last executing test programs: 14.661599914s ago: executing program 1 (id=2655): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0x3, 0x300) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 11.942827005s ago: executing program 2 (id=2659): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109021fbb300929b5e60a0604000000f1be940ff299ca0725bdf2405029405f0aacff06a84f41b9516174a13c1db67e3eeedcee4c15caf422436bdbff006e6166"], 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x19) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xf) ioctl$TIOCSIG(r2, 0x40045436, 0x19) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a0102000000000000000001000000090003"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0xb, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') 11.037141952s ago: executing program 0 (id=2661): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000280)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xf}}, 0xfffffff7, 0x200, 0x0, 0x126, 0xbc0}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000004c0)={r4, 0x2, 0x2, 0x40, 0x4, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={r5, 0x9}, 0x8) syz_open_dev$media(&(0x7f0000000240), 0x2, 0x60c580) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x4470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080) 10.890732391s ago: executing program 1 (id=2662): clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x24c, 0x100, 0xa, 0x148, 0x0, 0x10, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101, 0xff000000, 0xff, 'xfrm0\x00', 'pimreg\x00', {}, {0xff}, 0x32, 0x2, 0x4}, 0x0, 0xc0, 0x100, 0x0, {0x20000000}, [@common=@inet=@esp={{0x2c}, {[0x4d5, 0x4d4], 0x1}}, @inet=@rpfilter={{0x24}, {0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9, {0x1e8}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x99, 0x4, 0x4, 'netbios-ns\x00', {0x38}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2a8) unshare(0x40000000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="183e000000000000000000000000930018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) mq_timedsend(r1, &(0x7f0000000e00)="aa07bf45d8cf171ef6fed0f09ed93e3eb036551915d520d5a2274f61f531e84215f7c877178eb5ee56e709d11130bce7a843a52bc777eba55493178e4475e123f215401fc10df8b654cf290c78308778fa3928dfb3a6f27e5035264559c290f8e01ae81537ae4228c5623a1ad487d08d144f25130d6af438fc6c1ac66c5aef1672030829c7bbd242bf63482f82b3145458742dc961185ae3c731a1062f5942585ab06b9c985e351c94aaf172a57b910067c8eb3533187e13ab22e35a099255c5840e2b5c95730622c555701ece5eac2c6a", 0xd1, 0x7ff0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b37ed030109022400010000000009040000023c7f98000905ee000000000000"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000f00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(r2, &(0x7f0000000c00)="6316321610c0a90a091dc04e6cb4b98e6a468982232c0ae0146a3db1f67d886c4aef477498fa01d056472d554e92808f87b2089c477b8d528b65a0340b4dde01b451b61754690b324328e69de2dc20a2c7ca836b47cd2e0c0f2fec04e0480b2ac011fd875d9db71fdac5fd901085ff30e9314d3e37c9e375c9548f91574f3e5e61fc467f84317bd554c2ffba3fd1ea995828d47327be84968d1ba886d65fec806a9213867f94971f87ec779372c2614e1e3cf971818a973f1f", 0xb9, 0x40000, &(0x7f0000000cc0)={0x2, 0x4e22, @loopback}, 0x10) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000300)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x10, &(0x7f0000000000)={0x0, 0x18}, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000880)={0x24, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x670, 0x5, 0x35c, 0xa4, 0x16c, 0xfeffffff, 0x0, 0xa4, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @gre_key}}}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'pimreg0\x00', 'syzkaller0\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x7}, [@common=@unspec=@devgroup={{0x34}, {0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x210}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xffeb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x1, 0x71, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3f, 0xe0, 0x3, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x13, 0x81, 0xe, {0x7, 0x25, 0x1, 0x80, 0x98, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1, 0xff, 0x0, {0x7, 0x25, 0x1, 0x1, 0x0, 0x3}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x229, 0xd5, 0x8, 0x81, 0x40, 0x6}, 0xe1, &(0x7f0000000280)={0x5, 0xf, 0xe1, 0x2, [@generic={0x4, 0x10, 0x0, '\x00'}, @generic={0xd8, 0x10, 0x1, "857f5211fd8f6213fa21594036cd6596c8407f2d547ce2ba2466ec012c5863ae8f287abb81661f959b9810fa8369978aff74cbddb391bfaa663ba91917c5649b42e7eb71a859c45686a88efb2766878b00b237e3bf094961b9aa3df64e62e70829fc6119fcc2d942de79dfe1c0b960415df4a74ac2c9f2ceb92bd2697c516f311319e2c13822e68b8a369d45dc08bd11b9477907864f61240c01287a4c44e8244a7c9c110ac7f182599ca796ca7bec83d9dae5437c594bcd05eb043879a69dfff0e419e4bd248804e2028444cca89037d6d69cfd27"}]}, 0xa, [{0xf5, &(0x7f0000000380)=@string={0xf5, 0x3, "26c66b6a232b921785c006ecc509c8d7b8db4451d37ba543e84dd5bbd9e52737f8455226d84afbc41a11b2633fe21b816819fb4504c744f7175eb0fa06d52ff287c2f9810619502c3f64e8acee1d443b9bcfe2343706b923df84ad434aeb3d164d3ce4a40668a7d898be64fc22320451597444212800f73681586169cfdbb71068fcdacb14796fb6f8bf3f5d2db62b64b70f2eaa03c4d859b4a9e3316fe74f1c71d968d60a849bbaa9ff3713c220292581abc2bf9f09e9f223520b072928a88ec29df21882b4fd4dc6cb987b06db78d0c14a08dc346a33a78f8981d9f0816b4adb97dfde6912c17f3a168a2b10d65aacec2226"}}, {0x14, &(0x7f0000000100)=@string={0x14, 0x3, "d1f36b8a9bdb23e3656b2c32c29f1a9f0b52"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x83e}}, {0x1f, &(0x7f0000000700)=ANY=[@ANYBLOB="1f0306b286abf2e856dfedbed6ba6a8e17761b101f6a1015e9d50000000000"]}, {0x1d, &(0x7f0000000740)=@string={0x1d, 0x3, "ac4fb0448a2a3f1ef89ffea268e9b04c595f6588e0ff9ce9f74174"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1409}}]}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10001}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 9.168513098s ago: executing program 4 (id=2665): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@newtaction={0x2c0, 0x30, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{0x2ac, 0x1, [@m_tunnel_key={0xa8, 0xc, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010100}]}, {0x6d, 0x6, "76777757306628024b2bb5b9aabcdaa2e2c61a46b9e88879798ac04617e7cb3d168ebb00e29896fc1992d70203f6e45ab07c8db0ca27cfd0356206db9cd8a0661acab98d71d6c064f66ef9ccc68f669ddfc98b86aacabce2d4ea92dff1d8ab2710cef8f52a01a6eaa4"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}, @m_ife={0x100, 0x6, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x5, 0x0, 0x7ff, 0x8}}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x81, 0x6, "86d979015880511d56813ec69a2c56307444f98db9e5766c0c21a4876721221a7de01eb4c5d9c316cbcc628a33280820ec0080c40cb6c408f2185dd5d3e8a26d5e17fddf56cbca26183b03c969f7fe45d0b4caaed849edd81b362b36ce5d583f2ae0fa284e195d4533289e15f7f03a9b09d3fe89afb84ee703e9dceaa1"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x74, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x3d, 0x6, "bd3a5376a2440c64d60800000000000000486d1931d16d2a624d085a1be90b436fdedf917b760ef37b4272893313d629bb02bcd42142bb0469"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x8c, 0x2, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x1, 0x7, 0x187e, 0x8}}]}, {0x18, 0x6, "644cfabbe56830b72d4965b0f9c601f7e7e0a9dc"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/18, 0x12}], 0x1}, 0x401}], 0x1, 0x40002000, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0001000b06010800000000000000000600000205000173797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000020000103000000004000000002000000000000040000000008001b"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) fchdir(r3) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae09, &(0x7f0000000300)) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 8.933717666s ago: executing program 0 (id=2666): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891e, &(0x7f0000001040)={'gre0\x00', 0x0}) 8.880311178s ago: executing program 0 (id=2668): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x4c}, {0x84}, {0x6}]}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, r3, {{0xdd, 0x9, 0x1, r4}}}, 0x28) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0x0, r3}, 0x10) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r8, &(0x7f0000001440)=""/122, 0x7a, 0x35) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 6) fcntl$setlease(r7, 0x400, 0x2) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) 8.08638315s ago: executing program 4 (id=2670): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="746172676574205043493a363a03"], 0x15) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x394, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x1bc, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3f0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x803, 0x2) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = openat$audio1(0xffffffffffffff9c, 0x0, 0x202, 0x0) writev(r7, &(0x7f0000000680)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="fdffffff000000000000000000003c0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) 7.263786907s ago: executing program 1 (id=2672): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0x3, 0x300) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 7.263434783s ago: executing program 2 (id=2673): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x4, &(0x7f0000000100)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x29, 0x1, 0x0, 0x0, "77e17f629c2d9367962e6cede671328f027bf3ad562e8e7b9015d3edb19386ad561b36369f7e8d825a043e895a016c23e1d38524d6b4325ea469106653619963"}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0xc0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0xb4, 0x3, 0xa, 0x1af5235112b71ed1, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x70, 0xc, "78c52666601ee2b3b6b7d7719e87ddc3f276f139296fab71942246aa3a8321132bca28e64422fd313de6420dc6091a834e2505c5e929f7e0714b908ce62f0eea27e413ff7e2fc9e559a1d6b501242d3e558c21838d58c83af7867a5a7c16f50fff2f4d62612ca40ea145c8bb"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xdc}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) syz_clone(0x802100, &(0x7f0000000040)="f97efb649761f2210954576ede10fab186f157067190e7acccfd64bdf40de8383a98e3", 0x23, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)="1d2c") 7.080026338s ago: executing program 0 (id=2674): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc671900e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="71b826e9afc167008dd7a830dd5c00240b00000003241e3ca4ddae4253f4b4"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) shutdown(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8916, &(0x7f0000000a80)={{0x2, 0x4e23, @multicast1}, {0x0, @local}, 0x6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'lo\x00'}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2caa, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x576, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000080)={0x0, 0x1, 0xc00, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$dsp(r7, &(0x7f0000000440)=""/171, 0xab) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)=0x8001) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) pread64(r2, &(0x7f0000000100)=""/182, 0x6c, 0x9) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002480)={0x2020}, 0x2020) 6.196719952s ago: executing program 2 (id=2675): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0}, 0x18) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002340)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x52) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a3000000000140004800800024030e584ba08000140000000050900010073797a310000000070000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000044000480140003006e657464657673696d30000000000000080002"], 0xf8}}, 0x20000040) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = semget$private(0x0, 0x207, 0x53) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r8, &(0x7f00000001c0)=""/4068, 0xfe4) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000040)=""/119) 4.506860741s ago: executing program 3 (id=2677): r0 = socket$inet6(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) (fail_nth: 8) 4.235975074s ago: executing program 2 (id=2678): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000580)=0xe4) read$FUSE(r1, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r1, {r4, 0xee00}}, './file0\x00'}) r10 = getgid() r11 = inotify_init1(0x1000) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r12, 0x1, &(0x7f0000000080)={0x0}) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="f2f035a8031eb0a05f6f54620014fce96a13a49033b0989f573131a06c5a1565c65d3103945784721ecf6854d65e71c0e2eb554b6b65f9e4a612943ae20b98b9cf417e5669c7d0550c2528a7549ecf5172", 0x51}, {&(0x7f0000000040)="9e5fb717bc282585feaeb8953dbbd2879acbbc2b6d0517169918fcb7ef8aa685a4", 0x21}, {&(0x7f0000000400)="462121ebcf45b95fe807fe343ea9b76a2dbfd6cda408296cdb2d0ea29109d02ccea5f00e61a6f414e1724bc8c183bd548ae03b7119444400109c9ed3c0f8b93e502fffada9ebfb076133358fb44d579755429bf332f768a862d777ba00e69a8fa57041ca37a92490382ea93aaf", 0x6d}, {&(0x7f0000000100)="368d3ff678dedc5ba6b19672f965dc12113fbab7c7e58b3537dd6823bae8fe4d73553d03072a71216eacd422e630ff5eff8795c218f88e9833c36fd4", 0x3c}], 0x4, &(0x7f00000005c0)=[@cred={{0x18, 0x1, 0x2, {r3, r4}}}], 0x18, 0x8011}}, {{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)="b8a54059cf82a58ed71592f26adae15f14f3178e99d2b125031de5a5c1444f1499ded8891dbc47bd6e804b2de9940367ebb109b05e4f03f514f0814bc3f7e1ad1137040bb8d605cf4ec8999dcbaac4aef23ece4c824b4445d8411effe7d1b441a591d5085f13309ca91dc4e5c4999cacbfc5ee0ea4aa9c0698ada83eda2c23a4ce323c905be33522987e521d4a39476f6a119cf1e569d9a1fb98cbd1f353a010781e2a44f5fed19b092193d1199fee30c4a4af1c65a0a55e5fd295ea0be235445f90c96b3b42340703eef918ab", 0xcd}, {&(0x7f0000000780)="97a5d98d2e6566f0b628e11135ae1577082eb8b15bf4979e0e836a1bd52b167d3cb14cc728e94bee6ae7b57e7a8190b5351a3a71c08eceb9e0190718776e2505a29c2c3c07680acebba3c01b7f4d12a4752ca804df414e8a91446660a779aaddde52081b3cdaf42fe3512131", 0x6c}, {&(0x7f0000000800)="7743e14f3dddfcb40d71810fc9c8cfeef39cb0c02e94de157dbafb718864080792bf8079764e358be74458cf31617636c8a5", 0x32}, {&(0x7f0000000840)="e33da8d052ada75ea6051fa5027baa34d341c777f08f865896f3e6b81ca821b1bd30827cb66a78bcd01bd32338a035182ce9336154fe3ed67a622666536023bc608521370cf71ad40ac296b81e4b4d3aafd83146d4bf593f29e20e775a089b36fd8e3ec328ba1856ed2d60847b2b10c3eb60eb9f765b7632082827a6810660772637c101145e07c576bbdf70a3a97808efcc8852c3f9fa320dada07068aaa9", 0x9f}], 0x4, &(0x7f0000000b00)=[@cred={{0x18, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x18, 0x1, 0x2, {r3, r4, r6}}}, @cred={{0x18, 0x1, 0x2, {r7, r4, r8}}}, @cred={{0x18, 0x1, 0x2, {r3, r4, r9}}}, @cred={{0x18, 0x1, 0x2, {r3, r4, r10}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r2, r11]}}], 0x94, 0x40044}}, {{&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000c40)="16e545a0613d1a92bea120154f372e38bf0e33c8dae6327f9b00c52e3853b07a83f98fda9e71cee4b4ad02a705f6a72ddf35", 0x32}, {&(0x7f00000066c0)="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", 0x1000}, {&(0x7f0000000c80)="dcb9437ffd32bba183014bd159e92d814c6cec1e985e0f9d992824e245941dd54f1c89f404b70e9f47c2ab3f689689f9a465f6d2168a10e3118e36cd985b4f8af0a8ff14b704d20776ffa421e65edec9745b3a86e6127680e7504c1adf0f64f81df294f0505f9708f9641c5525724ca51f8d0e068beb8f94d75b6183ad1ec69d0484612ff8e2", 0x86}, {&(0x7f0000000d40)="47baaebe2591bf850ff15198e91d7e4c0eee402569752413d3df07e4b5492832c972c54c8efb11b3171dec2ddfa5e0660223271a8e123b403899fbcd04c57e3356f6e1352c531ab6c8001e20d46757a8de1f435fdfc540193a4ca31690e19f10ece704904b3351b2f89c63738aeae50bd1b60476a28226d93148c68ffa61453cd3dc2d1875ded92e5f4e954c2838535c374c616b", 0x94}, {&(0x7f0000000e00)="6f39ea77160c3f8502b3b0050347016c7fa48d8fc145b87bcf530e9917bc425e6896fb41ce15333d595493788b1e84c54456920008854a496c6f9efb333a12c7057077bf3caeae29b4d489c3cd9a5d33ea2c8a5fcc83353e1c86f8c4c71c0bdb9d296011682b891ef5014fab065b4aec7aa9b73a4190386138500bf0761a353dfc27ab2986a6c44f914033c1168a289298d50de9642d3b52be656fe04faff3a91a39f3e273d0cbd800443b8cf148ae4fae0f85205ffb626323e03a8d975539faa7b7f4ac17e725094640c30248810c84dd6559ae0366e9987af82360cc9c0aef62d7c4222484c63f9f7dd6", 0xeb}], 0x5, &(0x7f0000001040)=[@cred={{0x18, 0x1, 0x2, {r12}}}], 0x18, 0x10}}, {{&(0x7f0000001080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000001100)="9f2392ae6dc32b83572003c29530f2725bb09728cef813e7773c292e3a6170d3cc3ccf2b3fcce5f63c4e7829004c562434ec1d47b71643593ffe0cb8", 0x3c}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000001180)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f00000076c0)="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", 0x1000}, {&(0x7f0000001200)="7f9d01b2a84264d22ce8bfe960acb80210b5fac4704ae3ed231f64bd5f770a480d494538c2e2aabfdf6833d87b5e7e8cf6fa145daa57f69d916036195433711e3f748c00563c38c8a8fed79ee378fd848d5fdef19d1b4906e1a17ce7178ccbdfec5e44faa705011554f9911ef7b02edbd111fe23803a8d173d64b27f00532406e5a8c30d7f", 0x85}], 0x2, &(0x7f0000001300)}}], 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, 0x0, 0x4000000) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 3.660304444s ago: executing program 1 (id=2679): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(r1) connect$inet(r1, &(0x7f0000001640)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000d00)={0xa6, 0x1e, 0x9, 0x6, "d2e1e77a304c60dda3fe219695270051e3ffe743b2065bcdc0b072a91341545c"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000001580)=[{{&(0x7f00000000c0)=@xdp={0x2c, 0x5, r9, 0x3d}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="a815e8d7f82536517086de632d20d34752b894a9926b7b7894725e640ea232174115a17219dbaf23d81dac2c212fd3ecbca5044e418e94ed8872dd94bf502599870e8019eb3cc767daf1ad6d5418f1a3ee8fd1f1044213773f1dc36541a31652c72061f4f298ccdff28feea313177f1f89749dd6842cde2684ccf55f19c37aa70b3822b9", 0x84}, {&(0x7f0000000200)="bf4a5d4f75c5bdf0776c8644db8cd099dd3c356714a9", 