last executing test programs: 3m25.905544656s ago: executing program 0 (id=934): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x101080) (async) r2 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x101080) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000c00)=0x1) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000180)={0x0, 0xfffffffffffffe98}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) socket(0x10, 0x3, 0x40) (async) r4 = socket(0x10, 0x3, 0x40) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0xfffffffa, 0x11, "000000008000000000000000002000"}) r5 = syz_open_pts(r3, 0x20800) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read(r6, &(0x7f00000004c0)=""/9, 0x9) dup3(r5, r3, 0x0) (async) dup3(r5, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x44) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x44) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7) sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0x9) (async) sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) (async) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xff, 0x4, 0x68, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x7861, 0x1, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xff, 0x4, 0x68, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x7861, 0x1, 0x5}}) socket(0x27, 0x3, 0x0) (async) socket(0x27, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) 3m25.77252287s ago: executing program 0 (id=936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}, 0x1, 0x0, 0x0, 0xfff5}, 0x0) 3m25.644535884s ago: executing program 0 (id=940): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10) (async) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) clock_getres(0x2, &(0x7f00000009c0)) 3m25.490917818s ago: executing program 0 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000020040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x100f811a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = syz_clone(0x3088000, &(0x7f0000000280)="1a4181e1ba9326f152fccab378d1e16d4787be3da3a4b09feac8d3546e8e780f965f6eb8aaff918a4c9cb523c3cbfbea1bad918f9fab978471f7c732cac7af23d2c46f6162983dd16453a820e14c40a0f899c516ff6438759bdcc11afc3b17fa39340c6eb630ccc82a6ce7287b41bf14c13e1a9e38e1e30ed61754a702a16744821cb5b514dcfcb01515c280", 0x8c, &(0x7f0000000340), &(0x7f00000004c0), &(0x7f0000000500)="27d97e0b8e8ae38a92b8f3bb41c763bc853c27215d74cd8c3908eb2681f5a71d677480f4020ad5568a36cc8a241e19c6141fcd7125f34d853bc9814b58d835511832a507c7935cd2e5347e8521105766d212edde7752cf5dde95a9793bad4f8ffd63c9b8701e361a2388604ed2357b170181fa16c6c3fe4442f86a4a1afd30c9c7a7e8b380389ff62df5abaf5b15c49c02415fc4de10aec554c6bbf46802800bba0deaa7d3b11ad12d9c9cee272860d9fcb750f55546453b5e35") syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b40)={&(0x7f0000000100)={0x50, 0xffffffffffffffda, 0x7fffffff, {0x7, 0x2b, 0x4, 0x100, 0xf, 0x7, 0x3, 0x43a, 0x0, 0x0, 0x20, 0x6}}, &(0x7f0000000180)={0x18, 0x0, 0x5, {0xcf55}}, &(0x7f00000001c0)={0x18, 0xfffffffffffffffe, 0x9, {0x6e9}}, &(0x7f0000000200)={0x18, 0xfffffffffffffffe, 0x7527, {0x81}}, &(0x7f0000000240)={0x18, 0x0, 0x9, {0x7}}, &(0x7f00000005c0)={0x28, 0x0, 0x80, {{0xaac, 0x200, 0x1, r5}}}, &(0x7f0000000600)={0x60, 0x0, 0x1, {{0xfffffffffffffffe, 0x8, 0x4, 0x2, 0x8, 0x5ef, 0x300000, 0x1}}}, &(0x7f0000000680)={0x18, 0x0, 0x7, {0xc687}}, &(0x7f00000006c0)={0x11, 0xfffffffffffffffe, 0xc, {'\x00'}}, &(0x7f0000000700)={0x20, 0x24, 0x8, {0x0, 0xd}}, &(0x7f0000000740)={0x78, 0xffffffffffffffda, 0x800, {0x6, 0x2, 0x0, {0x4, 0x3, 0x4, 0xa, 0x2, 0x7, 0x7, 0x7, 0xf, 0x6000, 0xc4c, r2, r3, 0x3ab3, 0x1bf8}}}, &(0x7f00000007c0)={0x90, 0xfffffffffffffffe, 0x0, {0x3, 0x0, 0x6, 0x6, 0x20c09592, 0x10, {0x1, 0x6, 0x8001, 0x7, 0x7fffffff, 0x6, 0x9, 0x6, 0xfffffffa, 0xc000, 0x7f, r2, r3, 0x81, 0x1}}}, &(0x7f0000000880)={0x30, 0x0, 0x100, [{0x3, 0x2, 0x5, 0x1, 'fuse\x00'}]}, &(0x7f00000008c0)={0x10, 0xffffffffffffffda, 0x80000000}, &(0x7f0000000900)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1000000, 0x5, 0xfffffffc, 0x2c4, {0x6, 0x5, 0x3, 0x100000001, 0x3d84, 0x8, 0xe2, 0xffffffff, 0x1, 0x3000, 0xa, r2, r3, 0xfffffffe, 0x42a}}, {0x0, 0x1e}}}, &(0x7f00000009c0)={0x20, 0x0, 0x8001, {0x2, 0x4, 0x6, 0x1}}, &(0x7f0000000a00)={0x130, 0x0, 0x8, {0x2, 0x9a5, 0x0, '\x00', {0x4000, 0x8, 0x4, 0x0, r2, r3, 0xc000, '\x00', 0x6, 0x476, 0x2dd, 0x18000000000, {0x1, 0x800}, {0x4, 0xfb}, {0x8, 0x4}, {0x383e, 0xff}, 0x7, 0x5, 0xf17000, 0xc8e}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000440)={0x1, 0x3, 0x1000, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0}) 3m24.545518925s ago: executing program 0 (id=953): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c", 0x6f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be56e90e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 3m24.070069523s ago: executing program 0 (id=955): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x7, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x800, r3, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TX_RATES={0x1ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x9, 0x2, 0x6, 0x3, 0x2031, 0x7, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xeca, 0x2, 0x3, 0x9, 0x0, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x166, 0x80, 0x58e, 0xac23, 0x3, 0x800, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0xb1bf00e029fc14ca, 0x2, 0x9, 0x12, 0x60, 0x12, 0x12, 0x4, 0x9, 0xc, 0x1, 0x30, 0x1b, 0xf, 0x6, 0x48, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3ff, 0x4, 0x10, 0x7ff, 0x5, 0xc764, 0x1]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x4b8, 0x7, 0x9, 0x9, 0x0, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x4}, {0x5, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {0x4, 0x9}, {0x3, 0x4}, {}, {0x0, 0x8}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0x3}, {0x1}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x5, 0x3}, {0x3}, {0x5}, {0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x4, 0x7}, {0x6, 0xa}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x7}, {0x4, 0x2}, {0x5, 0x1}, {0x2, 0x6}, {0x3, 0x1}, {0x4, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5e3, 0x6, 0xf23, 0x4, 0xd58, 0x7c6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x7}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x9}, {0x3, 0x5}, {0x7, 0x3}, {0x5, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x0, 0x3}, {0x6, 0x5}, {0x2, 0x8}, {0x3, 0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x5}, {0x7, 0x1}, {0x4, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x5}, {0x0, 0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x1, 0x9}, {0x6}, {0x0, 0x3}, {0x2, 0x9}, {0x3, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x6c, 0x5, 0xb, 0x5, 0x0, 0x1b, 0x0, 0x6c, 0x60, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0x7ff, 0x80, 0x8, 0x2, 0xb70]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x5, 0x7}, {0x6, 0x4}, {0x1, 0x9}, {}, {0x0, 0x8}, {0x3, 0x7}, {0x3, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x2, 0x8}, {0x4, 0x2}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x4}, {}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb4f2, 0x69, 0x63, 0xb, 0xe4f, 0x854c, 0xfb3b, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xc, 0x7f, 0x81, 0xcec0, 0x800, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x1, 0xb19cf967b9f3c385, 0xb, 0xb, 0x60, 0xf, 0x1, 0xc, 0x5, 0x66, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x1, 0x30, 0xc, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x48, 0x36, 0x30, 0x16, 0x1, 0x16, 0x18, 0x24, 0x30, 0x16]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x66, 0x36, 0x6c, 0x1b, 0x16, 0x18, 0x24]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0x3, 0xe91, 0x0, 0xc53e, 0x6d5c, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x0, 0x6, 0x8, 0x2, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x9, 0x0, 0x1000, 0x0, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x9}, {0x0, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x3}, {0x4, 0x1}, {0x7, 0x1}, {0x6, 0x2}, {0x4, 0x5}, {}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0xa}, {0x6, 0x1}, {0x2}, {0x3, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x1}, {0x7, 0x5}, {0x3, 0x4}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x2}, {0x3, 0x2}, {0x4, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0x3}, {0x3, 0x1b}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x36, 0x1, 0x1, 0x48, 0x1b, 0x9, 0x6, 0x24, 0x6c, 0x6c, 0x30, 0x26, 0x48]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {}, {0x2, 0x6}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7}, {0x5, 0x3}, {0x7, 0x1}, {0x2, 0x2}, {0x6, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x4, 0x6}]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x2, 0x2, 0x5, 0x5, 0x1, 0x12, 0x12, 0x62, 0x1, 0x4, 0x12, 0x4, 0xc, 0x1b, 0x12, 0x0, 0x9, 0x0, 0x30, 0x60, 0x6, 0x1, 0x30, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x7, 0xff, 0x2094, 0x0, 0x8001, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3ff, 0x0, 0x1, 0x5a, 0xfd3, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x354, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x24, 0x6, 0x30, 0x1, 0x6d, 0x6c, 0x48, 0x5, 0x16, 0x1b, 0x1, 0xc, 0x6, 0x1b, 0x6, 0xb, 0x9, 0x9, 0x12, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0xfff1, 0x3, 0x5, 0x8, 0xfc01, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x9, 0x6, 0xdc, 0x9, 0x7, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x3}, {0x7, 0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0x1}, {0x3, 0x5}, {0x4}, {0x4, 0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x8}, {0x1}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x3, 0x3}, {0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x2, 0x6c, 0x16, 0x30, 0xc, 0x25, 0x1b, 0x18, 0x48, 0x12, 0x38, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x6}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x7}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x7}, {0x3, 0x3}, {0x1, 0x5}, {0x7}, {0x4}, {0x0, 0x3}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x6, 0x6}, {0x2}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x3, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x7, 0x9}, {0x7, 0x8}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd8e, 0x0, 0x7fff, 0x5, 0x1, 0x0, 0x40]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x7}, {0x5, 0x5}, {0x5, 0x2}, {0x2, 0x6}, {0x1, 0x7}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x2, 0x6}, {0x4, 0x2}, {}, {0x3, 0x7}, {0x6, 0x2}, {0x1, 0x17}, {0x7, 0x8}, {0x5, 0x6}, {0x3, 0x3}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x4}, {0x6, 0x9}, {0x7, 0x6}, {0x3, 0x9}, {0x6, 0x7}, {0x0, 0xa}, {}, {0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x7, 0x3}, {0x5, 0x2}, {0x3, 0x4}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x4}, {0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x1}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7fff, 0x6, 0x4, 0x0, 0x9, 0x5, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x8f, 0x4, 0x398, 0x592, 0x0, 0x2]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xaa4, 0x800, 0x0, 0x200, 0xfffd, 0x280, 0x7, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0xff, 0x4, 0x5, 0x8, 0x9, 0x7]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x4}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x6, 0x2}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x6}, {0x4, 0x7}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x3}, {0x2, 0x8}, {0x6, 0x9}, {0x7, 0x9}, {0x5, 0x7}, {0x2, 0x1}, {0x6, 0xa}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x6, 0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x6}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x6, 0x8}, {0x0, 0xa}, {0x3, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xd, 0xff, 0x6, 0x800, 0x1b, 0x40, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x16, 0x1, 0xb, 0x48, 0x6, 0x30, 0x16, 0xc, 0x48, 0x1b, 0x3, 0xb, 0x5, 0x18, 0x16, 0x4, 0x18, 0x0, 0x4]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x6, 0x6, 0x3, 0x24, 0x1a, 0x2, 0x6c, 0x48, 0x12, 0x36, 0xb, 0x5, 0x6c, 0xe]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xb, 0x2, 0x7, 0x81, 0x80, 0x8a6b, 0xcec]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x200, 0x6, 0x4, 0xa8, 0x3, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0xc, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x9}, {0x4, 0x1}, {0x0, 0xa}, {0x2, 0x4}, {0x2, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x4, 0x3, 0x7, 0x6, 0x1000, 0xf, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xba3, 0x8, 0x5, 0x6b, 0x6, 0x3, 0x3]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x0, 0x7, 0x9, 0x3, 0xe2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x68c, 0x400, 0x6, 0x6000, 0x2, 0x2, 0x1, 0x3bb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x4, 0x46, 0xd, 0x6baf, 0x2, 0x70]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8, 0xffff, 0xf001, 0x0, 0x1, 0x357, 0xf57e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0xbe6, 0xc, 0xb, 0x5, 0x8000, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x9}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0xb, 0x36, 0x24, 0x60, 0x4, 0x60, 0x1b, 0x60, 0x16, 0x12, 0x36]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0xf3, 0x9d8e, 0x8, 0xffff, 0x1ff, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x4, 0x0, 0x3, 0x6, 0x8, 0x1]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x48, 0x36, 0x30, 0xc, 0x24, 0x2, 0x1b, 0x9, 0x48, 0x0, 0x0, 0x16, 0xc, 0x60, 0xb, 0x6, 0x6, 0x30, 0x8, 0x9, 0x30, 0xb, 0x16, 0x30, 0x9, 0x9, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x1}, {0x3, 0x7}, {0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x1, 0x9}, {0x7, 0x1}, {0x3}, {}, {0x3, 0x6}, {0x6, 0x2}, {0x3, 0x8}, {0x4, 0x5}, {0x5, 0x7}, {0x7}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x1}, {0x4, 0x8}, {0x7, 0x7}, {0x2, 0x7}, {0x6, 0x8}, {0x1, 0xa}, {0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x2}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x6}, {0x1, 0x1}, {0x3, 0x3}, {0x2}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0xa}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x7f, 0x101, 0x1, 0xfff7, 0x1, 0x5]}}]}]}]}, 0x800}, 0x1, 0x0, 0x0, 0x409c}, 0x80) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f0000001680)=""/4121, 0x1019, 0x10001, 0x0, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) recvfrom(r2, &(0x7f0000000000)=""/138, 0x8a, 0x260, &(0x7f0000000300)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x1, 0xa0, "1e2d68e4789427b60acbaa0fb68f1a1b7a814a188a1e536dc1a1f475ba8ef8b5b4bbd497e72ce5d5592521999767acf10afc43072459099ee310b4ecab380a", 0x8}, 0x80) sendto$netrom(r6, &(0x7f0000000200)="71a9addc83a6d0ed3f44672368e6bdd19d32", 0x12, 0x841, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 3m23.892543224s ago: executing program 32 (id=955): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x7, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x800, r3, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TX_RATES={0x1ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x9, 0x2, 0x6, 0x3, 0x2031, 0x7, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xeca, 0x2, 0x3, 0x9, 0x0, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x166, 0x80, 0x58e, 0xac23, 0x3, 0x800, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0xb1bf00e029fc14ca, 0x2, 0x9, 0x12, 0x60, 0x12, 0x12, 0x4, 0x9, 0xc, 0x1, 0x30, 0x1b, 0xf, 0x6, 0x48, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3ff, 0x4, 0x10, 0x7ff, 0x5, 0xc764, 0x1]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x4b8, 0x7, 0x9, 0x9, 0x0, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x4}, {0x5, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {0x4, 0x9}, {0x3, 0x4}, {}, {0x0, 0x8}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0x3}, {0x1}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x5, 0x3}, {0x3}, {0x5}, {0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x4, 0x7}, {0x6, 0xa}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x7}, {0x4, 0x2}, {0x5, 0x1}, {0x2, 0x6}, {0x3, 0x1}, {0x4, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5e3, 0x6, 0xf23, 0x4, 0xd58, 0x7c6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x7}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x9}, {0x3, 0x5}, {0x7, 0x3}, {0x5, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x0, 0x3}, {0x6, 0x5}, {0x2, 0x8}, {0x3, 0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x5}, {0x7, 0x1}, {0x4, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x5}, {0x0, 0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x1, 0x9}, {0x6}, {0x0, 0x3}, {0x2, 0x9}, {0x3, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x6c, 0x5, 0xb, 0x5, 0x0, 0x1b, 0x0, 0x6c, 0x60, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0x7ff, 0x80, 0x8, 0x2, 0xb70]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x5, 0x7}, {0x6, 0x4}, {0x1, 0x9}, {}, {0x0, 0x8}, {0x3, 0x7}, {0x3, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x2, 0x8}, {0x4, 0x2}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x4}, {}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb4f2, 0x69, 0x63, 0xb, 0xe4f, 0x854c, 0xfb3b, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xc, 0x7f, 0x81, 0xcec0, 0x800, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x1, 0xb19cf967b9f3c385, 0xb, 0xb, 0x60, 0xf, 0x1, 0xc, 0x5, 0x66, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x1, 0x30, 0xc, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x48, 0x36, 0x30, 0x16, 0x1, 0x16, 0x18, 0x24, 0x30, 0x16]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x66, 0x36, 0x6c, 0x1b, 0x16, 0x18, 0x24]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0x3, 0xe91, 0x0, 0xc53e, 0x6d5c, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x0, 0x6, 0x8, 0x2, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x9, 0x0, 0x1000, 0x0, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x9}, {0x0, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x3}, {0x4, 0x1}, {0x7, 0x1}, {0x6, 0x2}, {0x4, 0x5}, {}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0xa}, {0x6, 0x1}, {0x2}, {0x3, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x1}, {0x7, 0x5}, {0x3, 0x4}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x2}, {0x3, 0x2}, {0x4, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0x3}, {0x3, 0x1b}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x36, 0x1, 0x1, 0x48, 0x1b, 0x9, 0x6, 0x24, 0x6c, 0x6c, 0x30, 0x26, 0x48]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {}, {0x2, 0x6}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7}, {0x5, 0x3}, {0x7, 0x1}, {0x2, 0x2}, {0x6, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x4, 0x6}]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x2, 0x2, 0x5, 0x5, 0x1, 0x12, 0x12, 0x62, 0x1, 0x4, 0x12, 0x4, 0xc, 0x1b, 0x12, 0x0, 0x9, 0x0, 0x30, 0x60, 0x6, 0x1, 0x30, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x7, 0xff, 0x2094, 0x0, 0x8001, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3ff, 0x0, 0x1, 0x5a, 0xfd3, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x354, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x24, 0x6, 0x30, 0x1, 0x6d, 0x6c, 0x48, 0x5, 0x16, 0x1b, 0x1, 0xc, 0x6, 0x1b, 0x6, 0xb, 0x9, 0x9, 0x12, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0xfff1, 0x3, 0x5, 0x8, 0xfc01, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x9, 0x6, 0xdc, 0x9, 0x7, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x3}, {0x7, 0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0x1}, {0x3, 0x5}, {0x4}, {0x4, 0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x8}, {0x1}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x3, 