba044dae5346dc1155397032f929c9f7e45484a9c0f0d7271665cc3aae9f619e91c726b78f3e4f4f86fb504831eb367a3c99bbe2defb2709c028a49f858193620d2db1a336c591569812a522af8fb47834e01bfa10d61adf842b632e8cbf4fe2e7bdf7f88add4c29cf1ac8db02749e57894d1901a80fbf58c314456a9321d0afbed379279df26169d68c429c86ea340da477e622463a422d000000"], 0x1a4}], 0x4, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r8, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x18, 0x1, 0x1, [r12, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r16}}}], 0xf0, 0x11}, 0x8010) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r17 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r17, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x0, 0x0, 0x32314152, 0x0, 0xfffffffd, 0x0, 0x0, 0x7}}) fanotify_init(0x8, 0x400) 16.114927599s ago: executing program 1 (id=2255): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) (fail_nth: 2) 16.036211623s ago: executing program 2 (id=2256): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x6, 0xfffb, 0xbfff, 0x1c, "ec28a144f13d7607"}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYBLOB="44daefdfc07b788b6e7f626ef975425f6a45445bb793d3b699be04d9452a558048171fcff97d5b43c81b3b186db5848a"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r2 = syz_open_pts(r0, 0x20800) dup3(r0, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast1}, {0x1, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "6b27f3be82b382c4269a9598e5be2a2129eca8e913620490", "f399a5b101e20c84f5335e76ca45330a2f5842d64c39f77c80d1143a6d906c8d"}}}}}}}, 0x6e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) 15.62799879s ago: executing program 32 (id=2256): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x6, 0xfffb, 0xbfff, 0x1c, "ec28a144f13d7607"}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYBLOB="44daefdfc07b788b6e7f626ef975425f6a45445bb793d3b699be04d9452a558048171fcff97d5b43c81b3b186db5848a"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r2 = syz_open_pts(r0, 0x20800) dup3(r0, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast1}, {0x1, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "6b27f3be82b382c4269a9598e5be2a2129eca8e913620490", "f399a5b101e20c84f5335e76ca45330a2f5842d64c39f77c80d1143a6d906c8d"}}}}}}}, 0x6e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) 15.618881983s ago: executing program 1 (id=2258): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000580)=""/246, &(0x7f0000000340)=""/113, &(0x7f0000000680)=""/217, 0x80a0000}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) mlockall(0x7) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000400)='ns\x00') setuid(0xee00) readlinkat(r5, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 14.366893086s ago: executing program 1 (id=2263): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_0\x00', 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfff0, 0x1, 0x9, 0x1}, {0x5, 0xf9, 0x7, 0xbd4}, {0xfffb, 0x7, 0x0, 0x4}]}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001340)={@mcast1, 0x0}, &(0x7f0000001380)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001400)={'syztnl1\x00', &(0x7f00000013c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x6, 0x6, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x64, 0x0, 0xbe, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@rr={0x7, 0x7, 0x71, [@local]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="9b20f2fd1dbe8c9be7212c0a36c862a7cb3dc79e5f41727e028e74ee47b9787ca65f06d7cd6bd91e55b8f4b3885c9c9ece4d59e0d0d46317342d2e0338efa00c6c61f094e69fc9ae867805ae054afc590af677a45c3c795bef12b4746a37", 0x5e}, {&(0x7f0000001140)="abd8c944f0f6011dfba49fee7616ef9b1c6f7e588792487a22cc0241bbe9272570a1348c25ca6b7ebd960d054e623305972a7324742f184fce8941456b0d18b3f5de33fb766685dec205f78bfa7f3325f9c38db803c2ba11f0c83b1c1ae994116cb00be404e24e9da68180c764d71c687b3771e965ea8855bc9ef1bd283b3125e4cc6a97aa536a12a2168cd44c24c216f00c9c4b", 0x94}, {&(0x7f0000001200)="187acd710c9a74403846f0ee0db8e5e5a3819deac59cf49ddda01416600fd09660db796ead3a3f71341328e376122ac548a713f5e2dc386bdb122ceb1751b0777d3ade6a557dc757b09b48d1b73f17cdd1e54154d6b3507620ec0886f6d3e146052022a587d57d8e0e9f9496f6882bb779ea2e720d4a4c125f14a7a8a864d48e4a338fee47bf59115236da2c1e9fd9fa0d5b75cde9a62e6b2a30818c0c28134a19794940a640a0fae053819973ab0f08c048965ca599c9eeec1958c0c4219409013d691f58452a5cc6903ed2c0f4f52dda417f003ccbcb2b7fa33e698afd3c4c0306a8", 0xe3}], 0x4, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010101}}}], 0xf8}}], 0x1, 0x80) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001580)={0x114, 0x1c, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@generic="9ac4e39cb0ba23b105a5dd58956e34c578350f9659523c6f4fa643c0bb26f2f09c21d7ca8e5469bb0a9914ae106f2e0938e48be35448802116dc1c190b5adf7c82bb68ac43aa0c46f80d0ceaa9dff08296e9f1f12c0e9b90b19fba9da5df", @typed={0xa4, 0x103, 0x0, 0x0, @binary="8f885c655011fc43fe7980d7c74169dce8b9592486eecb3313ed6a8e8e8c6772d8d8dc1a670dd7f6d90decb104ef4378958d10662cd7863beba17dcba8dfe8b654e9308915ee8daa294a351618cea4e0a0d893ae5cb15bf4b9b406022d50d55ae3bb5164f1a2049f5103c6c4f9ff6325a93c96113c0dc4a77dceea185088f3699035610d00d387d5a2bb3b0e1cdcbae5c4ae230730a84a85eeee6601a480e848"}]}, 0x114}], 0x1, 0x0, 0x0, 0x8041}, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000001740)="f2a29f833453d9baefb06a0f5db97eff8e6451406aac38c1b3d449cb96da7c2cced7b40d84622d642fd33bb612d4bbb1e5213b75d1309ff669700ab60195a54a781746e81c65629c8461060a29bb2417e1531f1a1c3d7d368021b163237c005774d3c496a1c621399539b68d720f1f25ed6b73db6ec4028a2f5c50b78c1b110238f6e0c7efaaafe21dd90a217c1dc6168920c357c5a011892e5c94c259b1b4f4d880c78a9cd8ead95f484bdbdfc6d90a259d8da423e49a9c283551860a576d6291277f68f218fd25ad72f997e570fbe73eaad6840de53e3399a14ffc7e8879c6566d2feb", 0xe4, 0x4800, &(0x7f0000001840)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, 0x1c) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001880)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x5e, r1, 0xee01}, {0xffffffffffffff04, 0x0, 0x5, 0x9, 0x5, 0x7, 0xef, 0x20}, {0x7, 0x9, 0x8, 0x3f5a}, 0x7e3, 0x6e6bbc, 0x48e7b9f587ede7d8, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d4, 0x32}, 0xa, @in=@loopback, 0x3500, 0x3, 0x2, 0x1, 0x1000, 0xffffffff, 0xd96a}}, 0xe8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000001980)={0x1f, @none}, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x8000, 0x0) r7 = eventfd(0x511) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000001a00)={0x0, r7}) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000001a40)={'vxcan1\x00', {0x2, 0x0, @loopback}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001ac0)={0x0, 0x20, &(0x7f0000001a80)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000001b00)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001b40)={r8, 0xffff}, 0x8) r9 = syz_open_dev$video4linux(&(0x7f0000001b80), 0x6, 0x438200) ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f0000001bc0)={0x3, @raw_data="6b7e6ab1e4da8d5f186edcf6c414f248fcaff51fae4600a953c832f1ddc1302f05fb952042a107530c98f2d3f830e10e00f613ce291f07b9e4dea408254451c1ae3e1b7737ec2e76b7ac5ca52c1400910f5ade302adc59c31c949ebfe8871bd1aca5f74ef22f7941cb8d33f412700ffc68684ddb3d0c463650d27d2fc3e06dbf5cb3dc859aa467bb8ab02f5b1c9b6b867c830c73af420c7fa02b04df7d14fb60be0a37fc258f46ca331da604b3fe8d8ac7f386c3befc72cb0cb3684b61791b13a0066346bf488c7f"}) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x80001) ioctl$RNDADDENTROPY(r10, 0x40085203, &(0x7f0000001d00)={0x3, 0x96, "9ccc35efd7948659163b286ada8d68c96003f3db0f4162b7c13a753a2b9237fa043ac6950c06a05ca6e9c7cbbcf6ca2c333d114a2c557f24f6c8ab08c2fb00e588c0f64dedab687446da728ef2c04a583c501295b3ede2ed75e3e5a07ad6ad19fbc4b07b0dc10ccf8ff71da2afe5ee4d7185a4b1a8a2ca5d68f9f58386198d832cdf40aa166587af4e09eccfa8be92e1385fc138e63a"}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000001dc0)={0x0, 0x83, "2783c1578709675dc21c7e7372613e4016d4c8a6bbcc85ec30fe03bfa50be697fbb55fd83f8e0a0e4b51c10ae86d6e0d2bd6be25b580638d1930d68bd2f4f88aa9d72436e5b9b4fe79cf4611bf8886ad463a2dcb1076402b906c755a4ca8279fbaeba0fddf7c54efa37454df39e244195f9f2da386d67d8ce1a57def2492b2cc974f66"}, &(0x7f0000001e80)=0x8b) sendto$inet6(r0, &(0x7f0000001ec0)="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", 0x1000, 0x1, &(0x7f0000002ec0)={0xa, 0x4e20, 0x9, @empty, 0xff}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000002f00)) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000002f40)=0x0) fcntl$setown(r6, 0x8, r11) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000002f80)={'gre0\x00', 0x1}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r10, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x23}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 14.036278983s ago: executing program 33 (id=2263): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_0\x00', 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfff0, 0x1, 0x9, 0x1}, {0x5, 0xf9, 0x7, 0xbd4}, {0xfffb, 0x7, 0x0, 0x4}]}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001340)={@mcast1, 0x0}, &(0x7f0000001380)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001400)={'syztnl1\x00', &(0x7f00000013c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x6, 0x6, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x64, 0x0, 0xbe, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@rr={0x7, 0x7, 0x71, [@local]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="9b20f2fd1dbe8c9be7212c0a36c862a7cb3dc79e5f41727e028e74ee47b9787ca65f06d7cd6bd91e55b8f4b3885c9c9ece4d59e0d0d46317342d2e0338efa00c6c61f094e69fc9ae867805ae054afc590af677a45c3c795bef12b4746a37", 0x5e}, {&(0x7f0000001140)="abd8c944f0f6011dfba49fee7616ef9b1c6f7e588792487a22cc0241bbe9272570a1348c25ca6b7ebd960d054e623305972a7324742f184fce8941456b0d18b3f5de33fb766685dec205f78bfa7f3325f9c38db803c2ba11f0c83b1c1ae994116cb00be404e24e9da68180c764d71c687b3771e965ea8855bc9ef1bd283b3125e4cc6a97aa536a12a2168cd44c24c216f00c9c4b", 0x94}, {&(0x7f0000001200)="187acd710c9a74403846f0ee0db8e5e5a3819deac59cf49ddda01416600fd09660db796ead3a3f71341328e376122ac548a713f5e2dc386bdb122ceb1751b0777d3ade6a557dc757b09b48d1b73f17cdd1e54154d6b3507620ec0886f6d3e146052022a587d57d8e0e9f9496f6882bb779ea2e720d4a4c125f14a7a8a864d48e4a338fee47bf59115236da2c1e9fd9fa0d5b75cde9a62e6b2a30818c0c28134a19794940a640a0fae053819973ab0f08c048965ca599c9eeec1958c0c4219409013d691f58452a5cc6903ed2c0f4f52dda417f003ccbcb2b7fa33e698afd3c4c0306a8", 0xe3}], 0x4, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010101}}}], 0xf8}}], 0x1, 0x80) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001580)={0x114, 0x1c, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@generic="9ac4e39cb0ba23b105a5dd58956e34c578350f9659523c6f4fa643c0bb26f2f09c21d7ca8e5469bb0a9914ae106f2e0938e48be35448802116dc1c190b5adf7c82bb68ac43aa0c46f80d0ceaa9dff08296e9f1f12c0e9b90b19fba9da5df", @typed={0xa4, 0x103, 0x0, 0x0, @binary="8f885c655011fc43fe7980d7c74169dce8b9592486eecb3313ed6a8e8e8c6772d8d8dc1a670dd7f6d90decb104ef4378958d10662cd7863beba17dcba8dfe8b654e9308915ee8daa294a351618cea4e0a0d893ae5cb15bf4b9b406022d50d55ae3bb5164f1a2049f5103c6c4f9ff6325a93c96113c0dc4a77dceea185088f3699035610d00d387d5a2bb3b0e1cdcbae5c4ae230730a84a85eeee6601a480e848"}]}, 0x114}], 0x1, 0x0, 0x0, 0x8041}, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000001740)="f2a29f833453d9baefb06a0f5db97eff8e6451406aac38c1b3d449cb96da7c2cced7b40d84622d642fd33bb612d4bbb1e5213b75d1309ff669700ab60195a54a781746e81c65629c8461060a29bb2417e1531f1a1c3d7d368021b163237c005774d3c496a1c621399539b68d720f1f25ed6b73db6ec4028a2f5c50b78c1b110238f6e0c7efaaafe21dd90a217c1dc6168920c357c5a011892e5c94c259b1b4f4d880c78a9cd8ead95f484bdbdfc6d90a259d8da423e49a9c283551860a576d6291277f68f218fd25ad72f997e570fbe73eaad6840de53e3399a14ffc7e8879c6566d2feb", 0xe4, 0x4800, &(0x7f0000001840)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, 0x1c) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001880)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x5e, r1, 0xee01}, {0xffffffffffffff04, 0x0, 0x5, 0x9, 0x5, 0x7, 0xef, 0x20}, {0x7, 0x9, 0x8, 0x3f5a}, 0x7e3, 0x6e6bbc, 0x48e7b9f587ede7d8, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d4, 0x32}, 0xa, @in=@loopback, 0x3500, 0x3, 0x2, 0x1, 0x1000, 0xffffffff, 0xd96a}}, 0xe8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000001980)={0x1f, @none}, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x8000, 0x0) r7 = eventfd(0x511) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000001a00)={0x0, r7}) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000001a40)={'vxcan1\x00', {0x2, 0x0, @loopback}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001ac0)={0x0, 0x20, &(0x7f0000001a80)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000001b00)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001b40)={r8, 0xffff}, 0x8) r9 = syz_open_dev$video4linux(&(0x7f0000001b80), 0x6, 0x438200) ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f0000001bc0)={0x3, @raw_data="6b7e6ab1e4da8d5f186edcf6c414f248fcaff51fae4600a953c832f1ddc1302f05fb952042a107530c98f2d3f830e10e00f613ce291f07b9e4dea408254451c1ae3e1b7737ec2e76b7ac5ca52c1400910f5ade302adc59c31c949ebfe8871bd1aca5f74ef22f7941cb8d33f412700ffc68684ddb3d0c463650d27d2fc3e06dbf5cb3dc859aa467bb8ab02f5b1c9b6b867c830c73af420c7fa02b04df7d14fb60be0a37fc258f46ca331da604b3fe8d8ac7f386c3befc72cb0cb3684b61791b13a0066346bf488c7f"}) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x80001) ioctl$RNDADDENTROPY(r10, 0x40085203, &(0x7f0000001d00)={0x3, 0x96, "9ccc35efd7948659163b286ada8d68c96003f3db0f4162b7c13a753a2b9237fa043ac6950c06a05ca6e9c7cbbcf6ca2c333d114a2c557f24f6c8ab08c2fb00e588c0f64dedab687446da728ef2c04a583c501295b3ede2ed75e3e5a07ad6ad19fbc4b07b0dc10ccf8ff71da2afe5ee4d7185a4b1a8a2ca5d68f9f58386198d832cdf40aa166587af4e09eccfa8be92e1385fc138e63a"}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000001dc0)={0x0, 0x83, "2783c1578709675dc21c7e7372613e4016d4c8a6bbcc85ec30fe03bfa50be697fbb55fd83f8e0a0e4b51c10ae86d6e0d2bd6be25b580638d1930d68bd2f4f88aa9d72436e5b9b4fe79cf4611bf8886ad463a2dcb1076402b906c755a4ca8279fbaeba0fddf7c54efa37454df39e244195f9f2da386d67d8ce1a57def2492b2cc974f66"}, &(0x7f0000001e80)=0x8b) sendto$inet6(r0, &(0x7f0000001ec0)="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", 0x1000, 0x1, &(0x7f0000002ec0)={0xa, 0x4e20, 0x9, @empty, 0xff}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000002f00)) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000002f40)=0x0) fcntl$setown(r6, 0x8, r11) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000002f80)={'gre0\x00', 0x1}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r10, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x23}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 4.695180919s ago: executing program 4 (id=2257): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 4.028618869s ago: executing program 3 (id=2286): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x0, {0x7ffd, 0x1000, 0x3, 0x6}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, r3, 0x711, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8894) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r4, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x20, 0x17, {0x18, 0x9, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 3.911514119s ago: executing program 0 (id=2287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf250c00000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48844) 3.857940002s ago: executing program 3 (id=2288): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004840) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.718633069s ago: executing program 0 (id=2289): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001114010000000000000020000800010000000000080003"], 0x30}}, 0x0) 3.411350587s ago: executing program 0 (id=2290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xb4}]}]}, 0x58}}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) listen(r4, 0x8ba) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf250c00000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48844) 3.39473586s ago: executing program 3 (id=2291): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44fc2, 0x20) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket(0x1d, 0x2, 0x6) epoll_create(0x2) r0 = socket(0x1d, 0x3, 0x1) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x82883, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000004f"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 3.3665689s ago: executing program 0 (id=2292): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x58}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="32231248b5a5effe4917d83d5c8ec2d74f40d75b6be94e4fd9b2f5c0afce17201ea9c2906b8f3f84fc6c11b075039c6797d6805ca11787e575b8f32c8b51c6957c6d88d781f3b9bb171ca2ab727696e25b3f1a451677a9d336d52e5b5d0835316ef6a4c1e6598496aaea38da7b55e7feb3b62e5dc754c9df33e0dc390a0ae65ccceac22e6606963951617222b5dd618800ccd9cf90bfccda784c542a5e1a0e3635ff57598cd3787a864b9e83a0", @ANYBLOB="6debd9c40a4a2f162cc748a48a75250d015b9d3981df3b1ff99b6ad76a11f6e03940a52dffeadd25238bb360c8136cffb45236ca0a2650cb1d2da93df81589bd076d597932b5958fed5ab205a66237f2116d6195289e7fb78a7a35a90dcf8ba9742780e9628752d90e2dc2f67f79566a1816eece03e02494318d684abad0387e150379c629f90c399cb10b04d55f442ff880cce177c53e6eb0c181bfd86760c4bb5aa4b23822c0ba1f39279b439b0ea1028a1b1e93f6f92c8f5cd260fb", @ANYRES32=0x0, @ANYRES8, @ANYRES8], 0x0) 3.246468375s ago: executing program 3 (id=2294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0x340a) 3.067120921s ago: executing program 3 (id=2295): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000aad8cdbee256bdd4f0491600330600000000000000807f00000100000000", @ANYBLOB], 0xfc}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xf0960, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f7403b064653d30303030303030303030303830303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_fuse_handle_req(r5, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x100) close(0x5) close(0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="540304"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f00000002c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x200000000000009) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x100, 0xfffffff0}, &(0x7f00000001c0)=0x4, &(0x7f0000000200)=0x1, 0x3, 0x200, 0x0, 0x100000000, 0x22, 0x1ff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x3}, &(0x7f0000000240)=0x7f, &(0x7f0000000280)=0x3, 0x8, 0x9, 0x1, 0x7, 0x48, 0x3ff}}], 0xf8}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="c4263804c5be7908b6c0f265caaacb652918114f5854a38294b43aabe21b3ee0ccd6eb60efa1fa01c10fd96bdf4fe8ae04c7fdd454c24444275d53fbf8131d5d50e14ca66b12c7d11455433fcb7c5b8d0ef93b70d51085c8bed632d4cf67f89e3a9c525cb7535173fc7ec86a6ca2d34b54892886213ea33d431b76a5ef48d33b08beafdb029e8603bbb40b677fe0a63c0ec3caf7ef98c9a3529c5ce1b57a000000000000a68ab845f4313b2b61e152724fec5b30c7243e88290f40ce6d4d251642825cde557eefab558200b45cc51d2840ca277d4ff12506fcbc127e54"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.764734999s ago: executing program 4 (id=2296): openat$kvm(0xffffff9c, &(0x7f0000000840), 0x400000, 0x0) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79b2, 0x3180, 0x3, 0x40024f}, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="010000000206000003"], 0x48}}, 0x4000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0x81, 0x7, 0xc0, 0x1, 0xfd, 0x16, 0xc, 0x4, 0x9}, {0x8, 0xaff3, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x4, 0x53, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x10, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x1, 0x3, 0x40000000000002}], 0x9}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000002c0)="e4", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x7, @private1, 0x96b3}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="fcc791e24e55c6bdbbcfd43ec7b9a53e1245fcc4bb3f1377b8c8aabf", 