0x16}, {&(0x7f00000002c0)="b84ae59095b015c5a46b4a53454215104f5d352941714fb046ea13747999584235e8a79036b52ce97b917a610e17ca32e66254075d39c3bf8e831140c3e28e904a0db8b8172cc07c79b342ae394138805eb29d85", 0x54}, {&(0x7f0000000340)="744f3babcba2ba7bc6d4aadb85f890ce5e629ac765927f1a9030bdf1f38cfc4381f059af89bbdec19032d6dd36bcdafd5aaaf5afd9d1f6f388f630c8a162672b91c43178327e10256ca9201b29e55277f4ac24e9ea47f43e4740a4c7d543b14a635215ee2f0cc69fa40268c8fe987e77cac32545c319eee7932be62496ae1236e5dfea00c1", 0x85}], 0x4, &(0x7f0000000440)=[{0x68, 0x10f, 0x0, "8ce4bd1d1b75b8bff2edadb04d4db2150a2e7558153c38a357458f53c47b2a7217e4043af555508d3e748de5a0306ff07483174fbdc454f50c8691c6cf43eb23625d41540b07e19efdd6423dba9b96fb21fca69a33b49f3004"}, {0x70, 0x1, 0x4, "eddee5d7c0ebd0c435fefca73addd4a82f6e6fd7fbcbf4ef376f0eb8cd149f9358e7271d56623a01fc647c9dd810456c8bb790d00e2b55b33d8cc300b5ce5d0cf734127487a719011c63ba2d3cb06c0ae5b5e3d46952c14e829deab51d9086cf7fa60d32"}, {0x7c, 0x103, 0x7, "78e65c287cc0fa7a03baea30781b4fdf0df25c96125a6914f70c3c228a53664c0629a8cc583e715e360e028b1622f044cc688c8e661b23bfc01368e4e319dc0956a429f6d1ab2fb4158b3ffa1f6922201947a40e2aa79a580693e23e90b3bbfa570115b74480d7416dd82f1f13"}], 0x154}}, {{&(0x7f00000005c0)=@rc={0x1f, @none, 0x6}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)="384b3d25d8e860432a9b90f0ed018817eb0bc0deec1d07b9f87bbcd52f24866ec60ea4bdaeb9a528cb67569be58ad96a47fb801feab97ecca4013c3c439f7d59212d47aef8d68dcfcfad8c1866ea78f6f7fee7280f9e7119e4d86b641872cc10d54079b1ec9c4241cb2c9ed3d97e9616fddc76f1a48a43688059ff1a47c2d2d89680bf4a02965351e9b82262ea969d54193ab9ab72fea9a44e1c09bc", 0x9c}], 0x1, &(0x7f0000000740)=[{0xdc, 0x1, 0xb, "35676ea202ecfb5c4959d4fc59716dbba59deffa3f7bbe943215b17688a7b84b6e9bb46d3851ce2b0d1b509649f1cb155c791867a02d292b2fc2c41bb06c0cc2261223cab92701a9a1a28e82e7394df3920d274cc330e084e337eac1f00bf7554cc45abe9af6c42ffa42f35e18031c883ea13a4f3a2cf53a3637025a405c50c04c29f49fb1e0def2a9f7a30ef6b60adce38186ba485abc7e976ea87ed2c1b187cd0312e3697c838a880303de6e6ecc84cf5621850ff219fb8dc24253104ae96eb2af51d1c60ceba6de9eca821901"}], 0xdc}}, {{&(0x7f0000000840)=@phonet={0x23, 0x6, 0x3, 0x6}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000008c0)="a6aa2053a2e9be70a74cf2235f4f123b2c297f2536298e7ab27971bcfacabff3ca68163ff14482b44fe1e6d051ca29d03e9d67662f0fb7d0c3c32f09283adaaf5d0b4564b1bcbfa8b27ad482a85505425f7d26998502adbfc5b1c58f603402971948790b3db421b2c2c776d61e1e5fec437a68f6a7cb364f4077bf51c91c2ad8d952d1c9b09f774f57261b", 0x8b}, {&(0x7f0000000980)="c3a27e0fa13951e61d54e9ae4b3d532c7a4a5a96185a4f7fa6686a04eb1953bcd6de419399ed01f9b8c53a36e11d515ab5da5b5e4882cf47dae0fd3beaec854eaf1bb5baa863716347080affbd71d0de39711ab2f7e8abcafc4b8b07bf9ed635bf97d5b1a8559744f34d815753e3eee142c338d1f99ad8a0df9e1ca088918ecf0ff2b8ed59182930b98d1e3464590dd8460a3913518ec4a74373521ede8a2fc6db9534431902dc33864de1eeb5c04fe7e026adb58f0cf17277382ac2de77ccfb1370301d5647fa040da960d4dcbf1846a91e7c182898972f", 0xd8}, {&(0x7f0000000a80)="ce6e038c53499c504c42897b7c7d5c7e91fddd45c1204ce79fc4c2caa424a7bdfb1d5c41c35ca5976e84e77b26281f08a394b7c87a101471a91cbc8ae7300e20ff0bc556bacda77386c5da1f6a2f13742c2afd3c1d75fde0eb353b7b84e0f2132dc9ef449e1de6bae0427f6d9038e5d85288af4643e9a5e0e4b5eb56d07c4a25933d5eac2019666755e82fea050a599c4c53e89276e6a075c75ba0f9a63aa9575d3bd569a82a9d7fb76968425672a14fa36d8ba471398c7542765d1c079f275aa303bb7b93e7382335a114d117b88e5dc1d08ddb008de780db21b8", 0xdb}, {&(0x7f0000000b80)="8805de52be98ca2531015dd4b020ea8edb8478b0302d9d86b91b5070f930b875b5f553f83c0e2b81d648fc3e5fc226a959754d8b69ce4b471304678c34cefe31cd3d65614fa76e915fe94f05f3", 0x4d}, {&(0x7f0000000c00)="e76bed0445971c73b9b1dcd236a33bceda99dc253d0ccebc6f929743a2be38a7f5c0e58e6bfa5952e6f0ec92038f401cf2dbeb03491b9c09b87848e1dd07b2d3206ad27f920c6f76f7388baaf21fe4e08f0cf46795870ae667b5821e06d2742465f870d0918b266a74fc7faf38ae916d745d8766a6", 0x75}, {&(0x7f0000000c80)="28330fb55c99b26b74e0397a8c2f1f8286fbc73938b01c3770dd3a90f3da538dee471ea6e8c16310a9271715d499b40402eb1b1d4cdecd6344951d5fa6c39b9862992930b9fcc0abcee058c140a0db8d5e03fbf8", 0x54}, {&(0x7f0000000d00)}], 0x7}}, {{&(0x7f0000000d80)=@ll={0x11, 0x1c, r5, 0x1, 0x3, 0x6, @broadcast}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)="bbea9a8a0207069afb7753d7ba2fa9e17c571e6a6967544c12bcf325b03788953e14795cf66649ba9faa4964d140aa8ca3d60723cc3b", 0x36}], 0x1, &(0x7f0000000e80)=[{0xc8, 0x3a, 0x5, "30dad1653482c42ee91bbf43f5a23333760e7f0c9c9b83d8c9480a3ce9f1583d0aac812c5a911c872ec15568140e65bd7226184704e833a0ab3010981e5711d13ea9ed028344640436274b58cedefac259cfa2dda5e2a18885a2c31a663414694b31e17aa47fa2a928bf2a4d053d663e46a7c8e8020fc265e9d636c3f96dd3fc09fdb93dad353c6576c1f4b31a6b57d44a0751e826ff90e805f21daa3b0d2af4ca2a5f376a032b1b2d2be9ca780c156c633b03c3a2d94ee998aeb0"}, {0x20, 0xff, 0x3, "a038ed152898fc8d5af08bae5c1abf94f8"}, {0xc, 0x119, 0xa000000}, {0xf8, 0x0, 0x34b6, "297ce1f4243f185b79916ec764a8f347005485b067d982a7b2aa6a048c3535c71af2017abfa9d04f97b8670657f90ac067440cb0dada01e52871b79c9bd3405d30db2ef613c57e21cdc5ddc922c6ea38f31661e7229dc459deb8fecd07b1ee5474fde195f8432af36f30809e3fbecb8dc5e80fbfd080cea5d1a03fcdd3df7df54652e3b59b0e51213b342ea1443ec81030658ca8780e0429fb70e01d2aaeeff102dc71dda2a6a60cf601e85f2717ea070cf899bf5d8487f68faa5b72d36f1ddf5163dccbac4a3ca5a85c4b6b5073d44fa514583a337f13dedc72023e271124270793e8b27139b84dc2"}, {0x38, 0x115, 0x7d9, "151ceea54e531f2b8b8732d3f87483bca9b34f519909babd9295967a7d6b9fa04c229a79cffe050c1d"}, {0x44, 0x18, 0x7, "fda70ac7614882ae17742acf9959c396ce26965ff94cdbb04c9d549724e996bd0fe2f20e706a6df9cd0e042ec74616d2146097626feb06"}, {0x4c, 0x8e, 0x2, "72f2419b45f5ac5b545997eddcdc28bf2b1c87a2c87e3e46b79680e2919d43b0a9fb3b3749ad9090abafb0590c09ff743b802e9bf0def42207aadc344259b63d"}, {0x18, 0x113, 0x2, "0c9953c5c1a6e7d8681132dd"}, {0x68, 0x113, 0x5276cf3, "4af6e5fdb51336fcabfa0e2e24c0d095e8ad9e2e0eb762f709554cbf152976507d94121a0e0c4f8a614a1f55b2920a6277aed8d7de381c1116d02af6d0993e1f44ee89e4d14bb39904872aefe184f24f6b7d3f495846c38dfab0"}], 0x334}}, {{&(0x7f00000011c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43}, 0x1}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001240)="b4e37899751a368c4928ae18897461d5d4126140ce628adf2e209979c70b0266fc203c57861130c022bfe80c0acc7635cb6f4b335986a8f6cf875c398108a47978fb00894c63d0bf9204c4d86345c05abf099ae1ee519830cf2d55058d6958d910b16390f42b7c85d6374dfb190db4e0997508af9f2ce66ea6be70a4deadd82099a024dc1fbaf5e779909c702e9a9375ee8e71c7e380821675684f20e06d963061ab9bec100a969e733c8eba952ff7168a0ef45c59b8aee8d3d4048a", 0xbc}, {&(0x7f0000001300)="7e22f97e2a71b98e5db6acb454803429a46c85ea1fcf0a28d4719e58cc6657d489daab29ae3282ca37638824ca01f835e3c20670bdd90b4661e4b6a9506e83a919a51e36615bc1a36607335467f4d17e1b7671750d2ff097a12be974d1b3034360dbe02fbd22f8a05524", 0x6a}, {&(0x7f0000001380)="278e0ba32673f0fc21a809cc375abd8f16d22ebeb87a87bf5d291f01b9665682d0e002f15428479ddee488b9555014a6cb72b62ac7b8d7a8e61d18df46a142b69cefd843e0a11d81bf3a8f929d93aa610a48822a210b674a4ae42293c9fa170791ba8901e0c5bcab7ee839332e30261c52bf37d725978aadfe2c2d12a72118ff7aed7696a49c2bc98700e88bc17be66beed889ad54ace83832088eec8ad2e11124f48b2c2509d2e63ba4970fa805a019b954de7a4d233805163d07821f68835582798dd034d5b958d3", 0xc9}, {&(0x7f0000001480)="1f102752d9b85b2dec185330d2028197de78c8c45e7ad3337aef3e8c14edcb06deb50b2b462cee9031479c6bddc92eb6e5197359a2feb6dd65620b1e9fa6eaefc1a1be9d216d52989ed6756e19058896616bd99beadc57216892a3756b4fad95", 0x60}, {&(0x7f0000001500)="d667e19cb6d4ccc1bdb71470", 0xc}], 0x5}}], 0x5, 0x80) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xd2}}}}}, 0x0) 3.581740514s ago: executing program 3 (id=2680): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000880)="4f3bf5cb8031e51b257f38308e5458a7eb86c3b92b6bca18ecc3c38b6201000e15446d487f5506eb672a77f8680ed11a835f2583b1962a90a92e7cfdc5b593a6922bb9c52cd77acb6401eddd1f099ce6e5b3a05d61a959f373fa989b4a", 0x5d}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40044103, &(0x7f0000001300)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="0500a30000000cc036ca55eeceef6ad9b9a58a35699193152fb29111c5e07892adbea32c785a40047ca024f8577873a38f4db90e98c0c3451ccbfa93cf19f0ee18c12822c6e41eb95c6d4fa2615cc8a80f4e0f0e2472dbb0f2c6a069c1"], 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) 3.563597469s ago: executing program 4 (id=2681): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c0000000000029000"/42], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7000000200000006f000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f26019e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22e9bc162bcc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd80102fc9ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b639767c609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e989986dcbc900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb083fb0a7e607452d8d335fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f64949680000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x7ff, 0x3) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7b, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbb73d9bef9705c93023a3e3592aaaaaaaaaa2d080048e9006d006500ed0206907864010102ac1434bb440c852000000006ffffffff4e204e23903d09b44711d2391e779d9d385289c19db8ab89482feb506a82c8971d06a28c58cf79271f11134f481bdbf3504a", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="518003c690780005039b218ba5d517d9ec736c16e7522792f0221c1017193f0fcb28f7199f19237c4e78519eafbf4c49f3"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0x63, 0x5000, 0x0, 0x0}], 0x1}) syz_emit_ethernet(0x100, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004d4800f20067000068069078ac1414c3080101018807428d3c81cd4404589183134fac141431ffffffff000000006401010000004e244e22547a92615444664728a4ccac836a1daa0ec11aaa634c26b50c58c3443db80ac07e3efdc45e2ae7b6c16f3e385a0899027eab84eaca85a2e778968560fba6ed7a504cfd00f01bbf9158cd", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="7000fffe9078000904020303060100008594b5fe95e5dc3332586f0ff17688d8dd0b189488c88c8ed53ddd1073f00a2570f52c5450a71ddbed83fb78ba1a318faac22628ca780a95e7ef0eaca688e21d6f6f36df78ef3e1fa8d1737d9a95dfb348e62ab28825b7145922ae3e83b3a8ba4413090345152a83c556eabb8e24ebf35f6086b01fa9955aa3bbc0cde36f8ba7f8165fe19c74478493b26f28343c76a8a95957a014f0a2492dbf982e41b9cc147de0"], 0x0) 3.387752106s ago: executing program 1 (id=2682): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xd4e, 0x10000, 0x100000, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x60, 0x12, 0xff, 0xaa1, 0xb7, 0x8, &(0x7f0000000400)="7811daf9b2ab40b3b2900c0ae7c79b270edbd6770b1b649d381491e6c95c19b5dad6c4a5d5ed9628b7a75c0349a49daad70c2d03fe86c6b74f599660699a81a101ad8a784257cbf38e9b77c8e3468f9cbac2952e84762c7f894fd2905760a703f2e64e701bf9d3164c8ec8b472151a7b39881a4a777ffbcf75e9fd194d4a3f9e9dd76ac6525ba0fc3a8c821080dd12b2cabf07232d3e4f50bb680bd6944a8913a905af483ad67c5f8e4ae8d437c8ef2494500ec7d184c7"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8f6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7f, 0x2, 0x1000}, {0x7fff}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x7d0, 0x8f6, 0xff81}, {0xa}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f00000001c0)={0x1000000, 0x9, 0x2, {0x1, @win={{0xfffffffd, 0x0, 0x4, 0x3}, 0x1, 0x12000000, 0x0, 0x1000005, 0x0, 0xa}}}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.332180664s ago: executing program 3 (id=2683): r0 = socket$inet6(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000007b002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) 2.908054572s ago: executing program 3 (id=2684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={0x0}) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40088}, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0), r7}}, 0x18) 2.400199534s ago: executing program 1 (id=2685): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f33301"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000200)=[{0x3, 0x1000, 0x0, 0x0}, {0x8000, 0xa00, 0x0, 0x0}], 0x2}) 1.843014875s ago: executing program 3 (id=2686): r0 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/2, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffc303000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917a4a5955d18a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba479ffe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x20002, 0x0) write$tun(r5, &(0x7f00000000c0)={@val={0x0, 0x10}, @val={0x3, 0x0, 0x2, 0xdce, 0x2f9, 0x81}, @mpls={[], @llc={@snap={0xaa, 0x0, 'h', "e09716", 0xc}}}}, 0x16) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x7fffffff, 0xc4, &(0x7f0000000200)=""/196, 0x41000, 0x10, '\x00', r2, @fallback=0x29, r3, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x7, 0x0, 0xe4a}, 0x10, r4, r5, 0x5, &(0x7f00000004c0)=[0x1, r6, r7], &(0x7f0000000500)=[{0x5, 0x3, 0xb}, {0x4, 0x2, 0xe}, {0x0, 0x5, 0xb, 0x7}, {0x4, 0x1, 0x2, 0x4}, {0x0, 0x2, 0xe, 0x9}], 0x10, 0xe, @void, @value}, 0x94) io_uring_enter(r0, 0x0, 0xffefffff, 0x21, 0x0, 0x0) 1.811859044s ago: executing program 0 (id=2687): syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="f6dc9b7192ce1de2210b39d4e8cea6f26d4c04e8a89788638a0891d40b286a396cedd34111f56bf375ce310a9ba6958e41b800b07cfccdb91801a808fceb5fab9e490f9c57431e2013ba133bc35de07dfb49db5acaa1c6b75335c05e8a7c0f72132e173d408222cc9234c61f14fd86569f654be3ec38", @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) splice(r0, &(0x7f00000001c0)=0x80000001, 0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x4, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3000000, 0x13, r0, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 1.657619684s ago: executing program 3 (id=2688): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 1.527152663s ago: executing program 0 (id=2689): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0x3, 0x300) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.311078246s ago: executing program 4 (id=2690): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000002400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000001d0a69ad31f05d860900000000000095000000000000001810000e", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0xfffffffffffffccc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETA(r7, 0x5406, &(0x7f00000002c0)={0x6, 0x8002, 0x820a, 0x400, 0x10}) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002600)={&(0x7f0000002480)={0x16c, r9, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x66}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x2}, {0x5, 0x2}, {0x2, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x2}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x1}, {0x7}, {0x5, 0x4}, {0x0, 0x5}, {0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x7, 0x9}, {0x6}, {0x0, 0x8}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x9}, {0x6, 0x1}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0x2}, {0x1, 0x5}, {0x5, 0xa}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x3, 0x6}, {0x5, 0x6}, {0x5, 0x5}, {0x5, 0x7}, {0x4, 0x3}, {0x3, 0x7}, {}, {0x7}, {0x3, 0x1}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x6}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x9}, {0x3, 0x8}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x2, 0xa}, {0x3, 0x4}, {0x7, 0x6}, {0x6, 0x8}, {0x6, 0x4}, {0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x6, 0x5}, {0x1}, {0x6}, {0x2, 0x8}, {0x5}, {0x5, 0x4}, {0x7, 0x9}, {0x6, 0x5}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x3}, {0x1}, {0x5, 0x7}, {0x4, 0xa}, {0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x1b, 0x48, 0x5, 0x4, 0x18, 0x36, 0x60, 0x12, 0x2, 0x36, 0x6c, 0x1b, 0x16, 0x60, 0x30, 0x1b, 0x12, 0x3a, 0x24, 0x3, 0x16, 0x5, 0x3, 0xb, 0x2, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x7}, {0x4, 0x6}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0xa}, {0x2, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb809, 0x4, 0x200, 0xa, 0x8, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x9, 0x1, 0x3, 0x81, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xff}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000301010200ba59ead501549d65239365a202000000000000000a0000004898d2ad56c15cd25a6e580b4f421d0468c48f183a612b8f71ab5cb66728cea4e5db0694531aeacad2dda55e665e71493e"], 0x14}}, 0x4000) 420.637449ms ago: executing program 2 (id=2691): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f0000000180)='./mnt\x00', r0, &(0x7f0000000380)='./mnt\x00', 0x155) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f00000002c0)={0x3, 0x6, 0x2, {0x1, @vbi={0x9, 0x7935, 0x5, 0x494e4f4b, [0x7, 0x6], [0x1, 0x3ff], 0x10b}}, 0xaea3}) r2 = socket(0x2b, 0x80000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x4, &(0x7f00000005c0)=@framed={{}, [@generic={0x81, 0x8, 0x9, 0x9, 0x6}]}, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_buf(r3, 0x1, 0x3d, 0x0, &(0x7f00000015c0)) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x41565559, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x4}]}}) listen(r2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, 0x0) 276.53291ms ago: executing program 4 (id=2692): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 188.627358ms ago: executing program 2 (id=2693): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="746172676574205043493a363a03"], 0x15) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x394, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x1bc, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3f0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x803, 0x2) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = openat$audio1(0xffffffffffffff9c, 0x0, 0x202, 0x0) writev(r7, &(0x7f0000000680)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="fdffffff000000000000000000003c0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) 0s ago: executing program 4 (id=2694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410328bd7000fddbdf25070000000c000280082b"], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x94) syz_emit_vhci(0x0, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe000001000000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4009}, 0x0) socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = msgget(0x0, 