0x3}, {0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x2, 0x6c, 0x16, 0x30, 0xc, 0x25, 0x1b, 0x18, 0x48, 0x12, 0x38, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x6}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x7}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x7}, {0x3, 0x3}, {0x1, 0x5}, {0x7}, {0x4}, {0x0, 0x3}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x6, 0x6}, {0x2}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x3, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x7, 0x9}, {0x7, 0x8}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd8e, 0x0, 0x7fff, 0x5, 0x1, 0x0, 0x40]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x7}, {0x5, 0x5}, {0x5, 0x2}, {0x2, 0x6}, {0x1, 0x7}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x2, 0x6}, {0x4, 0x2}, {}, {0x3, 0x7}, {0x6, 0x2}, {0x1, 0x17}, {0x7, 0x8}, {0x5, 0x6}, {0x3, 0x3}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x4}, {0x6, 0x9}, {0x7, 0x6}, {0x3, 0x9}, {0x6, 0x7}, {0x0, 0xa}, {}, {0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x7, 0x3}, {0x5, 0x2}, {0x3, 0x4}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x4}, {0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x1}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7fff, 0x6, 0x4, 0x0, 0x9, 0x5, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x8f, 0x4, 0x398, 0x592, 0x0, 0x2]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xaa4, 0x800, 0x0, 0x200, 0xfffd, 0x280, 0x7, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0xff, 0x4, 0x5, 0x8, 0x9, 0x7]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x4}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x6, 0x2}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x6}, {0x4, 0x7}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x3}, {0x2, 0x8}, {0x6, 0x9}, {0x7, 0x9}, {0x5, 0x7}, {0x2, 0x1}, {0x6, 0xa}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x6, 0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x6}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x6, 0x8}, {0x0, 0xa}, {0x3, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xd, 0xff, 0x6, 0x800, 0x1b, 0x40, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x16, 0x1, 0xb, 0x48, 0x6, 0x30, 0x16, 0xc, 0x48, 0x1b, 0x3, 0xb, 0x5, 0x18, 0x16, 0x4, 0x18, 0x0, 0x4]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x6, 0x6, 0x3, 0x24, 0x1a, 0x2, 0x6c, 0x48, 0x12, 0x36, 0xb, 0x5, 0x6c, 0xe]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xb, 0x2, 0x7, 0x81, 0x80, 0x8a6b, 0xcec]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x200, 0x6, 0x4, 0xa8, 0x3, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0xc, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x9}, {0x4, 0x1}, {0x0, 0xa}, {0x2, 0x4}, {0x2, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x4, 0x3, 0x7, 0x6, 0x1000, 0xf, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xba3, 0x8, 0x5, 0x6b, 0x6, 0x3, 0x3]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x0, 0x7, 0x9, 0x3, 0xe2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x68c, 0x400, 0x6, 0x6000, 0x2, 0x2, 0x1, 0x3bb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x4, 0x46, 0xd, 0x6baf, 0x2, 0x70]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8, 0xffff, 0xf001, 0x0, 0x1, 0x357, 0xf57e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0xbe6, 0xc, 0xb, 0x5, 0x8000, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x9}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0xb, 0x36, 0x24, 0x60, 0x4, 0x60, 0x1b, 0x60, 0x16, 0x12, 0x36]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0xf3, 0x9d8e, 0x8, 0xffff, 0x1ff, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x4, 0x0, 0x3, 0x6, 0x8, 0x1]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x48, 0x36, 0x30, 0xc, 0x24, 0x2, 0x1b, 0x9, 0x48, 0x0, 0x0, 0x16, 0xc, 0x60, 0xb, 0x6, 0x6, 0x30, 0x8, 0x9, 0x30, 0xb, 0x16, 0x30, 0x9, 0x9, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x1}, {0x3, 0x7}, {0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x1, 0x9}, {0x7, 0x1}, {0x3}, {}, {0x3, 0x6}, {0x6, 0x2}, {0x3, 0x8}, {0x4, 0x5}, {0x5, 0x7}, {0x7}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x1}, {0x4, 0x8}, {0x7, 0x7}, {0x2, 0x7}, {0x6, 0x8}, {0x1, 0xa}, {0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x2}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x6}, {0x1, 0x1}, {0x3, 0x3}, {0x2}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0xa}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x7f, 0x101, 0x1, 0xfff7, 0x1, 0x5]}}]}]}]}, 0x800}, 0x1, 0x0, 0x0, 0x409c}, 0x80) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f0000001680)=""/4121, 0x1019, 0x10001, 0x0, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) recvfrom(r2, &(0x7f0000000000)=""/138, 0x8a, 0x260, &(0x7f0000000300)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x1, 0xa0, "1e2d68e4789427b60acbaa0fb68f1a1b7a814a188a1e536dc1a1f475ba8ef8b5b4bbd497e72ce5d5592521999767acf10afc43072459099ee310b4ecab380a", 0x8}, 0x80) sendto$netrom(r6, &(0x7f0000000200)="71a9addc83a6d0ed3f44672368e6bdd19d32", 0x12, 0x841, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 12.817550589s ago: executing program 3 (id=2465): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x100}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002004e23000000000000000000000000080012000000000000000000000000001700000000000000000000000000000002000000000000000000000000000000fe800000000000000000000000000000030005000000000002"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12.193711381s ago: executing program 3 (id=2473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd490328bf030020000000600000000204320081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) (fail_nth: 12) 3.985125767s ago: executing program 2 (id=2498): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8e000, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x7, 0x7636, r1) getpgrp(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) 3.543002003s ago: executing program 3 (id=2475): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, {0x9, 0x21, 0xfff8, 0xa1, 0x1, {0x22, 0xb67}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x5, {0x5, 0x1, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.52563432s ago: executing program 3 (id=2502): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="40033b0000003b2c109ee85e2b77d1faf8d411e4f1759d10f42d89c85b2ba236cf1ca71506c8f054b8a59a79d6130000000000000000000000a4fa6d959dea50fead2b201553b5"], &(0x7f0000001840)=ANY=[@ANYBLOB="00037e0000007e03abb73d267268dfd651df8f18844ac1482ccbef4d50a4817996b11727b1224f98b5da93ce8f2a054e311148693994dfb41000a55330f92192f167534b970f2cdfa00a8057668258b03b843fd67cc07c2871d64f43bab20e8c7b60c33739311d18526eb9fb9acfbda50df83d96e08b09d854daed02050000002c238d625957ac2c2b038c8562b088f3eb464fd9add09ef098c04616efc20b9abef2976382324bce38e601b92c576b0f8bee773880f8ccc02b568bc2108c1784"]}, &(0x7f0000000640)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x8c, "9ba08c34216e2f7a2854459728bf572d09258e6a0f67513392abbfc64a8200158c368cd97ed2e0a2d12db4c27acb55d79315bdfa355bc557ba7069c1c47256acf28596dfc68f683c982b261106d0f0ad12f0a4b5bcb4ad2ff6a6b526489504d6a8a52ed8434d308cef5dd1d247d56e67833f85b04e6ebad289ef1cbfecdeff36f6f8d4dcb759862bd16a1c57"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001900)=ANY=[@ANYBLOB="20800440000018849784a57c9d45bf948f8ec3a0f9fc63a82d05a055f4e5c8b7eeda001a09e0fa31146a9aabc170cb15a6b27414ff2a8ce93a04e79932d113e98f78921b308d7f17638eb18be47c3326623b968e26db624c70b530c949137288602ad953e02e5d374e79019b60ec2f730e77d3389dd13f354b7ff92ebfd7e9c41d1f8d1f50483bcd361c2dd95368a280e6af3b2a1616bf5010098dff80261a8610b0795f852b82a9f579f8ec81c01ba2a8d6f107fa20db814de3f76a7d4736bed34c5cedab812f597714b012"], &(0x7f0000000280)=ANY=[@ANYBLOB="6998eea1fce1c746eae382020e"], &(0x7f0000000540)=ANY=[@ANYBLOB="69fb1870c6209cc9c3d89b67d41f9d8303f4fdb8afa56d67cb3cd3917cd39c37e48891"], &(0x7f00000004c0)={0x20, 0x84, 0x3, "6741d3"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "cf16bb"}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2.121739044s ago: executing program 1 (id=2509): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x125402, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x6040000, 0x0, 0x1, 0x13fffe, 0x0, 0x0, 0x1e, 0xc, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04c728964a02447a75d00a69ea917deb7ba193b1e7772fd29f30e6aecb600", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) 1.969981665s ago: executing program 3 (id=2510): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080019"], 0x158}, 0x1, 0x0, 0xfffffffffffffff0, 0x48815}, 0xc000) 1.946214685s ago: executing program 1 (id=2511): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x300, 0x0, 0x35314258, 0x0, 0x0, 0x0, 0x0, 0xffe7, 0x0, 0x1800}}) 1.893235207s ago: executing program 4 (id=2512): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x9, 0x141002) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0xfc000, 0x0) read$sequencer(r1, &(0x7f0000000100)=""/226, 0xe2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x44018, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@cache_none}, {@sq={'sq', 0x3d, 0x4}}, {@timeout={'timeout', 0x3d, 0x9a17}}, {@timeout={'timeout', 0x3d, 0xd2}}, {@rq={'rq', 0x3d, 0xffffffff}}, {@common=@fscache}, {@timeout}], [{@dont_measure}, {@fowner_eq={'fowner', 0x3d, r4}}, {@uid_eq={'uid', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, '/dev/snd/pcmC#D#p\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/snd/pcmC#D#p\x00'}}, {@uid_eq={'uid', 0x3d, r7}}]}}) (async) setxattr$incfs_metadata(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000800)="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", 0x1000, 0x2) (async) io_setup(0xf4000000, &(0x7f0000001800)) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000001840), &(0x7f0000001880)=0x4) (async) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000018c0), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000001900), 0x9) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001940)='/proc/vmstat\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001a00)={'ip6gre0\x00', &(0x7f0000001980)={'syztnl0\x00', r6, 0x29, 0x0, 0x7, 0x0, 0x40, @private2, @empty, 0x1, 0x1, 0xffffffb4, 0x3}}) sendmsg$can_bcm(r9, &(0x7f0000001b40)={&(0x7f0000001a40)={0x1d, r10}, 0x10, &(0x7f0000001b00)={&(0x7f0000001a80)={0x1, 0x41, 0x1000, {}, {0x0, 0xea60}, {0x2}, 0x1, @can={{0x3}, 0x4, 0x3, 0x0, 0x0, "b0c0f535f8c1bb4b"}}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x40) (async) r11 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000001b80)=r11) (async) mount(&(0x7f0000001bc0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)='anon_inodefs\x00', 0x2080082, &(0x7f0000001c80)='sq') (async) sendmsg$inet_sctp(r9, &(0x7f00000021c0)={&(0x7f0000001cc0)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000001d00)="1a919883a1cd3d78852cc7e6b570b3dcd7dab77192d1b4c22c5ec6c2e329d625145c44960ca3ffe98327a903d54a2d2fe0df87fd8ac619447475c0cc270073429766511b94a9a0dc25bf36c9e4e2df184c1dc94289ec6d2fe4550f2e439ec82f8865b19e88b46e859589a950dae82c48d692cf223d43c53c5a2ee156e3d22ec2545c107b42be315631ba36c9ec9065b5f76e38c51d2e", 0x96}, {&(0x7f0000001dc0)="de4cc418f43b43938d1a3b16419201075282b067cb273b45697d4ad539bdc5a165eaac52b073529ea0de437f5dcd9b761641f2b511a1019c1df167c64269aff531c31ea9497feef4660d080d6d44aa1e10f21f56b791978cb59eeaab281311262398f3e179fd437e780546283f066849b0031a926dd5d9764511ab626472c63952ae628bbd6b6658193ca40a71b1770f", 0x90}, {&(0x7f0000001e80)="81080ac42d4e356fa68c9bc7a900cd278cda74017d4a52ef1d2afbd4fb3ef71f7c4820752b8844", 0x27}, {&(0x7f0000001ec0)="63b285c3b4d3a3af4ab827d55ed120bb1c7fb1b22c66b4383884249f37a6f1c77704ec1e7cc1792424c583fe0093d70d8cc2c65eb194ad233af3c38c9aa43150c3617aa0cae45afb34d704", 0x4b}, {&(0x7f0000001f40)="fdcbd6c1d0507a8fd695a0fc1d7d7cd3c4eea01e994459877e4cb9f9e50a92a38be9378071d8682631e14569510e31fec58f3a1169e3885169352b79b20d6e189b0edd2960b526f9176a05caac6e6b963f3ff6a767d5579d5c79f7d7c1b1d5bbb2b16b504bc3853398f0cef532ab6b27d97d6fd4b7f52149b11f125d87a09439ea04f22e5b91eba6dbd0ea027a6e6013ba0ac847c89039dbd9df3aae743d5f03bc3f3a5b9468d232f1f2c2e90bdf66ff08da81", 0xb3}, {&(0x7f0000002000)="479c998ddf3a07c30ce6150cc3e8df4da96944578b2293df46f1a2d47d48de7874108f8a5d4ce06836444af0b0fb2b9521520ca75305a50bfb8b59f1510038872ad8942165d15a14a82e4ed12de820b169aec63a1380f5ce2fec9f6bfbbb17e07ebe2d9fc52961ce1c0487337335a843953370aa948f8cb52cd0e7502692af532e4cf85fa499c5628a73bdf7e56ccc9fac75e2cfea22e8ead38c462c0f6e08ac7a3eed52ae9958c7aa81d7d141fefae986be6984b53d403ffcaaf5", 0xbb}], 0x6, &(0x7f0000002140)=[@authinfo={0x18, 0x84, 0x6, {0xe}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}], 0x48}, 0x4004080) (async) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000002200)={0x3b, 0x6, 0x1, 0x80, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @mcast2]}, 0x38) (async) move_mount(r8, &(0x7f0000002240)='./file0\x00', r9, &(0x7f0000002280)='./file0/../file0\x00', 0x2) (async) sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x10, 0x3f8, 0x1, 0x70bd2d, 0x25dfdbfb, "", [""]}, 0x10}}, 0x0) (async) ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f00000023c0)="70178d8c4804dd7313ecf060e7dc6f325368266007bbc38059600c9683077016a6ef0f4a9ed1571deddfbe833b50d48e4ecb16d59a6e7078f0db435371040a227d9b47d3e288932cf0e8e61d5ba0b92876947cc70fb47ac0b882c9734b510c86cdd3bde991a36a597e159d8619c7fff6256b4dd31db6ae77a61cbcaf580c0a8a42387839cddabc98209b240360f5a37be368eccd38") (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002500)={'wlan0\x00', 0x0}) r14 = ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x50, r12, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x44}, @void, @val={0xc, 0x99, {0x7, 0x2c}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r14}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) 1.865213796s ago: executing program 3 (id=2513): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.813242029s ago: executing program 1 (id=2514): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xfff6, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 1.709337653s ago: executing program 1 (id=2515): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0x2, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x4d8, 0x8, 0x200, 0x8001, 0x4}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x0, 0x8, 0x10200}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYBLOB="e2ffadc68b"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009c0000400000000081"]) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010102dc4f92103008020000000102030109021200010a75400809040c0200834eed01"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40061c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="20011000000022ed0aab663333b5160dc0abc393c4eea4a0899d14e919ddb8f1de50726cc8eb2accbe81e4d12d5ccb7bfe69d11a6bd98054523e0e34d394545ddd123becacbe44f2f8bea650575a0f254150b1d38b36282b0c58cabba0acff26f45b8a34e7111367f1329ecf7bebc149a1eda3e62d53d5e8e6462c40880b9df1f6ce7282334cdab52bb99288f9b5054c77960ff6e8951b24927826b6d72c33cdb575541e19525cabf60193425e793d25ae3f01dad48d3a1319c2d5af2c989422ba91823adc7367acadc57a4eb88eeed5"], 0x0}) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socket$kcm(0x10, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0x2, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x4d8, 0x8, 0x200, 0x8001, 0x4}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x0, 0x8, 0x10200}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYBLOB="e2ffadc68b"], 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009c0000400000000081"]) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010102dc4f92103008020000000102030109021200010a75400809040c0200834eed01"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40061c"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="20011000000022ed0aab663333b5160dc0abc393c4eea4a0899d14e919ddb8f1de50726cc8eb2accbe81e4d12d5ccb7bfe69d11a6bd98054523e0e34d394545ddd123becacbe44f2f8bea650575a0f254150b1d38b36282b0c58cabba0acff26f45b8a34e7111367f1329ecf7bebc149a1eda3e62d53d5e8e6462c40880b9df1f6ce7282334cdab52bb99288f9b5054c77960ff6e8951b24927826b6d72c33cdb575541e19525cabf60193425e793d25ae3f01dad48d3a1319c2d5af2c989422ba91823adc7367acadc57a4eb88eeed5"], 0x0}) (async) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) (async) 1.709109986s ago: executing program 4 (id=2516): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000200000001f00000008000f0001000000", 0x24) 1.580741463s ago: executing program 4 (id=2517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x30600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=[@uexit={0x0, 0x18, 0x226}, @code={0xa, 0x8d, {"c744240000580000c744240255aa3a99c7442406000000000f011c24cc0ffa2ac421cf7c1a8fc97812c3470f01cbc74424008a78d4f5c74424022e000000c7442406000000000f011424c744240000000000c74424028d2ce49ec7442406000000000f011c24b97f020000b800000000ba008000000f30f32e0faf31"}}], 0xa5}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0xffff7ff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect$hid(0x2, 0xf, &(0x7f0000000000)={{0x12, 0x1, 0x189, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xef, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x7, 0x9, {0x9, 0x21, 0x7f, 0xfb, 0x1, {0x22, 0x78a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9b, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000840)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200da0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.027243253s ago: executing program 4 (id=2518): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="40033b0000003b2c109ee85e2b77d1faf8d411e4f1759d10f42d89c85b2ba236cf1ca71506c8f054b8a59a79d6130000000000000000000000a4fa6d959dea50fead2b201553b5"], &(0x7f0000001840)=ANY=[@ANYBLOB="00037e0000007e03abb73d267268dfd651df8f18844ac1482ccbef4d50a4817996b11727b1224f98b5da93ce8f2a054e311148693994dfb41000a55330f92192f167534b970f2cdfa00a8057668258b03b843fd67cc07c2871d64f43bab20e8c7b60c33739311d18526eb9fb9acfbda50df83d96e08b09d854daed02050000002c238d625957ac2c2b038c8562b088f3eb464fd9add09ef098c04616efc20b9abef2976382324bce38e601b92c576b0f8bee773880f8ccc02b568bc2108c1784"]}, &(0x7f0000000640)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x8c, "9ba08c34216e2f7a2854459728bf572d09258e6a0f67513392abbfc64a8200158c368cd97ed2e0a2d12db4c27acb55d79315bdfa355bc557ba7069c1c47256acf28596dfc68f683c982b261106d0f0ad12f0a4b5bcb4ad2ff6a6b526489504d6a8a52ed8434d308cef5dd1d247d56e67833f85b04e6ebad289ef1cbfecdeff36f6f8d4dcb759862bd16a1c57"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001900)=ANY=[@ANYBLOB="20800440000018849784a57c9d45bf948f8ec3a0f9fc63a82d05a055f4e5c8b7eeda001a09e0fa31146a9aabc170cb15a6b27414ff2a8ce93a04e79932d113e98f78921b308d7f17638eb18be47c3326623b968e26db624c70b530c949137288602ad953e02e5d374e79019b60ec2f730e77d3389dd13f354b7ff92ebfd7e9c41d1f8d1f50483bcd361c2dd95368a280e6af3b2a1616bf5010098dff80261a8610b0795f852b82a9f579f8ec81c01ba2a8d6f107fa20db814de3f76a7d4736bed34c5cedab812f597714b012"], &(0x7f0000000280)=ANY=[@ANYBLOB="6998eea1fce1c746eae382020e"], &(0x7f0000000540)=ANY=[@ANYBLOB="69fb1870c6209cc9c3d89b67d41f9d8303f4fdb8afa56d67cb3cd3917cd39c37e48891"], &(0x7f00000004c0)={0x20, 0x84, 0x3, "6741d3"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "cf16bb"}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 851.0752ms ago: executing program 2 (id=2519): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x1}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) pipe(0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x481}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@remote, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2000000, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) shutdown(0xffffffffffffffff, 