0x1c}, {&(0x7f0000000480)="1deae244d43e3b8f2874b6f4d10539e509ebe125d996c2c78136b2aeee3754165ed00ad405ed984c9ea857516b3ad4be5e8286efa9ecf0627ed0ae16dacabfb954bda3675c034446359a1a58f057966eb95a00046c7598534a62c6fdafc89bc2d39dd8833f7eb369e03adacefaeca63fea70fb2d5c11c6d429195f2533953f2196da055a427414194dcafdd8c6ff2a8da5d74745d0859c85cc271866bad23f5d7c0e555dccbdf6fc5ee65f89fcf2618da7264c2af43fa7ca36274c7a3a3950b7848317a74964c24f60c777cd5a6ebec905dc5ffe42237abd23", 0xd9}, {&(0x7f0000000580)="56b080a03be29f6311de7ce3cbeb20381abad2e4e979a374488522ae8d309bd6f1784057645790b470182f99bfdf914dc8a70e4857ddedaad6cb082f7398aa59bb2c0f3b2ad04caaee8d83be2585ef02d717150fcef8e6492083c57e80d486d6bb3ebd856fb6819461e9eda56b8b4d3dc8f9caaf7c46e165531a5ec6e99be873eb6db5f5a1d7e020937e41405af53c066b9b908023ba309bd0790432b28148a8b80b05496e5baf740b33ab899a4d31384cb3", 0xb2}], 0x3, &(0x7f0000000380)}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x5, @private0}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000640)="6b478769e8fbf77bc68228d9aff4be787184058ee64661fe0afe2603", 0x1c}, {&(0x7f0000000680)="fe9f4cfd21a112105efc60e870faa5fd2197418c57b002ac1e69e8c918aac0f2a1deb734f2d02e8181a75cbf4da84e04b816e3c4027e934eb698fdce3fb67e80e8c46ab723478eedbbbdad702c2d4cd7844fbbd6f10c63880c7db46e5b726e5d26f791cc1cc478c9f9386504ea39320c", 0x70}, {&(0x7f0000000700)="977649833a50a9c49d75e4fb98b5b34550a0fd655d33350db68ad3e79a5f8bb5a48eaa873ba08fba792553bfe182fcb9b75546c3770da32b3ebfb2ee502d8e368868c5a3da0ad2b4e28dca63cbf54a5861fc962a5a48640b020b6dccddb7c57e75d2524e7690d209aaa1a2b57745a390f1c5ba139a9a72bc64a0125dcd89a0aac63bd2c835d24ac16ecf199a64b9a5ce95cc63105fc0233e94652418c97559e1c1113aeedc0d36c26012fda07d446667c629dc7c29c48423bb097527ce47ffab752aef2e14e00aa34e", 0xc9}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x230}}], 0x2, 0x40488d5) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x1}) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x8001, 0x20, 0x10000000000000}, &(0x7f0000000340)=0x18) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10004, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0x0, 0x0, 0x1, 0x8, 0x800000001], 0x0, 0x2011c0}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000280)=0x14) pselect6(0x12, &(0x7f0000000080)={0x1000000000000e, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.002744734s ago: executing program 5 (id=2300): memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, {}, 0x5, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, 0x0, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb4, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10}]}, 0xb4}}, 0x4001) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x17, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) 1.868039551s ago: executing program 5 (id=2301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0xfffffffffffffe78, &(0x7f0000000080)=[{&(0x7f0000000200)={0x114, 0x17, 0x301, 0x0, 0x25dfdbfb, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="75ae89b29c2f3f8223c8e01770fdb6a5191e0c02f3f13d44f435d170f667074db0ada56ca8edaabe190cc3797e73b95b90923f585b5c1f66b29d9e32a335fa44ef62a5416cd043404fb693447de85400cdcc6db8071b4b36934d2e94340087b6c398003237a61eec3f56d046e45add06ca2703050b54fe589aee23cf8ead5555fbf60c1750decd341eb215b503507a", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x40, 0x0}}]}]}, 0x114}], 0x1}, 0x840) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4) r7 = getgid() r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/key-users\x00', 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000003b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(r1, &(0x7f0000001340)='./file0\x00', 0x2000, 0x10, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001480)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000014c0)=0x1c, 0x0) r13 = fcntl$getown(r0, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001500)={0x80000001, 0x68, {}, {0x0}, 0x8, 0x5}) r15 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgid(r16) sendmsg$netlink(r1, &(0x7f0000001640)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc, &(0x7f00000012c0)=[{&(0x7f00000003c0)={0x2a4, 0x20, 0x100, 0x70bd29, 0x25dfdbff, "", [@generic="064ff9094ed8132b6a0534f7fe9b3b8dc7f459855b0a61df8688433cbe1cb041d66c16d5195333f72c650ed308b71136c518aef2ba159c5b952e07a3af0843cbd3cd1e494ee86b585d6dd84caa6081c5d9c88f8cb66b57fa333736c902048daab8af412aff5e3f0140522f674fd7e264f17d752b05d315713c8adec7920ca0fd8dbffd125354156a1db2da8d8a9aec59b76fabae", @nested={0x119, 0x139, 0x0, 0x1, [@generic="0637dcdfc5f086debe15c62b6bc38eb164321735a3de4a9aa83c3aa5a815470dd24972e3501c5e6e2ad175ca204b36d938d61dbaf6331dbe965de70f3cb36b9e8c9039ff64b1f7afff2e127b59556d310f4f10d2791e0edf21e3171c804de047b468965f79e9ee3f29cf36f29437eda5c6e59d337e5cc9eaa90fc6d5c739806a29c9ccde8eb8add14dc78d63a21fc9e2c66ed29525c3aafbf5b979a4ad4ef6d2b85c321457a7afb112db18d7c2c3229bef5246a75055c7e656770fed1d86814fd63f472d1755163f7a9c", @generic="4755055ff9855e6c560f2b3e11007f70fc86174c79ea5c514a4aa3f66e83e9133ed3197a87f7311f16afc7f0884731a77784b13a656e3a71e5ba0c849e6a38eb25e3f1f4df3eeb912e1d6a"]}, @generic="55b3ccb81a3de689ca34523e0a3f79fb3acd81", @typed={0x4, 0x7e}, @generic="683be5e7c09ca0d14de7378a4dbe03629167c3316892ae35ef9348ab629e6c8821c99e8afa698c964399ba1e6a382cc681be4094bee32edadee35b390180ae3a9f1e4babb5c048ae7798feb9100e4fae2d58063a13d2a1a12c698d7898c6618133a2b0e63847c24ec3559c11c6b5665138c7e905034a861dba4d2256ca7294f8a01fba7bc0cc1b4e75ab28ab4e76a95b9b518ff6db9e82b65a92638d1ec11c3512d9916383753a121ab891a6c29ec63e3300f9addf79ab9a1d8b2ddf11a137c3d6df9d77741ca03c33a7b26d50"]}, 0x2a4}, {&(0x7f0000000680)={0x18c, 0x3b, 0x410, 0x70bd25, 0x25dfdbfc, "", [@generic="1ad116e07788faca934952ad88db31112fca99", @nested={0x165, 0x121, 0x0, 0x1, [@typed={0x14, 0x143, 0x0, 0x0, @ipv6=@empty}, @generic="0f27a875615a57d65cc7d083bec5a7e824a3a5c63bebaf022b3c829faad1da9e03e8b5a3a5ff2f92123a56cbf4955269694c1d2fbdb44b6a589d9e88ae9109fdea1200b31c86bffba9", @typed={0x4, 0x34}, @generic="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", @nested={0x4, 0x3a}]}]}, 0x18c}, {&(0x7f0000000a80)={0x66c, 0x1d, 0x8, 0x70bd27, 0x25dfdbfd, "", [@typed={0x97, 0x13, 0x0, 0x0, @binary="7aa7754af3d16763917b1ed58322c6f20953d8cc3cdfcc32c03d91aaf3e50f0f11953619c210f9949e25a2f53179180a5b52fc7dab658328da832a0b472d4ae84c6579d4ddb7729f910faf78aff8c09b532d4bbccc31907f134cbd1716a557e02230c56654c7c658a163e0dd79f009ec0013e06172e1e4708d59b724a26503e491955f169eb56912d2f566f4e64ee23ecae4a2"}, @generic="14fb14c63092b4c6e62d6fe499407cd2e4516b8be7d5f34df7270d9e727fe3e5feefadb8bea0fc7c3e8694ec1f3b428648bbd399380ea94b9f3a8ee86a9aeefce4dc5c5fce182b5a23278e4a3725ec70968e4a587116acf7d0fd9bc0e775bf8da4e0347d61ded507c58d4f9355eed5ffd73d4e30101de81939a31ef20944bb10523ae42faefc3136acd032475adb7ce37215d6d70da21f5e96a532ab1a4225b319a8095e0d5a3c4740fb12f4ebdbbd51e5c0f235ad3e64e6fe92e9b90da63cd72e4c0ef0deac776259b5c437c72ae40bbaf61c096b6ac9c0", @nested={0x9f, 0x119, 0x0, 0x1, [@generic="a80ea0333d2f489d89ff6bd9a3bd0162b8301e05d048b0fa532b6de75ec63024a268e87ee2c4130dc4cbc5744c10b2f5d189c7969a1b99bd71665b06e43b", @typed={0xc, 0x72, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x151, 0x0, 0x0, @uid}, @typed={0x14, 0xe3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="6ee6227f2a8ec8a67d990ab7e63e9bccf5ca455eb6ab9385df46c349cde77900654d4b5b3c", @typed={0x8, 0x12c, 0x0, 0x0, @uid}, @nested={0x4, 0x135}, @nested={0x4, 0xcb}]}, @generic="f604cf30b6d0b5cb3b26f2a303f9eb219c65ea02197a7b5ff68b435161dbe45622cbf9b8c018fc863aacf4030c27465ccdc8499002196b6a4a1c8db2c6cbfef70e3edf1d62033cab2d80e03e554ad8c10a28c99b2869e9c75f82ed8538befc69c519ba934132414a46c08ea91063b4a1e614517766e0730525cae9bd483226fb7c00a4bd7ae3d02f9b2dcb76d8a52d718e601c2a66f645040eb0f2907bf98a41066c7c4bc57573650d301e9c0eac8b7c89b870a4df9849", @generic="4ad5e6d60b270196e305f6224c0487d943a7cf123d648aa46d314e4a76957d2704bddd74692dfb743a425f8bfe148983de1d52359f387db2c84e974b679aeb8ec90867f058803b0434df78e85af1af7a3b8e00dc818af2db337d2de806629b6d6e4c7f80dd5d37723df7a539d9120529365d94868ffeff2b2a0613fc603d814ca1dfdec9782b1cbffdf6ce67ff69fc34d59b5803a22d431d2fbec9da669560f1b7a769395693b726313505f2295a48a0e935cb693ed33103c1c93375707092e4498e15e90771a249cd82966cb0bbb51f1e152b2f90ed2ca1a20c", @nested={0x1d8, 0x7f, 0x0, 0x1, [@generic="8431a6f2fc90609ecb2258eb81dec582a9a4c18cfbdcd182d55c11c255db7b2b9b1b6c86", @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="8478afb06c2cb7a3746281753929691d6064bc68cd712093b311a7c3d0cfa9ef63f1641a8c16adf8a2395d8d46371bca08ecade0de35a64cecaf5fce808ac9995610529a9f3e9f1c2125f64516ed073f09bb1cfee8c4c0303b05ac7028230d49ebe4a166e75b9e7334c5bc3887c62f2eec1bfe3786735ab181f0f60c91bb9931124de68e7fa6a2bc5395bba1545af2f9a1284bb0815220e58bf24a11b0bf609f2abb81e130fbaa1c86e755b55b46d43aebd9cf9b01d6fbd843d1", @generic="269f2c0cbe0510e2a5f31523e847e2140efc65ed205a0fdbc3efe38c515a17e8eba3de3d3ce6f4cd45", @generic="7f6c7476f6c2907d12824cf95483c86817", @nested={0x4, 0xbe}, @typed={0xa1, 0x136, 0x0, 0x0, @binary="33e9d7afdfa6f5713a689504dd7aff7b30d599ab2a32db337f51b2501f534f4c58626008d0fc63c0678743772034996d39b2ae0ee2d02ce2bd8090947f710be4156d07885f9d1134bcc720de036bae43e97c7a4b1ba8fcfc4d430e5858e20f61a1bf11397bedce81472c3d3c2cad9108013463cb94e6927823d4ed10f0d28d1cad7464907bce94e141102a9f143c7fb292643699cd84899457491ce987"}, @nested={0x4, 0xdb}, @typed={0x8, 0xfe, 0x0, 0x0, @pid}]}, @generic="777806e5cdca518038a8c6229723254d39360b90ccc11dc356bb1ca6a006705c643dd807da9f94567ce8990b5dffa9eefcb50aa2e77e422f2d3c140abb96d4a43171b26127b4ffb74368c1b81b7da2dc365610068aeef05f58c5fdd97a5b37250facb655adc313752fcb78f37dcc8e205a613fc040ada10c20b153aae2371a23ed333309123c91ab17949f9ae6b738ccc9c9d73029a1533d94186149e137b3e91a1d900155b61c28b2b95005b0755307037c7ae9669aca72e4add30a2011ab721c39c410834cde705c56b50485b62b1a0c34fe623621e42a2987f29b205297b6"]}, 0x66c}, {&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="410870d58870fac56a280d24d5a769b3f40ae4c10e33ba5dba0c2231c4413af275716d72e5c2c4020924c00a143c96e629036c88b929ba044dae5346dc1155397032f929c9f7e45484a9c0f0d7271665cc3aae9f619e91c726b78f3e4f4f86fb504831eb367a3c99bbe2defb2709c028a49f858193620d2db1a336c591569812a522af8fb47834e01bfa10d61adf842b632e8cbf4fe2e7bdf7f88add4c29cf1ac8db02749e57894d1901a80fbf58c314456a9321d0afbed379279df26169d68c429c86ea340da477e622463a422d000000"], 0x1a4}], 0x4, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r8, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x18, 0x1, 0x1, [r12, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r16}}}], 0xf0, 0x11}, 0x8010) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r17 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r17, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x0, 0x0, 0x32314152, 0x0, 0xfffffffd, 0x0, 0x0, 0x7}}) fanotify_init(0x8, 0x400) 1.810733808s ago: executing program 4 (id=2302): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44fc2, 0x20) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket(0x1d, 0x2, 0x6) epoll_create(0x2) r0 = socket(0x1d, 0x3, 0x1) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x82883, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000004f"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 1.731925301s ago: executing program 5 (id=2303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0x340a) 1.663197374s ago: executing program 4 (id=2304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x1500, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 1.150021982s ago: executing program 5 (id=2305): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0xfffffffe, 0x18, 0x0, 0x60}}) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x20}, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x106, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000000)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f7, &(0x7f0000000180)={'syztnl2\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000011880), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e80)="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", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001080)="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", 0x147}], 0x1}}], 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r6, 0x7, &(0x7f0000000240)={0x18, 0x6}, &(0x7f00000002c0)) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket(0x27, 0xa, 0x401) 1.004735732s ago: executing program 4 (id=2306): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) preadv(r0, &(0x7f0000001c40)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1, 0x5, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa484289a9181863, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 956.318542ms ago: executing program 4 (id=2307): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000016, 0x1010, r0, 0x944ab000) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xc1, 0x66, 0xa0, 0x10, 0x483, 0x1234, 0xff76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xe4, 0xa8}}]}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x9351e151da4b4ab0}}, 0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x4, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x0, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x6, 0xe1cc, 0x0, 0xe0000000, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x0, 0x20001e56, 0xffffeadb, 0xffffffff, 0x3d, 0x8, 0x4, 0x7ff, 0xdffffffa]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea, 0x0, r4}) tee(r5, r4, 0x5a2, 0x4) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 837.325062ms ago: executing program 5 (id=2308): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2010}, 0x4001) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 577.505762ms ago: executing program 5 (id=2309): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x80001) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x7, 0xb, 0x10001, 0x8, 0x8, 0x9, 0x9, 0x80000001, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r2, 0xd5}, &(0x7f0000000240)=0x8) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6537ce03"}]}}, 0x0}, 0x0) 248.391916ms ago: executing program 0 (id=2310): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) 233.753394ms ago: executing program 0 (id=2311): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102031809025c0002010000000904000001020d00000524060001052484f6f4f587d50000000d240f0100000000000000000006241a000018"], 0x0) (async) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102031809025c0002010000000904000001020d00000524060001052484f6f4f587d50000000d240f0100000000000000000006241a000018"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x23, 0xe4, {0xe4, 0x22, "ede636f6ba02325e9d988b2847abe2fba0b898a99962f48a9704d58fb9b27737c15e87f00e0cfbbf51ac569719af77b12a5d8d542fef8fd0e04a0ed097c25b5c2ec1df73cef67155a8b2a2c9aadc34a4b0a9382c5ff856b1f63e4b3c6724a0652bda0539dffe8218f9a5fcfaa820cb1567a8f7fd25644054ab8e5c5e87a5971bf89f27a60bb9f57231144cb346334e6aba8795cb738a12c3d5c13784c44aeedb19609d94ede005643d3e9dc170ed97df03ab091727d9631236fdd44dd94e6cb6280aa8d2f585abdbadd719018e607213639494664e7ac8ab734540a28bcf8e4fbeb1"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0x1, 0xab, "99d286cb0ed9c5086c6043bea3bae1c9d489f03b0d8a2c1912134384b37a5386faccf3a8987fcc019f101a718b9c21d13adecfae53479df601fd30674c4ca4ab201d3a8038e4b81b3c761822e7119e6fd15c84b6b9f832a23f3abf48ccf63ada32c85352690f88a0c0244567a16236dffc33bfb3375d5b30697092ad41fdfd72eb45c6db5b801a2901da08616a338d457b767aad7161dbbc2f50d07612d94dd0d8a3824464eeed9d6ac325"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x3, 0x8, 0x9, 0x2e36, 0xaf0e, 0x10, 0x1, 0xd, 0x0, 0x8, 0x6, 0x6}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) 0s ago: executing program 3 (id=2312): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44fc2, 0x20) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket(0x1d, 0x2, 0x6) epoll_create(0x2) r0 = socket(0x1d, 0x3, 0x1) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x82883, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000280), 0x80) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) kernel console output (not intermixed with test programs): 7][T12717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.263273][ T44] usb 4-1: USB disconnect, device number 115 [ 554.293016][ T5947] usb 3-1: USB disconnect, device number 17 [ 554.299269][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 554.646394][ T5947] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 554.687111][ T5946] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 554.715477][ T5946] usb 1-1: USB disconnect, device number 113 [ 554.808423][ T5947] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 554.817313][ T5947] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 554.828327][ T5947] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 554.837629][ T5947] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.849408][ T5947] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 554.860872][ T5947] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 554.873717][ T5947] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 554.882866][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 554.891712][ T5947] usb 3-1: Product: syz [ 554.896498][ T5947] usb 3-1: Manufacturer: syz [ 554.906236][T12713] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 554.915690][ T5947] cdc_wdm 3-1:1.0: skipping garbage [ 554.920939][ T5947] cdc_wdm 3-1:1.0: skipping garbage [ 554.938106][ T5947] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 554.944257][ T5947] cdc_wdm 3-1:1.0: Unknown control protocol [ 555.025172][ T93] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 555.086506][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 555.093609][ T10] ath9k_htc: Failed to initialize the device [ 555.101335][ T44] usb 4-1: ath9k_htc: USB layer deinitialized [ 555.120142][ T5947] usb 3-1: USB disconnect, device number 18 [ 555.186964][ T93] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 555.194671][ T93] usb 2-1: can't read configurations, error -61 [ 555.327264][ T93] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 555.405480][ T44] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 555.497677][ T93] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 555.505576][ T93] usb 2-1: can't read configurations, error -61 [ 555.512924][ T93] usb usb2-port1: attempt power cycle [ 555.585599][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 555.593661][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 555.608264][ T44] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=d2.a2 [ 555.618240][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.626518][ T44] usb 4-1: Product: syz [ 555.630798][ T44] usb 4-1: Manufacturer: syz [ 555.635506][ T44] usb 4-1: SerialNumber: syz [ 555.655724][ T44] usb 4-1: config 0 descriptor?? [ 555.666434][ T44] mos7840 4-1:0.0: required endpoints missing [ 555.855101][ T93] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 555.903097][ T93] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 555.914110][ T93] usb 2-1: can't read configurations, error -61 [ 556.075169][ T93] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 556.107282][ T93] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 556.118749][ T93] usb 2-1: can't read configurations, error -61 [ 556.129480][ T93] usb usb2-port1: unable to enumerate USB device [ 556.889702][ T93] usb 4-1: USB disconnect, device number 116 [ 557.035114][ T847] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 557.198350][ T847] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 557.207283][ T847] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 557.218719][ T847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 557.230008][ T847] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.239700][T12746] FAULT_INJECTION: forcing a failure. [ 557.239700][T12746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.242467][ T847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 557.258394][ T93] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 557.268724][ T847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 557.287301][T12746] CPU: 1 UID: 0 PID: 12746 Comm: syz.0.2076 Not tainted syzkaller #0 PREEMPT(full) [ 557.287328][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 