0x49a) msgctl$MSG_STAT_ANY(r7, 0xd, &(0x7f00000002c0)=""/168) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f000200008008001d0061"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000000701030000000000000000000000000900010073797a300000000016dd219122e21b5d67cfa5122c9b83e46378c204ca56b26a094bcf8b718fc8e317bc79cce5352f0778"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): short (expected 47903, got 77) [ 795.794023][T13505] usb 4-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 795.872855][T13505] usb 4-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 795.894903][T13505] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 795.913708][T13505] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 795.928143][T13505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.937388][T13505] usb 4-1: Product: syz [ 795.947208][T13505] usb 4-1: Manufacturer: syz [ 795.955532][T13505] usb 4-1: SerialNumber: syz [ 796.138010][ T5899] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 796.300706][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 796.332886][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 796.364240][ T5899] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 796.377360][T13949] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2315'. [ 796.384216][ T5899] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 796.404090][ T5899] usb 5-1: config 7 has no interface number 0 [ 796.421200][ T5899] usb 5-1: config 7 interface 187 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 796.438624][ T5899] usb 5-1: config 7 interface 187 has no altsetting 0 [ 796.452449][ T5899] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 796.461893][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.470123][ T5899] usb 5-1: Product: syz [ 796.474679][ T5899] usb 5-1: Manufacturer: syz [ 796.479541][ T5899] usb 5-1: SerialNumber: syz [ 797.078399][ T5913] usb 1-1: USB disconnect, device number 89 [ 797.106009][ T5899] usb 5-1: Not enough endpoints found in device, aborting! [ 797.396130][T13969] netlink: 'syz.0.2321': attribute type 6 has an invalid length. [ 797.811279][T13505] usb 4-1: USB disconnect, device number 123 [ 798.154203][T13981] tipc: Started in network mode [ 798.165160][T13981] tipc: Node identity 7f000001, cluster identity 4711 [ 798.199484][T13981] tipc: Enabled bearer , priority 10 [ 798.270105][T13981] tipc: Enabling of bearer rejected, failed to enable media [ 799.327771][ T5899] tipc: Node number set to 2130706433 [ 799.398424][ T5899] usb 5-1: USB disconnect, device number 118 [ 799.927946][ T5899] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 800.103148][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 800.125557][ T5899] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 800.153464][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.171572][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'. [ 800.177872][ T5899] usb 5-1: Product: syz [ 800.197978][ T5899] usb 5-1: Manufacturer: syz [ 800.202852][ T5899] usb 5-1: SerialNumber: syz [ 800.230905][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 800.230925][ T30] audit: type=1800 audit(1749352460.524:9389): pid=14007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2330" name="file1" dev="tmpfs" ino=2627 res=0 errno=0 [ 800.241669][ T5899] usb 5-1: config 0 descriptor?? [ 800.338974][ T5899] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 800.384750][ T5899] usb 5-1: setting power ON [ 800.398214][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 800.429255][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 800.452310][ T5899] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 800.473468][ T5899] usb 5-1: media controller created [ 800.502812][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.537840][ T5834] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 800.581099][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 800.615002][ T5899] usb 5-1: selecting invalid altsetting 6 [ 800.624130][ T5899] usb 5-1: digital interface selection failed (-22) [ 800.670346][ T5899] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 800.697347][ T5899] usb 5-1: setting power OFF [ 800.706376][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.724802][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 800.746823][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 800.777134][ T5834] usb 1-1: config 0 has no interfaces? [ 800.799178][ T5834] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 800.821857][ T5899] (NULL device *): no alternate interface [ 800.890616][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.955804][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 800.984926][ T5834] usb 1-1: config 0 descriptor?? [ 801.006180][ T5899] usb 5-1: USB disconnect, device number 119 [ 801.134320][T14020] netlink: 'syz.1.2334': attribute type 6 has an invalid length. [ 801.649895][T14025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2337'. [ 802.166311][T14045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.175501][T14045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.267961][ T5899] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 802.429220][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 802.456213][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 802.476606][ T5899] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 802.487011][ T5899] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 802.518997][ T5899] usb 4-1: config 7 has no interface number 0 [ 802.541476][ T5899] usb 4-1: config 7 interface 187 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 802.584808][ T5899] usb 4-1: config 7 interface 187 has no altsetting 0 [ 802.603525][ T5899] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 802.633773][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.647759][ T5899] usb 4-1: Product: syz [ 802.652021][ T5899] usb 4-1: Manufacturer: syz [ 802.666875][ T5899] usb 4-1: SerialNumber: syz [ 802.838210][ T5834] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 802.885408][ T5899] usb 4-1: Not enough endpoints found in device, aborting! [ 802.997880][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 803.010261][ T5834] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 803.020104][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.037893][ T5834] usb 5-1: Product: syz [ 803.042507][ T5834] usb 5-1: Manufacturer: syz [ 803.049059][ T5834] usb 5-1: SerialNumber: syz [ 803.063038][ T5834] usb 5-1: config 0 descriptor?? [ 803.072340][ T5834] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 803.086340][ T5834] usb 5-1: setting power ON [ 803.093455][ T5834] dvb-usb: bulk message failed: -22 (2/0) [ 803.107293][ T5834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 803.124048][ T5834] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 803.137049][ T5834] usb 5-1: media controller created [ 803.164624][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 803.171404][ T5899] usb 1-1: USB disconnect, device number 90 [ 803.212646][ T5834] usb 5-1: selecting invalid altsetting 6 [ 803.225122][ T5834] usb 5-1: digital interface selection failed (-22) [ 803.242128][ T5834] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 803.261457][ T5834] usb 5-1: setting power OFF [ 803.269849][ T5834] dvb-usb: bulk message failed: -22 (2/0) [ 803.286937][ T5834] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 803.316023][ T5834] (NULL device *): no alternate interface [ 803.411235][ T5834] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 803.466905][ T5834] usb 5-1: USB disconnect, device number 120 [ 803.499352][T14059] netlink: 'syz.0.2349': attribute type 6 has an invalid length. [ 804.088730][T14058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.112712][T14058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.558137][T10582] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 804.739059][T10582] usb 1-1: Using ep0 maxpacket: 16 [ 804.776943][T10582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 804.805034][T10582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 805.069560][T10582] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.086099][T10582] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 805.099241][ T5899] usb 4-1: USB disconnect, device number 124 [ 805.114523][T10582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.147601][T10582] usb 1-1: config 0 descriptor?? [ 805.189096][T10582] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input49 [ 805.263939][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'. [ 805.386454][T10582] usb 1-1: USB disconnect, device number 91 [ 805.537885][ T5899] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 805.719115][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.733248][T14089] netlink: 'syz.1.2360': attribute type 6 has an invalid length. [ 805.778565][ T5899] usb 4-1: config 0 has no interfaces? [ 805.788140][ T5899] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 805.872941][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.895704][ T5899] usb 4-1: config 0 descriptor?? [ 806.368611][T14096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.488233][T14096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.537882][ T5899] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 806.732417][ T5899] usb 1-1: config index 0 descriptor too short (expected 47903, got 77) [ 806.766123][ T5899] usb 1-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 806.841740][ T5899] usb 1-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 806.928344][ T5899] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 806.991517][ T5899] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 807.001829][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.037871][ T5899] usb 1-1: Product: syz [ 807.062565][ T5899] usb 1-1: Manufacturer: syz [ 807.097686][ T5899] usb 1-1: SerialNumber: syz [ 807.529326][T14109] netlink: 'syz.1.2367': attribute type 8 has an invalid length. [ 807.568119][ T5834] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 807.739045][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 807.752246][ T5834] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 807.762512][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.780927][ T5834] usb 5-1: Product: syz [ 807.787507][ T5834] usb 5-1: Manufacturer: syz [ 807.801826][ T5834] usb 5-1: SerialNumber: syz [ 807.821522][ T5834] usb 5-1: config 0 descriptor?? [ 808.242278][ T5834] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 808.290365][T10582] usb 4-1: USB disconnect, device number 125 [ 808.298219][ T5834] usb 5-1: USB disconnect, device number 121 [ 808.745251][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.752227][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.073126][T14124] fuse: Bad value for 'fd' [ 809.105582][T14110] bridge0: port 3(syz_tun) entered blocking state [ 809.118506][T14110] bridge0: port 3(syz_tun) entered disabled state [ 809.132080][ T30] audit: type=1326 audit(1749352469.434:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 809.159584][T14110] syz_tun: entered allmulticast mode [ 809.170649][T14110] syz_tun: entered promiscuous mode [ 809.177477][ T30] audit: type=1326 audit(1749352469.464:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 809.216531][ T30] audit: type=1326 audit(1749352469.464:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 809.239515][ T30] audit: type=1326 audit(1749352469.464:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 809.265419][ T30] audit: type=1326 audit(1749352469.564:9394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 809.375331][ T30] audit: type=1326 audit(1749352469.674:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 809.465333][ T30] audit: type=1326 audit(1749352469.674:9396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 809.502017][ T30] audit: type=1326 audit(1749352469.794:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 809.701209][ T30] audit: type=1326 audit(1749352469.794:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 809.835868][T14131] netlink: 'syz.3.2374': attribute type 6 has an invalid length. [ 809.905804][ T30] audit: type=1326 audit(1749352469.794:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 810.109761][ T5899] usb 1-1: USB disconnect, device number 92 [ 810.597839][ T5899] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 810.747850][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 810.755295][ T5899] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 810.764194][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 810.795043][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 810.831249][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 810.856712][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.897440][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 810.934485][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.086259][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'. [ 811.110636][T14153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.173628][ T5899] usb 5-1: GET_CAPABILITIES returned 0 [ 811.184514][T14153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.199946][ T5899] usbtmc 5-1:16.0: can't read capabilities [ 811.372997][ T5899] usb 5-1: USB disconnect, device number 122 [ 812.138177][ T5834] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 812.325869][ T5834] usb 4-1: config index 0 descriptor too short (expected 47903, got 77) [ 812.339631][ T5834] usb 4-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 812.379430][ T5834] usb 4-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 812.437984][ T5834] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 812.568128][T14173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.578464][ T5834] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 812.608062][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.616154][ T5834] usb 4-1: Product: syz [ 812.636305][ T5834] usb 4-1: Manufacturer: syz [ 812.668193][ T5834] usb 4-1: SerialNumber: syz [ 812.779937][T14173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.251717][T14165] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2385'. [ 814.018112][ T1016] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 814.183720][ T1016] usb 5-1: Using ep0 maxpacket: 8 [ 814.197326][ T1016] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 814.251271][ T1016] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 814.319507][ T1016] usb 5-1: config 1 has no interface number 1 [ 814.345645][ T1016] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 814.409820][ T1016] usb 5-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 814.474858][ T1016] usb 5-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 814.554447][ T1016] usb 5-1: config 1 interface 2 has no altsetting 0 [ 814.578080][ T1016] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.587558][ T1016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.625003][ T1016] usb 5-1: Product: syz [ 814.637854][ T1016] usb 5-1: Manufacturer: syz [ 814.660539][ T1016] usb 5-1: SerialNumber: syz [ 814.902193][T14184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.911702][T14184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.119732][ T5834] usb 4-1: USB disconnect, device number 126 [ 816.368839][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2397'. [ 816.425761][T14199] sctp: [Deprecated]: syz.0.2396 (pid 14199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 816.425761][T14199] Use struct sctp_sack_info instead [ 816.571587][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.581328][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.601355][T14207] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2398'. [ 816.637187][ T1016] usb 5-1: 0:8 : does not exist [ 816.667847][ T5834] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 816.733699][ T1016] usb 5-1: USB disconnect, device number 123 [ 816.820379][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.836796][ T5834] usb 4-1: config 0 has no interfaces? [ 816.862219][ T5834] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 816.897221][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.976853][ T5834] usb 4-1: config 0 descriptor?? [ 817.676144][T14224] netlink: 'syz.0.2403': attribute type 6 has an invalid length. [ 818.134714][T14227] FAULT_INJECTION: forcing a failure. [ 818.134714][T14227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.188558][T14227] CPU: 1 UID: 0 PID: 14227 Comm: syz.0.2404 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 818.188581][T14227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 818.188591][T14227] Call Trace: [ 818.188597][T14227] [ 818.188604][T14227] dump_stack_lvl+0x189/0x250 [ 818.188632][T14227] ? __pfx____ratelimit+0x10/0x10 [ 818.188656][T14227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 818.188679][T14227] ? __pfx__printk+0x10/0x10 [ 818.188695][T14227] ? __might_fault+0xb0/0x130 [ 818.188736][T14227] should_fail_ex+0x414/0x560 [ 818.188761][T14227] _copy_from_user+0x2d/0xb0 [ 818.188779][T14227] get_compat_msghdr+0xad/0x4a0 [ 818.188805][T14227] ? __pfx_get_compat_msghdr+0x10/0x10 [ 818.188834][T14227] ___sys_sendmsg+0x193/0x2a0 [ 818.188856][T14227] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.188902][T14227] ? __fget_files+0x2a/0x420 [ 818.188919][T14227] ? __fget_files+0x3a0/0x420 [ 818.188943][T14227] __sys_sendmsg+0x164/0x220 [ 818.188965][T14227] ? __pfx___sys_sendmsg+0x10/0x10 [ 818.188995][T14227] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 818.189016][T14227] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.189042][T14227] __do_fast_syscall_32+0xb6/0x2b0 [ 818.189058][T14227] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.189084][T14227] do_fast_syscall_32+0x34/0x80 [ 818.189099][T14227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.189117][T14227] RIP: 0023:0xf7f82539 [ 