0x0) 799.615864ms ago: executing program 2 (id=2520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd490328bf030020000000600000000204730081e949b93897bc3b0020070000007d01ff020000000000000000000000000001"], 0xfdef) 620.938803ms ago: executing program 1 (id=2521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x3a000000}, 0x0) 389.604235ms ago: executing program 2 (id=2522): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000, 0xfd}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) 389.237397ms ago: executing program 1 (id=2523): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x12c) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x1000}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000c00)={0x0, 0x0, 0x1, "10"}, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e000738000008007d80f50050505050505000008a65395cd373eb011ce5c7333aebc7140c4c40dc5c7a892912c3b5668e839013e6b73cfa9a7e9d1677faab4e0370f5c48f34300d55f9f243850574503d7c53f78262a426d8dc91845873697789749e20d56f97bc60140000000000000001d3f487f1c61d4a551ce82cc406545d3ae191cdb223680b3091dcab0d2e3e10f0a889af190400000080f96182779589f75a5d8f4fe65c97fcad0d737a93542576d19e60813314649f87491966728146dbcc6cb2de129512541a7f25d71069787413b09c02de7f2dae6239d0fe4cfee167425f30eaac65418bcc0abbbfb90043afe3"], 0x3c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) 374.179995ms ago: executing program 4 (id=2524): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf32(r1, &(0x7f0000000a40)=ANY=[], 0x358) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "570d58dc315f7722c1657eff71b66133050f41fa7c2ad4e8dcf568fbe42857ac7755a0d21e713da1b81a86dbcf42d6e30771d5b4cb0ec21721"}, @NFTA_DATA_VALUE={0x9, 0x1, "7083e619e9"}]}]}]}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[], 0x4c0}, 0x1, 0x0, 0xc2000000, 0x200000c0}, 0x10000008) 170.460841ms ago: executing program 4 (id=2525): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x7ff80000000000, 0x81, 0x5, 0x7fffffff, 0xffffffff, 0x6, 0x3}, &(0x7f0000000040)={0x0, 0x511, 0x80000000, 0x80, 0x9, 0x1ff, 0xffffffffffffffff, 0x8c7}, &(0x7f00000000c0)={0x1, 0x3, 0x7, 0x2, 0x3, 0x0, 0xb, 0x100000001}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffff]}, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13.852815ms ago: executing program 2 (id=2526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x89b1, &(0x7f0000000240)={'ip_vti0\x00', @ifru_names='vlan0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 0s ago: executing program 2 (id=2527): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd490328bf030020000000600000000204210081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) (fail_nth: 19) kernel console output (not intermixed with test programs): ver might not work. [ 425.781542][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 425.791637][ T5839] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 425.841964][T12422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.937893][ T984] usb 3-1: USB disconnect, device number 107 [ 426.145866][ T797] hdpvr 2-1:0.0: Could not setup controls [ 426.153720][ T797] hdpvr 2-1:0.0: registering videodev failed [ 426.187634][ T797] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 426.209542][ T797] usb 2-1: USB disconnect, device number 51 [ 426.503012][ T10] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 426.791525][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2273'. [ 426.846960][T12459] FAULT_INJECTION: forcing a failure. [ 426.846960][T12459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.860776][T12459] CPU: 0 UID: 0 PID: 12459 Comm: syz.1.2275 Not tainted syzkaller #0 PREEMPT(full) [ 426.860810][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.860823][T12459] Call Trace: [ 426.860833][T12459] [ 426.860842][T12459] dump_stack_lvl+0x189/0x250 [ 426.860870][T12459] ? __pfx____ratelimit+0x10/0x10 [ 426.860894][T12459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.860919][T12459] ? __pfx__printk+0x10/0x10 [ 426.860942][T12459] ? __might_fault+0xb0/0x130 [ 426.860989][T12459] should_fail_ex+0x414/0x560 [ 426.861018][T12459] _copy_from_iter+0x1de/0x1790 [ 426.861056][T12459] ? _copy_from_iter+0x24f/0x1790 [ 426.861091][T12459] ? __pfx__copy_from_iter+0x10/0x10 [ 426.861117][T12459] ? sock_alloc_send_pskb+0x86b/0x980 [ 426.861157][T12459] ? __pfx__copy_from_iter+0x10/0x10 [ 426.861190][T12459] ? page_copy_sane+0x16a/0x280 [ 426.861222][T12459] copy_page_from_iter+0xdd/0x170 [ 426.861257][T12459] skb_copy_datagram_from_iter+0x306/0x720 [ 426.861303][T12459] tun_get_user+0x1691/0x3e90 [ 426.861348][T12459] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 426.861372][T12459] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.861398][T12459] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 426.861421][T12459] ? __pfx_tun_get_user+0x10/0x10 [ 426.861463][T12459] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 426.861485][T12459] ? __lock_acquire+0xab9/0xd20 [ 426.861523][T12459] ? ref_tracker_alloc+0x318/0x460 [ 426.861548][T12459] ? tun_get+0x157/0x2f0 [ 426.861575][T12459] ? tun_chr_write_iter+0x60/0x210 [ 426.861604][T12459] ? ksys_write+0x145/0x250 [ 426.861624][T12459] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 426.861657][T12459] ? tun_get+0x1c/0x2f0 [ 426.861693][T12459] ? tun_get+0x1c/0x2f0 [ 426.861723][T12459] ? tun_get+0x1c/0x2f0 [ 426.861758][T12459] tun_chr_write_iter+0x113/0x210 [ 426.861792][T12459] vfs_write+0x5c9/0xb30 [ 426.861818][T12459] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 426.861849][T12459] ? __pfx_vfs_write+0x10/0x10 [ 426.861881][T12459] ? __fget_files+0x2a/0x420 [ 426.861916][T12459] ksys_write+0x145/0x250 [ 426.861939][T12459] ? __pfx_ksys_write+0x10/0x10 [ 426.861978][T12459] ? do_syscall_64+0xbe/0xfa0 [ 426.862007][T12459] do_syscall_64+0xfa/0xfa0 [ 426.862031][T12459] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.862055][T12459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.862076][T12459] ? clear_bhb_loop+0x60/0xb0 [ 426.862102][T12459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.862123][T12459] RIP: 0033:0x7f543d18efc9 [ 426.862142][T12459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.862160][T12459] RSP: 002b:00007f543dfa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 426.862183][T12459] RAX: ffffffffffffffda RBX: 00007f543d3e5fa0 RCX: 00007f543d18efc9 [ 426.862199][T12459] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 426.862213][T12459] RBP: 00007f543dfa6090 R08: 0000000000000000 R09: 0000000000000000 [ 426.862226][T12459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.862239][T12459] R13: 00007f543d3e6038 R14: 00007f543d3e5fa0 R15: 00007fffe0346da8 [ 426.862274][T12459] [ 426.921026][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 426.924475][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 427.333193][ T984] usb 4-1: USB disconnect, device number 83 [ 427.680950][ T5923] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 427.683663][T12478] loop4: detected capacity change from 0 to 524287936 [ 427.841704][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 427.855451][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.878105][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.892094][ T5923] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 427.905868][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.931057][ T5923] usb 4-1: config 0 descriptor?? [ 427.951540][ T5923] hub 4-1:0.0: USB hub found [ 428.042016][ T984] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 428.173978][ T145] Bluetooth: hci1: Frame reassembly failed (-84) [ 428.180718][ T5923] hub 4-1:0.0: 1 port detected [ 428.214012][ T984] usb 2-1: Using ep0 maxpacket: 32 [ 428.221452][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.234023][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.246015][ T984] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 428.257511][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.272087][ T984] usb 2-1: config 0 descriptor?? [ 428.282499][ T984] hub 2-1:0.0: USB hub found [ 428.496995][ T145] Bluetooth: hci5: Frame reassembly failed (-84) [ 428.503863][ T984] hub 2-1:0.0: 1 port detected [ 428.541306][ T44] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 428.714918][ T44] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 428.726857][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 428.733687][ T44] usb 3-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 428.749056][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.760945][ T44] usb 3-1: config 0 descriptor?? [ 428.766834][T12486] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 428.827414][T12455] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 428.835929][T12454] [U] ^B [ 429.183357][ T44] saitek 0003:0738:1709.0019: unknown main item tag 0x0 [ 429.190421][ T44] saitek 0003:0738:1709.0019: item fetching failed at offset 3/5 [ 429.199262][ T44] saitek 0003:0738:1709.0019: parse failed [ 429.205347][ T44] saitek 0003:0738:1709.0019: probe with driver saitek failed with error -22 [ 429.391669][T12486] loop6: detected capacity change from 0 to 7 [ 429.404512][T12486] Dev loop6: unable to read RDB block 7 [ 429.410197][T12486] loop6: unable to read partition table [ 429.417293][T12486] loop6: partition table beyond EOD, truncated [ 429.425975][T12486] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 429.566729][ T44] usb 3-1: USB disconnect, device number 108 [ 429.804241][T12495] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2291'. [ 429.864397][ T5923] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 430.181061][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 430.188543][ T5839] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 430.205659][ T984] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 430.363448][ T984] usb 4-1: USB disconnect, device number 84 [ 430.456127][T12515] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 430.500974][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 430.508823][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 430.631257][ T5923] usb 2-1: USB disconnect, device number 52 [ 430.839232][T12523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.165828][T12540] FAULT_INJECTION: forcing a failure. [ 431.165828][T12540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.192112][T12540] CPU: 0 UID: 0 PID: 12540 Comm: syz.3.2305 Not tainted syzkaller #0 PREEMPT(full) [ 431.192142][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.192155][T12540] Call Trace: [ 431.192164][T12540] [ 431.192174][T12540] dump_stack_lvl+0x189/0x250 [ 431.192204][T12540] ? __pfx____ratelimit+0x10/0x10 [ 431.192228][T12540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.192265][T12540] ? __pfx__printk+0x10/0x10 [ 431.192287][T12540] ? __might_fault+0xb0/0x130 [ 431.192325][T12540] should_fail_ex+0x414/0x560 [ 431.192354][T12540] _copy_from_iter+0x1de/0x1790 [ 431.192390][T12540] ? _copy_from_iter+0x24f/0x1790 [ 431.192423][T12540] ? __pfx__copy_from_iter+0x10/0x10 [ 431.192449][T12540] ? sock_alloc_send_pskb+0x86b/0x980 [ 431.192487][T12540] ? __pfx__copy_from_iter+0x10/0x10 [ 431.192518][T12540] ? page_copy_sane+0x16a/0x280 [ 431.192554][T12540] copy_page_from_iter+0xdd/0x170 [ 431.192589][T12540] skb_copy_datagram_from_iter+0x306/0x720 [ 431.192633][T12540] tun_get_user+0x1691/0x3e90 [ 431.192678][T12540] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 431.192701][T12540] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.192725][T12540] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 431.192747][T12540] ? __pfx_tun_get_user+0x10/0x10 [ 431.192787][T12540] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 431.192808][T12540] ? __lock_acquire+0xab9/0xd20 [ 431.192844][T12540] ? ref_tracker_alloc+0x318/0x460 [ 431.192868][T12540] ? tun_get+0x157/0x2f0 [ 431.192893][T12540] ? tun_chr_write_iter+0x60/0x210 [ 431.192921][T12540] ? ksys_write+0x145/0x250 [ 431.192940][T12540] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 431.192971][T12540] ? tun_get+0x1c/0x2f0 [ 431.193006][T12540] ? tun_get+0x1c/0x2f0 [ 431.193035][T12540] ? tun_get+0x1c/0x2f0 [ 431.193069][T12540] tun_chr_write_iter+0x113/0x210 [ 431.193100][T12540] vfs_write+0x5c9/0xb30 [ 431.193125][T12540] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 431.193156][T12540] ? __pfx_vfs_write+0x10/0x10 [ 431.193187][T12540] ? __fget_files+0x2a/0x420 [ 431.193220][T12540] ksys_write+0x145/0x250 [ 431.193242][T12540] ? __pfx_ksys_write+0x10/0x10 [ 431.193266][T12540] ? do_syscall_64+0xbe/0xfa0 [ 431.193293][T12540] do_syscall_64+0xfa/0xfa0 [ 431.193335][T12540] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.193359][T12540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.193381][T12540] ? clear_bhb_loop+0x60/0xb0 [ 431.193406][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.193427][T12540] RIP: 0033:0x7f5c3a78efc9 [ 431.193446][T12540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.193464][T12540] RSP: 002b:00007f5c389f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.193488][T12540] RAX: ffffffffffffffda RBX: 00007f5c3a9e5fa0 RCX: 00007f5c3a78efc9 [ 431.193503][T12540] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 431.193517][T12540] RBP: 00007f5c389f6090 R08: 0000000000000000 R09: 0000000000000000 [ 431.193530][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.193544][T12540] R13: 00007f5c3a9e6038 R14: 00007f5c3a9e5fa0 R15: 00007fff97baa248 [ 431.193585][T12540] [ 431.663914][ T984] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 431.825919][ T984] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 431.835363][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.865370][ T984] usb 5-1: config 0 descriptor?? [ 431.961051][ T44] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 432.111242][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 432.118226][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.120973][ T5923] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 432.129455][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.147632][ T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 432.156884][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.167633][ T44] usb 2-1: config 0 descriptor?? [ 432.177428][ T44] hub 2-1:0.0: USB hub found [ 432.290968][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 432.299626][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.310715][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.320947][ T5923] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 432.330039][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.342682][ T5923] usb 4-1: config 0 descriptor?? [ 432.352322][ T5923] hub 4-1:0.0: USB hub found [ 432.386441][ T44] hub 2-1:0.0: 1 port detected [ 432.393761][ T37] Bluetooth: hci1: Frame reassembly failed (-84) [ 432.490449][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.499707][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.509573][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.519898][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.568061][ T1342] Bluetooth: hci5: Frame reassembly failed (-84) [ 432.571946][ T5923] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 432.576182][ T1342] Bluetooth: hci5: Frame reassembly failed (-84) [ 433.140071][ T984] usb 5-1: Cannot set autoneg [ 433.150019][ T984] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 433.155711][T12581] binder: BC_ATTEMPT_ACQUIRE not supported [ 433.175170][T12582] binder: BC_ATTEMPT_ACQUIRE not supported [ 433.181232][T12581] binder: 12580:12581 ioctl c0306201 2000000001c0 returned -22 [ 433.185505][ T984] usb 5-1: USB disconnect, device number 50 [ 433.189044][T12582] binder: 12580:12582 ioctl c0306201 2000000001c0 returned -22 [ 433.440972][ T797] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 433.590927][ T797] usb 3-1: Using ep0 maxpacket: 32 [ 433.602851][ T797] usb 3-1: New USB device found, idVendor=0572, idProduct=c69a, bcdDevice=50.5e [ 433.612088][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.620149][ T797] usb 3-1: Product: syz [ 433.624709][ T797] usb 3-1: Manufacturer: syz [ 433.629409][ T797] usb 3-1: SerialNumber: syz [ 433.638002][ T797] usb 3-1: config 0 descriptor?? [ 433.653518][ T797] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 433.690956][ T797] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 433.697405][ T797] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 433.821523][ T797] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 433.827978][ T797] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 433.910941][ T797] usb 3-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C v2 Lite' in warm state [ 433.925107][ T797] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 433.936260][ T797] dvbdev: DVB: registering new adapter (MyGica Mini DVB-(T/T2/C) USB Stick T230C v2 Lite) [ 433.946678][ T797] usb 3-1: media controller created [ 433.984305][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.031460][ T939] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 434.110014][ T797] usb 3-1: USB disconnect, device number 109 [ 434.422725][ T5837] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 434.544753][ T10] usb 2-1: USB disconnect, device number 53 [ 434.580989][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 434.581046][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 434.623979][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 434.624093][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 434.663815][ T5923] usb 4-1: USB disconnect, device number 85 [ 434.727001][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 434.776396][T12607] bond0: (slave bond_slave_0): Releasing backup interface [ 434.910035][T12609] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 434.919231][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 435.241575][ T5923] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 435.326255][T12619] FAULT_INJECTION: forcing a failure. [ 435.326255][T12619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.339672][T12619] CPU: 1 UID: 0 PID: 12619 Comm: syz.2.2335 Not tainted syzkaller #0 PREEMPT(full) [ 435.339693][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.339703][T12619] Call Trace: [ 435.339709][T12619] [ 435.339715][T12619] dump_stack_lvl+0x189/0x250 [ 435.339738][T12619] ? __pfx____ratelimit+0x10/0x10 [ 435.339755][T12619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.339772][T12619] ? __pfx__printk+0x10/0x10 [ 435.339789][T12619] ? __might_fault+0xb0/0x130 [ 435.339816][T12619] should_fail_ex+0x414/0x560 [ 435.339837][T12619] _copy_from_iter+0x1de/0x1790 [ 435.339864][T12619] ? _copy_from_iter+0x24f/0x1790 [ 435.339888][T12619] ? __pfx__copy_from_iter+0x10/0x10 [ 435.339907][T12619] ? sock_alloc_send_pskb+0x86b/0x980 [ 435.339935][T12619] ? __pfx__copy_from_iter+0x10/0x10 [ 435.339961][T12619] ? page_copy_sane+0x16a/0x280 [ 435.339988][T12619] copy_page_from_iter+0xdd/0x170 [ 435.340016][T12619] skb_copy_datagram_from_iter+0x306/0x720 [ 435.340055][T12619] tun_get_user+0x1691/0x3e90 [ 435.340090][T12619] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 435.340107][T12619] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.340125][T12619] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 435.340141][T12619] ? __pfx_tun_get_user+0x10/0x10 [ 435.340170][T12619] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 435.340185][T12619] ? __lock_acquire+0xab9/0xd20 [ 435.340221][T12619] ? ref_tracker_alloc+0x318/0x460 [ 435.340238][T12619] ? tun_get+0x157/0x2f0 [ 435.340257][T12619] ? tun_chr_write_iter+0x60/0x210 [ 