557.287340][T12746] Call Trace: [ 557.287358][T12746] [ 557.287368][T12746] dump_stack_lvl+0x189/0x250 [ 557.287401][T12746] ? __pfx____ratelimit+0x10/0x10 [ 557.287431][T12746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.287452][T12746] ? __pfx__printk+0x10/0x10 [ 557.287497][T12746] should_fail_ex+0x414/0x560 [ 557.287528][T12746] _copy_to_user+0x31/0xb0 [ 557.287551][T12746] simple_read_from_buffer+0xe1/0x170 [ 557.287584][T12746] proc_fail_nth_read+0x1b3/0x220 [ 557.287608][T12746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.287632][T12746] ? rw_verify_area+0x2a6/0x4d0 [ 557.287654][T12746] ? __lock_acquire+0xab9/0xd20 [ 557.287674][T12746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.287695][T12746] vfs_read+0x200/0xa30 [ 557.287715][T12746] ? fdget_pos+0x247/0x320 [ 557.287745][T12746] ? __pfx___mutex_lock+0x10/0x10 [ 557.287765][T12746] ? __pfx_vfs_read+0x10/0x10 [ 557.287789][T12746] ? __fget_files+0x2a/0x420 [ 557.287821][T12746] ? __fget_files+0x3a0/0x420 [ 557.287854][T12746] ? __fget_files+0x2a/0x420 [ 557.287886][T12746] ksys_read+0x145/0x250 [ 557.287908][T12746] ? __pfx_ksys_read+0x10/0x10 [ 557.287931][T12746] ? do_syscall_64+0xbe/0xfa0 [ 557.287959][T12746] do_syscall_64+0xfa/0xfa0 [ 557.287985][T12746] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.288016][T12746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.288037][T12746] ? clear_bhb_loop+0x60/0xb0 [ 557.288064][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.288081][T12746] RIP: 0033:0x7fe76e18d5bc [ 557.288099][T12746] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 557.288162][T12746] RSP: 002b:00007fe76f0e5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 557.288184][T12746] RAX: ffffffffffffffda RBX: 00007fe76e3d5fa0 RCX: 00007fe76e18d5bc [ 557.288198][T12746] RDX: 000000000000000f RSI: 00007fe76f0e50a0 RDI: 0000000000000005 [ 557.288210][T12746] RBP: 00007fe76f0e5090 R08: 0000000000000000 R09: 0000000000000000 [ 557.288223][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.288236][T12746] R13: 00007fe76e3d6038 R14: 00007fe76e3d5fa0 R15: 00007ffdb877e278 [ 557.288273][T12746] [ 557.537334][ T847] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 557.547557][ T847] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 557.556498][ T847] usb 3-1: Product: syz [ 557.561387][ T847] usb 3-1: Manufacturer: syz [ 557.570835][T12742] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 557.582908][ T847] cdc_wdm 3-1:1.0: skipping garbage [ 557.588968][ T847] cdc_wdm 3-1:1.0: skipping garbage [ 557.597569][ T847] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 557.603519][ T847] cdc_wdm 3-1:1.0: Unknown control protocol [ 557.707078][ T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.718403][ T93] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 557.727899][ T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.739307][ T93] usb 4-1: config 0 descriptor?? [ 557.840063][ C1] wdm_int_callback: 3732 callbacks suppressed [ 557.840092][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 557.852984][ C1] wdm_int_callback: 3732 callbacks suppressed [ 557.853006][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 557.866070][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 557.873338][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 557.879702][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 557.886498][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 557.893323][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 557.900452][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 557.906837][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 557.913474][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 557.919878][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 557.926684][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 557.933243][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 557.939871][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 557.947472][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 557.954120][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 557.960654][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 557.967361][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 557.974263][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 557.980988][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 558.170772][ T93] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 558.235965][ T93] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001C/input/input34 [ 558.428145][ T847] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 558.485310][ T93] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 558.538640][T12759] syzkaller1: entered promiscuous mode [ 558.562834][T12759] syzkaller1: entered allmulticast mode [ 558.601200][ T10] usb 3-1: USB disconnect, device number 19 [ 558.601206][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 558.618305][T12742] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 558.634046][ T847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 558.657375][ T847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.688898][ T847] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 558.711435][ T5908] usb 4-1: USB disconnect, device number 117 [ 558.730554][ T847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.730855][T12760] fido_id[12760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001C/report_descriptor': No such device [ 558.744164][ T847] usb 1-1: config 0 descriptor?? [ 558.784326][ T847] hub 1-1:0.0: USB hub found [ 558.977379][ T847] hub 1-1:0.0: 2 ports detected [ 559.401540][ T847] usb 1-1: USB disconnect, device number 114 [ 559.915513][ T93] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 560.089683][ T93] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.100634][ T93] usb 3-1: config 0 has no interfaces? [ 560.116903][ T93] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 560.143270][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.161554][ T93] usb 3-1: Product: syz [ 560.165927][ T93] usb 3-1: Manufacturer: syz [ 560.171163][ T93] usb 3-1: SerialNumber: syz [ 560.190765][T12799] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2095'. [ 560.196050][ T93] usb 3-1: config 0 descriptor?? [ 560.419142][T12809] FAULT_INJECTION: forcing a failure. [ 560.419142][T12809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.438794][T12809] CPU: 1 UID: 0 PID: 12809 Comm: syz.1.2099 Not tainted syzkaller #0 PREEMPT(full) [ 560.438824][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 560.438836][T12809] Call Trace: [ 560.438845][T12809] [ 560.438853][T12809] dump_stack_lvl+0x189/0x250 [ 560.438876][T12809] ? __pfx____ratelimit+0x10/0x10 [ 560.438905][T12809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.438923][T12809] ? __pfx__printk+0x10/0x10 [ 560.438951][T12809] ? __might_fault+0xb0/0x130 [ 560.438983][T12809] should_fail_ex+0x414/0x560 [ 560.439012][T12809] _copy_from_iter+0x1de/0x1790 [ 560.439041][T12809] ? __lock_acquire+0xab9/0xd20 [ 560.439062][T12809] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 560.439096][T12809] ? __pfx__copy_from_iter+0x10/0x10 [ 560.439142][T12809] ? dev_get_by_index+0x22/0x2e0 [ 560.439166][T12809] ? dev_get_by_index+0x22/0x2e0 [ 560.439197][T12809] packet_sendmsg+0x3072/0x5080 [ 560.439233][T12809] ? aa_label_strn_parse+0x5a0/0x1090 [ 560.439280][T12809] ? __pfx___might_resched+0x10/0x10 [ 560.439302][T12809] ? __lock_acquire+0xab9/0xd20 [ 560.439338][T12809] ? __pfx_packet_sendmsg+0x10/0x10 [ 560.439360][T12809] ? aa_sk_perm+0x81e/0x950 [ 560.439394][T12809] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 560.439431][T12809] ? aa_sock_msg_perm+0xf1/0x1d0 [ 560.439461][T12809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 560.439487][T12809] ? __pfx_packet_sendmsg+0x10/0x10 [ 560.439513][T12809] __sock_sendmsg+0x219/0x270 [ 560.439543][T12809] __sys_sendto+0x3bd/0x520 [ 560.439575][T12809] ? __pfx___sys_sendto+0x10/0x10 [ 560.439602][T12809] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 560.439635][T12809] ? __fget_files+0x3a0/0x420 [ 560.439673][T12809] ? ksys_write+0x22a/0x250 [ 560.439698][T12809] ? __pfx_ksys_write+0x10/0x10 [ 560.439725][T12809] __x64_sys_sendto+0xde/0x100 [ 560.439747][T12809] do_syscall_64+0xfa/0xfa0 [ 560.439775][T12809] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.439803][T12809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.439822][T12809] ? clear_bhb_loop+0x60/0xb0 [ 560.439846][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.439865][T12809] RIP: 0033:0x7f9651f8eba9 [ 560.439883][T12809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.439898][T12809] RSP: 002b:00007f9652dd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 560.439920][T12809] RAX: ffffffffffffffda RBX: 00007f96521d5fa0 RCX: 00007f9651f8eba9 [ 560.439934][T12809] RDX: 0000000000010608 RSI: 0000200000000180 RDI: 0000000000000003 [ 560.439947][T12809] RBP: 00007f9652dd9090 R08: 0000200000000140 R09: 0000000000000014 [ 560.439960][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.439971][T12809] R13: 00007f96521d6038 R14: 00007f96521d5fa0 R15: 00007ffd182b7258 [ 560.440005][T12809] [ 560.443004][ T847] usb 3-1: USB disconnect, device number 20 [ 560.571378][T12813] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 560.740088][ T93] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 560.812108][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2102'. [ 560.905174][ T93] usb 1-1: Using ep0 maxpacket: 16 [ 560.921930][ T93] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 560.933820][ T93] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.952375][ T93] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 560.961646][ T93] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.970510][ T93] usb 1-1: Product: syz [ 560.975267][ T93] usb 1-1: Manufacturer: syz [ 560.980141][ T93] usb 1-1: SerialNumber: syz [ 560.993250][ T93] usb 1-1: config 0 descriptor?? [ 561.004064][ T93] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 561.015875][ T93] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 561.315133][ T847] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 561.465220][ T847] usb 3-1: Using ep0 maxpacket: 32 [ 561.477710][ T847] usb 3-1: unable to get BOS descriptor or descriptor too short [ 561.488184][ T847] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 561.496022][ T847] usb 3-1: can't read configurations, error -71 [ 561.605381][ T93] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 561.606278][T12806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2098'. [ 561.621987][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'. [ 561.643395][ T93] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 562.187010][ T5908] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 562.250483][T12851] syzkaller0: entered promiscuous mode [ 562.256555][T12851] syzkaller0: entered allmulticast mode [ 562.264083][ T93] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 562.264722][T12852] FAULT_INJECTION: forcing a failure. [ 562.264722][T12852] name failslab, interval 1, probability 0, space 0, times 0 [ 562.287389][T12852] CPU: 0 UID: 0 PID: 12852 Comm: syz.1.2116 Not tainted syzkaller #0 PREEMPT(full) [ 562.287428][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 562.287441][T12852] Call Trace: [ 562.287450][T12852] [ 562.287460][T12852] dump_stack_lvl+0x189/0x250 [ 562.287485][T12852] ? __pfx____ratelimit+0x10/0x10 [ 562.287516][T12852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.287537][T12852] ? __pfx__printk+0x10/0x10 [ 562.287572][T12852] ? __pfx___might_resched+0x10/0x10 [ 562.287594][T12852] ? fs_reclaim_acquire+0x7d/0x100 [ 562.287626][T12852] should_fail_ex+0x414/0x560 [ 562.287657][T12852] should_failslab+0xa8/0x100 [ 562.287684][T12852] kmem_cache_alloc_node_noprof+0x77/0x710 [ 562.287706][T12852] ? __alloc_skb+0x112/0x2d0 [ 562.287742][T12852] __alloc_skb+0x112/0x2d0 [ 562.287787][T12852] alloc_skb_with_frags+0xca/0x890 [ 562.287825][T12852] sock_alloc_send_pskb+0x857/0x990 [ 562.287870][T12852] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 562.287907][T12852] ? iov_iter_advance+0x8b/0x1c0 [ 562.287941][T12852] tun_get_user+0xa43/0x3e20 [ 562.287992][T12852] ? aa_file_perm+0x44d/0x1550 [ 562.288012][T12852] ? __pfx_tun_get_user+0x10/0x10 [ 562.288039][T12852] ? _parse_integer_limit+0x1ae/0x1f0 [ 562.288075][T12852] ? __lock_acquire+0xab9/0xd20 [ 562.288104][T12852] ? ref_tracker_alloc+0x318/0x460 [ 562.288127][T12852] ? __lock_acquire+0xab9/0xd20 [ 562.288149][T12852] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 562.288181][T12852] ? tun_get+0x1c/0x2f0 [ 562.288216][T12852] ? tun_get+0x1c/0x2f0 [ 562.288243][T12852] ? tun_get+0x1c/0x2f0 [ 562.288276][T12852] tun_chr_write_iter+0x113/0x200 [ 562.288306][T12852] vfs_write+0x5c6/0xb30 [ 562.288336][T12852] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 562.288366][T12852] ? __pfx_vfs_write+0x10/0x10 [ 562.288401][T12852] ? __fget_files+0x2a/0x420 [ 562.288438][T12852] ksys_write+0x145/0x250 [ 562.288465][T12852] ? __pfx_ksys_write+0x10/0x10 [ 562.288493][T12852] ? do_syscall_64+0xbe/0xfa0 [ 562.288528][T12852] do_syscall_64+0xfa/0xfa0 [ 562.288556][T12852] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.288584][T12852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.288604][T12852] ? clear_bhb_loop+0x60/0xb0 [ 562.288630][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.288651][T12852] RIP: 0033:0x7f9651f8eba9 [ 562.288680][T12852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.288699][T12852] RSP: 002b:00007f9652db8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 562.288721][T12852] RAX: ffffffffffffffda RBX: 00007f96521d6090 RCX: 00007f9651f8eba9 [ 562.288736][T12852] RDX: 000000000000ffdd RSI: 0000200000000140 RDI: 0000000000000004 [ 562.288750][T12852] RBP: 00007f9652db8090 R08: 0000000000000000 R09: 0000000000000000 [ 562.288763][T12852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.288785][T12852] R13: 00007f96521d6128 R14: 00007f96521d6090 R15: 00007ffd182b7258 [ 562.288821][T12852] [ 562.602728][ T93] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 562.613658][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.615519][ T5864] Bluetooth: hci0: command tx timeout [ 562.624111][ T5908] usb 4-1: config 0 has no interfaces? [ 562.632791][ T93] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 562.635294][ T5908] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 562.642091][ T93] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 562.650821][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.652715][ T847] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 562.661556][ T93] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 562.667428][ T5908] usb 4-1: config 0 descriptor?? [ 562.704251][ T93] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 562.735492][ T93] usb 1-1: USB disconnect, device number 115 [ 562.817233][ T847] usb 3-1: device descriptor read/64, error -71 [ 562.937718][ T847] usb usb3-port1: attempt power cycle [ 563.070251][T12853] block nbd3: Attempted send on invalid socket [ 563.082496][T12853] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.101679][T12853] block nbd3: Attempted send on invalid socket [ 563.108491][T12853] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.125990][T12853] Mount JFS Failure: -5 [ 563.253008][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.260649][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.283631][ T847] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 563.323683][ T847] usb 3-1: device descriptor read/8, error -71 [ 563.585167][ T847] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 563.618851][ T847] usb 3-1: device descriptor read/8, error -71 [ 563.739322][ T847] usb usb3-port1: unable to enumerate USB device [ 564.063872][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2119'. [ 564.708485][ T5908] usb 4-1: USB disconnect, device number 118 [ 564.730338][T12869] FAULT_INJECTION: forcing a failure. [ 564.730338][T12869] name failslab, interval 1, probability 0, space 0, times 0 [ 564.744039][T12869] CPU: 0 UID: 0 PID: 12869 Comm: syz.1.2121 Not tainted syzkaller #0 PREEMPT(full) [ 564.744070][T12869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.744083][T12869] Call Trace: [ 564.744092][T12869] [ 564.744101][T12869] dump_stack_lvl+0x189/0x250 [ 564.744129][T12869] ? __pfx____ratelimit+0x10/0x10 [ 564.744158][T12869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.744178][T12869] ? __pfx__printk+0x10/0x10 [ 564.744213][T12869] ? __pfx___might_resched+0x10/0x10 [ 564.744236][T12869] ? fs_reclaim_acquire+0x7d/0x100 [ 564.744267][T12869] should_fail_ex+0x414/0x560 [ 564.744296][T12869] should_failslab+0xa8/0x100 [ 564.744322][T12869] kmem_cache_alloc_node_noprof+0x77/0x710 [ 564.744344][T12869] ? __alloc_skb+0x112/0x2d0 [ 564.744373][T12869] ? netlink_autobind+0xdb/0x300 [ 564.744399][T12869] __alloc_skb+0x112/0x2d0 [ 564.744434][T12869] netlink_sendmsg+0x5c6/0xb30 [ 564.744464][T12869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.744488][T12869] ? aa_sock_msg_perm+0xf1/0x1d0 [ 564.744519][T12869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.744547][T12869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.744568][T12869] __sock_sendmsg+0x219/0x270 [ 564.744599][T12869] ____sys_sendmsg+0x505/0x830 [ 564.744627][T12869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.744661][T12869] ? import_iovec+0x74/0xa0 [ 564.744685][T12869] ___sys_sendmsg+0x21f/0x2a0 [ 564.744711][T12869] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.744773][T12869] ? __fget_files+0x2a/0x420 [ 564.744800][T12869] ? __fget_files+0x3a0/0x420 [ 564.744854][T12869] __x64_sys_sendmsg+0x19b/0x260 [ 564.744880][T12869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.744918][T12869] ? __pfx_ksys_write+0x10/0x10 [ 564.744947][T12869] ? do_syscall_64+0xbe/0xfa0 [ 564.744982][T12869] do_syscall_64+0xfa/0xfa0 [ 564.745010][T12869] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.745048][T12869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.745069][T12869] ? clear_bhb_loop+0x60/0xb0 [ 564.745096][T12869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.745117][T12869] RIP: 0033:0x7f9651f8eba9 [ 564.745137][T12869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.745155][T12869] RSP: 002b:00007f9652dd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.745179][T12869] RAX: ffffffffffffffda RBX: 00007f96521d5fa0 RCX: 00007f9651f8eba9 [ 564.745194][T12869] RDX: 0000000024000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 564.745208][T12869] RBP: 00007f9652dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 564.745220][T12869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.745232][T12869] R13: 00007f96521d6038 R14: 00007f96521d5fa0 R15: 00007ffd182b7258 [ 564.745268][T12869] [ 565.315187][ T93] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 565.478156][ T93] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 565.492804][ T93] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 565.502963][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.522691][ T93] usb 2-1: Product: syz [ 565.534277][ T93] usb 2-1: Manufacturer: syz [ 565.545497][ T93] usb 2-1: SerialNumber: syz [ 565.575637][ T93] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 565.610933][T12888] FAULT_INJECTION: forcing a failure. [ 565.610933][T12888] name failslab, interval 1, probability 0, space 0, times 0 [ 565.622697][ T5947] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 565.661325][T12888] CPU: 1 UID: 0 PID: 12888 Comm: syz.2.2128 Not tainted syzkaller #0 PREEMPT(full) [ 565.661360][T12888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 565.661373][T12888] Call Trace: [ 565.661382][T12888] [ 565.661391][T12888] dump_stack_lvl+0x189/0x250 [ 565.661419][T12888] ? __pfx____ratelimit+0x10/0x10 [ 565.661448][T12888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.661469][T12888] ? __pfx__printk+0x10/0x10 [ 565.661507][T12888] ? __pfx___might_resched+0x10/0x10 [ 565.661530][T12888] ? fs_reclaim_acquire+0x7d/0x100 [ 565.661561][T12888] should_fail_ex+0x414/0x560 [ 565.661591][T12888] should_failslab+0xa8/0x100 [ 565.661619][T12888] __kmalloc_noprof+0xcb/0x7f0 [ 565.661641][T12888] ? tomoyo_encode+0x28b/0x550 [ 565.661679][T12888] tomoyo_encode+0x28b/0x550 [ 565.661716][T12888] tomoyo_realpath_from_path+0x58d/0x5d0 [ 565.661758][T12888] ? tomoyo_domain+0xd9/0x130 [ 565.661783][T12888] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 565.661810][T12888] tomoyo_path_number_perm+0x1e8/0x5a0 [ 565.661840][T12888] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 565.661913][T12888] ? __fget_files+0x2a/0x420 [ 565.661946][T12888] ? __fget_files+0x3a0/0x420 [ 565.661971][T12888] ? __fget_files+0x2a/0x420 [ 565.662001][T12888] security_file_ioctl+0xcb/0x2d0 [ 565.662029][T12888] __se_sys_ioctl+0x47/0x170 [ 565.662054][T12888] do_syscall_64+0xfa/0xfa0 [ 565.662082][T12888] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.662111][T12888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.662131][T12888] ? clear_bhb_loop+0x60/0xb0 [ 565.662157][T12888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.662176][T12888] RIP: 0033:0x7f5362d8eba9 [ 565.662196][T12888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.662214][T12888] RSP: 002b:00007f5363c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.662237][T12888] RAX: ffffffffffffffda RBX: 00007f5362fd5fa0 RCX: 00007f5362d8eba9 [ 565.662253][T12888] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 565.662265][T12888] RBP: 00007f5363c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 565.662279][T12888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.662292][T12888] R13: 00007f5362fd6038 R14: 00007f5362fd5fa0 R15: 00007fff734e67a8 [ 565.662328][T12888] [ 565.662399][T12888] ERROR: Out of memory at tomoyo_realpath_from_path. [ 565.843110][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.855915][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.934658][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.951939][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.960983][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.003683][ T847] usb 2-1: USB disconnect, device number 122 [ 566.078041][ T5908] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 566.255214][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 566.262630][ T5908] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 566.274791][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.288068][ T5908] usb 1-1: config 0 descriptor?? [ 566.305022][ T5946] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 566.460012][ T5946] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 566.472971][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.481319][ T5946] usb 3-1: Product: syz [ 566.485938][ T5946] usb 3-1: Manufacturer: syz [ 566.490606][ T5946] usb 3-1: SerialNumber: syz [ 566.498404][ T5946] usb 3-1: config 0 descriptor?? [ 566.513753][ T5908] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 566.685252][ T5947] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 566.693991][ T5947] ath9k_htc: Failed to initialize the device [ 566.700948][ T847] usb 2-1: ath9k_htc: USB layer deinitialized [ 566.710163][ T5946] hso 3-1:0.0: Failed to find BULK IN ep [ 566.727109][ T5946] usb-storage 3-1:0.0: USB Mass Storage device detected [ 566.914123][T12902] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 0, id = 0 [ 566.960722][ T5908] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 566.978023][ T5908] asix 1-1:0.0: probe with driver asix failed with error -71 [ 566.993071][ T5908] usb 1-1: USB disconnect, device number 116 [ 567.007596][ T847] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 567.023739][ T5946] usb 3-1: USB disconnect, device number 25 [ 567.165190][ T847] usb 2-1: Using ep0 maxpacket: 8 [ 567.173339][ T847] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 567.182037][ T847] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 567.194512][ T847] usb 2-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 567.203773][ T847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.214149][ T847] usb 2-1: config 0 descriptor?? [ 567.582089][T12912] validate_nla: 25 callbacks suppressed [ 567.582105][T12912] netlink: 'syz.0.2134': attribute type 4 has an invalid length. [ 567.603680][T12912] netlink: 'syz.0.2134': attribute type 4 has an invalid length. [ 567.671839][T12914] tmpfs: Unknown parameter 'vk\q( Ssie' [ 568.009403][T12927] netlink: 'syz.3.2139': attribute type 6 has an invalid length. [ 568.492237][ T5947] usb 2-1: USB disconnect, device number 123 [ 568.571555][T12942] fuse: Bad value for 'fd' [ 568.643168][T12945] befs: (nullb0): invalid magic header [ 568.745175][ T847] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 568.907142][ T847] usb 1-1: Using ep0 maxpacket: 16 [ 568.915819][ T847] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.927708][ T847] usb 1-1: config 0 interface 0 has no altsetting 0 [ 568.934396][ T847] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 568.944392][ T847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.974190][ T847] usb 1-1: config 0 descriptor?? [ 568.985115][ T5947] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 569.139599][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 569.152945][ T5947] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 569.165084][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.177494][ T5947] usb 2-1: Product: syz [ 569.181715][ T5947] usb 2-1: Manufacturer: syz [ 569.189456][ T5947] usb 2-1: SerialNumber: syz [ 569.199554][ T5947] usb 2-1: config 0 descriptor?? [ 569.411007][ T847] nzxt-smart2 0003:1E71:2009.001D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 569.455786][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.476477][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.495080][ T5909] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 569.589885][ T5947] usb 2-1: USB disconnect, device number 124 [ 569.671295][ T5909] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 569.693871][ T5909] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 569.708595][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.718946][ T5909] usb 3-1: Product: syz [ 569.723298][ T5909] usb 3-1: Manufacturer: syz [ 569.734102][ T5909] usb 3-1: SerialNumber: syz [ 569.759015][ T5909] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 569.788760][ T847] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 570.003541][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.035615][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.087762][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.125930][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.151113][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.163922][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.187804][T12971] fuse: Bad value for 'fd' [ 570.190451][ T5909] usb 3-1: USB disconnect, device number 26 [ 570.239767][ T5947] usb 1-1: USB disconnect, device number 117 [ 570.274148][T12973] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 570.284534][T12973] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2155'. [ 570.309096][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 570.805074][ T5908] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 570.847583][ T847] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 570.857355][ T847] ath9k_htc: Failed to initialize the device [ 570.868736][ T5909] usb 3-1: ath9k_htc: USB layer deinitialized [ 570.975495][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 570.989358][ T5908] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.003434][ T5908] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 571.014095][ T5908] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 571.025200][ T5908] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 571.044331][ T5908] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 571.053698][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 571.063121][ T5908] usb 2-1: SerialNumber: syz [ 571.072753][T12981] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 571.080445][T12981] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 571.103836][ T5908] hub 2-1:1.0: bad descriptor, ignoring hub [ 571.110293][ T5908] hub 2-1:1.0: probe with driver hub failed with error -5 [ 571.195215][ T5909] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 571.308076][T12981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.318740][T12981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.330604][T12981] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 571.338956][T12981] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 571.355482][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 571.367701][ T5909] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 571.381262][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 571.394203][ T5909] usb 3-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 571.405886][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.432227][ T5909] usb 3-1: config 0 descriptor?? [ 571.518640][T12995] fuse: blksize only supported for fuseblk [ 571.552752][T12981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.573685][T12981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.752602][T13004] FAULT_INJECTION: forcing a failure. [ 571.752602][T13004] name failslab, interval 1, probability 0, space 0, times 0 [ 571.768054][T13004] CPU: 0 UID: 0 PID: 13004 Comm: syz.0.2166 Not tainted syzkaller #0 PREEMPT(full) [ 571.768084][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 571.768096][T13004] Call Trace: [ 571.768106][T13004] [ 571.768120][T13004] dump_stack_lvl+0x189/0x250 [ 571.768147][T13004] ? __pfx____ratelimit+0x10/0x10 [ 571.768177][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.768198][T13004] ? __pfx__printk+0x10/0x10 [ 571.768234][T13004] ? __pfx___might_resched+0x10/0x10 [ 571.768257][T13004] ? fs_reclaim_acquire+0x7d/0x100 [ 571.768288][T13004] should_fail_ex+0x414/0x560 [ 571.768317][T13004] should_failslab+0xa8/0x100 [ 571.768345][T13004] __kmalloc_noprof+0xcb/0x7f0 [ 571.768366][T13004] ? tomoyo_encode+0x28b/0x550 [ 571.768403][T13004] tomoyo_encode+0x28b/0x550 [ 571.768440][T13004] tomoyo_realpath_from_path+0x58d/0x5d0 [ 571.768484][T13004] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 571.768510][T13004] tomoyo_path_number_perm+0x1e8/0x5a0 [ 571.768540][T13004] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 571.768613][T13004] ? __fget_files+0x2a/0x420 [ 571.768646][T13004] ? __fget_files+0x3a0/0x420 [ 571.768672][T13004] ? __fget_files+0x2a/0x420 [ 571.768704][T13004] security_file_ioctl+0xcb/0x2d0 [ 571.768733][T13004] __se_sys_ioctl+0x47/0x170 [ 571.768758][T13004] do_syscall_64+0xfa/0xfa0 [ 571.768789][T13004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.768808][T13004] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 571.768829][T13004] ? clear_bhb_loop+0x60/0xb0 [ 571.768855][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.768875][T13004] RIP: 0033:0x7fe76e18eba9 [ 571.768895][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.768912][T13004] RSP: 002b:00007fe76f0e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.768935][T13004] RAX: ffffffffffffffda RBX: 00007fe76e3d5fa0 RCX: 00007fe76e18eba9 [ 571.768950][T13004] RDX: 0000200000000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 571.768964][T13004] RBP: 00007fe76f0e5090 R08: 0000000000000000 R09: 0000000000000000 [ 571.768976][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.768989][T13004] R13: 00007fe76e3d6038 R14: 00007fe76e3d5fa0 R15: 00007ffdb877e278 [ 571.769033][T13004] [ 571.769083][T13004] ERROR: Out of memory at tomoyo_realpath_from_path. [ 572.013921][ T5908] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 572.057568][ T5908] usb 2-1: USB disconnect, device number 125 [ 572.217138][T12370] block nbd2: Possible stuck request ffff8880259d7000: control (read@0,1024B). Runtime 30 seconds [ 572.231755][T12370] block nbd2: Possible stuck request ffff8880259d71c0: control (read@1024,1024B). Runtime 30 seconds [ 572.242870][T12370] block nbd2: Possible stuck request ffff8880259d7380: control (read@2048,1024B). Runtime 30 seconds [ 572.254126][T12370] block nbd2: Possible stuck request ffff8880259d7540: control (read@3072,1024B). Runtime 30 seconds [ 572.312451][T13018] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2171'. [ 572.355053][ T5909] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 572.520201][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 572.529447][ T5909] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.542577][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 572.550374][ T5909] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 572.562384][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.577874][ T5909] usb 1-1: config 0 descriptor?? [ 572.646855][ T5908] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 572.688135][ T5946] usb 3-1: USB disconnect, device number 27 [ 572.756358][T13035] FAULT_INJECTION: forcing a failure. [ 572.756358][T13035] name failslab, interval 1, probability 0, space 0, times 0 [ 572.769442][T13035] CPU: 1 UID: 0 PID: 13035 Comm: syz.2.2175 Not tainted syzkaller #0 PREEMPT(full) [ 572.769472][T13035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 572.769485][T13035] Call Trace: [ 572.769496][T13035] [ 572.769506][T13035] dump_stack_lvl+0x189/0x250 [ 572.769531][T13035] ? __pfx____ratelimit+0x10/0x10 [ 572.769559][T13035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.769579][T13035] ? __pfx__printk+0x10/0x10 [ 572.769613][T13035] ? __pfx___might_resched+0x10/0x10 [ 572.769642][T13035] ? fs_reclaim_acquire+0x7d/0x100 [ 572.769670][T13035] should_fail_ex+0x414/0x560 [ 572.769701][T13035] should_failslab+0xa8/0x100 [ 572.769727][T13035] __kmalloc_noprof+0xcb/0x7f0 [ 572.769748][T13035] ? tomoyo_encode+0x28b/0x550 [ 572.769829][T13035] tomoyo_encode+0x28b/0x550 [ 572.769864][T13035] tomoyo_realpath_from_path+0x58d/0x5d0 [ 572.769897][T13035] ? tomoyo_domain+0xd9/0x130 [ 572.769923][T13035] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 572.769949][T13035] tomoyo_path_number_perm+0x1e8/0x5a0 [ 572.769979][T13035] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 572.770044][T13035] ? __fget_files+0x2a/0x420 [ 572.770077][T13035] ? __fget_files+0x3a0/0x420 [ 572.770101][T13035] ? __fget_files+0x2a/0x420 [ 572.770133][T13035] security_file_ioctl+0xcb/0x2d0 [ 572.770160][T13035] __se_sys_ioctl+0x47/0x170 [ 572.770183][T13035] do_syscall_64+0xfa/0xfa0 [ 572.770209][T13035] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.770238][T13035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.770259][T13035] ? clear_bhb_loop+0x60/0xb0 [ 572.770285][T13035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.770305][T13035] RIP: 0033:0x7f5362d8eba9 [ 572.770324][T13035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.770341][T13035] RSP: 002b:00007f5363c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.770365][T13035] RAX: ffffffffffffffda RBX: 00007f5362fd5fa0 RCX: 00007f5362d8eba9 [ 572.770381][T13035] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004 [ 572.770395][T13035] RBP: 00007f5363c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 572.770407][T13035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.770419][T13035] R13: 00007f5362fd6038 R14: 00007f5362fd5fa0 R15: 00007fff734e67a8 [ 572.770468][T13035] [ 572.770527][T13035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 572.795076][ T5908] usb 2-1: device descriptor read/64, error -71 [ 573.036249][ T5909] nzxt-smart2 0003:1E71:2009.001E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 573.259525][T13047] mmap: syz.3.2178 (13047) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 573.305103][ T5908] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 573.445143][ T5908] usb 2-1: device descriptor read/64, error -71 [ 573.569874][ T5908] usb usb2-port1: attempt power cycle [ 573.637836][ T847] usb 1-1: USB disconnect, device number 118 [ 573.925272][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 573.945915][ T5908] usb 2-1: device descriptor read/8, error -71 [ 574.037272][T13057] netlink: 'syz.3.2182': attribute type 1 has an invalid length. [ 574.054026][T13057] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2182'. [ 574.064404][T13057] netlink: 'syz.3.2182': attribute type 1 has an invalid length. [ 574.073945][T13057] netlink: 'syz.3.2182': attribute type 2 has an invalid length. [ 574.207059][ T5908] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 574.248438][ T5908] usb 2-1: device descriptor read/8, error -71 [ 574.395694][ T5908] usb usb2-port1: unable to enumerate USB device [ 574.528700][ T5946] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 574.685945][ T5908] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 574.697229][ T5946] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 574.710691][ T5946] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 574.720946][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.730064][ T5946] usb 4-1: Product: syz [ 574.734402][ T5946] usb 4-1: Manufacturer: syz [ 574.739456][ T5946] usb 4-1: SerialNumber: syz [ 574.760149][ T5946] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 574.785640][ T5947] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 574.851507][ T5908] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 574.870213][ T5908] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 574.881220][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.890252][ T5908] usb 3-1: Product: syz [ 574.895322][ T5908] usb 3-1: Manufacturer: syz [ 574.900229][ T5908] usb 3-1: SerialNumber: syz [ 574.926613][ T5908] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 574.953575][ T5909] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 575.022636][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.033847][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.091511][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.121131][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.145988][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.157825][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.180093][ T5946] usb 4-1: USB disconnect, device number 119 [ 575.224041][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.267963][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.301349][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.324164][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.362897][ T5908] usb 3-1: USB disconnect, device number 28 [ 575.694028][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 575.704011][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 575.713786][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 575.724324][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 575.734848][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.782256][T13083] virt_wifi0 speed is unknown, defaulting to 1000 [ 575.873509][ T2958] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.885000][ T847] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 575.886166][ T5947] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 575.906170][ T5947] ath9k_htc: Failed to initialize the device [ 575.913171][ T5946] usb 4-1: ath9k_htc: USB layer deinitialized [ 575.996283][ T2958] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.045720][ T847] usb 2-1: Using ep0 maxpacket: 8 [ 576.052406][ T5909] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 576.067612][ T847] usb 2-1: unable to get BOS descriptor or descriptor too short [ 576.076461][ T5909] ath9k_htc: Failed to initialize the device [ 576.083657][ T5908] usb 3-1: ath9k_htc: USB layer deinitialized [ 576.091367][ T847] usb 2-1: config 4 interface 0 has no altsetting 0 [ 576.118080][ T847] usb 2-1: string descriptor 0 read