818.189130][T14227] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 818.189144][T14227] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 818.189160][T14227] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 818.189170][T14227] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 818.189179][T14227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 818.189188][T14227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 818.189197][T14227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 818.189218][T14227] [ 819.540250][ T5899] usb 4-1: USB disconnect, device number 127 [ 819.832501][T14243] xt_hashlimit: invalid interval [ 819.887933][T13505] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 820.207328][T13505] usb 1-1: config index 0 descriptor too short (expected 47903, got 77) [ 820.226135][T13505] usb 1-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 820.276989][T13505] usb 1-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 820.301470][T13505] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 820.438403][T13505] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 820.471540][T13505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.487891][ T5834] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 820.504203][T13505] usb 1-1: Product: syz [ 820.524817][T13505] usb 1-1: Manufacturer: syz [ 820.589537][T13505] usb 1-1: SerialNumber: syz [ 820.643066][ T5834] usb 5-1: config 0 has no interfaces? [ 820.660928][ T5834] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 820.670915][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.703749][ T5834] usb 5-1: Product: syz [ 820.722359][ T5834] usb 5-1: Manufacturer: syz [ 820.727402][ T5834] usb 5-1: SerialNumber: syz [ 820.756893][ T5834] usb 5-1: config 0 descriptor?? [ 820.841826][T14247] binder: 14246:14247 ioctl 4018620d 0 returned -22 [ 820.862046][T14253] binder: 14246:14253 ioctl c018620c 0 returned -14 [ 821.094851][T14256] netlink: 'syz.2.2414': attribute type 6 has an invalid length. [ 821.695553][T14260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.750562][T14260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.334438][T13505] usb 1-1: USB disconnect, device number 93 [ 822.540500][T14265] input: syz1 as /devices/virtual/input/input50 [ 823.649003][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2420'. [ 823.714821][ T5913] usb 5-1: USB disconnect, device number 124 [ 824.677974][ T5913] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 824.860527][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 825.312261][ T5913] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 825.387313][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.473927][ T5913] usb 5-1: config 0 descriptor?? [ 825.828255][ T5913] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 825.846359][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 825.872316][T14297] netlink: 'syz.0.2426': attribute type 6 has an invalid length. [ 825.891255][ T5913] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 825.904190][ T5913] usb 5-1: media controller created [ 825.955643][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 826.085799][ T5913] az6027: usb out operation failed. (-71) [ 826.099276][ T5913] az6027: usb out operation failed. (-71) [ 826.114671][T14300] fuse: Bad value for 'fd' [ 826.131740][ T5913] stb0899_attach: Driver disabled by Kconfig [ 826.138313][ T5913] az6027: no front-end attached [ 826.138313][ T5913] [ 826.146973][ T5913] az6027: usb out operation failed. (-71) [ 826.154991][ T5913] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 826.165627][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 826.168094][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 826.168125][ T30] audit: type=1326 audit(1749352486.464:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 826.225195][ T30] audit: type=1326 audit(1749352486.524:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 826.231270][ T5913] dvb-usb: schedule remote query interval to 400 msecs. [ 826.247629][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.337219][ T30] audit: type=1326 audit(1749352486.524:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 826.359543][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.423623][ T5913] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 826.487566][ T5913] usb 5-1: USB disconnect, device number 125 [ 826.751785][ T30] audit: type=1326 audit(1749352486.524:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 826.774515][ T30] audit: type=1326 audit(1749352486.524:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 826.796633][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.803360][ T30] audit: type=1326 audit(1749352486.524:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 826.885193][ T30] audit: type=1326 audit(1749352486.594:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 826.942958][ T5913] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 826.979453][ T30] audit: type=1326 audit(1749352486.664:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 827.003907][ T30] audit: type=1326 audit(1749352486.664:9472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 827.034012][ T30] audit: type=1326 audit(1749352486.674:9473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 827.056878][ T5899] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 827.205215][T14313] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2430'. [ 827.218274][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 827.241765][ T5899] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 827.284110][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.329266][ T5899] usb 1-1: Product: syz [ 827.333535][ T5899] usb 1-1: Manufacturer: syz [ 827.359236][ T5899] usb 1-1: SerialNumber: syz [ 827.380639][ T5899] usb 1-1: config 0 descriptor?? [ 827.403530][ T5899] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 827.437523][ T5899] usb 1-1: setting power ON [ 827.437551][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 827.452792][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 827.454235][ T5899] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 827.454292][ T5899] usb 1-1: media controller created [ 827.495321][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 827.543680][ T5899] usb 1-1: selecting invalid altsetting 6 [ 827.543709][ T5899] usb 1-1: digital interface selection failed (-22) [ 827.543726][ T5899] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 827.545053][ T5899] usb 1-1: setting power OFF [ 827.545076][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 827.545093][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 827.545109][ T5899] (NULL device *): no alternate interface [ 827.564693][T14321] netlink: 'syz.1.2433': attribute type 1 has an invalid length. [ 827.636183][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 827.640714][ T5899] usb 1-1: USB disconnect, device number 94 [ 827.660967][T14321] bond4: entered allmulticast mode [ 827.670676][T14321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 827.760376][T14325] bond4: (slave ip6gretap1): making interface the new active one [ 827.760403][T14325] ip6gretap1: entered allmulticast mode [ 827.782247][T14325] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 828.208280][T14336] fuse: Bad value for 'fd' [ 829.159561][T14344] netlink: 'syz.0.2438': attribute type 6 has an invalid length. [ 829.170482][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 829.509054][ T5913] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 829.520872][T14358] syz.3.2442: attempt to access beyond end of device [ 829.520872][T14358] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 829.674731][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.696490][ T5913] usb 5-1: config 0 has no interfaces? [ 829.726240][ T5913] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 829.756839][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.831587][ T5913] usb 5-1: config 0 descriptor?? [ 830.539544][T14378] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2444'. [ 830.578095][ T1016] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 830.887769][ T1016] usb 1-1: Using ep0 maxpacket: 8 [ 830.899943][ T1016] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 830.916164][ T1016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.946763][ T1016] usb 1-1: Product: syz [ 830.957326][ T1016] usb 1-1: Manufacturer: syz [ 830.992665][ T1016] usb 1-1: SerialNumber: syz [ 831.029443][ T1016] usb 1-1: config 0 descriptor?? [ 831.041389][ T1016] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 831.077813][ T1016] usb 1-1: setting power ON [ 831.084901][ T1016] dvb-usb: bulk message failed: -22 (2/0) [ 831.120781][ T1016] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 831.151612][ T1016] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 831.210639][ T1016] usb 1-1: media controller created [ 831.285149][ T1016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 831.382971][ T1016] usb 1-1: selecting invalid altsetting 6 [ 831.429200][ T1016] usb 1-1: digital interface selection failed (-22) [ 831.435881][ T1016] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 831.524822][ T1016] usb 1-1: setting power OFF [ 831.557838][ T1016] dvb-usb: bulk message failed: -22 (2/0) [ 831.596860][ T1016] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 831.687912][ T1016] (NULL device *): no alternate interface [ 831.845570][ T1016] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 831.989002][ T1016] usb 1-1: USB disconnect, device number 95 [ 832.172715][T14391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.185506][T14391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.318982][T14391] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 832.768159][T14393] netlink: 'syz.1.2453': attribute type 6 has an invalid length. [ 832.979067][ T5899] usb 5-1: USB disconnect, device number 126 [ 833.104336][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 834.409525][T14423] syz_tun: entered allmulticast mode [ 834.423667][T14422] syz_tun: left allmulticast mode [ 834.917948][ T5913] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 835.068096][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 835.099752][ T5913] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 835.140079][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'. [ 835.147923][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.198528][ T5913] usb 4-1: Product: syz [ 835.218776][ T5913] usb 4-1: Manufacturer: syz [ 835.249110][ T5913] usb 4-1: SerialNumber: syz [ 835.310425][ T5913] usb 4-1: config 0 descriptor?? [ 835.318507][ T5913] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 835.425826][ T5913] usb 4-1: setting power ON [ 835.430652][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 835.465739][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 835.475743][ T5913] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 835.484773][ T5913] usb 4-1: media controller created [ 835.517970][T14435] tipc: Enabling of bearer rejected, failed to enable media [ 835.623132][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.650990][ T5913] usb 4-1: selecting invalid altsetting 6 [ 835.656801][ T5913] usb 4-1: digital interface selection failed (-22) [ 835.764366][ T5913] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 835.777241][ T5913] usb 4-1: setting power OFF [ 835.786048][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 835.794649][ T5913] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 835.805715][ T5913] (NULL device *): no alternate interface [ 835.855358][ T5913] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 835.881758][ T5913] usb 4-1: USB disconnect, device number 2 [ 836.001758][T14447] netlink: 'syz.0.2466': attribute type 6 has an invalid length. [ 836.589354][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2472'. [ 836.727968][ T5899] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 836.928532][ T5899] usb 5-1: device descriptor read/64, error -71 [ 837.038094][ T1016] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 837.178169][ T5899] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 837.194284][ T1016] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 837.227785][ T1016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.287055][ T1016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.318308][ T5899] usb 5-1: device descriptor read/64, error -71 [ 837.342179][ T1016] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 837.428361][ T5899] usb usb5-port1: attempt power cycle [ 837.441149][ T1016] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 837.458000][ T1016] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 837.501294][ T1016] usb 1-1: Manufacturer: syz [ 837.526064][ T1016] usb 1-1: config 0 descriptor?? [ 837.728645][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2477'. [ 837.758027][T14473] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2477'. [ 837.772169][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 837.781214][T14462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.819514][ T5899] usb 5-1: device descriptor read/8, error -71 [ 837.838482][T14462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.095724][T14473] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2477'. [ 838.132019][ T1016] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 838.140478][ T1016] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 838.144581][ T5899] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 838.163119][ T1016] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 838.249111][ T5899] usb 5-1: device descriptor read/8, error -71 [ 838.360160][T14477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.368430][ T5899] usb usb5-port1: unable to enumerate USB device [ 838.376341][T14477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.689024][T14483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2481'. [ 838.778745][T14483] netlink: 'syz.1.2481': attribute type 4 has an invalid length. [ 838.797492][T14483] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2481'. [ 838.945731][T14486] netlink: 'syz.3.2482': attribute type 6 has an invalid length. [ 840.475536][T14517] FAULT_INJECTION: forcing a failure. [ 840.475536][T14517] name failslab, interval 1, probability 0, space 0, times 0 [ 840.574147][T14517] CPU: 1 UID: 0 PID: 14517 Comm: syz.4.2490 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 840.574178][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 840.574191][T14517] Call Trace: [ 840.574200][T14517] [ 840.574210][T14517] dump_stack_lvl+0x189/0x250 [ 840.574247][T14517] ? __pfx____ratelimit+0x10/0x10 [ 840.574294][T14517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.574325][T14517] ? __pfx__printk+0x10/0x10 [ 840.574363][T14517] should_fail_ex+0x414/0x560 [ 840.574395][T14517] should_failslab+0xa8/0x100 [ 840.574421][T14517] __kmalloc_noprof+0xcb/0x4f0 [ 840.574452][T14517] ? __nla_parse+0x40/0x60 [ 840.574478][T14517] ? seg6_local_build_state+0x129/0xdb0 [ 840.574503][T14517] seg6_local_build_state+0x129/0xdb0 [ 840.574550][T14517] ? __lock_acquire+0xab9/0xd20 [ 840.574582][T14517] ? __pfx_seg6_local_build_state+0x10/0x10 [ 840.574616][T14517] ? lwtunnel_build_state+0xe2/0x4c0 [ 840.574649][T14517] lwtunnel_build_state+0x381/0x4c0 [ 840.574681][T14517] ? lwtunnel_build_state+0xe2/0x4c0 [ 840.574714][T14517] fib_nh_common_init+0x14b/0x430 [ 840.574739][T14517] ? in6_dev_get+0x1a/0x290 [ 840.574768][T14517] ? __pfx_fib_nh_common_init+0x10/0x10 [ 840.574791][T14517] ? in6_dev_get+0x1a/0x290 [ 840.574823][T14517] fib6_nh_init+0x1608/0x1ff0 [ 840.574866][T14517] ? __pfx_fib6_nh_init+0x10/0x10 [ 840.574892][T14517] ? kasan_save_track+0x4f/0x80 [ 840.574909][T14517] ? kasan_save_track+0x3e/0x80 [ 840.574926][T14517] ? __kasan_kmalloc+0x93/0xb0 [ 840.574944][T14517] ? __kmalloc_noprof+0x27a/0x4f0 [ 840.574963][T14517] ? fib6_info_alloc+0x30/0xf0 [ 840.574984][T14517] ? ip6_route_info_create+0x142/0x860 [ 840.575028][T14517] ? ip6_route_add+0x28/0x190 [ 840.575053][T14517] ? inet6_rtm_newroute+0x28c/0x18a0 [ 840.575075][T14517] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 840.575096][T14517] ? netlink_rcv_skb+0x205/0x470 [ 840.575119][T14517] ? netlink_unicast+0x758/0x8d0 [ 840.575140][T14517] ? netlink_sendmsg+0x805/0xb30 [ 840.575164][T14517] ? __sock_sendmsg+0x21c/0x270 [ 840.575183][T14517] ? ____sys_sendmsg+0x505/0x830 [ 840.575207][T14517] ? ___sys_sendmsg+0x21f/0x2a0 [ 840.575232][T14517] ? __sys_sendmsg+0x164/0x220 [ 840.575256][T14517] ? __do_fast_syscall_32+0xb6/0x2b0 [ 840.575291][T14517] ? do_fast_syscall_32+0x34/0x80 [ 840.575310][T14517] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.575369][T14517] ? ip_fib_metrics_init+0x404/0x6f0 [ 840.575407][T14517] ip6_route_info_create_nh+0x16a/0xab0 [ 840.575443][T14517] ? __pfx_ip6_route_info_create_nh+0x10/0x10 [ 840.575476][T14517] ? ip6_route_info_create+0x508/0x860 [ 840.575510][T14517] ip6_route_add+0x4d/0x190 [ 840.575541][T14517] inet6_rtm_newroute+0x28c/0x18a0 [ 840.575572][T14517] ? nlmon_xmit+0xb0/0x100 [ 840.575589][T14517] ? kmem_cache_free+0x18f/0x400 [ 840.575614][T14517] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 840.575640][T14517] ? __local_bh_enable_ip+0x12d/0x1c0 [ 840.575672][T14517] ? lockdep_hardirqs_on+0x9c/0x150 [ 840.575705][T14517] ? __local_bh_enable_ip+0x12d/0x1c0 [ 840.575736][T14517] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 840.575771][T14517] ? __dev_queue_xmit+0x27e/0x3a70 [ 840.575844][T14517] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 840.575867][T14517] rtnetlink_rcv_msg+0x7cf/0xb70 [ 840.575895][T14517] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 840.575919][T14517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 840.575940][T14517] ? ref_tracker_free+0x63a/0x7d0 [ 840.575968][T14517] ? __copy_skb_header+0xa7/0x550 [ 840.575999][T14517] ? __pfx_ref_tracker_free+0x10/0x10 [ 840.576041][T14517] netlink_rcv_skb+0x205/0x470 [ 840.576068][T14517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 840.576094][T14517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 840.576134][T14517] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.576160][T14517] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.576192][T14517] netlink_unicast+0x758/0x8d0 [ 840.576228][T14517] netlink_sendmsg+0x805/0xb30 [ 840.576273][T14517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.576303][T14517] ? __import_iovec+0x5d4/0x7f0 [ 840.576323][T14517] ? aa_sock_msg_perm+0x94/0x160 [ 840.576353][T14517] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 840.576382][T14517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.576410][T14517] __sock_sendmsg+0x21c/0x270 [ 840.576435][T14517] ____sys_sendmsg+0x505/0x830 [ 840.576469][T14517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.576515][T14517] ___sys_sendmsg+0x21f/0x2a0 [ 840.576546][T14517] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.576613][T14517] ? __fget_files+0x2a/0x420 [ 840.576637][T14517] ? __fget_files+0x3a0/0x420 [ 840.576673][T14517] __sys_sendmsg+0x164/0x220 [ 840.576703][T14517] ? __pfx___sys_sendmsg+0x10/0x10 [ 840.576747][T14517] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 840.576769][T14517] ? lockdep_hardirqs_on+0x9c/0x150 [ 840.576804][T14517] __do_fast_syscall_32+0xb6/0x2b0 [ 840.576827][T14517] ? lockdep_hardirqs_on+0x9c/0x150 [ 840.576863][T14517] do_fast_syscall_32+0x34/0x80 [ 840.576885][T14517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.576910][T14517] RIP: 0023:0xf7fa8539 [ 840.576929][T14517] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 840.576948][T14517] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 840.576970][T14517] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000680 [ 840.576985][T14517] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 840.576998][T14517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.577010][T14517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 840.577023][T14517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.577053][T14517] [ 841.467351][ T1016] usb 1-1: USB disconnect, device number 96 [ 842.097830][ T5843] Bluetooth: hci3: command 0x041b tx timeout [ 842.190321][T14523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.199621][T14523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.652285][ T5913] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 842.808404][ T5913] usb 5-1: device descriptor read/64, error -71 [ 843.047771][ T5913] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 843.207098][ T5913] usb 5-1: device descriptor read/64, error -71 [ 843.247820][ T5899] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 843.318287][ T5913] usb usb5-port1: attempt power cycle [ 843.417806][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 843.430668][ T5899] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.475359][ T5899] usb 4-1: config 1 interface 0 has no altsetting 0 [ 843.528075][ T5899] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.40 [ 843.573042][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.587741][ T5899] usb 4-1: Product: Ñ„ [ 843.591883][ T5899] usb 4-1: Manufacturer: 毷ë’ཋ瞪ä·ë°è–„é£äƒˆç±¨áµá’®è®ã‘œéš¤ç†”힇绅棶槲使탄䡞⽶碓餥ꨣ哷唷烯寮涊库䕅îºá¤Žë†¨ï”ƒç³¼æº¥ä¯¢å™ ã³«ìª”푭ᵜ鴞ㆭ桪儙沱㷯麑Ꚇê㡶鎊䫂ç˜ç„วሼãºâ·ä‚¤åº¸îƒ¼ï¬¸ê¤°ìŠãŽâ¤†è¡·à¼‘ï“£â¿ê æ’¿Ò™åŸ”㘉ꮛá®îŸ”鋹뇲韢㶵ﮠꎧ瘀齤寘ꉀå•åº´ê•é¦ï™“á‡á‚¦î¦žè³šæ¹ä·¢ [ 843.682373][ T5899] usb 4-1: SerialNumber: 僣詪㕌᧬㹀åŒæŒµá¸˜ë‹¿æ••ë¾žë””셿示æ´ä§‚텮顶哞䦥í…䡎莀줿퉗ä¨èªçƒ‹ë“²áºç«…묈賋렫ë©à³·á´ªî­¢å·¥ç‘ƒã篆抩ç­í—‚éˆå²„J [ 843.707830][ T5913] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 843.753807][ T5913] usb 5-1: device descriptor read/8, error -71 [ 844.061364][T14555] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2504'. [ 844.198789][ T5913] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 844.228957][ T5913] usb 5-1: device descriptor read/8, error -71 [ 844.338283][ T5913] usb usb5-port1: unable to enumerate USB device [ 844.839390][ T5899] usbhid 4-1:1.0: can't add hid device: -71 [ 844.857071][ T5899] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 844.897423][ T5899] usb 4-1: USB disconnect, device number 3 [ 845.977826][ T5899] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 846.057861][ T5913] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 846.157992][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 846.261809][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 846.271442][ T5899] usb 4-1: New USB device strings: Mfr=94, Product=2, SerialNumber=3 [ 846.280673][ T5899] usb 4-1: Product: syz [ 846.308330][ T5899] usb 4-1: Manufacturer: syz [ 846.313007][ T5899] usb 4-1: SerialNumber: syz [ 846.331248][ T5899] usb 4-1: config 0 descriptor?? [ 846.476771][ T5913] usb 1-1: config index 0 descriptor too short (expected 47903, got 77) [ 846.485568][ T5913] usb 1-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 846.508108][ T5913] usb 1-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 846.547879][ T5913] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 846.568338][ T5913] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 846.577473][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.664289][ T5913] usb 1-1: Product: syz [ 846.784988][ T5913] usb 1-1: Manufacturer: syz [ 846.795419][ T5899] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 846.830116][ T5913] usb 1-1: SerialNumber: syz [ 846.864625][ T5899] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 846.948438][ T5899] usb 4-1: USB disconnect, device number 4 [ 847.991054][T14600] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2518'. [ 849.119761][ T5913] usb 1-1: USB disconnect, device number 97 [ 849.278038][T14613] syzkaller0: entered promiscuous mode [ 849.283627][T14613] syzkaller0: entered allmulticast mode [ 850.855239][T14634] input: syz1 as /devices/virtual/input/input52 [ 851.048324][ T5913] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 851.239107][ T5913] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 851.286245][ T5913] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 851.394645][ T5913] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 851.446828][ T5913] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 851.483893][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.551022][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.566910][ T5913] usb 5-1: invalid MIDI out EP 0 [ 851.765760][T14636] delete_channel: no stack [ 851.853812][ T5913] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 851.877227][ T5913] usb 5-1: USB disconnect, device number 9 [ 852.450026][T14645] fuse: Invalid rootmode [ 852.499757][ T30] kauditd_printk_skb: 434 callbacks suppressed [ 852.499777][ T30] audit: type=1326 audit(1749352512.794:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 852.534152][ T30] audit: type=1326 audit(1749352512.804:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 852.565967][ T30] audit: type=1326 audit(1749352512.834:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 852.590766][ T30] audit: type=1326 audit(1749352512.834:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 852.613389][ T30] audit: type=1326 audit(1749352512.874:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 852.635557][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.645233][ T30] audit: type=1326 audit(1749352512.874:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 852.667441][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.703769][ T30] audit: type=1326 audit(1749352512.944:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 852.734678][ T30] audit: type=1326 audit(1749352512.944:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 852.761600][ T30] audit: type=1326 audit(1749352512.944:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 852.784117][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.902418][ T30] audit: type=1326 audit(1749352512.944:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 854.108602][ T5834] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 854.491150][ T5834] usb 1-1: config index 0 descriptor too short (expected 47903, got 77) [ 854.502950][ T5834] usb 1-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 854.512577][ T5834] usb 1-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 854.526438][ T5834] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 854.576705][ T5834] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 854.589190][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.597305][ T5834] usb 1-1: Product: syz [ 854.611971][ T5834] usb 1-1: Manufacturer: syz [ 854.642020][ T5834] usb 1-1: SerialNumber: syz [ 855.657841][ T5913] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 855.723864][T14664] FAULT_INJECTION: forcing a failure. [ 855.723864][T14664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.783133][T14664] CPU: 0 UID: 0 PID: 14664 Comm: syz.2.2535 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 855.783164][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 855.783178][T14664] Call Trace: [ 855.783186][T14664] [ 855.783196][T14664] dump_stack_lvl+0x189/0x250 [ 855.783239][T14664] ? __pfx____ratelimit+0x10/0x10 [ 855.783272][T14664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 855.783304][T14664] ? __pfx__printk+0x10/0x10 [ 855.783340][T14664] should_fail_ex+0x414/0x560 [ 855.783374][T14664] _copy_to_user+0x31/0xb0 [ 855.783400][T14664] simple_read_from_buffer+0xe1/0x170 [ 855.783427][T14664] proc_fail_nth_read+0x1df/0x250 [ 855.783458][T14664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 855.783487][T14664] ? rw_verify_area+0x258/0x650 [ 855.783507][T14664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 855.783535][T14664] vfs_read+0x1fd/0x980 [ 855.783561][T14664] ? __pfx___mutex_lock+0x10/0x10 [ 855.783583][T14664] ? __pfx_vfs_read+0x10/0x10 [ 855.783604][T14664] ? __fget_files+0x2a/0x420 [ 855.783632][T14664] ? __fget_files+0x3a0/0x420 [ 855.783655][T14664] ? __fget_files+0x2a/0x420 [ 855.783688][T14664] ksys_read+0x145/0x250 [ 855.783712][T14664] ? __pfx_ksys_read+0x10/0x10 [ 855.783734][T14664] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 855.783756][T14664] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.783791][T14664] __do_fast_syscall_32+0xb6/0x2b0 [ 855.783814][T14664] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.783858][T14664] do_fast_syscall_32+0x34/0x80 [ 855.783881][T14664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 855.783907][T14664] RIP: 0023:0xf70fe539 [ 855.783925][T14664] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 855.783944][T14664] RSP: 002b:00000000f50ee590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 855.783965][T14664] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50ee620 [ 855.783979][T14664] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 855.783992][T14664] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 855.784004][T14664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 855.784017][T14664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 855.784048][T14664] [ 856.015438][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.022353][ T5913] usb 4-1: device descriptor read/64, error -71 [ 856.270916][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 856.427906][ T5913] usb 4-1: device descriptor read/64, error -71 [ 856.548426][ T5913] usb usb4-port1: attempt power cycle [ 856.873377][ T5834] usb 1-1: USB disconnect, device number 98 [ 856.894665][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2540'. [ 856.939068][ T5913] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 856.963597][T14673] tipc: Enabling of bearer rejected, failed to enable media [ 856.983487][ T5913] usb 4-1: device descriptor read/8, error -71 [ 857.083789][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 857.138293][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 857.257984][ T5913] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 857.279741][ T5913] usb 4-1: device descriptor read/8, error -71 [ 857.332732][T14689] FAULT_INJECTION: forcing a failure. [ 857.332732][T14689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.346630][T14689] CPU: 0 UID: 0 PID: 14689 Comm: syz.0.2546 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 857.346660][T14689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 857.346674][T14689] Call Trace: [ 857.346683][T14689] [ 857.346693][T14689] dump_stack_lvl+0x189/0x250 [ 857.346731][T14689] ? __pfx____ratelimit+0x10/0x10 [ 857.346764][T14689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 857.346795][T14689] ? __pfx__printk+0x10/0x10 [ 857.346833][T14689] should_fail_ex+0x414/0x560 [ 857.346866][T14689] _copy_to_user+0x31/0xb0 [ 857.346892][T14689] simple_read_from_buffer+0xe1/0x170 [ 857.346922][T14689] proc_fail_nth_read+0x1df/0x250 [ 857.346952][T14689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.346981][T14689] ? rw_verify_area+0x258/0x650 [ 857.347001][T14689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.347029][T14689] vfs_read+0x1fd/0x980 [ 857.347056][T14689] ? __pfx___mutex_lock+0x10/0x10 [ 857.347079][T14689] ? __pfx_vfs_read+0x10/0x10 [ 857.347101][T14689] ? __fget_files+0x2a/0x420 [ 857.347130][T14689] ? __fget_files+0x3a0/0x420 [ 857.347151][T14689] ? __fget_files+0x2a/0x420 [ 857.347185][T14689] ksys_read+0x145/0x250 [ 857.347209][T14689] ? __pfx_ksys_read+0x10/0x10 [ 857.347230][T14689] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 857.347252][T14689] ? lockdep_hardirqs_on+0x9c/0x150 [ 857.347286][T14689] __do_fast_syscall_32+0xb6/0x2b0 [ 857.347309][T14689] ? lockdep_hardirqs_on+0x9c/0x150 [ 857.347346][T14689] do_fast_syscall_32+0x34/0x80 [ 857.347368][T14689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 857.347393][T14689] RIP: 0023:0xf7f82539 [ 857.347411][T14689] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 857.347431][T14689] RSP: 002b:00000000f50a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 857.347454][T14689] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50a6620 [ 857.347478][T14689] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 857.347492][T14689] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 857.347505][T14689] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 857.347518][T14689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 857.347549][T14689] [ 857.583750][ T5913] usb usb4-port1: unable to enumerate USB device [ 857.634481][T14693] FAULT_INJECTION: forcing a failure. [ 857.634481][T14693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 857.694647][T14693] CPU: 1 UID: 0 PID: 14693 Comm: syz.0.2547 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 857.694681][T14693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 857.694695][T14693] Call Trace: [ 857.694704][T14693] [ 857.694713][T14693] dump_stack_lvl+0x189/0x250 [ 857.694752][T14693] ? __pfx____ratelimit+0x10/0x10 [ 857.694785][T14693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 857.694818][T14693] ? __pfx__printk+0x10/0x10 [ 857.694844][T14693] ? fs_reclaim_acquire+0x7d/0x100 [ 857.694881][T14693] should_fail_ex+0x414/0x560 [ 857.694916][T14693] prepare_alloc_pages+0x213/0x610 [ 857.694951][T14693] __alloc_frozen_pages_noprof+0x123/0x370 [ 857.694983][T14693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 857.695022][T14693] ? policy_nodemask+0x27c/0x720 [ 857.695043][T14693] ? __lock_acquire+0xab9/0xd20 [ 857.695078][T14693] alloc_pages_mpol+0x232/0x4a0 [ 857.695108][T14693] vma_alloc_folio_noprof+0xe4/0x200 [ 857.695135][T14693] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 857.695173][T14693] folio_prealloc+0x30/0x180 [ 857.695197][T14693] __handle_mm_fault+0x2c88/0x5620 [ 857.695240][T14693] ? __pfx___handle_mm_fault+0x10/0x10 [ 857.695284][T14693] ? find_vma+0xe7/0x160 [ 857.695304][T14693] ? __pfx_find_vma+0x10/0x10 [ 857.695327][T14693] handle_mm_fault+0x40a/0x8e0 [ 857.695360][T14693] do_user_addr_fault+0x764/0x1390 [ 857.695407][T14693] exc_page_fault+0x76/0xf0 [ 857.695451][T14693] asm_exc_page_fault+0x26/0x30 [ 857.695471][T14693] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 857.695499][T14693] Code: f7 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f7 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 857.695517][T14693] RSP: 0018:ffffc900034074b8 EFLAGS: 00050202 [ 857.695537][T14693] RAX: ffff888030f92001 RBX: ffff888030f923e1 RCX: 0000000000000157 [ 857.695552][T14693] RDX: 0000000000000000 RSI: ffff888030f92421 RDI: 0000000080001000 [ 857.695567][T14693] RBP: ffffc90003407610 R08: ffff888030f92577 R09: 1ffff110061f24ae [ 857.695582][T14693] R10: dffffc0000000000 R11: ffffed10061f24af R12: dffffc0000000000 [ 857.695598][T14693] R13: 0000000000000197 R14: 00007ffffffff000 R15: 0000000080001157 [ 857.695633][T14693] _copy_to_iter+0x5f6/0x16f0 [ 857.695686][T14693] ? __pfx__copy_to_iter+0x10/0x10 [ 857.695716][T14693] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 857.695754][T14693] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 857.695792][T14693] __skb_datagram_iter+0xf8/0x990 [ 857.695825][T14693] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 857.695866][T14693] skb_copy_datagram_iter+0xc5/0x230 [ 857.695902][T14693] netlink_recvmsg+0x2ab/0xa30 [ 857.695942][T14693] ? __pfx_netlink_recvmsg+0x10/0x10 [ 857.695968][T14693] ? trace_kmalloc+0x1f/0xd0 [ 857.695986][T14693] ? __kmalloc_noprof+0x29b/0x4f0 [ 857.696010][T14693] ? aa_sock_msg_perm+0x94/0x160 [ 857.696040][T14693] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 857.696067][T14693] ? security_socket_recvmsg+0x7e/0x2e0 [ 857.696088][T14693] ? __pfx_netlink_recvmsg+0x10/0x10 [ 857.696115][T14693] sock_recvmsg+0x22c/0x270 [ 857.696141][T14693] ____sys_recvmsg+0x1c9/0x460 [ 857.696180][T14693] ? __pfx_____sys_recvmsg+0x10/0x10 [ 857.696206][T14693] ? get_compat_msghdr+0x37e/0x4a0 [ 857.696248][T14693] ? ktime_get_ts64+0xa2/0x3d0 [ 857.696280][T14693] ___sys_recvmsg+0x1b5/0x510 [ 