435.340277][T12619] ? ksys_write+0x145/0x250 [ 435.340291][T12619] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 435.340313][T12619] ? tun_get+0x1c/0x2f0 [ 435.340339][T12619] ? tun_get+0x1c/0x2f0 [ 435.340360][T12619] ? tun_get+0x1c/0x2f0 [ 435.340384][T12619] tun_chr_write_iter+0x113/0x210 [ 435.340407][T12619] vfs_write+0x5c9/0xb30 [ 435.340424][T12619] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 435.340446][T12619] ? __pfx_vfs_write+0x10/0x10 [ 435.340468][T12619] ? __fget_files+0x2a/0x420 [ 435.340492][T12619] ksys_write+0x145/0x250 [ 435.340508][T12619] ? __pfx_ksys_write+0x10/0x10 [ 435.340525][T12619] ? do_syscall_64+0xbe/0xfa0 [ 435.340544][T12619] do_syscall_64+0xfa/0xfa0 [ 435.340560][T12619] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.340577][T12619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.340591][T12619] ? clear_bhb_loop+0x60/0xb0 [ 435.340609][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.340623][T12619] RIP: 0033:0x7f617e58efc9 [ 435.340637][T12619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.340650][T12619] RSP: 002b:00007f617f450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.340666][T12619] RAX: ffffffffffffffda RBX: 00007f617e7e5fa0 RCX: 00007f617e58efc9 [ 435.340678][T12619] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 435.340687][T12619] RBP: 00007f617f450090 R08: 0000000000000000 R09: 0000000000000000 [ 435.340697][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.340706][T12619] R13: 00007f617e7e6038 R14: 00007f617e7e5fa0 R15: 00007ffc235615e8 [ 435.340730][T12619] [ 435.672933][ T5923] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 435.681762][ T5923] usb 2-1: config 0 has no interface number 0 [ 435.687931][ T5923] usb 2-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 435.699424][ T5923] usb 2-1: config 0 interface 214 has no altsetting 0 [ 435.709918][ T5923] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 435.723602][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.732377][ T5923] usb 2-1: Product: syz [ 435.736687][ T5923] usb 2-1: Manufacturer: syz [ 435.741403][ T5923] usb 2-1: SerialNumber: syz [ 435.749103][ T5923] usb 2-1: config 0 descriptor?? [ 435.766845][T12611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 435.990121][T12611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.460995][ T984] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 436.500962][ T939] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 436.610992][ T984] usb 3-1: Using ep0 maxpacket: 32 [ 436.617927][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.629072][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.639404][ T984] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 436.648755][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.661439][ T984] usb 3-1: config 0 descriptor?? [ 436.670984][ T939] usb 4-1: Using ep0 maxpacket: 32 [ 436.676578][ T984] hub 3-1:0.0: USB hub found [ 436.683729][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.694896][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.704779][ T939] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 436.714052][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.725181][ T939] usb 4-1: config 0 descriptor?? [ 436.734198][ T939] hub 4-1:0.0: USB hub found [ 436.882785][ T984] hub 3-1:0.0: 1 port detected [ 436.886547][ T145] Bluetooth: hci5: Frame reassembly failed (-84) [ 436.947552][ T939] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 436.951155][ T145] Bluetooth: hci6: Frame reassembly failed (-84) [ 436.981297][T12634] Bluetooth: hci1: command 0x1003 tx timeout [ 436.989404][ T5839] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 437.070205][T12637] loop4: detected capacity change from 0 to 524287936 [ 437.144875][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 437.175835][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 437.273739][T12641] loop4: detected capacity change from 0 to 2559 [ 437.281572][T12641] buffer_io_error: 11 callbacks suppressed [ 437.281591][T12641] Buffer I/O error on dev loop4, logical block 0, async page read [ 437.297368][T12641] Buffer I/O error on dev loop4, logical block 0, async page read [ 437.305779][T12641] Buffer I/O error on dev loop4, logical block 0, async page read [ 437.314178][T12641] Buffer I/O error on dev loop4, logical block 0, async page read [ 437.322981][T12641] Buffer I/O error on dev loop4, logical block 0, async page read [ 437.332413][T12641] Buffer I/O error on dev loop4, logical block 0, async page read [ 437.340563][T12641] Buffer I/O error on dev loop4, logical block 0, async page read [ 437.349183][T12641] Buffer I/O error on dev loop4, logical block 0, async page read [ 437.357748][T12641] ldm_validate_partition_table(): Disk read failed. [ 437.364744][T12641] Buffer I/O error on dev loop4, logical block 0, async page read [ 437.372814][T12641] Buffer I/O error on dev loop4, logical block 0, async page read [ 437.381553][T12641] Dev loop4: unable to read RDB block 0 [ 437.381788][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 437.399006][T12641] loop4: unable to read partition table [ 437.399557][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 437.405661][T12641] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 437.431095][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 437.443676][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 437.457002][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 437.457549][ T5200] ldm_validate_partition_table(): Disk read failed. [ 437.468590][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 437.477040][ T5200] Dev loop4: unable to read RDB block 0 [ 437.488449][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 437.496665][ T5200] loop4: unable to read partition table [ 437.511013][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 437.537040][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 437.563912][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 437.581862][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 437.608345][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 437.636173][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 437.650245][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 437.665739][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 437.677676][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 437.689346][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 437.704671][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 437.716220][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 437.727769][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 437.740768][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 437.756176][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 437.777280][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 437.789413][ T5923] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 437.810718][ T5923] ax88179_178a 2-1:0.214 eth5: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 06:08:45:cb:fa:9f [ 437.830083][ T5923] usb 2-1: USB disconnect, device number 54 [ 437.838619][ T5923] ax88179_178a 2-1:0.214 eth5: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 438.097834][T12653] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 438.370357][T12662] tipc: Started in network mode [ 438.377098][T12662] tipc: Node identity 00000000400100008, cluster identity 4711 [ 438.401100][ T5923] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 438.502789][ T984] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 438.564304][ T5923] usb 5-1: not running at top speed; connect to a high speed hub [ 438.608450][ T5923] usb 5-1: config 1 interface 0 has no altsetting 0 [ 438.621631][ T5923] usb 5-1: string descriptor 0 read error: -22 [ 438.641133][ T5923] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 438.650509][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.828455][T12671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2355'. [ 438.884402][T12655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.896602][T12655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.907430][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 438.911816][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 438.981942][ T5837] Bluetooth: hci6: command 0x1003 tx timeout [ 438.982911][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 439.017354][ T939] usbhid 4-1:0.0: can't add hid device: -71 [ 439.023804][ T939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 439.051320][ T5836] usb 3-1: USB disconnect, device number 110 [ 439.062294][ T939] usb 4-1: USB disconnect, device number 86 [ 439.171060][ T5880] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 439.323075][ T5880] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 439.331663][ T5880] usb 2-1: config 0 has no interface number 0 [ 439.337865][ T5880] usb 2-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 439.349446][ T5880] usb 2-1: config 0 interface 214 has no altsetting 0 [ 439.358758][ T5880] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 439.368065][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.376210][ T5880] usb 2-1: Product: syz [ 439.380527][ T5880] usb 2-1: Manufacturer: syz [ 439.385300][ T5880] usb 2-1: SerialNumber: syz [ 439.392761][ T5880] usb 2-1: config 0 descriptor?? [ 439.398777][T12673] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 439.612049][T12673] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 439.763427][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 439.971733][ T797] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 440.060921][ T10] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 440.122624][ T797] usb 4-1: not running at top speed; connect to a high speed hub [ 440.132090][ T797] usb 4-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 440.142441][ T797] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.151491][ T797] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 440.166729][ T797] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.175993][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.184293][ T797] usb 4-1: Product: syz [ 440.188522][ T797] usb 4-1: Manufacturer: 끑䓄䑥⪺葹갡傹鿻쐝ꉍ澪虎宣ꮮ酅硃꘶艠嵞♗柼䒑⢎퓺䬵訌沯潰ῢ࢏名萖ꎘ輳풞捋譛볕҄ [ 440.204724][ T797] usb 4-1: SerialNumber: syz [ 440.223428][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 440.234667][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 440.245690][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 440.258759][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 440.268361][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.282434][ T10] usb 3-1: config 0 descriptor?? [ 440.288676][T12690] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 440.429975][T12686] netlink: 'syz.3.2360': attribute type 21 has an invalid length. [ 440.504844][T12693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.510960][ T10] logitech-djreceiver 0003:046D:C51B.001A: unknown main item tag 0x0 [ 440.522636][T12693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.530631][ T10] logitech-djreceiver 0003:046D:C51B.001A: unknown main item tag 0x0 [ 440.544934][ T10] logitech-djreceiver 0003:046D:C51B.001A: unknown main item tag 0x0 [ 440.559219][ T10] logitech-djreceiver 0003:046D:C51B.001A: unknown main item tag 0x0 [ 440.570279][ T10] logitech-djreceiver 0003:046D:C51B.001A: unknown main item tag 0x0 [ 440.578978][ T797] usb 4-1: 0:2 : does not exist [ 440.587674][ T10] logitech-djreceiver 0003:046D:C51B.001A: unknown main item tag 0x0 [ 440.605727][ T10] logitech-djreceiver 0003:046D:C51B.001A: unknown main item tag 0x0 [ 440.620255][ T797] usb 4-1: USB disconnect, device number 87 [ 440.627628][ T10] logitech-djreceiver 0003:046D:C51B.001A: unknown main item tag 0x0 [ 440.646811][ T10] logitech-djreceiver 0003:046D:C51B.001A: unknown main item tag 0x0 [ 440.669061][ T10] logitech-djreceiver 0003:046D:C51B.001A: unknown main item tag 0x0 [ 440.710925][ T10] usb 3-1: USB disconnect, device number 111 [ 440.752939][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 440.766426][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 440.967349][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 440.978950][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 440.991364][T12655] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 440.999098][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 441.012627][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 441.024389][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 441.036209][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 441.048077][ T5923] usbhid 5-1:1.0: can't add hid device: -71 [ 441.054979][ T5923] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 441.063274][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 441.077420][ T5923] usb 5-1: USB disconnect, device number 51 [ 441.087017][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 441.104131][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 441.115656][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 441.129126][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 441.140622][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 441.153610][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 441.165085][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 441.176781][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 441.188276][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 441.199966][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 441.212227][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 441.224591][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 441.252696][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 441.264249][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 441.276862][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 441.288401][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 441.299977][ T5880] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 441.323131][ T5880] ax88179_178a 2-1:0.214 eth5: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 52:38:b2:e9:02:a1 [ 441.342980][ T5880] usb 2-1: USB disconnect, device number 55 [ 441.359561][ T5880] ax88179_178a 2-1:0.214 eth5: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 441.500940][ T939] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 441.533039][T12702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2365'. [ 441.544964][T12702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2365'. [ 441.632003][ T939] usb 4-1: device descriptor read/64, error -71 [ 441.681604][T12708] binder: 12707:12708 ioctl c0306201 2000000004c0 returned -14 [ 441.856175][T12710] Set syz1 is full, maxelem 65536 reached [ 441.870981][ T939] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 441.930936][ T5880] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 442.010980][ T939] usb 4-1: device descriptor read/64, error -71 [ 442.083404][ T5880] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 442.091802][ T5880] usb 2-1: config 0 has no interface number 0 [ 442.097970][ T5880] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 442.109182][ T5880] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 442.122494][ T5880] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 442.122730][ T939] usb usb4-port1: attempt power cycle [ 442.134246][ T5880] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 442.151169][ T5880] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 442.162312][ T5880] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 442.178270][ T5880] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 442.188083][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.204720][ T5880] usb 2-1: config 0 descriptor?? [ 442.210489][T12708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 442.224281][T12708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 442.263896][ T5880] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 442.481747][ T939] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 442.501941][ T939] usb 4-1: device descriptor read/8, error -71 [ 442.546657][ T5880] usb 2-1: USB disconnect, device number 56 [ 442.558278][ T5880] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 442.701786][ T5836] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 442.741683][ T939] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 442.761761][ T939] usb 4-1: device descriptor read/8, error -71 [ 442.800993][ T984] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 442.862793][ T5836] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 442.871885][ T939] usb usb4-port1: unable to enumerate USB device [ 442.878536][ T5836] usb 3-1: config 0 has no interface number 0 [ 442.885728][ T5836] usb 3-1: config 0 interface 168 has no altsetting 0 [ 442.894647][ T5836] usb 3-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=95.e2 [ 442.903783][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.911880][ T5836] usb 3-1: Product: syz [ 442.916068][ T5836] usb 3-1: Manufacturer: syz [ 442.920666][ T5836] usb 3-1: SerialNumber: syz [ 442.928118][ T5836] usb 3-1: config 0 descriptor?? [ 442.953246][ T984] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 442.961715][ T984] usb 5-1: config 0 has no interface number 0 [ 442.967861][ T984] usb 5-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 442.978961][ T984] usb 5-1: config 0 interface 214 has no altsetting 0 [ 442.989232][ T984] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 442.998678][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.007011][ T984] usb 5-1: Product: syz [ 443.011303][ T984] usb 5-1: Manufacturer: syz [ 443.015944][ T984] usb 5-1: SerialNumber: syz [ 443.024978][ T984] usb 5-1: config 0 descriptor?? [ 443.031101][T12724] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 443.093456][T12726] loop4: detected capacity change from 0 to 2559 [ 443.104826][T12726] buffer_io_error: 27 callbacks suppressed [ 443.104845][T12726] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.119207][T12726] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.127420][T12726] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.135608][T12726] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.143889][T12726] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.152001][T12726] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.160162][T12726] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.168253][T12726] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.176528][T12726] ldm_validate_partition_table(): Disk read failed. [ 443.183429][T12726] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.192248][T12726] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.200457][T12726] Dev loop4: unable to read RDB block 0 [ 443.206670][T12726] loop4: unable to read partition table [ 443.212593][T12726] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 443.244358][T12724] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 443.296120][T12728] PKCS8: Unsupported PKCS#8 version [ 443.542607][ T5923] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 443.680988][ T5923] usb 2-1: device descriptor read/64, error -71 [ 443.931118][ T5923] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 444.060933][ T5923] usb 2-1: device descriptor read/64, error -71 [ 444.171231][ T5923] usb usb2-port1: attempt power cycle [ 444.402346][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 444.418780][T12739] IPVS: set_ctl: invalid protocol: 10 0.0.6.89:0 [ 444.510932][ T5923] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 444.532793][ T5923] usb 2-1: device descriptor read/8, error -71 [ 