error: -22 [ 576.119823][ T2958] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.124480][ T847] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 576.147968][ T847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.159310][T13083] chnl_net:caif_netlink_parms(): no params data found [ 576.178063][ T847] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 576.208628][ T847] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 576.219442][ T847] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 576.225100][ T5946] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 576.227031][ T847] usb 2-1: media controller created [ 576.270725][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 576.270736][ T2958] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.406710][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 576.414623][ T5946] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 576.428731][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 576.441673][ T5946] usb 4-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 576.445017][ T5908] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 576.455910][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.469996][T13083] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.476646][ T5946] usb 4-1: config 0 descriptor?? [ 576.477934][T13083] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.490473][T13083] bridge_slave_0: entered allmulticast mode [ 576.509760][T13083] bridge_slave_0: entered promiscuous mode [ 576.528817][T13083] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.538068][T13083] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.546420][T13083] bridge_slave_1: entered allmulticast mode [ 576.554228][T13083] bridge_slave_1: entered promiscuous mode [ 576.625290][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 576.634665][ T5908] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 576.641946][T13083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.668164][T13083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.672874][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 576.705289][ T5908] usb 3-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 576.716753][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.744506][ T5908] usb 3-1: config 0 descriptor?? [ 576.809225][ T2958] bridge_slave_1: left allmulticast mode [ 576.820234][ T2958] bridge_slave_1: left promiscuous mode [ 576.828935][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.849330][ T2958] bridge_slave_0: left allmulticast mode [ 576.856930][ T2958] bridge_slave_0: left promiscuous mode [ 576.862948][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.325488][ T847] zl10353_read_register: readreg error (reg=127, ret==0) [ 577.325917][T13082] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 577.428719][ T847] usb 2-1: USB disconnect, device number 4 [ 577.522041][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.535501][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.547063][ T2958] bond0 (unregistering): Released all slaves [ 577.572771][T13083] team0: Port device team_slave_0 added [ 577.587341][T13083] team0: Port device team_slave_1 added [ 577.651199][ T2958] tipc: Left network mode [ 577.708518][T13083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.723318][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.761320][ T5946] usb 4-1: USB disconnect, device number 120 [ 577.763799][T13083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.808715][ T5872] Bluetooth: hci1: command tx timeout [ 577.930350][T13083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.943756][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.969968][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.994039][T13083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.004271][ T5908] usb 3-1: USB disconnect, device number 29 [ 578.154789][T13083] hsr_slave_0: entered promiscuous mode [ 578.162048][T13083] hsr_slave_1: entered promiscuous mode [ 578.170556][ T5947] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 578.173512][T13083] debugfs: 'hsr0' already exists in 'hsr' [ 578.185040][T13083] Cannot create hsr debugfs directory [ 578.235479][ T5946] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 578.302255][ T2958] hsr_slave_0: left promiscuous mode [ 578.312577][ T2958] hsr_slave_1: left promiscuous mode [ 578.324670][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.332705][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 578.342717][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.354190][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short [ 578.366603][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.374073][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.387547][ T5947] usb 2-1: config 4 interface 0 has no altsetting 0 [ 578.403468][ T5947] usb 2-1: string descriptor 0 read error: -22 [ 578.415545][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.435247][ T5947] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 578.450696][ T5946] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 578.465511][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.478216][ T2958] veth1_macvtap: left promiscuous mode [ 578.484225][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.506705][ T5947] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 578.517365][ T2958] veth0_macvtap: left promiscuous mode [ 578.523383][ T2958] veth1_vlan: left promiscuous mode [ 578.534284][ T5946] usb 4-1: config 0 descriptor?? [ 578.559841][ T5947] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.571119][ T2958] veth0_vlan: left promiscuous mode [ 578.580761][ T5947] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 578.589400][ T5947] usb 2-1: media controller created [ 578.699201][T13115] FAULT_INJECTION: forcing a failure. [ 578.699201][T13115] name failslab, interval 1, probability 0, space 0, times 0 [ 578.730073][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.745895][T13115] CPU: 1 UID: 0 PID: 13115 Comm: syz.1.2193 Not tainted syzkaller #0 PREEMPT(full) [ 578.745941][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 578.745960][T13115] Call Trace: [ 578.745972][T13115] [ 578.745983][T13115] dump_stack_lvl+0x189/0x250 [ 578.746011][T13115] ? __pfx____ratelimit+0x10/0x10 [ 578.746042][T13115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.746063][T13115] ? __pfx__printk+0x10/0x10 [ 578.746101][T13115] ? __pfx___might_resched+0x10/0x10 [ 578.746125][T13115] ? fs_reclaim_acquire+0x7d/0x100 [ 578.746156][T13115] should_fail_ex+0x414/0x560 [ 578.746189][T13115] should_failslab+0xa8/0x100 [ 578.746217][T13115] __kmalloc_noprof+0xcb/0x7f0 [ 578.746239][T13115] ? tomoyo_encode+0x28b/0x550 [ 578.746278][T13115] tomoyo_encode+0x28b/0x550 [ 578.746317][T13115] tomoyo_realpath_from_path+0x58d/0x5d0 [ 578.746362][T13115] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 578.746391][T13115] tomoyo_path_number_perm+0x1e8/0x5a0 [ 578.746421][T13115] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 578.746497][T13115] ? __fget_files+0x2a/0x420 [ 578.746532][T13115] ? __fget_files+0x3a0/0x420 [ 578.746558][T13115] ? __fget_files+0x2a/0x420 [ 578.746591][T13115] security_file_ioctl+0xcb/0x2d0 [ 578.746621][T13115] __se_sys_ioctl+0x47/0x170 [ 578.746647][T13115] do_syscall_64+0xfa/0xfa0 [ 578.746677][T13115] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.746707][T13115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.746728][T13115] ? clear_bhb_loop+0x60/0xb0 [ 578.746755][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.746776][T13115] RIP: 0033:0x7f9651f8eba9 [ 578.746797][T13115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.746815][T13115] RSP: 002b:00007f9652dd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.746840][T13115] RAX: ffffffffffffffda RBX: 00007f96521d5fa0 RCX: 00007f9651f8eba9 [ 578.746855][T13115] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 578.746869][T13115] RBP: 00007f9652dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 578.746883][T13115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.746896][T13115] R13: 00007f96521d6038 R14: 00007f96521d5fa0 R15: 00007ffd182b7258 [ 578.746937][T13115] [ 578.746998][T13115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 579.000615][T13115] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 579.095928][ T5947] zl10353_read_register: readreg error (reg=127, ret==0) [ 579.223053][ T5947] usb 2-1: USB disconnect, device number 5 [ 579.887762][ T5872] Bluetooth: hci1: command tx timeout [ 579.936624][ T5908] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 580.128211][ T5908] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 580.139818][ T5908] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 580.154984][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.171656][ T5908] usb 2-1: Product: syz [ 580.189304][ T5908] usb 2-1: Manufacturer: syz [ 580.194057][ T5908] usb 2-1: SerialNumber: syz [ 580.225434][ T5908] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 580.235862][ T2958] team0 (unregistering): Port device team_slave_1 removed [ 580.248590][ T847] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 580.347875][ T2958] team0 (unregistering): Port device team_slave_0 removed [ 580.481524][T13138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.497678][T13138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.518678][T13138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.538663][T13138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.559511][T13138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.575634][T13138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.601634][ T5908] usb 2-1: USB disconnect, device number 6 [ 580.935303][ T44] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 580.945960][ T5946] usbhid 4-1:0.0: can't add hid device: -71 [ 580.952017][ T5946] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 580.982333][ T5946] usb 4-1: USB disconnect, device number 121 [ 581.027733][T13152] fuse: Invalid rootmode [ 581.118225][ T44] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 581.134690][ T44] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 581.162284][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.172174][ T44] usb 3-1: Product: syz [ 581.183354][ T44] usb 3-1: Manufacturer: syz [ 581.195533][ T44] usb 3-1: SerialNumber: syz [ 581.216679][ T44] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 581.264275][ T5946] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 581.335277][ T847] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 581.359953][ T847] ath9k_htc: Failed to initialize the device [ 581.392069][ T5908] usb 2-1: ath9k_htc: USB layer deinitialized [ 581.484476][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.535666][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.565305][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.591818][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.603344][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.646053][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.687923][ T24] usb 3-1: USB disconnect, device number 30 [ 581.729762][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 581.854805][ T2958] IPVS: stop unused estimator thread 0... [ 581.902807][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 581.924648][ T5908] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 581.956031][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 581.970519][ T5872] Bluetooth: hci1: command tx timeout [ 581.992346][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 582.012699][ T5908] usb 2-1: New USB device found, idVendor=110a, idProduct=0110, bcdDevice=bd.da [ 582.023129][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.045741][ T5908] usb 2-1: config 0 descriptor?? [ 582.281348][ T93] usb 2-1: USB disconnect, device number 7 [ 582.368644][ T5946] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 582.386123][ T5946] ath9k_htc: Failed to initialize the device [ 582.393448][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 582.487803][T13083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 582.518315][T13083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 582.542376][T13083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 582.566095][T13083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 582.715311][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 582.743480][T13083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.773993][T13083] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.818695][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.826080][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.874780][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.882096][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.915721][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 582.938706][ T24] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 582.968116][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 582.991501][ T24] usb 3-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 583.010056][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.042409][ T24] usb 3-1: config 0 descriptor?? [ 583.215879][ T847] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 583.387132][ T847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.425184][ T847] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 583.434816][ T847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.483112][ T847] usb 2-1: config 0 descriptor?? [ 583.492266][T13215] FAULT_INJECTION: forcing a failure. [ 583.492266][T13215] name failslab, interval 1, probability 0, space 0, times 0 [ 583.515271][T13215] CPU: 0 UID: 0 PID: 13215 Comm: syz.3.2211 Not tainted syzkaller #0 PREEMPT(full) [ 583.515302][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 583.515315][T13215] Call Trace: [ 583.515324][T13215] [ 583.515333][T13215] dump_stack_lvl+0x189/0x250 [ 583.515361][T13215] ? __pfx____ratelimit+0x10/0x10 [ 583.515392][T13215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.515412][T13215] ? __pfx__printk+0x10/0x10 [ 583.515449][T13215] ? __pfx___might_resched+0x10/0x10 [ 583.515471][T13215] ? fs_reclaim_acquire+0x7d/0x100 [ 583.515503][T13215] should_fail_ex+0x414/0x560 [ 583.515534][T13215] should_failslab+0xa8/0x100 [ 583.515561][T13215] __kmalloc_noprof+0xcb/0x7f0 [ 583.515583][T13215] ? tomoyo_encode+0x28b/0x550 [ 583.515630][T13215] tomoyo_encode+0x28b/0x550 [ 583.515666][T13215] tomoyo_realpath_from_path+0x58d/0x5d0 [ 583.515708][T13215] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 583.515733][T13215] tomoyo_path_number_perm+0x1e8/0x5a0 [ 583.515762][T13215] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 583.515836][T13215] ? __fget_files+0x2a/0x420 [ 583.515868][T13215] ? __fget_files+0x3a0/0x420 [ 583.515893][T13215] ? __fget_files+0x2a/0x420 [ 583.515925][T13215] security_file_ioctl+0xcb/0x2d0 [ 583.515955][T13215] __se_sys_ioctl+0x47/0x170 [ 583.515982][T13215] do_syscall_64+0xfa/0xfa0 [ 583.516011][T13215] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.516043][T13215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.516063][T13215] ? clear_bhb_loop+0x60/0xb0 [ 583.516090][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.516109][T13215] RIP: 0033:0x7f2adcb8eba9 [ 583.516130][T13215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.516149][T13215] RSP: 002b:00007f2adda5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.516173][T13215] RAX: ffffffffffffffda RBX: 00007f2adcdd5fa0 RCX: 00007f2adcb8eba9 [ 583.516189][T13215] RDX: 0000200000002180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 583.516203][T13215] RBP: 00007f2adda5e090 R08: 0000000000000000 R09: 0000000000000000 [ 583.516216][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.516228][T13215] R13: 00007f2adcdd6038 R14: 00007f2adcdd5fa0 R15: 00007fffa59b42b8 [ 583.516266][T13215] [ 583.516289][T13215] ERROR: Out of memory at tomoyo_realpath_from_path. [ 583.546454][T13083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.854662][T13083] veth0_vlan: entered promiscuous mode [ 583.873426][T13083] veth1_vlan: entered promiscuous mode [ 583.961436][T13083] veth0_macvtap: entered promiscuous mode [ 584.003536][T13083] veth1_macvtap: entered promiscuous mode [ 584.046113][ T5872] Bluetooth: hci1: command tx timeout [ 584.068797][T13083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.100158][T13083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.135191][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.163878][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.210403][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.232731][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.353664][ T5946] usb 3-1: USB disconnect, device number 31 [ 584.477053][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.503274][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.630789][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.650985][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.105323][ T5929] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 585.285215][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 585.298070][ T5929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.313298][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.328325][ T5929] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.344584][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.353530][ T5929] usb 1-1: Product: syz [ 585.364031][ T5929] usb 1-1: Manufacturer: syz [ 585.369048][ T5929] usb 1-1: SerialNumber: syz [ 585.685193][ T5908] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 585.877311][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 585.894780][ T5929] usb 1-1: cannot find UAC_HEADER [ 585.907330][ T5908] usb 4-1: config 0 has no interfaces? [ 585.941083][ T5908] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 585.954058][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.985904][ T5908] usb 4-1: Product: syz [ 585.990619][ T847] usbhid 2-1:0.0: can't add hid device: -71 [ 586.000223][ T847] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 586.018407][ T5908] usb 4-1: Manufacturer: syz [ 586.030742][ T5908] usb 4-1: SerialNumber: syz [ 586.041526][ T5929] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 586.052992][ T847] usb 2-1: USB disconnect, device number 8 [ 586.074597][ T5908] usb 4-1: config 0 descriptor?? [ 586.186236][ T6101] udevd[6101]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.300755][T13287] FAULT_INJECTION: forcing a failure. [ 586.300755][T13287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.303875][T13259] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 586.325696][T13287] CPU: 0 UID: 0 PID: 13287 Comm: syz.1.2222 Not tainted syzkaller #0 PREEMPT(full) [ 586.325723][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 586.325736][T13287] Call Trace: [ 586.325745][T13287] [ 586.325755][T13287] dump_stack_lvl+0x189/0x250 [ 586.325781][T13287] ? __pfx____ratelimit+0x10/0x10 [ 586.325809][T13287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.325829][T13287] ? __pfx__printk+0x10/0x10 [ 586.325873][T13287] should_fail_ex+0x414/0x560 [ 586.325903][T13287] _copy_to_user+0x31/0xb0 [ 586.325927][T13287] simple_read_from_buffer+0xe1/0x170 [ 586.325960][T13287] proc_fail_nth_read+0x1b3/0x220 [ 586.325985][T13287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.326010][T13287] ? rw_verify_area+0x2a6/0x4d0 [ 586.326033][T13287] ? __lock_acquire+0xab9/0xd20 [ 586.326054][T13287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.326077][T13287] vfs_read+0x200/0xa30 [ 586.326099][T13287] ? fdget_pos+0x247/0x320 [ 586.326131][T13287] ? __pfx___mutex_lock+0x10/0x10 [ 586.326153][T13287] ? __pfx_vfs_read+0x10/0x10 [ 586.326180][T13287] ? __fget_files+0x2a/0x420 [ 586.326211][T13287] ? __fget_files+0x3a0/0x420 [ 586.326237][T13287] ? __fget_files+0x2a/0x420 [ 586.326276][T13287] ksys_read+0x145/0x250 [ 