857.696316][T14693] ? __pfx____sys_recvmsg+0x10/0x10 [ 857.696373][T14693] ? __fget_files+0x3a0/0x420 [ 857.696410][T14693] do_recvmmsg+0x36a/0x770 [ 857.696457][T14693] ? __pfx_do_recvmmsg+0x10/0x10 [ 857.696501][T14693] ? _copy_from_user+0x94/0xb0 [ 857.696542][T14693] __sys_recvmmsg+0x127/0x280 [ 857.696574][T14693] ? __pfx___sys_recvmmsg+0x10/0x10 [ 857.696601][T14693] ? ksys_write+0x22a/0x250 [ 857.696633][T14693] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 857.696668][T14693] __do_fast_syscall_32+0xb6/0x2b0 [ 857.696691][T14693] ? lockdep_hardirqs_on+0x9c/0x150 [ 857.696729][T14693] do_fast_syscall_32+0x34/0x80 [ 857.696751][T14693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 857.696776][T14693] RIP: 0023:0xf7f82539 [ 857.696793][T14693] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 857.696810][T14693] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 857.696831][T14693] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 857.696846][T14693] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 857.696858][T14693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 857.696870][T14693] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 857.696883][T14693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 857.696915][T14693] [ 858.401313][T14697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.484733][T14697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.531886][T14702] binder: 14694:14702 ioctl 40046210 0 returned -14 [ 859.138095][ T5913] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 859.477061][ T5913] usb 4-1: config index 0 descriptor too short (expected 47903, got 77) [ 859.487894][ T5913] usb 4-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 859.496567][ T5913] usb 4-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 859.515820][ T5913] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 859.579209][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 859.595212][ T5913] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 859.605089][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.613791][ T5913] usb 4-1: Product: syz [ 859.618545][ T5913] usb 4-1: Manufacturer: syz [ 859.623296][ T5913] usb 4-1: SerialNumber: syz [ 859.631580][T14718] tipc: Enabling of bearer rejected, already enabled [ 860.156027][T14727] fuse: Invalid rootmode [ 860.258248][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 860.258269][ T30] audit: type=1326 audit(1749352520.534:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.2557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 860.328094][ T30] audit: type=1326 audit(1749352520.534:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.2557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 861.198614][ T30] audit: type=1326 audit(1749352520.534:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.2557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 861.245374][ T30] audit: type=1326 audit(1749352520.534:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.2557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 861.305256][ T30] audit: type=1326 audit(1749352520.534:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.2557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 861.330814][ T30] audit: type=1326 audit(1749352520.554:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.2557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 861.353167][ T30] audit: type=1326 audit(1749352520.554:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.2557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 861.498537][ T30] audit: type=1326 audit(1749352520.604:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.2557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 861.532416][ T30] audit: type=1326 audit(1749352520.604:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.2557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 861.554829][ T30] audit: type=1326 audit(1749352520.604:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14721 comm="syz.1.2557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 861.642164][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2559'. [ 861.725504][T14734] tipc: Enabling of bearer rejected, already enabled [ 862.113726][ T5913] usb 4-1: USB disconnect, device number 9 [ 862.866047][T14754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2564'. [ 862.878127][T13505] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 863.050149][T13505] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 863.082215][T13505] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.131719][T13505] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.178148][T13505] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 863.221764][T13505] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 863.231460][T13505] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 863.240300][T13505] usb 5-1: Manufacturer: syz [ 863.250316][T13505] usb 5-1: config 0 descriptor?? [ 863.415819][T14765] netlink: 'syz.1.2568': attribute type 6 has an invalid length. [ 863.666453][T13505] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 863.736788][T13505] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 863.778741][T13505] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 863.795792][T14770] fuse: Bad value for 'rootmode' [ 864.210946][T14782] FAULT_INJECTION: forcing a failure. [ 864.210946][T14782] name failslab, interval 1, probability 0, space 0, times 0 [ 864.230848][T14782] CPU: 1 UID: 0 PID: 14782 Comm: syz.3.2575 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 864.230878][T14782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 864.230892][T14782] Call Trace: [ 864.230900][T14782] [ 864.230917][T14782] dump_stack_lvl+0x189/0x250 [ 864.230955][T14782] ? __pfx____ratelimit+0x10/0x10 [ 864.230987][T14782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.231018][T14782] ? __pfx__printk+0x10/0x10 [ 864.231046][T14782] ? __pfx___might_resched+0x10/0x10 [ 864.231065][T14782] ? fs_reclaim_acquire+0x7d/0x100 [ 864.231097][T14782] should_fail_ex+0x414/0x560 [ 864.231132][T14782] should_failslab+0xa8/0x100 [ 864.231158][T14782] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 864.231181][T14782] ? __alloc_skb+0x112/0x2d0 [ 864.231211][T14782] __alloc_skb+0x112/0x2d0 [ 864.231242][T14782] netlink_ack+0x146/0xa50 [ 864.231264][T14782] ? __pfx___mutex_trylock_common+0x10/0x10 [ 864.231293][T14782] ? rcu_is_watching+0x15/0xb0 [ 864.231325][T14782] netlink_rcv_skb+0x28c/0x470 [ 864.231352][T14782] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 864.231394][T14782] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.231435][T14782] ? netlink_deliver_tap+0x2e/0x1b0 [ 864.231459][T14782] ? netlink_deliver_tap+0x2e/0x1b0 [ 864.231487][T14782] xfrm_netlink_rcv+0x79/0x90 [ 864.231513][T14782] netlink_unicast+0x758/0x8d0 [ 864.231547][T14782] netlink_sendmsg+0x805/0xb30 [ 864.231581][T14782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.231610][T14782] ? __import_iovec+0x5d4/0x7f0 [ 864.231630][T14782] ? aa_sock_msg_perm+0x94/0x160 [ 864.231659][T14782] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.231686][T14782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.231713][T14782] __sock_sendmsg+0x21c/0x270 [ 864.231737][T14782] ____sys_sendmsg+0x505/0x830 [ 864.231771][T14782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.231820][T14782] ___sys_sendmsg+0x21f/0x2a0 [ 864.231850][T14782] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.231922][T14782] ? __fget_files+0x2a/0x420 [ 864.231962][T14782] ? __fget_files+0x3a0/0x420 [ 864.231996][T14782] __sys_sendmsg+0x164/0x220 [ 864.232025][T14782] ? __pfx___sys_sendmsg+0x10/0x10 [ 864.232067][T14782] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 864.232090][T14782] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.232125][T14782] __do_fast_syscall_32+0xb6/0x2b0 [ 864.232148][T14782] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.232183][T14782] do_fast_syscall_32+0x34/0x80 [ 864.232205][T14782] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 864.232230][T14782] RIP: 0023:0xf70ee539 [ 864.232249][T14782] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 864.232266][T14782] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 864.232288][T14782] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 864.232302][T14782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 864.232314][T14782] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 864.232326][T14782] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 864.232338][T14782] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 864.232369][T14782] [ 864.552522][ C1] vkms_vblank_simulate: vblank timer overrun [ 865.025082][T14795] FAULT_INJECTION: forcing a failure. [ 865.025082][T14795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.057429][T14795] CPU: 0 UID: 0 PID: 14795 Comm: syz.3.2578 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 865.057459][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 865.057470][T14795] Call Trace: [ 865.057478][T14795] [ 865.057488][T14795] dump_stack_lvl+0x189/0x250 [ 865.057525][T14795] ? __pfx____ratelimit+0x10/0x10 [ 865.057558][T14795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.057598][T14795] ? __pfx__printk+0x10/0x10 [ 865.057621][T14795] ? __might_fault+0xb0/0x130 [ 865.057672][T14795] should_fail_ex+0x414/0x560 [ 865.057707][T14795] _copy_from_user+0x2d/0xb0 [ 865.057731][T14795] cmsghdr_from_user_compat_to_kern+0x50b/0x800 [ 865.057784][T14795] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 865.057821][T14795] ____sys_sendmsg+0x20f/0x830 [ 865.057852][T14795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.057893][T14795] ___sys_sendmsg+0x21f/0x2a0 [ 865.057923][T14795] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.057983][T14795] ? __fget_files+0x2a/0x420 [ 865.058005][T14795] ? __fget_files+0x3a0/0x420 [ 865.058057][T14795] __sys_sendmmsg+0x28e/0x430 [ 865.058105][T14795] ? __pfx___sys_sendmmsg+0x10/0x10 [ 865.058143][T14795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 865.058183][T14795] ? ksys_write+0x22a/0x250 [ 865.058214][T14795] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 865.058245][T14795] __do_fast_syscall_32+0xb6/0x2b0 [ 865.058268][T14795] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.058303][T14795] do_fast_syscall_32+0x34/0x80 [ 865.058324][T14795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 865.058349][T14795] RIP: 0023:0xf70ee539 [ 865.058367][T14795] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 865.058384][T14795] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 865.058406][T14795] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000b00 [ 865.058421][T14795] RDX: 0000000000000002 RSI: 0000000020004800 RDI: 0000000000000000 [ 865.058434][T14795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 865.058447][T14795] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 865.058459][T14795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 865.058488][T14795] [ 865.417850][ T5913] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 865.477811][T13505] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 865.555090][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2581'. [ 865.668420][T13505] usb 1-1: config index 0 descriptor too short (expected 47903, got 77) [ 865.676979][T13505] usb 1-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 865.688321][T13505] usb 1-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 865.710498][T13505] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 865.826811][T13505] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 865.850089][T13505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.865088][T13505] usb 1-1: Product: syz [ 865.876946][T13505] usb 1-1: Manufacturer: syz [ 865.900989][T13505] usb 1-1: SerialNumber: syz [ 866.281903][ T5899] usb 5-1: USB disconnect, device number 10 [ 866.363913][T14812] netlink: 'syz.4.2583': attribute type 12 has an invalid length. [ 866.398335][T14812] netlink: 'syz.4.2583': attribute type 29 has an invalid length. [ 866.439614][T14812] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2583'. [ 866.493122][T14812] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2583'. [ 866.926093][T14820] binder: 14819:14820 ioctl 40046210 0 returned -14 [ 867.006072][T14823] fuse: Unknown parameter 'group_i00000000000000000000' [ 867.032585][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 867.032768][ T30] audit: type=1326 audit(1749352527.324:10258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 867.096827][ T30] audit: type=1326 audit(1749352527.334:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 867.276506][ T30] audit: type=1326 audit(1749352527.364:10260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 867.364800][T13505] usb 1-1: USB disconnect, device number 99 [ 867.455240][ T30] audit: type=1326 audit(1749352527.374:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 867.479141][ T30] audit: type=1326 audit(1749352527.394:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 867.501724][ T30] audit: type=1326 audit(1749352527.434:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 867.524754][ T30] audit: type=1326 audit(1749352527.444:10264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 867.547260][ T30] audit: type=1326 audit(1749352527.454:10265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 867.586147][ T30] audit: type=1326 audit(1749352527.454:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 867.645961][ T30] audit: type=1326 audit(1749352527.454:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 867.909331][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2590'. [ 868.648039][ T5899] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 868.809983][ T5899] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 868.848042][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 868.880348][ T5899] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 868.953767][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.978041][T13505] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 868.979732][ T5899] usb 4-1: config 0 descriptor?? [ 869.050122][T14856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2598'. [ 869.059557][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 869.068676][T14856] FAULT_INJECTION: forcing a failure. [ 869.068676][T14856] name failslab, interval 1, probability 0, space 0, times 0 [ 869.081933][T14856] CPU: 1 UID: 0 PID: 14856 Comm: syz.2.2598 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 869.081954][T14856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 869.081963][T14856] Call Trace: [ 869.081970][T14856] [ 869.081976][T14856] dump_stack_lvl+0x189/0x250 [ 869.082004][T14856] ? __pfx____ratelimit+0x10/0x10 [ 869.082028][T14856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.082056][T14856] ? __pfx__printk+0x10/0x10 [ 869.082077][T14856] ? irqentry_exit+0x74/0x90 [ 869.082095][T14856] should_fail_ex+0x414/0x560 [ 869.082118][T14856] should_failslab+0xa8/0x100 [ 869.082155][T14856] __kmalloc_cache_noprof+0x70/0x3d0 [ 869.082170][T14856] ? __hw_addr_add_ex+0x1f4/0x770 [ 869.082188][T14856] ? kasan_check_range+0x1d4/0x2c0 [ 869.082208][T14856] __hw_addr_add_ex+0x1f4/0x770 [ 869.082232][T14856] dev_addr_init+0x14f/0x230 [ 869.082253][T14856] ? __pfx_dev_addr_init+0x10/0x10 [ 869.082270][T14856] ? alloc_netdev_mqs+0xa6/0x11e0 [ 869.082302][T14856] alloc_netdev_mqs+0x2f3/0x11e0 [ 869.082323][T14856] ? __pfx_br_dev_setup+0x10/0x10 [ 869.082347][T14856] rtnl_create_link+0x31f/0xd10 [ 869.082373][T14856] rtnl_newlink_create+0x25c/0xb00 [ 869.082416][T14856] ? __pfx_aa_get_newest_label+0x10/0x10 [ 869.082440][T14856] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 869.082457][T14856] ? rtnl_newlink+0x8db/0x1c70 [ 869.082476][T14856] ? __pfx___mutex_lock+0x10/0x10 [ 869.082498][T14856] ? ns_capable+0x8a/0xf0 [ 869.082524][T14856] rtnl_newlink+0x16d6/0x1c70 [ 869.082558][T14856] ? __pfx_rtnl_newlink+0x10/0x10 [ 869.082588][T14856] ? __lock_acquire+0xab9/0xd20 [ 869.082631][T14856] ? __lock_acquire+0xab9/0xd20 [ 869.082681][T14856] ? is_bpf_text_address+0x26/0x2b0 [ 869.082707][T14856] ? is_bpf_text_address+0x292/0x2b0 [ 869.082726][T14856] ? is_bpf_text_address+0x26/0x2b0 [ 869.082741][T14856] ? kernel_text_address+0xa5/0xe0 [ 869.082771][T14856] ? __lock_acquire+0xab9/0xd20 [ 869.082810][T14856] ? __pfx_rtnl_newlink+0x10/0x10 [ 869.082827][T14856] rtnetlink_rcv_msg+0x7cf/0xb70 [ 869.082846][T14856] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 869.082862][T14856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 869.082892][T14856] netlink_rcv_skb+0x205/0x470 [ 869.082912][T14856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 869.082930][T14856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 869.082959][T14856] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.082977][T14856] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.082999][T14856] netlink_unicast+0x758/0x8d0 [ 869.083024][T14856] netlink_sendmsg+0x805/0xb30 [ 869.083050][T14856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.083071][T14856] ? __import_iovec+0x5d4/0x7f0 [ 869.083086][T14856] ? aa_sock_msg_perm+0x94/0x160 [ 869.083107][T14856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 869.083156][T14856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.083176][T14856] __sock_sendmsg+0x21c/0x270 [ 869.083194][T14856] ____sys_sendmsg+0x505/0x830 [ 869.083218][T14856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.083251][T14856] ___sys_sendmsg+0x21f/0x2a0 [ 869.083273][T14856] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.083320][T14856] ? __fget_files+0x2a/0x420 [ 869.083337][T14856] ? __fget_files+0x3a0/0x420 [ 869.083362][T14856] __sys_sendmsg+0x164/0x220 [ 869.083383][T14856] ? __pfx___sys_sendmsg+0x10/0x10 [ 869.083414][T14856] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 869.083429][T14856] ? lockdep_hardirqs_on+0x9c/0x150 [ 869.083454][T14856] __do_fast_syscall_32+0xb6/0x2b0 [ 869.083470][T14856] ? lockdep_hardirqs_on+0x9c/0x150 [ 869.083495][T14856] do_fast_syscall_32+0x34/0x80 [ 869.083511][T14856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 869.083529][T14856] RIP: 0023:0xf70fe539 [ 869.083542][T14856] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 869.083555][T14856] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 869.083571][T14856] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000140 [ 869.083582][T14856] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 869.083591][T14856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 869.083600][T14856] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 869.083608][T14856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 869.083630][T14856] [ 869.511590][T13505] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 869.529214][T13505] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 869.542830][T13505] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 869.551423][T14860] fuse: Unknown parameter '0x0000000000000009ÿÿÿÿÿÿÿÿ' [ 869.563114][T14860] fuse: Unknown parameter 'ýÉZ0xffffffffffffffff' [ 869.581557][T13505] usb 5-1: Manufacturer: syz [ 869.590208][T13505] usb 5-1: config 0 descriptor?? [ 869.602820][T13505] hub 5-1:0.0: USB hub found [ 869.716286][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 869.722517][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 869.734350][ T5899] usb 4-1: USB disconnect, device number 10 [ 869.763435][T14864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.775428][T14864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.804895][T13505] hub 5-1:0.0: 1 port detected [ 870.183299][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.189956][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.516466][T14873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2602'. [ 870.865815][T14854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.880524][T14854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.248089][ T5834] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 871.518114][ T5834] usb 4-1: device descriptor read/64, error -71 [ 871.665479][ T5899] usb 5-1: USB disconnect, device number 11 [ 871.758439][ T5834] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 871.897849][ T5834] usb 4-1: device descriptor read/64, error -71 [ 872.025180][ T5834] usb usb4-port1: attempt power cycle [ 872.187780][ T5899] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 872.377791][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 872.385428][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.397411][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.418167][ T5834] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 872.438667][ T5834] usb 4-1: device descriptor read/8, error -71 [ 872.439723][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 872.463283][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 872.472585][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.486403][ T5899] usb 1-1: config 0 descriptor?? [ 872.495722][ T5899] hub 1-1:0.0: USB hub found [ 872.677931][ T5834] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 872.704780][ T5899] hub 1-1:0.0: 1 port detected [ 872.716428][ T5834] usb 4-1: device descriptor read/8, error -71 [ 872.797952][T10582] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 872.829245][ T5834] usb usb4-port1: unable to enumerate USB device [ 872.884485][T14905] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 872.905803][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 872.972529][T10582] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.989149][T10582] usb 5-1: config 0 has no interfaces? [ 873.000408][T10582] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 873.012598][ T5899] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 873.019375][ T5899] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 873.026956][T10582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.049355][ T5899] usbhid 1-1:0.0: can't add hid device: -71 [ 873.057415][ T5899] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 873.076007][T10582] usb 5-1: config 0 descriptor?? [ 873.129129][ T5899] usb 1-1: USB disconnect, device number 100 [ 873.150674][T14911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.168380][T14911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.617911][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 873.776943][T14921] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2618'. [ 874.657908][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 874.986125][T14936] netlink: 'syz.3.2619': attribute type 6 has an invalid length. [ 875.644954][T14942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.655308][T14942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.697856][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 876.459859][ T5913] usb 5-1: USB disconnect, device number 12 [ 876.747929][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 877.168237][ T5834] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 877.331925][ T5834] usb 5-1: config index 0 descriptor too short (expected 47903, got 77) [ 877.381151][ T5834] usb 5-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 877.381797][T14956] program syz.3.2625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.411730][ T5834] usb 5-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 877.427745][ T5834] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 877.446955][ T5834] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 877.456306][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.464431][ T5834] usb 5-1: Product: syz [ 877.469131][ T5834] usb 5-1: Manufacturer: syz [ 877.473925][ T5834] usb 5-1: SerialNumber: syz [ 877.639127][T14958] netlink: 'syz.3.2625': attribute type 10 has an invalid length. [ 877.647380][T14958] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 877.660043][T14958] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 877.673065][T14958] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 877.699436][T14949] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2623'. [ 877.777873][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 878.770642][T14969] netlink: 'syz.3.2628': attribute type 2 has an invalid length. [ 878.818040][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 879.743960][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 879.744008][ T30] audit: type=1326 audit(1749352540.044:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7fc00000 [ 879.772936][ C0] vkms_vblank_simulate: vblank timer overrun [ 879.867020][T14981] netlink: 'syz.2.2632': attribute type 6 has an invalid length. [ 879.867922][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 880.063672][ T30] audit: type=1326 audit(1749352540.354:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f82539 code=0x7fc00000 [ 880.132695][ T5834] usb 5-1: USB disconnect, device number 13 [ 880.907837][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 881.680754][T15009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.689827][T15009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.704742][T15009] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2639'. [ 881.929589][T14994] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 881.937972][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 881.963344][T14994] tipc: Enabled bearer , priority 10 [ 882.068281][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 882.338141][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 882.503232][T15013] fuse: Unknown parameter 'group_id00000000000000000000' [ 882.517064][ T30] audit: type=1326 audit(1749352542.814:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 882.539330][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.851757][ T30] audit: type=1326 audit(1749352542.814:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 882.874196][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.874879][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 882.937840][T10582] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 882.978178][ T30] audit: type=1326 audit(1749352542.814:10472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 883.000958][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 883.009526][ T30] audit: type=1326 audit(1749352542.824:10473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 883.033144][ T30] audit: type=1326 audit(1749352542.824:10474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 883.055338][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.119776][T10582] usb 4-1: config index 0 descriptor too short (expected 47903, got 77) [ 883.127792][T15020] syz_tun: entered allmulticast mode [ 883.173924][T10582] usb 4-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 883.215387][T10582] usb 4-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 883.228161][T10582] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 883.286636][ T30] audit: type=1326 audit(1749352542.874:10475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 883.287352][T15019] syz_tun: left allmulticast mode [ 883.318330][ T30] audit: type=1326 audit(1749352542.874:10476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 883.351073][ T30] audit: type=1326 audit(1749352542.884:10477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 883.411453][T10582] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 883.500159][T10582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.928070][T10582] usb 4-1: Product: syz [ 883.947769][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 884.007743][T10582] usb 4-1: Manufacturer: syz [ 884.017897][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 884.044504][T10582] usb 4-1: SerialNumber: syz [ 884.642825][ T5834] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 884.970620][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 884.977607][ T5834] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 884.985487][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 885.058187][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 885.086543][ T5834] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 885.096171][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 885.135165][ T5834] usb 5-1: Product: syz [ 885.144377][ T5834] usb 5-1: Manufacturer: syz [ 885.154093][ T5834] usb 5-1: SerialNumber: syz [ 885.172675][T15030] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 885.194528][ T5834] usb 5-1: config 0 descriptor?? [ 885.220027][ T5834] pwc: Philips SPC 880NC USB webcam detected. [ 885.508237][ T5834] pwc: Warning: more than 1 configuration available. [ 885.515692][ T5834] pwc: Failed to set LED on/off time (-71) [ 885.534019][ T5834] pwc: send_video_command error -71 [ 885.558763][ T5834] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 885.594393][ T5834] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 885.634815][ T5834] usb 5-1: USB disconnect, device number 14 [ 886.017775][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 886.097882][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 886.161320][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 886.377109][T10582] usb 4-1: USB disconnect, device number 15 [ 886.587961][ T5913] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 886.749336][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 886.765584][ T5913] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 886.785482][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.815202][ T5913] usb 5-1: Product: syz [ 886.824666][ T5913] usb 5-1: Manufacturer: syz [ 886.846750][ T5913] usb 5-1: SerialNumber: syz [ 886.860772][ T5913] usb 5-1: config 0 descriptor?? [ 886.886053][ T5913] gspca_main: sq905-2.14.0 probing 2770:9120 [ 887.038575][T15060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2653'. [ 887.057804][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 887.148001][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 887.418160][ T5913] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 887.426735][ T5913] sq905 5-1:0.0: probe with driver sq905 failed with error -110 [ 887.586071][T15065] syz.4.2651: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 887.586179][T15065] CPU: 1 UID: 0 PID: 15065 Comm: syz.4.2651 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 887.586233][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 887.586259][T15065] Call Trace: [ 887.586269][T15065] [ 887.586279][T15065] dump_stack_lvl+0x189/0x250 [ 887.586321][T15065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.586356][T15065] ? __pfx__printk+0x10/0x10 [ 887.586379][T15065] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 887.586414][T15065] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 887.586441][T15065] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 887.586469][T15065] warn_alloc+0x214/0x310 [ 887.586496][T15065] ? stack_depot_save_flags+0x40/0x900 [ 887.586529][T15065] ? __pfx_warn_alloc+0x10/0x10 [ 887.586557][T15065] ? kasan_save_track+0x4f/0x80 [ 887.586578][T15065] ? xskq_create+0x56/0x170 [ 887.586608][T15065] ? xsk_init_queue+0xb0/0x110 [ 887.586635][T15065] ? xsk_setsockopt+0x43f/0x710 [ 887.586663][T15065] ? do_sock_setsockopt+0x25a/0x3e0 [ 887.586688][T15065] ? __ia32_sys_setsockopt+0x18b/0x220 [ 887.586714][T15065] ? __do_fast_syscall_32+0xb6/0x2b0 [ 887.586735][T15065] ? do_fast_syscall_32+0x34/0x80 [ 887.586765][T15065] __vmalloc_node_range_noprof+0x125/0x12f0 [ 887.586822][T15065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 887.586855][T15065] ? __kasan_kmalloc+0x93/0xb0 [ 887.586879][T15065] vmalloc_user_noprof+0xad/0xf0 [ 887.586903][T15065] ? xskq_create+0xbf/0x170 [ 887.586935][T15065] xskq_create+0xbf/0x170 [ 887.586970][T15065] xsk_init_queue+0xb0/0x110 [ 887.587003][T15065] xsk_setsockopt+0x43f/0x710 [ 887.587030][T15065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 887.587062][T15065] ? __lock_acquire+0xab9/0xd20 [ 887.587113][T15065] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 887.587145][T15065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 887.587172][T15065] do_sock_setsockopt+0x25a/0x3e0 [ 887.587208][T15065] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 887.587238][T15065] ? __fget_files+0x2a/0x420 [ 887.587273][T15065] ? __fget_files+0x3a0/0x420 [ 887.587298][T15065] ? __fget_files+0x2a/0x420 [ 887.587336][T15065] __ia32_sys_setsockopt+0x18b/0x220 [ 887.587374][T15065] __do_fast_syscall_32+0xb6/0x2b0 [ 887.587419][T15065] do_fast_syscall_32+0x34/0x80 [ 887.587445][T15065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 887.587476][T15065] RIP: 0023:0xf7fa8539 [ 887.587499][T15065] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 887.587521][T15065] RSP: 002b:00000000f50a555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 887.587544][T15065] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 887.587561][T15065] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000052 [ 887.587577][T15065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 887.587590][T15065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 887.587606][T15065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 887.587642][T15065] [ 887.608391][T15065] Mem-Info: [ 887.608409][T15065] active_anon:7011 inactive_anon:1 isolated_anon:0 [ 887.608409][T15065] active_file:19528 inactive_file:4010 isolated_file:0 [ 887.608409][T15065] unevictable:768 dirty:218 writeback:0 [ 887.608409][T15065] slab_reclaimable:11042 slab_unreclaimable:106650 [ 887.608409][T15065] mapped:34194 shmem:1375 pagetables:1299 [ 887.608409][T15065] sec_pagetables:0 bounce:0 [ 887.608409][T15065] kernel_misc_reclaimable:0 [ 887.608409][T15065] free:1331212 free_pcp:20868 free_cma:0 [ 887.608467][T15065] Node 0 active_anon:28044kB inactive_anon:4kB active_file:78112kB inactive_file:15904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136776kB dirty:872kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12696kB pagetables:5068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 887.608523][T15065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 887.608577][T15065] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.608639][T15065] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 887.608689][T15065] Node 0 DMA32 free:1429120kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27724kB inactive_anon:4kB active_file:78020kB inactive_file:14392kB unevictable:1536kB writepending:872kB present:3129332kB managed:2561044kB mlocked:0kB bounce:0kB free_pcp:44220kB local_pcp:24660kB free_cma:0kB [ 887.608755][T15065] lowmem_reserve[]: 0 0 1 1 1 [ 887.608802][T15065] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:260kB inactive_anon:0kB active_file:92kB inactive_file:1512kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 887.608864][T15065] lowmem_reserve[]: 0 0 0 0 0 [ 887.608912][T15065] Node 1 Normal free:3880352kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:39212kB local_pcp:15968kB free_cma:0kB [ 887.608978][T15065] lowmem_reserve[]: 0 0 0 0 0 [ 887.609024][T15065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 887.609169][T15065] Node 0 DMA32: 2354*4kB (UME) 717*8kB (UME) 1010*16kB (UME) 1023*32kB (UME) 431*64kB (UME) 151*128kB (UME) 95*256kB (UM) 43*512kB (UM) 30*1024kB (UM) 12*2048kB (UM) 297*4096kB (UM) = 1429104kB [ 887.609374][T15065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 887.609506][T15065] Node 1 Normal: 7*4kB (UME) 9*8kB (UME) 11*16kB (UME) 8*32kB (UME) 9*64kB (UME) 5*128kB (UME) 11*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (UM) = 3880404kB [ 887.609710][T15065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.609729][T15065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 887.609748][T15065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.609766][T15065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 887.609783][T15065] 24915 total pagecache pages [ 887.609794][T15065] 