444.574836][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 444.586170][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 444.597929][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 444.610458][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 444.622094][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 444.633756][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 444.645481][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 444.656870][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 444.668250][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 444.671038][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 444.679786][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 444.698465][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 444.710266][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 444.722688][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 444.734661][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 444.746691][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 444.758151][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 444.769740][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 444.781002][ T5923] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 444.781396][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 444.799980][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 444.811290][ T10] usb 4-1: device descriptor read/64, error -71 [ 444.811523][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 444.830206][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 444.831168][ T5923] usb 2-1: device descriptor read/8, error -71 [ 444.848727][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 444.860151][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 444.871542][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 444.883293][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 444.895002][ T984] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 444.914543][ T984] ax88179_178a 5-1:0.214 eth5: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, ae:cd:1d:8f:bb:22 [ 444.936390][ T984] usb 5-1: USB disconnect, device number 52 [ 444.946560][ T984] ax88179_178a 5-1:0.214 eth5: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 444.961955][ T5923] usb usb2-port1: unable to enumerate USB device [ 445.081054][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 445.221813][ T10] usb 4-1: device descriptor read/64, error -71 [ 445.333666][ T10] usb usb4-port1: attempt power cycle [ 445.388266][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.453780][ T5836] quatech2 3-1:0.168: Quatech 2nd gen USB to Serial Driver converter detected [ 445.472533][ T5836] usb 3-1: qt2_attach - failed to power on unit: -71 [ 445.490164][ T5836] quatech2 3-1:0.168: probe with driver quatech2 failed with error -71 [ 445.512397][ T5836] usb 3-1: USB disconnect, device number 112 [ 445.691367][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 445.721663][ T10] usb 4-1: device descriptor read/8, error -71 [ 445.815483][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2388'. [ 445.940333][T12771] FAULT_INJECTION: forcing a failure. [ 445.940333][T12771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.955304][T12771] CPU: 0 UID: 0 PID: 12771 Comm: syz.4.2390 Not tainted syzkaller #0 PREEMPT(full) [ 445.955332][T12771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.955345][T12771] Call Trace: [ 445.955354][T12771] [ 445.955363][T12771] dump_stack_lvl+0x189/0x250 [ 445.955392][T12771] ? __pfx____ratelimit+0x10/0x10 [ 445.955415][T12771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.955438][T12771] ? __pfx__printk+0x10/0x10 [ 445.955461][T12771] ? __might_fault+0xb0/0x130 [ 445.955498][T12771] should_fail_ex+0x414/0x560 [ 445.955527][T12771] _copy_from_iter+0x1de/0x1790 [ 445.955563][T12771] ? _copy_from_iter+0x24f/0x1790 [ 445.955597][T12771] ? __pfx__copy_from_iter+0x10/0x10 [ 445.955623][T12771] ? sock_alloc_send_pskb+0x86b/0x980 [ 445.955660][T12771] ? __pfx__copy_from_iter+0x10/0x10 [ 445.955692][T12771] ? page_copy_sane+0x16a/0x280 [ 445.955721][T12771] copy_page_from_iter+0xdd/0x170 [ 445.955755][T12771] skb_copy_datagram_from_iter+0x306/0x720 [ 445.955799][T12771] tun_get_user+0x1691/0x3e90 [ 445.955843][T12771] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 445.955865][T12771] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.955890][T12771] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 445.955912][T12771] ? __pfx_tun_get_user+0x10/0x10 [ 445.955953][T12771] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 445.955973][T12771] ? __lock_acquire+0xab9/0xd20 [ 445.956009][T12771] ? ref_tracker_alloc+0x318/0x460 [ 445.956033][T12771] ? tun_get+0x157/0x2f0 [ 445.956059][T12771] ? tun_chr_write_iter+0x60/0x210 [ 445.956086][T12771] ? ksys_write+0x145/0x250 [ 445.956115][T12771] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 445.956146][T12771] ? tun_get+0x1c/0x2f0 [ 445.956180][T12771] ? tun_get+0x1c/0x2f0 [ 445.956208][T12771] ? tun_get+0x1c/0x2f0 [ 445.956242][T12771] tun_chr_write_iter+0x113/0x210 [ 445.956275][T12771] vfs_write+0x5c9/0xb30 [ 445.956300][T12771] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 445.956329][T12771] ? __pfx_vfs_write+0x10/0x10 [ 445.956359][T12771] ? __fget_files+0x2a/0x420 [ 445.956392][T12771] ksys_write+0x145/0x250 [ 445.956415][T12771] ? __pfx_ksys_write+0x10/0x10 [ 445.956438][T12771] ? do_syscall_64+0xbe/0xfa0 [ 445.956466][T12771] do_syscall_64+0xfa/0xfa0 [ 445.956488][T12771] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.956511][T12771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.956530][T12771] ? clear_bhb_loop+0x60/0xb0 [ 445.956553][T12771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.956573][T12771] RIP: 0033:0x7f72abd8efc9 [ 445.956591][T12771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.956609][T12771] RSP: 002b:00007f72acd0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.956631][T12771] RAX: ffffffffffffffda RBX: 00007f72abfe5fa0 RCX: 00007f72abd8efc9 [ 445.956646][T12771] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 445.956660][T12771] RBP: 00007f72acd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 445.956672][T12771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.956684][T12771] R13: 00007f72abfe6038 R14: 00007f72abfe5fa0 R15: 00007ffc989e58c8 [ 445.956717][T12771] [ 446.271674][ T5836] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 446.279809][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 446.301853][ T10] usb 4-1: device descriptor read/8, error -71 [ 446.413452][ T10] usb usb4-port1: unable to enumerate USB device [ 446.432891][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 446.440171][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.454992][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.464965][ T5836] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 446.474903][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.499264][ T5836] usb 3-1: config 0 descriptor?? [ 446.522181][ T5836] hub 3-1:0.0: USB hub found [ 446.721830][ T5836] hub 3-1:0.0: 1 port detected [ 446.890969][ T24] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 447.062618][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 447.070327][ T24] usb 5-1: can't read configurations, error -71 [ 447.537458][T12796] could not allocate digest TFM handle sha384-arm64 [ 447.645176][ T984] hub 3-1:0.0: activate --> -90 [ 447.730743][ T984] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 447.744553][ T984] usb 3-1: USB disconnect, device number 113 [ 448.132029][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 448.291291][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 448.309285][ T24] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 448.321265][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.329428][ T24] usb 5-1: Product: syz [ 448.333922][ T24] usb 5-1: Manufacturer: syz [ 448.338560][ T24] usb 5-1: SerialNumber: syz [ 448.352600][ T24] usb 5-1: config 0 descriptor?? [ 448.367022][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 448.476825][T12815] FAULT_INJECTION: forcing a failure. [ 448.476825][T12815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.490223][T12815] CPU: 0 UID: 0 PID: 12815 Comm: syz.2.2406 Not tainted syzkaller #0 PREEMPT(full) [ 448.490251][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.490264][T12815] Call Trace: [ 448.490273][T12815] [ 448.490283][T12815] dump_stack_lvl+0x189/0x250 [ 448.490315][T12815] ? __pfx____ratelimit+0x10/0x10 [ 448.490339][T12815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.490363][T12815] ? __pfx__printk+0x10/0x10 [ 448.490385][T12815] ? __might_fault+0xb0/0x130 [ 448.490417][T12815] should_fail_ex+0x414/0x560 [ 448.490437][T12815] _copy_from_iter+0x1de/0x1790 [ 448.490474][T12815] ? _copy_from_iter+0x24f/0x1790 [ 448.490509][T12815] ? __pfx__copy_from_iter+0x10/0x10 [ 448.490534][T12815] ? sock_alloc_send_pskb+0x86b/0x980 [ 448.490567][T12815] ? __pfx__copy_from_iter+0x10/0x10 [ 448.490589][T12815] ? page_copy_sane+0x16a/0x280 [ 448.490616][T12815] copy_page_from_iter+0xdd/0x170 [ 448.490651][T12815] skb_copy_datagram_from_iter+0x306/0x720 [ 448.490695][T12815] tun_get_user+0x1691/0x3e90 [ 448.490731][T12815] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 448.490748][T12815] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.490776][T12815] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 448.490799][T12815] ? __pfx_tun_get_user+0x10/0x10 [ 448.490839][T12815] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 448.490861][T12815] ? __lock_acquire+0xab9/0xd20 [ 448.490897][T12815] ? ref_tracker_alloc+0x318/0x460 [ 448.490935][T12815] ? tun_get+0x157/0x2f0 [ 448.490963][T12815] ? tun_chr_write_iter+0x60/0x210 [ 448.490992][T12815] ? ksys_write+0x145/0x250 [ 448.491012][T12815] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 448.491044][T12815] ? tun_get+0x1c/0x2f0 [ 448.491079][T12815] ? tun_get+0x1c/0x2f0 [ 448.491108][T12815] ? tun_get+0x1c/0x2f0 [ 448.491143][T12815] tun_chr_write_iter+0x113/0x210 [ 448.491176][T12815] vfs_write+0x5c9/0xb30 [ 448.491200][T12815] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 448.491223][T12815] ? __pfx_vfs_write+0x10/0x10 [ 448.491245][T12815] ? __fget_files+0x2a/0x420 [ 448.491281][T12815] ksys_write+0x145/0x250 [ 448.491305][T12815] ? __pfx_ksys_write+0x10/0x10 [ 448.491328][T12815] ? do_syscall_64+0xbe/0xfa0 [ 448.491354][T12815] do_syscall_64+0xfa/0xfa0 [ 448.491370][T12815] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.491388][T12815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.491403][T12815] ? clear_bhb_loop+0x60/0xb0 [ 448.491431][T12815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.491452][T12815] RIP: 0033:0x7f617e58efc9 [ 448.491470][T12815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.491487][T12815] RSP: 002b:00007f617f450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.491508][T12815] RAX: ffffffffffffffda RBX: 00007f617e7e5fa0 RCX: 00007f617e58efc9 [ 448.491519][T12815] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 448.491529][T12815] RBP: 00007f617f450090 R08: 0000000000000000 R09: 0000000000000000 [ 448.491538][T12815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.491547][T12815] R13: 00007f617e7e6038 R14: 00007f617e7e5fa0 R15: 00007ffc235615e8 [ 448.491582][T12815] [ 448.801117][ T984] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 448.828230][T12788] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 449.004414][ T984] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 449.015161][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.026165][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 449.036627][ T984] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.045214][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.055502][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 449.066149][ T984] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.073968][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.084769][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 449.094889][ T984] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.102764][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.112915][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 449.122952][ T984] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.131622][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.141832][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 449.153603][ T984] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.161473][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.171570][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 449.181619][ T984] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.189788][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.199909][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 449.209917][ T984] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.216654][ T44] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 449.226046][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.236611][ T984] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 449.246622][ T984] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.255657][ T984] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 449.264920][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.272999][ T984] usb 4-1: Product: syz [ 449.277227][ T984] usb 4-1: Manufacturer: syz [ 449.281944][ T984] usb 4-1: SerialNumber: syz [ 449.290495][T12813] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 449.298149][T12813] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 449.391157][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 449.398549][ T44] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 449.406853][ T44] usb 3-1: config 0 has no interface number 0 [ 449.413367][ T44] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 449.423551][ T44] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 449.436766][ T44] usb 3-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 449.446018][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.454165][ T44] usb 3-1: Product: syz [ 449.458420][ T44] usb 3-1: Manufacturer: syz [ 449.463122][ T44] usb 3-1: SerialNumber: syz [ 449.470709][ T44] usb 3-1: config 0 descriptor?? [ 449.477056][T12819] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 449.484755][T12819] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 449.577708][T12821] loop4: detected capacity change from 0 to 2559 [ 449.589326][ T7752] buffer_io_error: 11 callbacks suppressed [ 449.589342][ T7752] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.604221][ T7752] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.613010][ T7752] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.622199][ T7752] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.630978][ T7752] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.639247][ T7752] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.648566][ T7752] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.657365][ T7752] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.665625][ T7752] ldm_validate_partition_table(): Disk read failed. [ 449.672448][ T7752] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.680659][ T7752] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.689187][ T7752] Dev loop4: unable to read RDB block 0 [ 449.695571][ T7752] loop4: unable to read partition table [ 449.707342][T12821] ldm_validate_partition_table(): Disk read failed. [ 449.718953][T12821] Dev loop4: unable to read RDB block 0 [ 449.728660][T12819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.737790][T12821] loop4: unable to read partition table [ 449.746409][T12819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.751278][T12821] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 449.765526][ T44] hub 3-1:0.219: bad descriptor, ignoring hub [ 449.791619][ T44] hub 3-1:0.219: probe with driver hub failed with error -5 [ 449.823215][ T44] option 3-1:0.219: GSM modem (1-port) converter detected [ 449.853550][ T984] rtl8150 4-1:1.0: couldn't reset the device [ 449.864271][ T984] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 449.874240][ T44] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 449.899303][ T984] usb 4-1: USB disconnect, device number 96 [ 449.908477][ T44] usb 3-1: USB disconnect, device number 114 [ 449.920757][T12823] loop4: detected capacity change from 0 to 524287936 [ 449.954790][ T44] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 449.969330][ T44] option 3-1:0.219: device disconnected [ 450.267895][T12802] ALSA: seq fatal error: cannot create timer (-22) [ 450.321827][ T24] gspca_stk1135: reg_w 0x200 err -110 [ 450.331432][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 450.337880][ T24] gspca_stk1135: Sensor write failed [ 450.343563][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 450.349977][ T24] gspca_stk1135: Sensor write failed [ 450.356028][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 450.378874][ T24] gspca_stk1135: Sensor read failed [ 450.400312][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.400911][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 450.423374][T12831] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.446676][ T24] gspca_stk1135: Sensor read failed [ 450.455912][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 450.475301][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 450.493574][ T24] gspca_stk1135: Sensor read failed [ 450.498905][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 450.510911][ T24] gspca_stk1135: Sensor read failed [ 450.516246][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 450.522688][ T24] gspca_stk1135: Sensor write failed [ 450.528252][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 450.534721][ T24] gspca_stk1135: Sensor write failed [ 450.540273][ T24] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 450.633843][T12846] fuse: Unknown parameter ' ' [ 450.670377][T12850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2419'. [ 450.690951][ T5880] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 450.707220][T12847] fuse: Unknown parameter 'permit_directio' [ 450.840930][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 450.847833][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.858881][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.869669][ T5880] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 450.878997][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.889914][ T5880] usb 3-1: config 0 descriptor?? [ 450.898514][ T5880] hub 3-1:0.0: USB hub found [ 450.972926][ T24] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 451.115260][ T5880] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 451.132105][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 451.142285][ T24] usb 2-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 451.152884][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.162185][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 451.178960][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.188279][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.196428][ T24] usb 2-1: Product: syz [ 451.200620][ T24] usb 2-1: Manufacturer: 끑䓄䑥⪺葹갡傹鿻쐝ꉍ澪虎宣ꮮ酅硃꘶艠嵞♗柼䒑⢎퓺䬵訌沯潰ῢ࢏名萖ꎘ輳풞捋譛볕҄ [ 451.216260][ T24] usb 2-1: SerialNumber: syz [ 451.452855][T12852] netlink: 'syz.1.2420': attribute type 21 has an invalid length. [ 451.474735][ T10] usb 5-1: USB disconnect, device number 54 [ 451.548752][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2421'. [ 451.728847][ T24] usb 2-1: 0:2 : does not exist [ 451.771982][ T24] usb 2-1: USB disconnect, device number 61 [ 451.832104][ T7750] udevd[7750]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.905543][T12864] FAULT_INJECTION: forcing a failure. [ 451.905543][T12864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.920675][T12864] CPU: 0 UID: 0 PID: 12864 Comm: syz.3.2425 Not tainted syzkaller #0 PREEMPT(full) [ 451.920708][T12864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.920722][T12864] Call Trace: [ 451.920731][T12864] [ 451.920740][T12864] dump_stack_lvl+0x189/0x250 [ 451.920769][T12864] ? __pfx____ratelimit+0x10/0x10 [ 451.920793][T12864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.920817][T12864] ? __pfx__printk+0x10/0x10 [ 451.920840][T12864] ? __might_fault+0xb0/0x130 [ 451.920876][T12864] should_fail_ex+0x414/0x560 [ 451.920907][T12864] _copy_from_iter+0x1de/0x1790 [ 451.920944][T12864] ? _copy_from_iter+0x24f/0x1790 [ 451.920979][T12864] ? __pfx__copy_from_iter+0x10/0x10 [ 451.921006][T12864] ? sock_alloc_send_pskb+0x86b/0x980 [ 451.921046][T12864] ? __pfx__copy_from_iter+0x10/0x10 [ 451.921078][T12864] ? page_copy_sane+0x16a/0x280 [ 451.921110][T12864] copy_page_from_iter+0xdd/0x170 [ 451.921145][T12864] skb_copy_datagram_from_iter+0x306/0x720 [ 451.921190][T12864] tun_get_user+0x1691/0x3e90 [ 451.921234][T12864] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 451.921258][T12864] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.921284][T12864] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 451.921307][T12864] ? __pfx_tun_get_user+0x10/0x10 [ 451.921349][T12864] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 451.921370][T12864] ? __lock_acquire+0xab9/0xd20 [ 451.921407][T12864] ? ref_tracker_alloc+0x318/0x460 [ 451.921432][T12864] ? tun_get+0x157/0x2f0 [ 451.921459][T12864] ? tun_chr_write_iter+0x60/0x210 [ 451.921502][T12864] ? ksys_write+0x145/0x250 [ 451.921523][T12864] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 451.921555][T12864] ? tun_get+0x1c/0x2f0 [ 451.921592][T12864] ? tun_get+0x1c/0x2f0 [ 451.921628][T12864] ? tun_get+0x1c/0x2f0 [ 451.921663][T12864] tun_chr_write_iter+0x113/0x210 [ 451.921696][T12864] vfs_write+0x5c9/0xb30 [ 451.921722][T12864] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 451.921754][T12864] ? __pfx_vfs_write+0x10/0x10 [ 451.921786][T12864] ? __fget_files+0x2a/0x420 [ 451.921822][T12864] ksys_write+0x145/0x250 [ 451.921845][T12864] ? __pfx_ksys_write+0x10/0x10 [ 451.921870][T12864] ? do_syscall_64+0xbe/0xfa0 [ 451.921900][T12864] do_syscall_64+0xfa/0xfa0 [ 451.921925][T12864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.921945][T12864] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.921965][T12864] ? clear_bhb_loop+0x60/0xb0 [ 451.921990][T12864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.922011][T12864] RIP: 0033:0x7f5c3a78efc9 [ 451.922042][T12864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.922059][T12864] RSP: 002b:00007f5c389f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.922081][T12864] RAX: ffffffffffffffda RBX: 00007f5c3a9e5fa0 RCX: 00007f5c3a78efc9 [ 451.922097][T12864] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 451.922110][T12864] RBP: 00007f5c389f6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.922123][T12864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.922136][T12864] R13: 00007f5c3a9e6038 R14: 00007f5c3a9e5fa0 R15: 00007fff97baa248 [ 451.922170][T12864] [ 452.718684][T12885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2430'. [ 452.728891][T12885] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2430'. [ 453.061432][ T797] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 453.151563][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 453.196198][ T5880] usbhid 3-1:0.0: can't add hid device: -71 [ 453.218644][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 453.239794][ T797] usb 2-1: Using ep0 maxpacket: 32 [ 453.262138][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.302499][ T5880] usb 3-1: USB disconnect, device number 115 [ 453.312928][ T797] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 453.330920][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.373518][ T797] usb 2-1: Product: syz [ 453.377760][ T797] usb 2-1: Manufacturer: syz [ 453.388572][ T797] usb 2-1: SerialNumber: syz [ 453.408326][ T797] usb 2-1: config 0 descriptor?? [ 453.418945][ T797] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 453.426867][ T797] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 453.436574][ T797] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 453.446802][ T797] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 453.454701][ T797] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 453.462777][ T797] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 453.470408][ T797] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 453.478450][ T797] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 453.488631][ T797] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 453.619798][ T24] usb 2-1: USB disconnect, device number 62 [ 453.626390][ T44] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 453.637984][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 453.649644][ T24] keyspan 2-1:0.0: device disconnected [ 453.794715][T12918] Set syz1 is full, maxelem 65536 reached [ 453.821169][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 453.828067][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.840257][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.851597][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.860848][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.872077][ T44] usb 4-1: config 0 descriptor?? [ 453.880068][ T44] hub 4-1:0.0: USB hub found [ 454.040962][ T797] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 454.082192][ T44] hub 4-1:0.0: 1 port detected [ 454.192230][ T797] usb 3-1: not running at top speed; connect to a high speed hub [ 454.203293][ T797] usb 3-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 454.213979][ T797] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.223229][ T797] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 454.239274][ T797] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.250202][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.258328][ T797] usb 3-1: Product: syz [ 454.264377][ T797] usb 3-1: Manufacturer: 끑䓄䑥⪺葹갡傹鿻쐝ꉍ澪虎宣ꮮ酅硃꘶艠嵞♗柼䒑⢎퓺䬵訌沯潰ῢ࢏名萖ꎘ輳풞捋譛볕҄ [ 454.280041][ T797] usb 3-1: SerialNumber: syz [ 454.431421][ T5880] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 454.511530][T12916] netlink: 'syz.2.2439': attribute type 21 has an invalid length. [ 454.600968][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 454.613574][ T5880] usb 2-1: config 255 has an invalid interface number: 207 but max is 0 [ 454.622586][ T5880] usb 2-1: config 255 has no interface number 0 [ 454.628963][ T5880] usb 2-1: config 255 interface 207 has no altsetting 0 [ 454.639588][ T5880] usb 2-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=e9.34 [ 454.650916][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.660179][ T5880] usb 2-1: Product: syz [ 454.671488][ T5880] usb 2-1: Manufacturer: syz [ 454.680424][ T5880] usb 2-1: SerialNumber: syz [ 454.686544][ T797] usb 3-1: 0:2 : does not exist [ 454.736374][ T797] usb 3-1: USB disconnect, device number 116 [ 454.914790][T12920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.924471][T12920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.010884][ T44] hub 4-1:0.0: activate --> -90 [ 455.109441][ T44] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 455.110075][ T5923] usb 4-1: USB disconnect, device number 97 [ 455.260915][ T44] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 455.345202][T12932] loop4: detected capacity change from 0 to 2559 [ 455.352908][T12932] buffer_io_error: 27 callbacks suppressed [ 455.352926][T12932] Buffer I/O error on dev loop4, logical block 0, async page read [ 455.367838][T12932] Buffer I/O error on dev loop4, logical block 0, async page read [ 455.376612][T12932] Buffer I/O error on dev loop4, logical block 0, async page read [ 455.385140][T12932] Buffer I/O error on dev loop4, logical block 0, async page read [ 455.393618][T12932] Buffer I/O error on dev loop4, logical block 0, async page read [ 455.402025][T12932] Buffer I/O error on dev loop4, logical block 0, async page read [ 455.410017][T12932] Buffer I/O error on dev loop4, logical block 0, async page read [ 455.417981][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 455.419011][T12932] Buffer I/O error on dev loop4, logical block 0, async page read [ 455.428909][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 455.431710][T12932] ldm_validate_partition_table(): Disk read failed. [ 455.443100][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.449784][T12932] Buffer I/O error on dev loop4, logical block 0, async page read [ 455.470609][ T44] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 455.479341][T12932] Buffer I/O error on dev loop4, logical block 0, async page read [ 455.489599][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.489689][T12932] Dev loop4: unable to read RDB block 0 [ 455.505606][T12932] loop4: unable to read partition table [ 455.506073][ T44] usb 5-1: config 0 descriptor?? [ 455.513893][T12932] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 455.617452][T12934] binder: 12933:12934 ioctl c0306201 2000000004c0 returned -14 [ 455.664967][ T12] bridge_slave_1: left allmulticast mode [ 455.672526][ T12] bridge_slave_1: left promiscuous mode [ 455.678432][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.725577][ T12] bridge_slave_0: left allmulticast mode [ 455.728716][T12930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.752381][ T12] bridge_slave_0: left promiscuous mode [ 455.765858][T12930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.769075][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.774334][T12936] openvswitch: netlink: Missing key (keys=40, expected=100) [ 455.912950][ T797] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 456.007422][ T44] playstation 0003:054C:0DF2.001B: item fetching failed at offset 2/5 [ 456.031644][ T44] playstation 0003:054C:0DF2.001B: Parse failed [ 456.038140][ T44] playstation 0003:054C:0DF2.001B: probe with driver playstation failed with error -22 [ 456.096014][ T797] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 456.104560][ T797] usb 3-1: config 0 has no interface number 0 [ 456.110738][ T797] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 456.150861][ T797] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 456.181327][ T797] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 456.200911][ T797] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 456.214075][ T44] usb 5-1: USB disconnect, device number 55 [ 456.223041][ T797] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 456.244308][ T797] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 456.276619][ T797] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 456.297349][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.325897][ T797] usb 3-1: config 0 descriptor?? [ 456.338415][T12934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 456.345979][T12934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 456.359439][ T797] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 456.471907][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.482856][ T12] bond0 (unregistering): Released all slaves [ 456.512866][ T5880] peak_usb 2-1:255.207 can0: unable to request usb[type=0 value=1] err=-71 [ 456.522435][ T5880] peak_usb 2-1:255.207: unable to read PCAN-USB Pro FD firmware info (err -71) [ 456.570460][ T12] tipc: Left network mode [ 456.594289][ T5880] peak_usb 2-1:255.207: probe with driver peak_usb failed with error -71 [ 456.651385][ T5880] usb 2-1: USB disconnect, device number 63 [ 456.776836][ T797] usb 3-1: USB disconnect, device number 117 [ 456.795581][ T797] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 456.951562][ T44] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 457.041176][ T5880] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 457.048933][ T12] hsr_slave_0: left promiscuous mode [ 457.055734][ T12] hsr_slave_1: left promiscuous mode [ 457.062963][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.070389][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.083887][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.092136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.100597][ T12] batman_adv: batadv0: Removing interface: team0 [ 457.113692][ T44] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 457.130609][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.155153][ T12] veth1_macvtap: left promiscuous mode [ 457.163701][ T44] usb 4-1: config 0 descriptor?? [ 457.170422][ T12] veth0_macvtap: left promiscuous mode [ 457.178481][ T12] veth1_vlan: left promiscuous mode [ 457.185178][ T12] veth0_vlan: left promiscuous mode [ 457.200890][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 457.216033][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.247977][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.279480][ T5880] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 457.319709][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.347843][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'. [ 457.358613][ T5880] usb 2-1: config 0 descriptor?? [ 457.375563][ T5880] hub 2-1:0.0: USB hub found [ 457.589861][ T44] usb 4-1: Cannot set MAC address [ 457.596286][ T44] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 457.598149][ T5880] hub 2-1:0.0: 1 port detected [ 457.620458][ T44] usb 4-1: USB disconnect, device number 98 [ 457.796403][ T12] team0 (unregistering): Port device team_slave_1 removed [ 457.840563][ T12] team0 (unregistering): Port device team_slave_0 removed [ 458.537765][T12970] FAULT_INJECTION: forcing a failure. [ 458.537765][T12970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.552722][ T5880] hub 2-1:0.0: activate --> -90 [ 458.554715][T12970] CPU: 1 UID: 0 PID: 12970 Comm: syz.4.2462 Not tainted syzkaller #0 PREEMPT(full) [ 458.554748][T12970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 458.554763][T12970] Call Trace: [ 458.554774][T12970] [ 458.554784][T12970] dump_stack_lvl+0x189/0x250 [ 458.554819][T12970] ? __pfx____ratelimit+0x10/0x10 [ 458.554844][T12970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.554872][T12970] ? __pfx__printk+0x10/0x10 [ 458.554898][T12970] ? __might_fault+0xb0/0x130 [ 458.554942][T12970] should_fail_ex+0x414/0x560 [ 458.554975][T12970] _copy_from_iter+0x1de/0x1790 [ 458.555017][T12970] ? _copy_from_iter+0x24f/0x1790 [ 458.555056][T12970] ? __pfx__copy_from_iter+0x10/0x10 [ 458.555085][T12970] ? sock_alloc_send_pskb+0x86b/0x980 [ 458.555143][T12970] ? __pfx__copy_from_iter+0x10/0x10 [ 458.555179][T12970] ? page_copy_sane+0x16a/0x280 [ 458.555214][T12970] copy_page_from_iter+0xdd/0x170 [ 458.555251][T12970] skb_copy_datagram_from_iter+0x306/0x720 [ 458.555303][T12970] tun_get_user+0x1691/0x3e90 [ 458.555355][T12970] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 458.555380][T12970] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.555410][T12970] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 458.555434][T12970] ? __pfx_tun_get_user+0x10/0x10 [ 458.555481][T12970] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 458.555505][T12970] ? __lock_acquire+0xab9/0xd20 [ 458.555546][T12970] ? ref_tracker_alloc+0x318/0x460 [ 458.555573][T12970] ? tun_get+0x157/0x2f0 [ 458.555603][T12970] ? tun_chr_write_iter+0x60/0x210 [ 458.555637][T12970] ? ksys_write+0x145/0x250 [ 458.555660][T12970] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 458.555698][T12970] ? tun_get+0x1c/0x2f0 [ 458.555739][T12970] ? tun_get+0x1c/0x2f0 [ 458.555773][T12970] ? tun_get+0x1c/0x2f0 [ 458.555812][T12970] tun_chr_write_iter+0x113/0x210 [ 458.555855][T12970] vfs_write+0x5c9/0xb30 [ 458.555884][T12970] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 458.555919][T12970] ? __pfx_vfs_write+0x10/0x10 [ 458.555954][T12970] ? __fget_files+0x2a/0x420 [ 458.555993][T12970] ksys_write+0x145/0x250 [ 458.556018][T12970] ? __pfx_ksys_write+0x10/0x10 [ 458.556045][T12970] ? do_syscall_64+0xbe/0xfa0 [ 458.556078][T12970] do_syscall_64+0xfa/0xfa0 [ 458.556103][T12970] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.556137][T12970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.556160][T12970] ? clear_bhb_loop+0x60/0xb0 [ 458.556188][T12970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.556212][T12970] RIP: 0033:0x7f72abd8efc9 [ 458.556232][T12970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.556252][T12970] RSP: 002b:00007f72acd0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.556279][T12970] RAX: ffffffffffffffda RBX: 00007f72abfe5fa0 RCX: 00007f72abd8efc9 [ 458.556297][T12970] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 458.556311][T12970] RBP: 00007f72acd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 458.556326][T12970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.556342][T12970] R13: 00007f72abfe6038 R14: 00007f72abfe5fa0 R15: 00007ffc989e58c8 [ 458.556377][T12970] [ 458.886151][ T797] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 458.893975][ T37] usb 2-1: Failed to suspend device, error -71 [ 458.894147][ T44] usb 2-1: USB disconnect, device number 64 [ 459.020252][T12972] mac80211_hwsim hwsim12 : renamed from wlan1 (while UP) [ 459.039703][T12972] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2463'. [ 459.485181][T12982] syzkaller1: entered promiscuous mode [ 459.501486][T12982] syzkaller1: entered allmulticast mode [ 459.538466][T12982] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 459.553939][T12982] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 459.813422][T12992] FAULT_INJECTION: forcing a failure. [ 459.813422][T12992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.826727][T12992] CPU: 1 UID: 0 PID: 12992 Comm: syz.3.2473 Not tainted syzkaller #0 PREEMPT(full) [ 459.826755][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.826769][T12992] Call Trace: [ 459.826778][T12992] [ 459.826787][T12992] dump_stack_lvl+0x189/0x250 [ 459.826817][T12992] ? __pfx____ratelimit+0x10/0x10 [ 459.826841][T12992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.826866][T12992] ? __pfx__printk+0x10/0x10 [ 459.826889][T12992] ? __might_fault+0xb0/0x130 [ 459.826928][T12992] should_fail_ex+0x414/0x560 [ 459.826957][T12992] _copy_from_iter+0x1de/0x1790 [ 459.826995][T12992] ? _copy_from_iter+0x24f/0x1790 [ 459.827029][T12992] ? __pfx__copy_from_iter+0x10/0x10 [ 459.827055][T12992] ? sock_alloc_send_pskb+0x86b/0x980 [ 459.827094][T12992] ? __pfx__copy_from_iter+0x10/0x10 [ 459.827126][T12992] ? page_copy_sane+0x16a/0x280 [ 459.827166][T12992] copy_page_from_iter+0xdd/0x170 [ 459.827201][T12992] skb_copy_datagram_from_iter+0x306/0x720 [ 459.827255][T12992] tun_get_user+0x1691/0x3e90 [ 459.827301][T12992] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 459.827326][T12992] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.827352][T12992] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 459.827374][T12992] ? __pfx_tun_get_user+0x10/0x10 [ 459.827416][T12992] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 459.827438][T12992] ? __lock_acquire+0xab9/0xd20 [ 459.827475][T12992] ? ref_tracker_alloc+0x318/0x460 [ 459.827499][T12992] ? tun_get+0x157/0x2f0 [ 459.827526][T12992] ? tun_chr_write_iter+0x60/0x210 [ 459.827555][T12992] ? ksys_write+0x145/0x250 [ 459.827575][T12992] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 459.827608][T12992] ? tun_get+0x1c/0x2f0 [ 459.827644][T12992] ? tun_get+0x1c/0x2f0 [ 