586.326303][T13287] ? __pfx_ksys_read+0x10/0x10 [ 586.326332][T13287] ? do_syscall_64+0xbe/0xfa0 [ 586.326367][T13287] do_syscall_64+0xfa/0xfa0 [ 586.326395][T13287] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.326425][T13287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.326446][T13287] ? clear_bhb_loop+0x60/0xb0 [ 586.326472][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.326491][T13287] RIP: 0033:0x7f9651f8d5bc [ 586.326510][T13287] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 586.326529][T13287] RSP: 002b:00007f9652dd9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.326553][T13287] RAX: ffffffffffffffda RBX: 00007f96521d5fa0 RCX: 00007f9651f8d5bc [ 586.326568][T13287] RDX: 000000000000000f RSI: 00007f9652dd90a0 RDI: 0000000000000005 [ 586.326582][T13287] RBP: 00007f9652dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 586.326595][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.326607][T13287] R13: 00007f96521d6038 R14: 00007f96521d5fa0 R15: 00007ffd182b7258 [ 586.326653][T13287] [ 586.333234][ T847] usb 1-1: USB disconnect, device number 119 [ 586.334172][ T30] audit: type=1326 audit(1757634918.701:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13258 comm="syz.3.2220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2adcb8eba9 code=0x0 [ 586.480673][ T5908] usb 4-1: USB disconnect, device number 122 [ 587.345652][ T5947] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 587.485934][ T5947] usb 3-1: device descriptor read/64, error -71 [ 587.725368][ T5947] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 587.855044][ T5947] usb 3-1: device descriptor read/64, error -71 [ 587.967068][ T5947] usb usb3-port1: attempt power cycle [ 588.205539][ T5908] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 588.315071][ T5947] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 588.335909][ T5947] usb 3-1: device descriptor read/8, error -71 [ 588.358442][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.370049][ T5908] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 588.380435][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.391195][ T5908] usb 4-1: config 0 descriptor?? [ 588.575128][ T5947] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 588.595824][ T5947] usb 3-1: device descriptor read/8, error -71 [ 588.707421][ T5947] usb usb3-port1: unable to enumerate USB device [ 589.011135][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2233'. [ 589.445128][ T847] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 589.595069][ T847] usb 1-1: Using ep0 maxpacket: 32 [ 589.610209][ T847] usb 1-1: config 109 has an invalid interface number: 83 but max is 1 [ 589.620369][ T847] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 589.637189][ T847] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 589.650296][ T847] usb 1-1: config 109 has an invalid descriptor of length 1, skipping remainder of the config [ 589.662529][ T847] usb 1-1: config 109 has 1 interface, different from the descriptor's value: 2 [ 589.676578][ T847] usb 1-1: config 109 has no interface number 0 [ 589.683298][ T847] usb 1-1: config 109 interface 83 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 589.699317][ T847] usb 1-1: config 109 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 589.723399][ T847] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=5d.ee [ 589.732880][ T847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.742939][ T847] usb 1-1: Product: „ᣛਏ鴰쬏苃筲辔ꂷ分㈮ﲴ琠벎䋍硴᠎閇熍瞒慄鍻ﱶ腼㥧쥜鑅ᚗફ앇쾚ї뗽荣誎ᴻ綳태帒眑Ꭴ臘遽ำ쩫顰羫⪍ᕐ柋龸㇆㽛ħ漅⣫ә㶯蟍闼ᵊ嚟趭赋艚ꂘ❖梖㪪ᾬ튑嶺瓣뾤 [ 589.769629][ T847] usb 1-1: Manufacturer: 埫斻咨뮆슌聗障ꟻ퇅籵ū竊ﾔ斘┅嗰瑢宋ᗨ撘ﰨ㚟빈㩀ﶶ熊脒齚偳븶苿ﳝᱯ⛯틼捽㖒咅넝⹷᪐睳懔鴾ﭰ쮃證䂽꾔ᅗ䬜ꆬᾍ쯵⟹❅삽葕㸓鉍齹؝㤽戴뺊ỞჇ䋬픸薯煲萱툥ᬲ迅箣⏙궮앵萸늑%仃仞ቨ籗夳䜋㸣׆닳౺살ꃰ㈲枰䐕緯 [ 589.802951][ T847] usb 1-1: SerialNumber: ᰉ [ 589.946448][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 590.105006][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 590.112355][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 590.127938][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 590.146405][ T24] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 590.158440][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.167064][ T24] usb 2-1: Product: syz [ 590.171675][ T24] usb 2-1: Manufacturer: syz [ 590.179951][ T24] usb 2-1: SerialNumber: syz [ 590.191908][ T24] usb 2-1: config 0 descriptor?? [ 590.295090][ T24] rc_core: IR keymap rc-streamzap not found [ 590.302253][ T24] Registered IR keymap rc-empty [ 590.317218][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 590.339928][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 590.641172][T13344] fuse: Unknown parameter 'use00000000000000000000' [ 591.063346][ T5908] usbhid 4-1:0.0: can't add hid device: -71 [ 591.109060][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 591.188890][ T5908] usb 4-1: USB disconnect, device number 123 [ 591.528641][T13358] FAULT_INJECTION: forcing a failure. [ 591.528641][T13358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.544835][T13358] CPU: 0 UID: 0 PID: 13358 Comm: syz.2.2242 Not tainted syzkaller #0 PREEMPT(full) [ 591.544865][T13358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 591.544878][T13358] Call Trace: [ 591.544886][T13358] [ 591.544895][T13358] dump_stack_lvl+0x189/0x250 [ 591.544923][T13358] ? __pfx____ratelimit+0x10/0x10 [ 591.544953][T13358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.544973][T13358] ? __pfx__printk+0x10/0x10 [ 591.545016][T13358] should_fail_ex+0x414/0x560 [ 591.545046][T13358] _copy_to_user+0x31/0xb0 [ 591.545071][T13358] simple_read_from_buffer+0xe1/0x170 [ 591.545103][T13358] proc_fail_nth_read+0x1b3/0x220 [ 591.545127][T13358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.545152][T13358] ? rw_verify_area+0x2a6/0x4d0 [ 591.545173][T13358] ? __lock_acquire+0xab9/0xd20 [ 591.545191][T13358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.545213][T13358] vfs_read+0x200/0xa30 [ 591.545235][T13358] ? fdget_pos+0x247/0x320 [ 591.545266][T13358] ? __pfx___mutex_lock+0x10/0x10 [ 591.545287][T13358] ? __pfx_vfs_read+0x10/0x10 [ 591.545312][T13358] ? __fget_files+0x2a/0x420 [ 591.545343][T13358] ? __fget_files+0x3a0/0x420 [ 591.545369][T13358] ? __fget_files+0x2a/0x420 [ 591.545405][T13358] ksys_read+0x145/0x250 [ 591.545432][T13358] ? __pfx_ksys_read+0x10/0x10 [ 591.545461][T13358] ? do_syscall_64+0xbe/0xfa0 [ 591.545495][T13358] do_syscall_64+0xfa/0xfa0 [ 591.545523][T13358] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.545552][T13358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.545572][T13358] ? clear_bhb_loop+0x60/0xb0 [ 591.545606][T13358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.545627][T13358] RIP: 0033:0x7f5362d8d5bc [ 591.545646][T13358] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 591.545664][T13358] RSP: 002b:00007f5363c4a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.545688][T13358] RAX: ffffffffffffffda RBX: 00007f5362fd5fa0 RCX: 00007f5362d8d5bc [ 591.545703][T13358] RDX: 000000000000000f RSI: 00007f5363c4a0a0 RDI: 0000000000000004 [ 591.545717][T13358] RBP: 00007f5363c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 591.545730][T13358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.545743][T13358] R13: 00007f5362fd6038 R14: 00007f5362fd5fa0 R15: 00007fff734e67a8 [ 591.545780][T13358] [ 591.815221][T13362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.270322][ T847] usb 1-1: USB disconnect, device number 120 [ 592.348493][T13370] vivid-000: disconnect [ 592.394054][T13373] vivid-001: disconnect [ 592.475035][ T5909] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 592.542802][T13377] FAULT_INJECTION: forcing a failure. [ 592.542802][T13377] name failslab, interval 1, probability 0, space 0, times 0 [ 592.556028][T13377] CPU: 0 UID: 0 PID: 13377 Comm: syz.3.2247 Not tainted syzkaller #0 PREEMPT(full) [ 592.556059][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.556071][T13377] Call Trace: [ 592.556080][T13377] [ 592.556090][T13377] dump_stack_lvl+0x189/0x250 [ 592.556117][T13377] ? __pfx____ratelimit+0x10/0x10 [ 592.556147][T13377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.556167][T13377] ? __pfx__printk+0x10/0x10 [ 592.556203][T13377] ? __pfx___might_resched+0x10/0x10 [ 592.556225][T13377] ? fs_reclaim_acquire+0x7d/0x100 [ 592.556255][T13377] should_fail_ex+0x414/0x560 [ 592.556286][T13377] should_failslab+0xa8/0x100 [ 592.556313][T13377] __kmalloc_noprof+0xcb/0x7f0 [ 592.556334][T13377] ? tomoyo_encode+0x28b/0x550 [ 592.556372][T13377] tomoyo_encode+0x28b/0x550 [ 592.556407][T13377] tomoyo_realpath_from_path+0x58d/0x5d0 [ 592.556440][T13377] ? tomoyo_domain+0xd9/0x130 [ 592.556467][T13377] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 592.556493][T13377] tomoyo_path_number_perm+0x1e8/0x5a0 [ 592.556523][T13377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 592.556604][T13377] ? __fget_files+0x2a/0x420 [ 592.556637][T13377] ? __fget_files+0x3a0/0x420 [ 592.556664][T13377] ? __fget_files+0x2a/0x420 [ 592.556695][T13377] security_file_ioctl+0xcb/0x2d0 [ 592.556722][T13377] __se_sys_ioctl+0x47/0x170 [ 592.556747][T13377] do_syscall_64+0xfa/0xfa0 [ 592.556777][T13377] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.556803][T13377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.556823][T13377] ? clear_bhb_loop+0x60/0xb0 [ 592.556848][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.556868][T13377] RIP: 0033:0x7f2adcb8eba9 [ 592.556890][T13377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.556908][T13377] RSP: 002b:00007f2adda5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.556931][T13377] RAX: ffffffffffffffda RBX: 00007f2adcdd5fa0 RCX: 00007f2adcb8eba9 [ 592.556946][T13377] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 592.556958][T13377] RBP: 00007f2adda5e090 R08: 0000000000000000 R09: 0000000000000000 [ 592.556969][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.556982][T13377] R13: 00007f2adcdd6038 R14: 00007f2adcdd5fa0 R15: 00007fffa59b42b8 [ 592.557016][T13377] [ 592.557041][T13377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 592.876879][ T5909] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 592.885404][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.895924][ T5909] usb 3-1: config 0 has no interface number 0 [ 592.902074][ T5909] usb 3-1: config 0 interface 208 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 592.924968][ T5909] usb 3-1: config 0 interface 208 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 592.934872][ T5909] usb 3-1: config 0 interface 208 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 592.955112][ T5909] usb 3-1: config 0 interface 208 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 592.986911][ T5909] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=ff.b1 [ 592.996626][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.004656][ T5909] usb 3-1: Product: syz [ 593.018797][ T5909] usb 3-1: Manufacturer: syz [ 593.025288][ T5909] usb 3-1: SerialNumber: syz [ 593.050029][ T5909] usb 3-1: config 0 descriptor?? [ 593.068518][ T5909] kvaser_usb 3-1:0.208: error -ENODEV: Cannot get usb endpoint(s) [ 593.205704][T13372] vivid-001: reconnect [ 593.274586][ T5909] usb 3-1: USB disconnect, device number 36 [ 593.345289][ T5947] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 593.388900][T13385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.404094][T13385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.410561][ T5864] Bluetooth: hci1: command 0x0405 tx timeout [ 593.505123][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 593.522308][ T5947] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 593.539311][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.554359][ T5947] usb 4-1: config 0 descriptor?? [ 593.584227][ T5947] as10x_usb: device has been detected [ 593.608342][ T5947] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 593.673534][ T5947] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 593.675130][ T5908] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 593.798523][ T5947] as10x_usb: error during firmware upload part1 [ 593.814745][ T5947] Registered device nBox DVB-T Dongle [ 593.831201][ T5947] usb 4-1: USB disconnect, device number 124 [ 593.865312][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 593.873089][ T5908] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 593.915307][ T5908] usb 1-1: config 0 has no interface number 0 [ 593.921589][ T5908] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 593.949497][ T5908] usb 1-1: config 0 interface 1 has no altsetting 0 [ 593.962790][ T5947] Unregistered device nBox DVB-T Dongle [ 593.986872][ T5947] as10x_usb: device has been disconnected [ 593.997383][ T5908] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 594.037133][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.062814][ T5908] usb 1-1: Product: syz [ 594.075681][ T5946] usb 2-1: USB disconnect, device number 9 [ 594.077517][ T5908] usb 1-1: Manufacturer: syz [ 594.103822][T13348] vivid-000: reconnect [ 594.120141][ T5908] usb 1-1: SerialNumber: syz [ 594.190676][ T5908] usb 1-1: config 0 descriptor?? [ 594.422663][ T5908] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 594.434800][ T5908] cx231xx 1-1:0.1: Failed to read PCB config [ 594.441321][ T5908] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 594.481476][ T5908] usb 1-1: USB disconnect, device number 121 [ 594.556944][T13394] FAULT_INJECTION: forcing a failure. [ 594.556944][T13394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.582251][T13394] CPU: 1 UID: 0 PID: 13394 Comm: syz.1.2255 Not tainted syzkaller #0 PREEMPT(full) [ 594.582283][T13394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 594.582296][T13394] Call Trace: [ 594.582306][T13394] [ 594.582316][T13394] dump_stack_lvl+0x189/0x250 [ 594.582343][T13394] ? __pfx____ratelimit+0x10/0x10 [ 594.582374][T13394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.582395][T13394] ? __pfx__printk+0x10/0x10 [ 594.582439][T13394] should_fail_ex+0x414/0x560 [ 594.582470][T13394] strncpy_from_user+0x36/0x290 [ 594.582498][T13394] getname_flags+0xf3/0x540 [ 594.582532][T13394] user_path_at+0x24/0x60 [ 594.582554][T13394] __x64_sys_umount+0xee/0x160 [ 594.582586][T13394] ? __pfx___x64_sys_umount+0x10/0x10 [ 594.582615][T13394] ? do_syscall_64+0xbe/0xfa0 [ 594.582650][T13394] do_syscall_64+0xfa/0xfa0 [ 594.582679][T13394] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.582709][T13394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.582729][T13394] ? clear_bhb_loop+0x60/0xb0 [ 594.582757][T13394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.582777][T13394] RIP: 0033:0x7f9651f8eba9 [ 594.582797][T13394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.582814][T13394] RSP: 002b:00007f9652dd9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 594.582838][T13394] RAX: ffffffffffffffda RBX: 00007f96521d5fa0 RCX: 00007f9651f8eba9 [ 594.582854][T13394] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000100 [ 594.582867][T13394] RBP: 00007f9652dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 594.582880][T13394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.582893][T13394] R13: 00007f96521d6038 R14: 00007f96521d5fa0 R15: 00007ffd182b7258 [ 594.582930][T13394] [ 595.436618][ T5946] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 595.493335][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.505555][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.514759][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.535388][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.550171][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 595.605176][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 595.631077][ T5946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 145, changing to 11 [ 595.666613][ T5946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.706812][ T5946] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 595.732807][ T5946] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 595.769279][ T5946] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.799621][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.818878][ T5946] usb 4-1: Product: syz [ 595.823197][ T5946] usb 4-1: Manufacturer: syz [ 595.845279][ T5946] usb 4-1: SerialNumber: syz [ 596.005410][ T5909] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 596.103517][T13405] chnl_net:caif_netlink_parms(): no params data found [ 596.175997][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.187935][ T5909] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 596.197409][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.228403][ T5909] usb 1-1: config 0 descriptor?? [ 596.276281][ T5946] cdc_ncm 4-1:1.0: bind() failure [ 596.299750][ T5946] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 596.306816][ T5946] cdc_ncm 4-1:1.1: bind() failure [ 596.314377][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.322417][ T5946] usb 4-1: USB disconnect, device number 125 [ 596.359397][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.388881][T13405] bridge_slave_0: entered allmulticast mode [ 596.410500][T13405] bridge_slave_0: entered promiscuous mode [ 596.472831][ T202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.498593][T13405] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.508458][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.516299][T13405] bridge_slave_1: entered allmulticast mode [ 596.529433][T13405] bridge_slave_1: entered promiscuous mode [ 596.597419][ T202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.662171][T13405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.684591][T13405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.746196][ T202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.801109][T13405] team0: Port device team_slave_0 added [ 596.818489][T13405] team0: Port device team_slave_1 added [ 596.876668][ T202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.963608][T13405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.975889][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.004149][T13405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.021948][T13405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.034589][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.062414][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.071610][T13405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.085850][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.097674][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.115172][ T5946] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 597.126822][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.135136][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 597.244679][T13405] hsr_slave_0: entered promiscuous mode [ 597.252389][T13405] hsr_slave_1: entered promiscuous mode [ 597.305113][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 597.317521][ T5946] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 597.331215][ T5946] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 597.340538][ T5946] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 597.348891][ T5946] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 597.357312][ T5946] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 597.367364][ T5946] usb 4-1: config 0 has no interface number 0 [ 597.373757][ T5946] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 597.385145][ T5946] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 597.396402][ T5946] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid maxpacket 65517, setting to 64 [ 597.409527][ T5946] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 597.423258][ T5946] usb 4-1: config 0 interface 125 has no altsetting 0 [ 597.430763][ T202] bridge_slave_1: left allmulticast mode [ 597.438045][ T202] bridge_slave_1: left promiscuous mode [ 597.444406][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.451908][ T5946] usb 4-1: config 0 interface 125 has no altsetting 2 [ 597.462895][ T5946] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 597.475588][ T202] bridge_slave_0: left allmulticast mode [ 597.481294][ T202] bridge_slave_0: left promiscuous mode [ 597.488770][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.498713][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.508096][ T5946] usb 4-1: Product: syz [ 597.512338][ T5946] usb 4-1: Manufacturer: syz [ 597.519641][ T5946] usb 4-1: SerialNumber: syz [ 597.532836][ T5946] usb 4-1: config 0 descriptor?? [ 597.550209][ T5946] usb 4-1: selecting invalid altsetting 2 [ 597.646286][ T5872] Bluetooth: hci2: command tx timeout [ 597.942400][T13417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2265'. [ 598.330702][ T202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.362162][ T202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.391113][ T202] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 598.415830][ T202] bond0 (unregistering): Released all slaves [ 598.562414][ C1] usb 4-1: async_complete: urb error -71 [ 598.568631][ C1] usb 4-1: async_complete: urb error -71 [ 598.574501][ C1] usb 4-1: async_complete: urb error -71 [ 598.580299][ C1] usb 4-1: async_complete: urb error -71 [ 598.623224][ T5946] get_1284_register: usb error -71 [ 598.630061][ T202] tipc: Left network mode [ 598.630195][ T5946] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 598.661262][ T5946] usb 4-1: USB disconnect, device number 126 [ 598.791884][ T5909] usbhid 1-1:0.0: can't add hid device: -71 [ 598.828633][ T5909] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 598.853871][ T5909] usb 1-1: USB disconnect, device number 122 [ 599.063132][ T202] hsr_slave_0: left promiscuous mode [ 599.072153][ T202] hsr_slave_1: left promiscuous mode [ 599.087500][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.105223][ T202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.133105][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.158538][ T202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.166320][ T5872] Bluetooth: hci0: command tx timeout [ 599.279602][ T202] veth1_macvtap: left promiscuous mode [ 599.297987][ T202] veth0_macvtap: left promiscuous mode [ 599.303797][ T202] veth1_vlan: left promiscuous mode [ 599.328304][ T202] veth0_vlan: left promiscuous mode [ 599.519610][T13452] FAULT_INJECTION: forcing a failure. [ 599.519610][T13452] name failslab, interval 1, probability 0, space 0, times 0 [ 599.561274][T13452] CPU: 1 UID: 0 PID: 13452 Comm: syz.0.2266 Not tainted syzkaller #0 PREEMPT(full) [ 599.561305][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 599.561319][T13452] Call Trace: [ 599.561328][T13452] [ 599.561339][T13452] dump_stack_lvl+0x189/0x250 [ 599.561366][T13452] ? __pfx____ratelimit+0x10/0x10 [ 599.561398][T13452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.561419][T13452] ? __pfx__printk+0x10/0x10 [ 599.561451][T13452] ? __pfx___might_resched+0x10/0x10 [ 599.561476][T13452] ? fs_reclaim_acquire+0x7d/0x100 [ 599.561518][T13452] should_fail_ex+0x414/0x560 [ 599.561549][T13452] should_failslab+0xa8/0x100 [ 599.561577][T13452] kmem_cache_alloc_noprof+0x74/0x6e0 [ 599.561600][T13452] ? fuse_get_req+0x7b9/0x10b0 [ 599.561627][T13452] ? fuse_change_attributes_common+0x9fa/0xfd0 [ 599.561655][T13452] fuse_get_req+0x7b9/0x10b0 [ 599.561702][T13452] ? __pfx_fuse_get_req+0x10/0x10 [ 599.561732][T13452] ? _raw_spin_unlock+0x28/0x50 [ 599.561758][T13452] ? fuse_change_attributes_i+0x51d/0x840 [ 599.561787][T13452] ? fuse_dax_dontcache+0xed/0x150 [ 599.561827][T13452] __fuse_simple_request+0x2aa/0x18d0 [ 599.561870][T13452] ? __pfx___fuse_simple_request+0x10/0x10 [ 599.561943][T13452] fuse_getxattr+0x2d7/0x470 [ 599.561978][T13452] ? __pfx_fuse_getxattr+0x10/0x10 [ 599.562005][T13452] ? fuse_update_get_attr+0x518/0x10f0 [ 599.562046][T13452] ? __pfx_fuse_update_get_attr+0x10/0x10 [ 599.562081][T13452] ? __lock_acquire+0xab9/0xd20 [ 599.562117][T13452] fuse_xattr_get+0x80/0xa0 [ 599.562143][T13452] ? __pfx_fuse_xattr_get+0x10/0x10 [ 599.562172][T13452] __vfs_getxattr+0x3f1/0x430 [ 599.562214][T13452] cap_inode_need_killpriv+0x45/0x60 [ 599.562239][T13452] security_inode_need_killpriv+0x89/0x270 [ 599.562266][T13452] file_remove_privs_flags+0x297/0x5f0 [ 599.562310][T13452] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 599.562348][T13452] ? aa_file_perm+0x44d/0x1550 [ 599.562377][T13452] ? generic_write_checks_count+0x43e/0x540 [ 599.562414][T13452] file_modified_flags+0x4c/0x560 [ 599.562435][T13452] ? generic_write_checks+0xa6/0x110 [ 599.562470][T13452] fuse_file_write_iter+0xad4/0x10a0 [ 599.562518][T13452] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 599.562563][T13452] ? rcu_read_lock_any_held+0xb3/0x120 [ 599.562590][T13452] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 599.562635][T13452] vfs_write+0x5c6/0xb30 [ 599.562666][T13452] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 599.562699][T13452] ? __pfx_vfs_write+0x10/0x10 [ 599.562737][T13452] ? __fget_files+0x2a/0x420 [ 599.562776][T13452] ksys_write+0x145/0x250 [ 599.562805][T13452] ? __pfx_ksys_write+0x10/0x10 [ 599.562835][T13452] ? do_syscall_64+0xbe/0xfa0 [ 599.562872][T13452] do_syscall_64+0xfa/0xfa0 [ 599.562900][T13452] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.562930][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.562951][T13452] ? clear_bhb_loop+0x60/0xb0 [ 599.562978][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.562998][T13452] RIP: 0033:0x7f16dab8eba9 [ 599.563024][T13452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.563042][T13452] RSP: 002b:00007f16dba73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.563066][T13452] RAX: ffffffffffffffda RBX: 00007f16dadd6180 RCX: 00007f16dab8eba9 [ 599.563081][T13452] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000004 [ 599.563095][T13452] RBP: 00007f16dba73090 R08: 0000000000000000 R09: 0000000000000000 [ 599.563109][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.563121][T13452] R13: 00007f16dadd6218 R14: 00007f16dadd6180 R15: 00007fffbb0c4568 [ 599.563160][T13452] [ 599.725003][ T5872] Bluetooth: hci2: command tx timeout [ 599.961713][ T44] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 600.116942][ T44] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 600.130096][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 600.141636][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.149740][ T44] usb 4-1: Product: syz [ 600.155165][ T44] usb 4-1: Manufacturer: syz [ 600.159984][ T44] usb 4-1: SerialNumber: syz [ 600.186122][ T44] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 600.212509][ T5947] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 600.265188][ T5946] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 600.426319][T13451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.441426][T13451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.456491][ T5946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.468639][T13451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.477549][ T5946] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 600.493642][ T5946] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 600.500882][T13451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.503322][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.513211][T13451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.543275][T13451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.556804][ T5946] usb 1-1: config 0 descriptor?? [ 600.565631][ T202] team0 (unregistering): Port device team_slave_1 removed [ 600.619817][ T5908] usb 4-1: USB disconnect, device number 127 [ 600.660004][ T202] team0 (unregistering): Port device team_slave_0 removed [ 601.013541][ T5909] usb 1-1: USB disconnect, device number 123 [ 601.255090][ T5872] Bluetooth: hci0: command tx timeout [ 601.329270][ T5947] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 601.340514][ T5947] ath9k_htc: Failed to initialize the device [ 601.367374][ T5908] usb 4-1: ath9k_htc: USB layer deinitialized [ 601.563959][T13405] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 601.593250][T13405] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 601.657304][T13405] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 601.680991][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 601.738169][T13418] chnl_net:caif_netlink_parms(): no params data found [ 601.771374][T13405] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 601.845216][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 601.869520][ T5908] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 601.893198][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 601.910364][ T5908] usb 4-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 601.920373][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.938750][ T5908] usb 4-1: config 0 descriptor?? [ 601.966837][ T5872] Bluetooth: hci2: command tx timeout [ 602.173247][T13418] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.191920][T13418] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.221938][T13418] bridge_slave_0: entered allmulticast mode [ 602.241194][T13418] bridge_slave_0: entered promiscuous mode [ 602.271254][T13418] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.282533][T13418] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.289972][T12370] block nbd2: Possible stuck request ffff8880259d7000: control (read@0,1024B). Runtime 60 seconds [ 602.295698][T13418] bridge_slave_1: entered allmulticast mode [ 602.301564][T12370] block nbd2: Possible stuck request ffff8880259d71c0: control (read@1024,1024B). Runtime 60 seconds [ 602.322699][T12370] block nbd2: Possible stuck request ffff8880259d7380: control (read@2048,1024B). Runtime 60 seconds [ 602.333878][T12370] block nbd2: Possible stuck request ffff8880259d7540: control (read@3072,1024B). Runtime 60 seconds [ 602.337217][T13418] bridge_slave_1: entered promiscuous mode [ 602.449497][T13418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.465540][T13418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.518635][T13418] team0: Port device team_slave_0 added [ 602.534029][T13418] team0: Port device team_slave_1 added [ 602.582707][T13418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.591439][T13418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.623280][ T44] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 602.630822][T13418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.652202][T13418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.659971][T13418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.688824][T13418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.732835][T13405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.779057][ T44] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 602.797436][ T44] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 602.813095][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.838977][ T44] usb 1-1: Product: syz [ 602.840701][T13418] hsr_slave_0: entered promiscuous mode [ 602.843376][ T44] usb 1-1: Manufacturer: syz [ 602.858975][ T44] usb 1-1: SerialNumber: syz [ 602.871153][T13418] hsr_slave_1: entered promiscuous mode [ 602.878627][T13418] debugfs: 'hsr0' already exists in 'hsr' [ 602.892969][T13418] Cannot create hsr debugfs directory [ 602.913114][ T44] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 602.942523][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 603.009037][T13405] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.129346][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.137239][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.176317][T13492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.203847][T13492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.252015][T13492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.253394][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.268894][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.281397][ T5908] usb 4-1: USB disconnect, device number 2 [ 603.291654][T13492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.327046][ T5872] Bluetooth: hci0: command tx timeout [ 603.347616][T13492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.413041][T13492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.449576][ T44] usb 1-1: USB disconnect, device number 124 [ 603.827795][T13418] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 603.874034][T13418] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 603.903289][T13418] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 603.930135][T13418] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 604.025995][T13528] FAULT_INJECTION: forcing a failure. [ 604.025995][T13528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.048133][ T5872] Bluetooth: hci2: command tx timeout [ 604.049969][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 604.064227][T13528] CPU: 0 UID: 0 PID: 13528 Comm: syz.3.2274 Not tainted syzkaller #0 PREEMPT(full) [ 604.064260][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.064272][T13528] Call Trace: [ 604.064280][T13528] [ 604.064288][T13528] dump_stack_lvl+0x189/0x250 [ 604.064312][T13528] ? __pfx____ratelimit+0x10/0x10 [ 604.064341][T13528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.064362][T13528] ? __pfx__printk+0x10/0x10 [ 604.064402][T13528] should_fail_ex+0x414/0x560 [ 604.064432][T13528] _copy_from_user+0x2d/0xb0 [ 604.064465][T13528] __copy_msghdr+0x3c5/0x5b0 [ 604.064492][T13528] ___sys_sendmsg+0x1a5/0x2a0 [ 604.064517][T13528] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.064578][T13528] ? __fget_files+0x2a/0x420 [ 604.064605][T13528] ? __fget_files+0x3a0/0x420 [ 604.064642][T13528] __x64_sys_sendmsg+0x19b/0x260 [ 604.064668][T13528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.064701][T13528] ? __pfx_ksys_write+0x10/0x10 [ 604.064730][T13528] ? do_syscall_64+0xbe/0xfa0 [ 604.064764][T13528] do_syscall_64+0xfa/0xfa0 [ 604.064791][T13528] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.064820][T13528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.064842][T13528] ? clear_bhb_loop+0x60/0xb0 [ 604.064868][T13528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.064893][T13528] RIP: 0033:0x7f2adcb8eba9 [ 604.064911][T13528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.064928][T13528] RSP: 002b:00007f2adda5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.064950][T13528] RAX: ffffffffffffffda RBX: 00007f2adcdd5fa0 RCX: 00007f2adcb8eba9 [ 604.064965][T13528] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 604.064979][T13528] RBP: 00007f2adda5e090 R08: 0000000000000000 R09: 0000000000000000 [ 604.064992][T13528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.065005][T13528] R13: 00007f2adcdd6038 R14: 00007f2adcdd5fa0 R15: 00007fffa59b42b8 [ 604.065041][T13528] [ 604.081973][ T24] ath9k_htc: Failed to initialize the device [ 604.232117][T13405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.315719][T13532] fuse: Unknown parameter 'user_id00000000000000000000' [ 604.423375][ T44] usb 1-1: ath9k_htc: USB layer deinitialized [ 604.494019][T13418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.570665][T13418] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.596258][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.603807][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.650115][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.657724][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.775729][ T44] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 604.935768][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 604.955188][ T44] usb 1-1: config index 0 descriptor too short (expected 241, got 72) [ 604.975163][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 605.013308][ T44] usb 1-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 605.036840][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.072527][T13405] veth0_vlan: entered promiscuous mode [ 605.083538][ T44] usb 1-1: config 0 descriptor?? [ 605.124530][T13405] veth1_vlan: entered promiscuous mode [ 605.222121][T13405] veth0_macvtap: entered promiscuous mode [ 605.254650][T13405] veth1_macvtap: entered promiscuous mode [ 605.301342][T13418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.321359][T13405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.341222][T13405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.374200][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.411916][ T5872] Bluetooth: hci0: command tx timeout [ 605.426513][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.447897][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.458087][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.631189][T13543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.660199][T13543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.744872][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.768575][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.984421][T13418] veth0_vlan: entered promiscuous mode [ 606.033796][T13418] veth1_vlan: entered promiscuous mode [ 606.070726][T13575] fuse: Unknown parameter 'user_id00000000000000000000' [ 606.102888][T13418] veth0_macvtap: entered promiscuous mode [ 606.119435][T13418] veth1_macvtap: entered promiscuous mode [ 606.166539][T13418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.189246][T13418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.206361][ T5946] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 606.242940][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.252008][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.270364][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.280271][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.289627][T13579] netlink: 14428 bytes leftover after parsing attributes in process `syz.3.2284'. [ 606.303015][T13579] net_ratelimit: 1990 callbacks suppressed [ 606.303037][T13579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.321930][T13579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2284'. [ 606.372586][ T5908] usb 1-1: USB disconnect, device number 125 [ 606.373090][ T5946] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 606.401895][ T5946] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 606.421109][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.432879][ T5946] usb 5-1: Product: syz [ 606.464000][ T5946] usb 5-1: Manufacturer: syz [ 606.475357][ T5946] usb 5-1: SerialNumber: syz [ 606.506599][ T5946] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 606.536255][ T44] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 606.596243][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.622093][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.696407][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.715389][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.760242][T13572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.788180][T13586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2287'. [ 606.792830][T13572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.887847][T13572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.955736][T13572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.998835][T13572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.025628][T13593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2289'. [ 607.048742][T13572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.106297][ T5947] usb 5-1: USB disconnect, device number 2 [ 607.183809][T13596] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2290'. [ 607.535284][ T5908] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 607.649354][ T44] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 607.656645][ T44] ath9k_htc: Failed to initialize the device [ 607.663346][ T5947] usb 5-1: ath9k_htc: USB layer deinitialized [ 607.675281][ T5908] usb 1-1: device descriptor read/64, error -71 [ 607.775024][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 607.915137][ T5908] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 607.925073][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 