459.827673][T12992] ? tun_get+0x1c/0x2f0 [ 459.827708][T12992] tun_chr_write_iter+0x113/0x210 [ 459.827742][T12992] vfs_write+0x5c9/0xb30 [ 459.827767][T12992] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 459.827799][T12992] ? __pfx_vfs_write+0x10/0x10 [ 459.827830][T12992] ? __fget_files+0x2a/0x420 [ 459.827864][T12992] ksys_write+0x145/0x250 [ 459.827887][T12992] ? __pfx_ksys_write+0x10/0x10 [ 459.827912][T12992] ? do_syscall_64+0xbe/0xfa0 [ 459.827940][T12992] do_syscall_64+0xfa/0xfa0 [ 459.827963][T12992] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.827988][T12992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.828008][T12992] ? clear_bhb_loop+0x60/0xb0 [ 459.828033][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.828053][T12992] RIP: 0033:0x7f5c3a78efc9 [ 459.828072][T12992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.828090][T12992] RSP: 002b:00007f5c389f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.828112][T12992] RAX: ffffffffffffffda RBX: 00007f5c3a9e5fa0 RCX: 00007f5c3a78efc9 [ 459.828128][T12992] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 459.828142][T12992] RBP: 00007f5c389f6090 R08: 0000000000000000 R09: 0000000000000000 [ 459.828155][T12992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.828168][T12992] R13: 00007f5c3a9e6038 R14: 00007f5c3a9e5fa0 R15: 00007fff97baa248 [ 459.828203][T12992] [ 460.091050][ T5880] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 460.152169][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 460.341443][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 460.347903][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 460.364255][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.380991][ T5880] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 460.393119][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 460.415924][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.430914][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.440904][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.449006][ T10] usb 5-1: Product: syz [ 460.463304][ T10] usb 5-1: Manufacturer: syz [ 460.469179][ T5880] usb 2-1: config 0 descriptor?? [ 460.478338][ T10] usb 5-1: SerialNumber: syz [ 460.499598][ T10] usb 5-1: config 0 descriptor?? [ 460.526802][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 460.546842][ T10] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 460.779543][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.790136][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.799856][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.808728][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.822469][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.909401][ T5880] hid_parser_main: 59 callbacks suppressed [ 460.909426][ T5880] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0 [ 460.926257][ T5880] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0 [ 460.936954][ T5880] hid-steam 0003:28DE:1102.001C: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 461.001396][ T5880] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' connected [ 461.022227][ T5880] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.001C/input/input32 [ 461.074787][ T5880] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0 [ 461.089437][ T5880] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0 [ 461.155444][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 461.170908][ T5880] hid-steam 0003:28DE:1102.001D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 461.202434][ T5880] usb 2-1: USB disconnect, device number 65 [ 461.333246][T12996] chnl_net:caif_netlink_parms(): no params data found [ 461.383010][ T5880] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' disconnected [ 461.395417][T13000] fido_id[13000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 461.545361][ T797] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 461.561309][ T797] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 461.571926][ T797] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 461.582341][ T797] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 461.590391][ T797] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 461.599245][ T797] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 461.600504][T12996] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.614722][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.616588][ T797] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.636019][T12996] bridge_slave_0: entered allmulticast mode [ 461.645141][T12996] bridge_slave_0: entered promiscuous mode [ 461.658256][T12996] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.666353][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.673940][T12996] bridge_slave_1: entered allmulticast mode [ 461.682903][T12996] bridge_slave_1: entered promiscuous mode [ 461.762496][T13007] fido_id[13007]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 461.783659][ T10] em28xx 5-1:0.0: board has no eeprom [ 461.794724][ T1321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.845257][T12996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.858244][T12996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.884633][ T1321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.940542][T12996] team0: Port device team_slave_0 added [ 461.962339][ T1321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.979812][T12996] team0: Port device team_slave_1 added [ 462.022201][ T984] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 462.055120][T13011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2474'. [ 462.066602][ T1321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.085360][T12996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.093933][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.120537][T12996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.139670][T12996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.147634][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.174538][T12996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.191013][ T984] usb 2-1: Using ep0 maxpacket: 32 [ 462.198496][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.209953][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.226732][ T984] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 462.246299][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.275682][ T984] usb 2-1: config 0 descriptor?? [ 462.300197][ T984] hub 2-1:0.0: USB hub found [ 462.302369][T13015] loop4: detected capacity change from 0 to 524287936 [ 462.321396][ T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 462.358019][ T10] em28xx 5-1:0.0: dvb set to bulk mode. [ 462.374082][T12996] hsr_slave_0: entered promiscuous mode [ 462.377782][ T5880] em28xx 5-1:0.0: Binding DVB extension [ 462.390454][T12996] hsr_slave_1: entered promiscuous mode [ 462.397859][T12996] debugfs: 'hsr0' already exists in 'hsr' [ 462.403905][T12996] Cannot create hsr debugfs directory [ 462.415800][ T10] usb 5-1: USB disconnect, device number 56 [ 462.445705][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 462.517179][ T984] hub 2-1:0.0: 1 port detected [ 462.539110][ T5880] em28xx 5-1:0.0: Registering input extension [ 462.559064][ T10] em28xx 5-1:0.0: Closing input extension [ 462.592367][ T10] em28xx 5-1:0.0: Freeing device [ 462.732655][ T1321] bridge_slave_1: left allmulticast mode [ 462.739507][ T1321] bridge_slave_1: left promiscuous mode [ 462.746806][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.757947][ T1321] bridge_slave_0: left allmulticast mode [ 462.764783][ T1321] bridge_slave_0: left promiscuous mode [ 462.770940][ T5880] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 462.771921][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.904523][ T52] Bluetooth: hci1: command tx timeout [ 462.948108][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.962350][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.974213][ T5880] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 462.988588][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 462.997489][ T5880] usb 3-1: SerialNumber: syz [ 463.228547][ T5880] usb 3-1: 0:2 : does not exist [ 463.240659][ T5880] usb 3-1: unit 5 not found! [ 463.257943][ T5880] usb 3-1: USB disconnect, device number 118 [ 463.323155][ T7750] udevd[7750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.465101][ T984] hub 2-1:0.0: activate --> -90 [ 463.530100][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.542497][ T1321] bond0 (unregistering): Released all slaves [ 463.568557][ T939] usb 2-1: USB disconnect, device number 66 [ 463.575854][ T984] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 463.650590][ T1321] tipc: Left network mode [ 463.770064][T13040] loop4: detected capacity change from 0 to 2559 [ 463.781479][ T7750] buffer_io_error: 11 callbacks suppressed [ 463.781497][ T7750] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.807191][ T7750] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.815673][ T7750] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.840213][ T7750] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.848476][ T7750] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.856891][ T7750] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.866313][ T7750] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.875210][ T7750] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.892617][ T7750] ldm_validate_partition_table(): Disk read failed. [ 463.899335][ T7750] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.924789][ T7750] Buffer I/O error on dev loop4, logical block 0, async page read [ 463.944221][ T7750] Dev loop4: unable to read RDB block 0 [ 463.959370][ T7750] loop4: unable to read partition table [ 463.974423][T13040] ldm_validate_partition_table(): Disk read failed. [ 463.988207][T13040] Dev loop4: unable to read RDB block 0 [ 463.997140][T13040] loop4: unable to read partition table [ 464.009865][T13040] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 464.464424][ T1321] hsr_slave_0: left promiscuous mode [ 464.481977][ T1321] hsr_slave_1: left promiscuous mode [ 464.495844][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.512262][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.540632][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.554600][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.571954][ T1321] batman_adv: batadv0: Removing interface: team0 [ 464.616460][ T1321] veth1_macvtap: left promiscuous mode [ 464.629755][ T1321] veth0_macvtap: left promiscuous mode [ 464.636052][ T1321] veth1_vlan: left promiscuous mode [ 464.642859][ T1321] veth0_vlan: left promiscuous mode [ 464.753671][ T5880] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 464.930236][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 464.939589][ T5880] usb 2-1: config 0 interface 0 altsetting 187 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 464.951293][ T5880] usb 2-1: config 0 interface 0 altsetting 187 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.964503][ T5880] usb 2-1: config 0 interface 0 has no altsetting 0 [ 464.971280][ T5880] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 464.980351][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.988868][ T52] Bluetooth: hci1: command tx timeout [ 465.006412][ T5880] usb 2-1: config 0 descriptor?? [ 465.229807][ T1321] team0 (unregistering): Port device team_slave_1 removed [ 465.276446][T13077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.285729][T13077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.299637][ T1321] team0 (unregistering): Port device team_slave_0 removed [ 465.516571][ T5880] uclogic 0003:5543:0781.001F: hidraw0: USB HID v0.09 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 465.528306][ T10] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 465.706751][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 465.716325][ T10] usb 3-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 465.727921][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.737030][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 465.752872][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.763404][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.771624][ T10] usb 3-1: Product: syz [ 465.775866][ T10] usb 3-1: Manufacturer: 끑䓄䑥⪺葹갡傹鿻쐝ꉍ澪虎宣ꮮ酅硃꘶艠嵞♗柼䒑⢎퓺䬵訌沯潰ῢ࢏名萖ꎘ輳풞捋譛볕҄ [ 465.791897][ T10] usb 3-1: SerialNumber: syz [ 465.834910][ T5880] usb 2-1: USB disconnect, device number 67 [ 465.977527][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'. [ 465.992972][T13080] netlink: 'syz.4.2491': attribute type 29 has an invalid length. [ 466.036308][T13076] netlink: 'syz.2.2490': attribute type 21 has an invalid length. [ 466.043824][T12996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 466.058993][T13080] netlink: 'syz.4.2491': attribute type 29 has an invalid length. [ 466.068089][T12996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 466.108710][T12996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 466.163456][T12996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 466.290070][ T1321] IPVS: stop unused estimator thread 0... [ 466.324261][ T10] usb 3-1: 0:2 : does not exist [ 466.410952][ T10] usb 3-1: USB disconnect, device number 119 [ 466.460414][ T7750] udevd[7750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.512585][T13103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2493'. [ 466.512701][T13103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2493'. [ 466.728713][T12996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.780603][T12996] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.795877][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.803521][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.815367][T13109] binder: BINDER_SET_CONTEXT_MGR already set [ 466.835089][T13109] binder: 13107:13109 ioctl 4018620d 2000000002c0 returned -16 [ 466.856660][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.863940][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.873549][ T4533] Bluetooth: hci0: Frame reassembly failed (-84) [ 467.031013][ T5880] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 467.063100][ T5837] Bluetooth: hci1: command tx timeout [ 467.221432][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 467.229520][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.245065][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.257430][ T5880] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 467.273365][T13122] FAULT_INJECTION: forcing a failure. [ 467.273365][T13122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.295777][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.306507][T13122] CPU: 0 UID: 0 PID: 13122 Comm: syz.2.2496 Not tainted syzkaller #0 PREEMPT(full) [ 467.306532][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 467.306545][T13122] Call Trace: [ 467.306554][T13122] [ 467.306563][T13122] dump_stack_lvl+0x189/0x250 [ 467.306592][T13122] ? __pfx____ratelimit+0x10/0x10 [ 467.306615][T13122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.306639][T13122] ? __pfx__printk+0x10/0x10 [ 467.306671][T13122] ? __might_fault+0xb0/0x130 [ 467.306709][T13122] should_fail_ex+0x414/0x560 [ 467.306737][T13122] _copy_from_iter+0x1de/0x1790 [ 467.306773][T13122] ? _copy_from_iter+0x24f/0x1790 [ 467.306806][T13122] ? __pfx__copy_from_iter+0x10/0x10 [ 467.306832][T13122] ? sock_alloc_send_pskb+0x86b/0x980 [ 467.306870][T13122] ? __pfx__copy_from_iter+0x10/0x10 [ 467.306901][T13122] ? page_copy_sane+0x16a/0x280 [ 467.306931][T13122] copy_page_from_iter+0xdd/0x170 [ 467.306964][T13122] skb_copy_datagram_from_iter+0x306/0x720 [ 467.307009][T13122] tun_get_user+0x1691/0x3e90 [ 467.307053][T13122] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 467.307076][T13122] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.307101][T13122] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 467.307123][T13122] ? __pfx_tun_get_user+0x10/0x10 [ 467.307162][T13122] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 467.307184][T13122] ? __lock_acquire+0xab9/0xd20 [ 467.307220][T13122] ? ref_tracker_alloc+0x318/0x460 [ 467.307244][T13122] ? tun_get+0x157/0x2f0 [ 467.307270][T13122] ? tun_chr_write_iter+0x60/0x210 [ 467.307298][T13122] ? ksys_write+0x145/0x250 [ 467.307318][T13122] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 467.307349][T13122] ? tun_get+0x1c/0x2f0 [ 467.307384][T13122] ? tun_get+0x1c/0x2f0 [ 467.307412][T13122] ? tun_get+0x1c/0x2f0 [ 467.307446][T13122] tun_chr_write_iter+0x113/0x210 [ 467.307479][T13122] vfs_write+0x5c9/0xb30 [ 467.307504][T13122] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 467.307535][T13122] ? __pfx_vfs_write+0x10/0x10 [ 467.307565][T13122] ? __fget_files+0x2a/0x420 [ 467.307598][T13122] ksys_write+0x145/0x250 [ 467.307621][T13122] ? __pfx_ksys_write+0x10/0x10 [ 467.307651][T13122] ? do_syscall_64+0xbe/0xfa0 [ 467.307680][T13122] do_syscall_64+0xfa/0xfa0 [ 467.307702][T13122] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.307725][T13122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.307745][T13122] ? clear_bhb_loop+0x60/0xb0 [ 467.307770][T13122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.307790][T13122] RIP: 0033:0x7f617e58efc9 [ 467.307809][T13122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.307827][T13122] RSP: 002b:00007f617f450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.307849][T13122] RAX: ffffffffffffffda RBX: 00007f617e7e5fa0 RCX: 00007f617e58efc9 [ 467.307865][T13122] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 467.307878][T13122] RBP: 00007f617f450090 R08: 0000000000000000 R09: 0000000000000000 [ 467.307891][T13122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.307903][T13122] R13: 00007f617e7e6038 R14: 00007f617e7e5fa0 R15: 00007ffc235615e8 [ 467.307936][T13122] [ 467.630117][ T5880] usb 2-1: config 0 descriptor?? [ 467.655106][ T5880] hub 2-1:0.0: USB hub found [ 467.775885][T12996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.875132][ T5880] hub 2-1:0.0: 1 port detected [ 467.878827][T12996] veth0_vlan: entered promiscuous mode [ 467.907070][T12996] veth1_vlan: entered promiscuous mode [ 468.002949][T12996] veth0_macvtap: entered promiscuous mode [ 468.029373][T12996] veth1_macvtap: entered promiscuous mode [ 468.080128][T12996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.102908][T12996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.125118][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.134705][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.147003][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.176327][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.257306][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.270624][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.297367][ T24] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 468.350565][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.361474][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.441978][ T24] usb 3-1: device descriptor read/64, error -71 [ 468.690943][ T797] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 468.690943][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 468.792096][ T5880] hub 2-1:0.0: activate --> -90 [ 468.831003][ T24] usb 3-1: device descriptor read/64, error -71 [ 468.844881][ T797] usb 4-1: unable to get BOS descriptor or descriptor too short [ 468.855811][ T797] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 468.863919][ T797] usb 4-1: can't read configurations, error -71 [ 468.889254][ T5880] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 468.890639][ T5836] usb 2-1: USB disconnect, device number 68 [ 468.903078][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 468.955370][ T24] usb usb3-port1: attempt power cycle [ 469.080186][T13151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.093483][T13151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.151078][ T52] Bluetooth: hci1: command tx timeout [ 469.311469][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 469.331953][ T24] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 469.368345][ T24] usb 3-1: device descriptor read/8, error -71 [ 469.483193][T13157] loop4: detected capacity change from 0 to 524287936 [ 469.614781][ T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 469.651960][ T24] usb 3-1: device descriptor read/8, error -71 [ 469.653538][ T10] usb 5-1: device not accepting address 57, error -71 [ 469.771379][ T24] usb usb3-port1: unable to enumerate USB device [ 469.810531][T13170] loop4: detected capacity change from 0 to 2559 [ 469.818595][T13170] buffer_io_error: 27 callbacks suppressed [ 469.818612][T13170] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.833895][T13170] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.842225][T13170] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.850281][T13170] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.858641][T13170] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.867067][T13170] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.875315][T13170] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.883570][T13170] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.891723][T13170] ldm_validate_partition_table(): Disk read failed. [ 469.898421][T13170] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.903142][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 469.907018][T13170] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.924668][T13170] Dev loop4: unable to read RDB block 0 [ 469.930751][T13170] loop4: unable to read partition table [ 469.936766][T13170] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 470.330376][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2516'. [ 470.361367][ T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 470.530891][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 470.538521][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.549575][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.559488][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 470.568620][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.579068][ T24] usb 4-1: config 0 descriptor?? [ 470.590894][ T939] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 470.598821][ T24] hub 4-1:0.0: USB hub found [ 470.757962][ T939] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 470.769682][ T939] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 139, changing to 11 [ 470.781283][ T939] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 50861, setting to 1024 [ 470.797884][ T939] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 470.807207][ T24] hub 4-1:0.0: 1 port detected [ 470.812042][ T939] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 470.820333][ T939] usb 2-1: Manufacturer: syz [ 470.825496][ T939] usb 2-1: SerialNumber: syz [ 470.834277][T13187] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 471.054386][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.063442][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.077430][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.091520][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.169374][ T939] yealink 2-1:36.0: invalid payload size 1024, expected 16 [ 471.196936][ T939] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input35 [ 471.229180][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.237207][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.244231][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.251600][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.259117][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.266139][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.273133][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.280153][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.287204][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.293998][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.301291][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.308345][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.315150][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.321194][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.328242][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.335046][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.341159][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.348223][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.355038][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.362182][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.369597][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.373511][T13202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2521'. [ 471.376403][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.376631][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.386933][T13202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2521'. [ 471.391623][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.413672][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.420932][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.428010][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.434817][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.440785][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.447841][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.455562][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.463959][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.471000][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.477819][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.483782][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.490838][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.497640][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.503659][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.510713][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.517529][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.523552][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.530600][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.537847][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.543893][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.551049][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.557879][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.564808][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.572516][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.579333][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.585367][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.592416][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.599230][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.605233][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.612320][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.619141][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.625635][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.632679][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.639491][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.645504][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.652563][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.659381][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.668312][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.675819][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.682672][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.682897][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.683112][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.683154][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.684837][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.685059][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.685080][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.685408][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.685608][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.685630][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.685873][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.686094][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.686114][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.686313][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.686546][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 471.686566][ C1] yealink 2-1:36.0: unexpected response 0 [ 471.686680][ T939] usb 2-1: USB disconnect, device number 69 [ 471.686770][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 471.686791][ C1] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 471.880898][ T24] hub 4-1:0.0: activate --> -90 [ 471.978922][ T24] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 471.979646][ T10] usb 4-1: USB disconnect, device number 102 [ 472.034813][T13217] FAULT_INJECTION: forcing a failure. [ 472.034813][T13217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.051262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 472.059724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 472.069876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 472.090944][T13217] CPU: 1 UID: 0 PID: 13217 Comm: syz.2.2527 Not tainted syzkaller #0 PREEMPT(full) [ 472.090966][T13217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.090977][T13217] Call Trace: [ 472.090995][T13217] [ 472.091003][T13217] dump_stack_lvl+0x189/0x250 [ 472.091026][T13217] ? __pfx____ratelimit+0x10/0x10 [ 472.091044][T13217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.091063][T13217] ? __pfx__printk+0x10/0x10 [ 472.091080][T13217] ? __might_fault+0xb0/0x130 [ 472.091108][T13217] should_fail_ex+0x414/0x560 [ 472.091129][T13217] _copy_from_iter+0x1de/0x1790 [ 472.091155][T13217] ? _copy_from_iter+0x24f/0x1790 [ 472.091180][T13217] ? __pfx__copy_from_iter+0x10/0x10 [ 472.091198][T13217] ? sock_alloc_send_pskb+0x86b/0x980 [ 472.091230][T13217] ? __pfx__copy_from_iter+0x10/0x10 [ 472.091253][T13217] ? page_copy_sane+0x16a/0x280 [ 472.091276][T13217] copy_page_from_iter+0xdd/0x170 [ 472.091305][T13217] skb_copy_datagram_from_iter+0x306/0x720 [ 472.091338][T13217] tun_get_user+0x1691/0x3e90 [ 472.091370][T13217] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 472.091387][T13217] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.091405][T13217] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 472.091420][T13217] ? __pfx_tun_get_user+0x10/0x10 [ 472.091449][T13217] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 472.091464][T13217] ? __lock_acquire+0xab9/0xd20 [ 472.091490][T13217] ? ref_tracker_alloc+0x318/0x460 [ 472.091508][T13217] ? tun_get+0x157/0x2f0 [ 472.091527][T13217] ? tun_chr_write_iter+0x60/0x210 [ 472.091547][T13217] ? ksys_write+0x145/0x250 [ 472.091561][T13217] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 472.091584][T13217] ? tun_get+0x1c/0x2f0 [ 472.091609][T13217] ? tun_get+0x1c/0x2f0 [ 472.091630][T13217] ? tun_get+0x1c/0x2f0 [ 472.091654][T13217] tun_chr_write_iter+0x113/0x210 [ 472.091677][T13217] vfs_write+0x5c9/0xb30 [ 472.091695][T13217] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 472.091717][T13217] ? __pfx_vfs_write+0x10/0x10 [ 472.091739][T13217] ? __fget_files+0x2a/0x420 [ 472.091763][T13217] ksys_write+0x145/0x250 [ 472.091779][T13217] ? __pfx_ksys_write+0x10/0x10 [ 472.091796][T13217] ? do_syscall_64+0xbe/0xfa0 [ 472.091816][T13217] do_syscall_64+0xfa/0xfa0 [ 472.091832][T13217] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.091848][T13217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.091863][T13217] ? clear_bhb_loop+0x60/0xb0 [ 472.091881][T13217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.091896][T13217] RIP: 0033:0x7f617e58efc9 [ 472.091909][T13217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.091922][T13217] RSP: 002b:00007f617f450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 472.091940][T13217] RAX: ffffffffffffffda RBX: 00007f617e7e5fa0 RCX: 00007f617e58efc9 [ 472.091951][T13217] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 472.091961][T13217] RBP: 00007f617f450090 R08: 0000000000000000 R09: 0000000000000000 [ 472.091970][T13217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.091979][T13217] R13: 00007f617e7e6038 R14: 00007f617e7e5fa0 R15: 00007ffc235615e8 [ 472.092002][T13217] [ 472.103087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 472.221050][ T797] ------------[ cut here ]------------ [ 472.429277][ T797] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 472.437087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 472.443131][ T939] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 472.449073][ T797] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_wait_one_vblank+0x570/0x5b0, CPU#0: kworker/0:2/797 [ 472.464123][ T797] Modules linked in: [ 472.468387][ T797] CPU: 0 UID: 0 PID: 797 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 472.478274][ T797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.488810][ T797] Workqueue: events drm_fb_helper_damage_work [ 472.495103][ T797] RIP: 0010:drm_wait_one_vblank+0x570/0x5b0 [ 472.501476][ T797] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 2a 4a e7 fc 4d 8b 2c 24 48 c7 c7 60 43 d4 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 c1 ac 44 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 472.521562][ T797] RSP: 0018:ffffc90003287840 EFLAGS: 00010246 [ 472.527686][ T797] RAX: e21373ee6ef67c00 RBX: 1ffff1100499d801 RCX: ffff888024d63c80 [ 472.535755][ T797] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 472.544110][ T797] RBP: ffffc90003287928 R08: 0000000000000003 R09: 0000000000000004 [ 472.552342][ T797] R10: dffffc0000000000 R11: fffffbfff1bfa6c0 R12: ffff888024c25000 [ 472.560435][ T797] R13: ffffffff8be6ece0 R14: 0000000000000000 R15: ffffffff8be88e40 [ 472.568622][ T797] FS: 0000000000000000(0000) GS:ffff888125ce4000(0000) knlGS:0000000000000000 [ 472.578483][ T797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.585685][ T797] CR2: 0000200000009000 CR3: 0000000071e78000 CR4: 00000000003526f0 [ 472.593950][ T797] Call Trace: [ 472.597280][ T797] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 472.600251][ T797] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 472.606041][ T797] ? __pfx_autoremove_wake_function+0x10/0x10 [ 472.612182][ T797] ? drm_vblank_get+0x150/0x270 [ 472.617054][ T797] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 472.623418][ T797] drm_fb_helper_damage_work+0xce/0x6c0 [ 472.629060][ T797] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 472.635373][ T797] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.640631][ T797] ? process_scheduled_works+0x9ef/0x17b0 [ 472.646540][ T797] ? process_scheduled_works+0x9ef/0x17b0 [ 472.652797][ T797] process_scheduled_works+0xae1/0x17b0 [ 472.658435][ T797] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.664602][ T797] worker_thread+0x8a0/0xda0 [ 472.669654][ T797] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 472.676185][ T797] ? __kthread_parkme+0x7b/0x200 [ 472.681864][ T797] kthread+0x711/0x8a0 [ 472.685993][ T797] ? __pfx_worker_thread+0x10/0x10 [ 472.691498][ T797] ? __pfx_kthread+0x10/0x10 [ 472.696132][ T797] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.701435][ T797] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.706685][ T797] ? __pfx_kthread+0x10/0x10 [ 472.711352][ T797] ret_from_fork+0x4bc/0x870 [ 472.715966][ T797] ? __pfx_ret_from_fork+0x10/0x10 [ 472.721150][ T797] ? __switch_to_asm+0x39/0x70 [ 472.725921][ T797] ? __switch_to_asm+0x33/0x70 [ 472.730692][ T797] ? __pfx_kthread+0x10/0x10 [ 472.735325][ T797] ret_from_fork_asm+0x1a/0x30 [ 472.740117][ T797] [ 472.743432][ T797] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 472.750717][ T797] CPU: 0 UID: 0 PID: 797 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 472.760065][ T797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.770143][ T797] Workqueue: events drm_fb_helper_damage_work [ 472.776248][ T797] Call Trace: [ 472.779879][ T797] [ 472.782819][ T797] dump_stack_lvl+0x99/0x250 [ 472.787442][ T797] ? __asan_memcpy+0x40/0x70 [ 472.792050][ T797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.797257][ T797] ? __pfx__printk+0x10/0x10 [ 472.801916][ T797] vpanic+0x237/0x6d0 [ 472.805925][ T797] ? __pfx_vpanic+0x10/0x10 [ 472.810484][ T797] ? is_bpf_text_address+0x292/0x2b0 [ 472.815804][ T797] ? is_bpf_text_address+0x26/0x2b0 [ 472.821017][ T797] panic+0xb9/0xc0 [ 472.824759][ T797] ? __pfx_panic+0x10/0x10 [ 472.829199][ T797] ? ret_from_fork_asm+0x1a/0x30 [ 472.834156][ T797] __warn+0x334/0x4c0 [ 472.838167][ T797] ? drm_wait_one_vblank+0x570/0x5b0 [ 472.843480][ T797] ? drm_wait_one_vblank+0x570/0x5b0 [ 472.848802][ T797] report_bug+0x2be/0x4f0 [ 472.853145][ T797] ? drm_wait_one_vblank+0x570/0x5b0 [ 472.858452][ T797] ? drm_wait_one_vblank+0x570/0x5b0 [ 472.863750][ T797] ? drm_wait_one_vblank+0x572/0x5b0 [ 472.869049][ T797] handle_bug+0x84/0x160 [ 472.873306][ T797] exc_invalid_op+0x1a/0x50 [ 472.877823][ T797] asm_exc_invalid_op+0x1a/0x20 [ 472.882682][ T797] RIP: 0010:drm_wait_one_vblank+0x570/0x5b0 [ 472.888604][ T797] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 2a 4a e7 fc 4d 8b 2c 24 48 c7 c7 60 43 d4 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 c1 ac 44 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 472.908227][ T797] RSP: 0018:ffffc90003287840 EFLAGS: 00010246 [ 472.914406][ T797] RAX: e21373ee6ef67c00 RBX: 1ffff1100499d801 RCX: ffff888024d63c80 [ 472.922389][ T797] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 472.930458][ T797] RBP: ffffc90003287928 R08: 0000000000000003 R09: 0000000000000004 [ 472.938436][ T797] R10: dffffc0000000000 R11: fffffbfff1bfa6c0 R12: ffff888024c25000 [ 472.946418][ T797] R13: ffffffff8be6ece0 R14: 0000000000000000 R15: ffffffff8be88e40 [ 472.954421][ T797] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 472.960077][ T797] ? __pfx_autoremove_wake_function+0x10/0x10 [ 472.966164][ T797] ? drm_vblank_get+0x150/0x270 [ 472.971032][ T797] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 472.977291][ T797] drm_fb_helper_damage_work+0xce/0x6c0 [ 472.982864][ T797] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 472.989041][ T797] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.994255][ T797] ? process_scheduled_works+0x9ef/0x17b0 [ 472.999995][ T797] ? process_scheduled_works+0x9ef/0x17b0 [ 473.005736][ T797] process_scheduled_works+0xae1/0x17b0 [ 473.011334][ T797] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.017348][ T797] worker_thread+0x8a0/0xda0 [ 473.021958][ T797] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 473.028303][ T797] ? __kthread_parkme+0x7b/0x200 [ 473.033263][ T797] kthread+0x711/0x8a0 [ 473.037346][ T797] ? __pfx_worker_thread+0x10/0x10 [ 473.042463][ T797] ? __pfx_kthread+0x10/0x10 [ 473.047066][ T797] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.052276][ T797] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.057487][ T797] ? __pfx_kthread+0x10/0x10 [ 473.062135][ T797] ret_from_fork+0x4bc/0x870 [ 473.066841][ T797] ? __pfx_ret_from_fork+0x10/0x10 [ 473.071980][ T797] ? __switch_to_asm+0x39/0x70 [ 473.076758][ T797] ? __switch_to_asm+0x33/0x70 [ 473.081573][ T797] ? __pfx_kthread+0x10/0x10 [ 473.086202][ T797] ret_from_fork_asm+0x1a/0x30 [ 473.091020][ T797] [ 473.094409][ T797] Kernel Offset: disabled [ 473.098749][ T797] Rebooting in 86400 seconds..