607.941495][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 607.954031][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 607.970922][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 607.980635][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.989046][ T24] usb 4-1: Product: syz [ 607.994701][ T24] usb 4-1: Manufacturer: syz [ 608.000259][ T24] usb 4-1: SerialNumber: syz [ 608.019126][ T24] usb 4-1: config 0 descriptor?? [ 608.037772][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 608.048766][ T5908] usb 1-1: device descriptor read/64, error -71 [ 608.050097][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 608.175319][ T5908] usb usb1-port1: attempt power cycle [ 608.525574][ T5908] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 608.549593][ T5908] usb 1-1: device descriptor read/8, error -71 [ 608.649792][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 608.665061][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 608.800557][ T5908] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 608.843239][ T5908] usb 1-1: device descriptor read/8, error -71 [ 608.877530][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 608.898979][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 608.985131][ T5908] usb usb1-port1: unable to enumerate USB device [ 609.048529][T13630] FAULT_INJECTION: forcing a failure. [ 609.048529][T13630] name failslab, interval 1, probability 0, space 0, times 0 [ 609.062267][T13630] CPU: 0 UID: 0 PID: 13630 Comm: syz.4.2304 Not tainted syzkaller #0 PREEMPT(full) [ 609.062295][T13630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.062307][T13630] Call Trace: [ 609.062316][T13630] [ 609.062332][T13630] dump_stack_lvl+0x189/0x250 [ 609.062358][T13630] ? __pfx____ratelimit+0x10/0x10 [ 609.062387][T13630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.062407][T13630] ? __pfx__printk+0x10/0x10 [ 609.062437][T13630] ? __pfx___might_resched+0x10/0x10 [ 609.062462][T13630] ? fs_reclaim_acquire+0x7d/0x100 [ 609.062492][T13630] should_fail_ex+0x414/0x560 [ 609.062523][T13630] should_failslab+0xa8/0x100 [ 609.062549][T13630] __kmalloc_cache_noprof+0x6f/0x6f0 [ 609.062572][T13630] ? trace_contention_end+0x39/0x120 [ 609.062596][T13630] ? vhost_task_create+0xf6/0x290 [ 609.062629][T13630] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 609.062661][T13630] vhost_task_create+0xf6/0x290 [ 609.062697][T13630] ? arch_stack_walk+0xfc/0x150 [ 609.062723][T13630] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 609.062755][T13630] ? __pfx_vhost_task_create+0x10/0x10 [ 609.062792][T13630] ? __pfx_vhost_task_fn+0x10/0x10 [ 609.062844][T13630] kvm_mmu_post_init_vm+0x14c/0x300 [ 609.062870][T13630] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 609.062900][T13630] ? __mutex_trylock_common+0x153/0x260 [ 609.062928][T13630] ? __pfx___mutex_trylock_common+0x10/0x10 [ 609.062956][T13630] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 609.062980][T13630] ? rcu_is_watching+0x15/0xb0 [ 609.063005][T13630] ? trace_contention_end+0x39/0x120 [ 609.063030][T13630] ? look_up_lock_class+0x74/0x170 [ 609.063061][T13630] ? register_lock_class+0x51/0x320 [ 609.063088][T13630] ? __lock_acquire+0xab9/0xd20 [ 609.063146][T13630] kvm_vcpu_ioctl+0x95c/0xe90 [ 609.063178][T13630] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 609.063226][T13630] ? __fget_files+0x2a/0x420 [ 609.063259][T13630] ? __fget_files+0x3a0/0x420 [ 609.063284][T13630] ? __fget_files+0x2a/0x420 [ 609.063316][T13630] ? bpf_lsm_file_ioctl+0x9/0x20 [ 609.063346][T13630] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 609.063366][T13630] __se_sys_ioctl+0xfc/0x170 [ 609.063391][T13630] do_syscall_64+0xfa/0xfa0 [ 609.063417][T13630] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.063445][T13630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.063465][T13630] ? clear_bhb_loop+0x60/0xb0 [ 609.063492][T13630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.063511][T13630] RIP: 0033:0x7fa6d6f8eba9 [ 609.063532][T13630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.063549][T13630] RSP: 002b:00007fa6d7e6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.063573][T13630] RAX: ffffffffffffffda RBX: 00007fa6d71d5fa0 RCX: 00007fa6d6f8eba9 [ 609.063589][T13630] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 609.063601][T13630] RBP: 00007fa6d7e6a090 R08: 0000000000000000 R09: 0000000000000000 [ 609.063613][T13630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.063626][T13630] R13: 00007fa6d71d6038 R14: 00007fa6d71d5fa0 R15: 00007fffcc9f7c88 [ 609.063664][T13630] [ 609.502133][T13634] I/O error, dev loop5, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 609.513367][T13634] gfs2: error -5 reading superblock [ 609.935278][ T5908] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 610.032459][T13649] netlink: 'syz.5.2309': attribute type 11 has an invalid length. [ 610.099039][ T5908] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 610.110129][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.118220][ T5908] usb 5-1: Product: syz [ 610.122407][ T5908] usb 5-1: Manufacturer: syz [ 610.127839][ T5908] usb 5-1: SerialNumber: syz [ 610.134471][ T5908] usb 5-1: config 0 descriptor?? [ 610.275580][ T44] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 610.344356][ T5908] usb 5-1: ignoring: not an USB2CAN converter [ 610.390706][T13655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.402510][T13655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.418382][ T5872] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 610.438751][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 610.450524][ T44] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 610.460217][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.470581][ T44] usb 6-1: config 0 descriptor?? [ 610.553846][T13641] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 610.561903][T13641] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 610.569106][T13641] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 610.569927][ T5946] usb 4-1: USB disconnect, device number 3 [ 610.583684][T13641] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 610.616154][ T5946] em28xx 4-1:0.0: Disconnecting em28xx [ 610.624075][ T5908] usb 5-1: USB disconnect, device number 3 [ 610.640963][ T5946] ================================================================== [ 610.649205][ T5946] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 610.657581][ T5946] Read of size 4 at addr ffff88803139e4f0 by task kworker/1:5/5946 [ 610.665518][ T5946] [ 610.667876][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 610.667905][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 610.667921][ T5946] Workqueue: usb_hub_wq hub_event [ 610.667950][ T5946] Call Trace: [ 610.667960][ T5946] [ 610.667969][ T5946] dump_stack_lvl+0x189/0x250 [ 610.667992][ T5946] ? rcu_is_watching+0x15/0xb0 [ 610.668018][ T5946] ? __kasan_check_byte+0x12/0x40 [ 610.668043][ T5946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.668063][ T5946] ? rcu_is_watching+0x15/0xb0 [ 610.668089][ T5946] ? lock_release+0x4b/0x3e0 [ 610.668114][ T5946] ? __virt_addr_valid+0x1c8/0x5c0 [ 610.668146][ T5946] ? __virt_addr_valid+0x4a5/0x5c0 [ 610.668178][ T5946] print_report+0xca/0x240 [ 610.668199][ T5946] ? media_devnode_unregister+0xe2/0xf0 [ 610.668227][ T5946] kasan_report+0x118/0x150 [ 610.668253][ T5946] ? media_devnode_unregister+0xe2/0xf0 [ 610.668284][ T5946] media_devnode_unregister+0xe2/0xf0 [ 610.668312][ T5946] media_device_unregister+0x37c/0x400 [ 610.668340][ T5946] ? em28xx_audio_fini+0x59/0x1b0 [ 610.668368][ T5946] em28xx_release_resources+0xac/0x240 [ 610.668410][ T5946] em28xx_usb_disconnect+0x19f/0x2f0 [ 610.668442][ T5946] usb_unbind_interface+0x26e/0x910 [ 610.668470][ T5946] ? __pfx_usb_unbind_interface+0x10/0x10 [ 610.668496][ T5946] device_release_driver_internal+0x4d9/0x800 [ 610.668528][ T5946] bus_remove_device+0x34d/0x410 [ 610.668551][ T5946] device_del+0x511/0x8e0 [ 610.668578][ T5946] ? __pfx_device_del+0x10/0x10 [ 610.668602][ T5946] ? kobject_put+0x446/0x480 [ 610.668625][ T5946] usb_disable_device+0x3e9/0x8a0 [ 610.668649][ T5946] usb_disconnect+0x330/0x950 [ 610.668681][ T5946] hub_event+0x1cf5/0x4a20 [ 610.668715][ T5946] ? do_raw_spin_lock+0x121/0x290 [ 610.668746][ T5946] ? register_lock_class+0x51/0x320 [ 610.668775][ T5946] ? __pfx_hub_event+0x10/0x10 [ 610.668796][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 610.668824][ T5946] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.668852][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 610.668876][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 610.668901][ T5946] process_scheduled_works+0xae1/0x17b0 [ 610.668938][ T5946] ? __pfx_process_scheduled_works+0x10/0x10 [ 610.668971][ T5946] worker_thread+0x8a0/0xda0 [ 610.668999][ T5946] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 610.669032][ T5946] ? __kthread_parkme+0x7b/0x200 [ 610.669063][ T5946] kthread+0x711/0x8a0 [ 610.669094][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 610.669121][ T5946] ? __pfx_kthread+0x10/0x10 [ 610.669152][ T5946] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.669179][ T5946] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.669209][ T5946] ? __pfx_kthread+0x10/0x10 [ 610.669237][ T5946] ret_from_fork+0x47c/0x820 [ 610.669261][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 610.669288][ T5946] ? __switch_to_asm+0x39/0x70 [ 610.669310][ T5946] ? __switch_to_asm+0x33/0x70 [ 610.669331][ T5946] ? __pfx_kthread+0x10/0x10 [ 610.669361][ T5946] ret_from_fork_asm+0x1a/0x30 [ 610.669402][ T5946] [ 610.669411][ T5946] [ 610.966311][ T5946] Allocated by task 24: [ 610.970470][ T5946] kasan_save_track+0x3e/0x80 [ 610.975156][ T5946] __kasan_kmalloc+0x93/0xb0 [ 610.979777][ T5946] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 610.985246][ T5946] __media_device_register+0x58/0x280 [ 610.990710][ T5946] em28xx_usb_probe+0x1764/0x2a20 [ 610.995750][ T5946] usb_probe_interface+0x665/0xc30 [ 611.000871][ T5946] really_probe+0x26d/0x9e0 [ 611.005466][ T5946] __driver_probe_device+0x18c/0x2f0 [ 611.010756][ T5946] driver_probe_device+0x4f/0x430 [ 611.015788][ T5946] __device_attach_driver+0x2ce/0x530 [ 611.021169][ T5946] bus_for_each_drv+0x24e/0x2e0 [ 611.026115][ T5946] __device_attach+0x2b8/0x400 [ 611.030976][ T5946] bus_probe_device+0x185/0x260 [ 611.036003][ T5946] device_add+0x7b6/0xb50 [ 611.040338][ T5946] usb_set_configuration+0x1a87/0x20e0 [ 611.045890][ T5946] usb_generic_driver_probe+0x8d/0x150 [ 611.051601][ T5946] usb_probe_device+0x1c1/0x390 [ 611.056624][ T5946] really_probe+0x26d/0x9e0 [ 611.061162][ T5946] __driver_probe_device+0x18c/0x2f0 [ 611.066469][ T5946] driver_probe_device+0x4f/0x430 [ 611.071605][ T5946] __device_attach_driver+0x2ce/0x530 [ 611.076992][ T5946] bus_for_each_drv+0x24e/0x2e0 [ 611.081955][ T5946] __device_attach+0x2b8/0x400 [ 611.086809][ T5946] bus_probe_device+0x185/0x260 [ 611.091663][ T5946] device_add+0x7b6/0xb50 [ 611.096009][ T5946] usb_new_device+0xa39/0x16f0 [ 611.100871][ T5946] hub_event+0x2958/0x4a20 [ 611.105294][ T5946] process_scheduled_works+0xae1/0x17b0 [ 611.110849][ T5946] worker_thread+0x8a0/0xda0 [ 611.115471][ T5946] kthread+0x711/0x8a0 [ 611.119681][ T5946] ret_from_fork+0x47c/0x820 [ 611.124276][ T5946] ret_from_fork_asm+0x1a/0x30 [ 611.129057][ T5946] [ 611.131389][ T5946] Freed by task 5946: [ 611.135462][ T5946] kasan_save_track+0x3e/0x80 [ 611.140239][ T5946] __kasan_save_free_info+0x46/0x50 [ 611.145441][ T5946] __kasan_slab_free+0x5b/0x80 [ 611.150208][ T5946] kfree+0x199/0x6d0 [ 611.154117][ T5946] media_devnode_release+0x61/0xa0 [ 611.159371][ T5946] device_release+0x99/0x1c0 [ 611.164049][ T5946] kobject_put+0x228/0x480 [ 611.168569][ T5946] media_devnode_unregister+0x6d/0xf0 [ 611.174071][ T5946] media_device_unregister+0x37c/0x400 [ 611.179541][ T5946] em28xx_release_resources+0xac/0x240 [ 611.185029][ T5946] em28xx_usb_disconnect+0x19f/0x2f0 [ 611.190499][ T5946] usb_unbind_interface+0x26e/0x910 [ 611.195700][ T5946] device_release_driver_internal+0x4d9/0x800 [ 611.201782][ T5946] bus_remove_device+0x34d/0x410 [ 611.206723][ T5946] device_del+0x511/0x8e0 [ 611.211055][ T5946] usb_disable_device+0x3e9/0x8a0 [ 611.216172][ T5946] usb_disconnect+0x330/0x950 [ 611.220862][ T5946] hub_event+0x1cf5/0x4a20 [ 611.225296][ T5946] process_scheduled_works+0xae1/0x17b0 [ 611.230852][ T5946] worker_thread+0x8a0/0xda0 [ 611.235458][ T5946] kthread+0x711/0x8a0 [ 611.239558][ T5946] ret_from_fork+0x47c/0x820 [ 611.244169][ T5946] ret_from_fork_asm+0x1a/0x30 [ 611.248948][ T5946] [ 611.251280][ T5946] The buggy address belongs to the object at ffff88803139e000 [ 611.251280][ T5946] which belongs to the cache kmalloc-2k of size 2048 [ 611.265356][ T5946] The buggy address is located 1264 bytes inside of [ 611.265356][ T5946] freed 2048-byte region [ffff88803139e000, ffff88803139e800) [ 611.279593][ T5946] [ 611.281952][ T5946] The buggy address belongs to the physical page: [ 611.288393][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803139f000 pfn:0x31398 [ 611.298750][ T5946] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 611.307356][ T5946] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 611.316124][ T5946] page_type: f5(slab) [ 611.320120][ T5946] raw: 00fff00000000240 ffff88801a842000 ffffea0000c25c10 ffffea00019c9410 [ 611.328821][ T5946] raw: ffff88803139f000 0000000000080006 00000000f5000000 0000000000000000 [ 611.337685][ T5946] head: 00fff00000000240 ffff88801a842000 ffffea0000c25c10 ffffea00019c9410 [ 611.346478][ T5946] head: ffff88803139f000 0000000000080006 00000000f5000000 0000000000000000 [ 611.355266][ T5946] head: 00fff00000000003 ffffea0000c4e601 00000000ffffffff 00000000ffffffff [ 611.364152][ T5946] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 611.373097][ T5946] page dumped because: kasan: bad access detected [ 611.382035][ T5946] page_owner tracks the page as allocated [ 611.387933][ T5946] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10975, tgid 10974 (syz.0.1586), ts 438389131321, free_ts 90937585367 [ 611.410184][ T5946] post_alloc_hook+0x240/0x2a0 [ 611.415068][ T5946] get_page_from_freelist+0x21e4/0x22c0 [ 611.420730][ T5946] __alloc_frozen_pages_noprof+0x181/0x370 [ 611.426730][ T5946] alloc_pages_mpol+0x232/0x4a0 [ 611.431608][ T5946] allocate_slab+0x8a/0x330 [ 611.436145][ T5946] ___slab_alloc+0xbd1/0x13f0 [ 611.440840][ T5946] __slab_alloc+0x55/0xa0 [ 611.445352][ T5946] __kmalloc_node_noprof+0x5cc/0x800 [ 611.450739][ T5946] qdisc_alloc+0x97/0xaa0 [ 611.455115][ T5946] qdisc_create_dflt+0x8e/0x4e0 [ 611.459987][ T5946] mq_init+0x2dc/0x660 [ 611.464424][ T5946] qdisc_create_dflt+0x13b/0x4e0 [ 611.469499][ T5946] dev_activate+0x1ce/0x1150 [ 611.474207][ T5946] __dev_open+0x69c/0x880 [ 611.478648][ T5946] __dev_change_flags+0x1ea/0x6d0 [ 611.483857][ T5946] netif_change_flags+0x88/0x1a0 [ 611.488798][ T5946] page last free pid 5861 tgid 5861 stack trace: [ 611.495158][ T5946] __free_frozen_pages+0xbc4/0xd30 [ 611.500297][ T5946] __put_partials+0x146/0x170 [ 611.505071][ T5946] put_cpu_partial+0x17c/0x250 [ 611.509849][ T5946] __slab_free+0x2b9/0x390 [ 611.514362][ T5946] qlist_free_all+0x97/0x140 [ 611.519131][ T5946] kasan_quarantine_reduce+0x148/0x160 [ 611.524694][ T5946] __kasan_slab_alloc+0x22/0x80 [ 611.529674][ T5946] kmem_cache_alloc_node_noprof+0x433/0x710 [ 611.535600][ T5946] __alloc_skb+0x112/0x2d0 [ 611.540132][ T5946] netlink_ack+0x146/0xa50 [ 611.544660][ T5946] netlink_rcv_skb+0x28c/0x470 [ 611.549563][ T5946] netlink_unicast+0x82f/0x9e0 [ 611.554646][ T5946] netlink_sendmsg+0x805/0xb30 [ 611.559470][ T5946] __sock_sendmsg+0x219/0x270 [ 611.564567][ T5946] __sys_sendto+0x3bd/0x520 [ 611.569093][ T5946] __x64_sys_sendto+0xde/0x100 [ 611.573882][ T5946] [ 611.576224][ T5946] Memory state around the buggy address: [ 611.582131][ T5946] ffff88803139e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.590228][ T5946] ffff88803139e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.598377][ T5946] >ffff88803139e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.606726][ T5946] ^ [ 611.614532][ T5946] ffff88803139e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.622602][ T5946] ffff88803139e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.631112][ T5946] ================================================================== [ 611.639453][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 611.836020][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 611.904501][ T5946] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 611.911875][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 611.921461][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.932095][ T5946] Workqueue: usb_hub_wq hub_event [ 611.937176][ T5946] Call Trace: [ 611.940569][ T5946] [ 611.943519][ T5946] dump_stack_lvl+0x99/0x250 [ 611.948231][ T5946] ? __asan_memcpy+0x40/0x70 [ 611.952835][ T5946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.958128][ T5946] ? __pfx__printk+0x10/0x10 [ 611.962742][ T5946] vpanic+0x237/0x6d0 [ 611.966799][ T5946] ? __pfx_vpanic+0x10/0x10 [ 611.971332][ T5946] ? preempt_schedule+0xae/0xc0 [ 611.976208][ T5946] ? __pfx_preempt_schedule+0x10/0x10 [ 611.981711][ T5946] panic+0xb9/0xc0 [ 611.985445][ T5946] ? __pfx_panic+0x10/0x10 [ 611.990043][ T5946] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 611.995947][ T5946] ? media_devnode_unregister+0xe2/0xf0 [ 612.001521][ T5946] check_panic_on_warn+0x89/0xb0 [ 612.007621][ T5946] ? media_devnode_unregister+0xe2/0xf0 [ 612.014335][ T5946] end_report+0x78/0x160 [ 612.018607][ T5946] kasan_report+0x129/0x150 [ 612.023225][ T5946] ? media_devnode_unregister+0xe2/0xf0 [ 612.028877][ T5946] media_devnode_unregister+0xe2/0xf0 [ 612.034455][ T5946] media_device_unregister+0x37c/0x400 [ 612.040124][ T5946] ? em28xx_audio_fini+0x59/0x1b0 [ 612.045172][ T5946] em28xx_release_resources+0xac/0x240 [ 612.050649][ T5946] em28xx_usb_disconnect+0x19f/0x2f0 [ 612.056036][ T5946] usb_unbind_interface+0x26e/0x910 [ 612.061424][ T5946] ? __pfx_usb_unbind_interface+0x10/0x10 [ 612.067176][ T5946] device_release_driver_internal+0x4d9/0x800 [ 612.073430][ T5946] bus_remove_device+0x34d/0x410 [ 612.078752][ T5946] device_del+0x511/0x8e0 [ 612.083124][ T5946] ? __pfx_device_del+0x10/0x10 [ 612.088001][ T5946] ? kobject_put+0x446/0x480 [ 612.092704][ T5946] usb_disable_device+0x3e9/0x8a0 [ 612.097741][ T5946] usb_disconnect+0x330/0x950 [ 612.102431][ T5946] hub_event+0x1cf5/0x4a20 [ 612.106946][ T5946] ? do_raw_spin_lock+0x121/0x290 [ 612.112275][ T5946] ? register_lock_class+0x51/0x320 [ 612.117483][ T5946] ? __pfx_hub_event+0x10/0x10 [ 612.122273][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 612.128086][ T5946] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.133293][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 612.139019][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 612.144749][ T5946] process_scheduled_works+0xae1/0x17b0 [ 612.150314][ T5946] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.156309][ T5946] worker_thread+0x8a0/0xda0 [ 612.160905][ T5946] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 612.167242][ T5946] ? __kthread_parkme+0x7b/0x200 [ 612.172194][ T5946] kthread+0x711/0x8a0 [ 612.176276][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 612.181421][ T5946] ? __pfx_kthread+0x10/0x10 [ 612.186106][ T5946] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.191373][ T5946] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.196679][ T5946] ? __pfx_kthread+0x10/0x10 [ 612.201307][ T5946] ret_from_fork+0x47c/0x820 [ 612.205928][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 612.211083][ T5946] ? __switch_to_asm+0x39/0x70 [ 612.215872][ T5946] ? __switch_to_asm+0x33/0x70 [ 612.220728][ T5946] ? __pfx_kthread+0x10/0x10 [ 612.225424][ T5946] ret_from_fork_asm+0x1a/0x30 [ 612.230383][ T5946] [ 612.233849][ T5946] Kernel Offset: disabled [ 612.238190][ T5946] Rebooting in 86400 seconds..