6 pages in swap cache [ 887.609803][T15065] Free swap = 124868kB [ 887.609813][T15065] Total swap = 124996kB [ 887.609823][T15065] 2097051 pages RAM [ 887.609833][T15065] 0 pages HighMem/MovableOnly [ 887.609843][T15065] 424684 pages reserved [ 887.609852][T15065] 0 pages cma reserved [ 887.688397][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 887.688431][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 887.688504][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 887.811812][T15065] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2651'. [ 888.097760][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 888.178013][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 889.147741][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 889.227903][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 889.711840][T15077] syz_tun: entered allmulticast mode [ 890.121628][T15086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.122064][T15086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.130792][T15086] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2659'. [ 890.187783][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 890.257842][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 890.990435][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.086053][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.102997][T15102] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 891.217751][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 891.279314][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.297941][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 891.367849][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.257754][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 892.308091][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'. [ 892.347963][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 892.552489][T13505] usb 5-1: USB disconnect, device number 15 [ 892.603224][T15112] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 892.641959][T15111] gretap2: entered promiscuous mode [ 892.673535][T15111] gretap2: entered allmulticast mode [ 892.935134][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 892.935153][ T30] audit: type=1326 audit(1749352553.234:10489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15123 comm="syz.0.2668" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x0 [ 893.277939][ T5913] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 893.297887][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 893.377880][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 893.450991][ T5913] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 893.461846][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.488795][ T5913] usb 1-1: config 0 descriptor?? [ 893.722679][ T5913] kaweth 1-1:0.0: Firmware present in device. [ 893.864066][T15131] FAULT_INJECTION: forcing a failure. [ 893.864066][T15131] name failslab, interval 1, probability 0, space 0, times 0 [ 893.878960][T15131] CPU: 0 UID: 0 PID: 15131 Comm: syz.3.2669 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 893.878990][T15131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 893.879004][T15131] Call Trace: [ 893.879013][T15131] [ 893.879023][T15131] dump_stack_lvl+0x189/0x250 [ 893.879060][T15131] ? __pfx____ratelimit+0x10/0x10 [ 893.879093][T15131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.879125][T15131] ? __pfx__printk+0x10/0x10 [ 893.879156][T15131] ? __pfx___might_resched+0x10/0x10 [ 893.879182][T15131] should_fail_ex+0x414/0x560 [ 893.879215][T15131] ? v4l2_ctrl_new+0x9d0/0x1780 [ 893.879233][T15131] should_failslab+0xa8/0x100 [ 893.879259][T15131] __kvmalloc_node_noprof+0x161/0x5f0 [ 893.879285][T15131] ? v4l2_ctrl_new+0x9d0/0x1780 [ 893.879311][T15131] v4l2_ctrl_new+0x9d0/0x1780 [ 893.879348][T15131] v4l2_ctrl_new_std+0x24d/0x2f0 [ 893.879383][T15131] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 893.879412][T15131] ? rcu_is_watching+0x15/0xb0 [ 893.879431][T15131] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 893.879473][T15131] ? media_request_object_init+0x8c/0xe0 [ 893.879496][T15131] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0 [ 893.879533][T15131] vicodec_open+0x256/0xc00 [ 893.879571][T15131] v4l2_open+0x20f/0x360 [ 893.879599][T15131] chrdev_open+0x4cc/0x5e0 [ 893.879626][T15131] ? __pfx_chrdev_open+0x10/0x10 [ 893.879659][T15131] ? __pfx_chrdev_open+0x10/0x10 [ 893.879688][T15131] do_dentry_open+0xdf3/0x1970 [ 893.879734][T15131] vfs_open+0x3b/0x340 [ 893.879758][T15131] ? path_openat+0x2ecd/0x3830 [ 893.879792][T15131] path_openat+0x2ee5/0x3830 [ 893.879820][T15131] ? arch_stack_walk+0xfc/0x150 [ 893.879879][T15131] ? __pfx_path_openat+0x10/0x10 [ 893.879907][T15131] ? do_fast_syscall_32+0x34/0x80 [ 893.879927][T15131] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 893.879974][T15131] do_filp_open+0x1fa/0x410 [ 893.880003][T15131] ? __lock_acquire+0xab9/0xd20 [ 893.880034][T15131] ? __pfx_do_filp_open+0x10/0x10 [ 893.880089][T15131] ? _raw_spin_unlock+0x28/0x50 [ 893.880117][T15131] ? alloc_fd+0x64c/0x6c0 [ 893.880153][T15131] do_sys_openat2+0x121/0x1c0 [ 893.880184][T15131] ? __pfx_do_sys_openat2+0x10/0x10 [ 893.880216][T15131] ? ksys_write+0x22a/0x250 [ 893.880245][T15131] __ia32_compat_sys_openat+0x131/0x160 [ 893.880282][T15131] __do_fast_syscall_32+0xb6/0x2b0 [ 893.880304][T15131] ? lockdep_hardirqs_on+0x9c/0x150 [ 893.880340][T15131] do_fast_syscall_32+0x34/0x80 [ 893.880361][T15131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 893.880386][T15131] RIP: 0023:0xf70ee539 [ 893.880425][T15131] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 893.880445][T15131] RSP: 002b:00000000f50de100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 893.880468][T15131] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50de150 [ 893.880483][T15131] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7452ff4 [ 893.880496][T15131] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 893.880509][T15131] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 893.880522][T15131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 893.880553][T15131] [ 894.308927][T15126] FAULT_INJECTION: forcing a failure. [ 894.308927][T15126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.333731][T15133] netlink: 'syz.4.2670': attribute type 1 has an invalid length. [ 894.341672][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 894.349729][ T5913] kaweth 1-1:0.0: Statistics collection: 0 [ 894.371350][ T5913] kaweth 1-1:0.0: Multicast filter limit: 0 [ 894.377389][ T5913] kaweth 1-1:0.0: MTU: 0 [ 894.400240][T15126] CPU: 1 UID: 0 PID: 15126 Comm: syz.0.2668 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 894.400271][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 894.400284][T15126] Call Trace: [ 894.400292][T15126] [ 894.400301][T15126] dump_stack_lvl+0x189/0x250 [ 894.400338][T15126] ? __pfx____ratelimit+0x10/0x10 [ 894.400419][T15126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 894.400452][T15126] ? __pfx__printk+0x10/0x10 [ 894.400488][T15126] should_fail_ex+0x414/0x560 [ 894.400522][T15126] _copy_to_user+0x31/0xb0 [ 894.400548][T15126] simple_read_from_buffer+0xe1/0x170 [ 894.400577][T15126] proc_fail_nth_read+0x1df/0x250 [ 894.400608][T15126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 894.400638][T15126] ? rw_verify_area+0x258/0x650 [ 894.400656][T15126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 894.400684][T15126] vfs_read+0x1fd/0x980 [ 894.400711][T15126] ? __pfx___mutex_lock+0x10/0x10 [ 894.400734][T15126] ? __pfx_vfs_read+0x10/0x10 [ 894.400756][T15126] ? __fget_files+0x2a/0x420 [ 894.400785][T15126] ? __fget_files+0x3a0/0x420 [ 894.400808][T15126] ? __fget_files+0x2a/0x420 [ 894.400842][T15126] ksys_read+0x145/0x250 [ 894.400866][T15126] ? __pfx_ksys_read+0x10/0x10 [ 894.400889][T15126] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 894.400911][T15126] ? lockdep_hardirqs_on+0x9c/0x150 [ 894.400946][T15126] __do_fast_syscall_32+0xb6/0x2b0 [ 894.400969][T15126] ? lockdep_hardirqs_on+0x9c/0x150 [ 894.401005][T15126] do_fast_syscall_32+0x34/0x80 [ 894.401027][T15126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.401052][T15126] RIP: 0023:0xf7f82539 [ 894.401070][T15126] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 894.401088][T15126] RSP: 002b:00000000f5085590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 894.401110][T15126] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5085620 [ 894.401124][T15126] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 894.401137][T15126] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 894.401149][T15126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 894.401161][T15126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 894.401193][T15126] [ 894.467958][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 894.480992][ T5913] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 894.948153][T13505] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 895.377752][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 895.530401][ T5913] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 895.542696][T13505] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 895.552760][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 895.568252][T13505] usb 5-1: config 0 interface 0 has no altsetting 0 [ 895.704515][ T5913] usb 1-1: USB disconnect, device number 101 [ 896.127324][T13505] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 896.142586][T13505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.163538][T13505] usb 5-1: Product: syz [ 896.176543][T13505] usb 5-1: Manufacturer: syz [ 896.186939][T13505] usb 5-1: SerialNumber: syz [ 896.216604][T13505] usb 5-1: config 0 descriptor?? [ 896.245230][T13505] usb 5-1: selecting invalid altsetting 0 [ 896.417970][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 896.577843][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 896.665094][ T5913] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 896.791601][T15158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2675'. [ 896.888761][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 896.900628][ T5913] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.930043][ T5913] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.956519][ T5913] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 896.996784][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.120968][ T5913] hub 1-1:4.0: USB hub found [ 897.369770][T15163] FAULT_INJECTION: forcing a failure. [ 897.369770][T15163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.458063][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 897.504773][T15163] CPU: 0 UID: 0 PID: 15163 Comm: syz.3.2677 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 897.504806][T15163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 897.504819][T15163] Call Trace: [ 897.504828][T15163] [ 897.504838][T15163] dump_stack_lvl+0x189/0x250 [ 897.504875][T15163] ? __pfx____ratelimit+0x10/0x10 [ 897.504908][T15163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.504940][T15163] ? __pfx__printk+0x10/0x10 [ 897.504963][T15163] ? __might_fault+0xb0/0x130 [ 897.504996][T15163] should_fail_ex+0x414/0x560 [ 897.505038][T15163] _copy_from_user+0x2d/0xb0 [ 897.505062][T15163] kstrtouint_from_user+0xc4/0x170 [ 897.505096][T15163] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 897.505145][T15163] proc_fail_nth_write+0x88/0x240 [ 897.505170][T15163] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 897.505202][T15163] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 897.505231][T15163] vfs_write+0x27b/0xa90 [ 897.505261][T15163] ? __pfx_vfs_write+0x10/0x10 [ 897.505284][T15163] ? __fget_files+0x2a/0x420 [ 897.505312][T15163] ? __fget_files+0x3a0/0x420 [ 897.505335][T15163] ? __fget_files+0x2a/0x420 [ 897.505369][T15163] ksys_write+0x145/0x250 [ 897.505393][T15163] ? __pfx_ksys_write+0x10/0x10 [ 897.505416][T15163] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 897.505438][T15163] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.505472][T15163] __do_fast_syscall_32+0xb6/0x2b0 [ 897.505494][T15163] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.505530][T15163] do_fast_syscall_32+0x34/0x80 [ 897.505552][T15163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 897.505577][T15163] RIP: 0023:0xf70ee539 [ 897.505595][T15163] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 897.505638][T15163] RSP: 002b:00000000f50de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 897.505662][T15163] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50de620 [ 897.505677][T15163] RDX: 0000000000000001 RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 897.505690][T15163] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 897.505703][T15163] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 897.505715][T15163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 897.505748][T15163] [ 897.736960][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.743660][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 898.031937][T13505] usb 5-1: USB disconnect, device number 16 [ 898.265775][T15171] binder: 15168:15171 ioctl 40284504 80000d00 returned -22 [ 898.340320][T15176] syz_tun: entered allmulticast mode [ 898.472583][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.497945][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 898.559351][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.663752][ T5899] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 898.701437][T15172] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 20000 - 0 [ 898.710997][T15172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 898.736179][T15172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 898.751461][T15172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 898.788856][T15172] geneve2: entered promiscuous mode [ 898.794577][T15172] geneve2: entered allmulticast mode [ 898.812076][ T5913] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 898.817948][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 898.862277][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 898.868541][ T5913] usb 1-1: USB disconnect, device number 102 [ 898.881067][T15172] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 20000 - 0 [ 898.891093][T15172] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 898.905791][T15172] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 898.916207][T15172] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 898.926550][ T5899] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 898.964554][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.359789][ T5899] usb 5-1: Product: syz [ 899.371259][ T5899] usb 5-1: Manufacturer: syz [ 899.377334][ T5899] usb 5-1: SerialNumber: syz [ 899.395694][ T5899] usb 5-1: config 0 descriptor?? [ 899.418961][ T5899] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 899.430245][ T5899] usb 5-1: setting power ON [ 899.537914][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 899.655433][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 899.690066][T15175] syz_tun: left allmulticast mode [ 899.765051][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 899.797459][ T5899] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 899.809145][ T5899] usb 5-1: media controller created [ 899.858008][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 899.929263][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.967257][ T5899] usb 5-1: selecting invalid altsetting 6 [ 899.983803][ T5899] usb 5-1: digital interface selection failed (-22) [ 899.996171][ T5899] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 900.009552][ T5899] usb 5-1: setting power OFF [ 900.015204][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 900.033294][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 900.045565][ T5899] (NULL device *): no alternate interface [ 900.113739][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 900.139294][ T5899] usb 5-1: USB disconnect, device number 17 [ 900.577771][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 900.854801][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 900.897891][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 901.617735][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 901.860776][T15218] netlink: 'syz.2.2693': attribute type 1 has an invalid length. [ 901.873280][T15218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.887205][T15218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.937883][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 902.146512][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2694'. [ 902.217450][ T31] INFO: task kworker/0:5:5925 blocked for more than 144 seconds. [ 902.326789][ T31] Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 [ 902.338838][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 902.352613][ T31] task:kworker/0:5 state:D stack:21240 pid:5925 tgid:5925 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 902.376315][ T31] Workqueue: usb_hub_wq hub_event [ 902.412761][ T31] Call Trace: [ 902.462953][ T31] [ 902.471489][ T31] __schedule+0x16f5/0x4d00 [ 902.476351][ T31] ? bus_for_each_drv+0x251/0x2e0 [ 902.486527][ T31] ? device_add+0x7b6/0xb50 [ 902.492167][ T31] ? ret_from_fork+0x3f9/0x770 [ 902.497281][ T31] ? schedule+0x165/0x360 [ 902.506459][ T31] ? __pfx___schedule+0x10/0x10 [ 902.516576][ T31] ? schedule+0x91/0x360 [ 902.534736][ T31] schedule+0x165/0x360 [ 902.550110][ T31] schedule_timeout+0x9a/0x270 [ 902.567848][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 902.577395][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 902.615689][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 902.635473][ T31] ? wait_for_completion+0x267/0x5d0 [ 902.658029][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 902.839880][ T31] wait_for_completion+0x2bf/0x5d0 [ 902.845240][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 902.851109][ T31] i2c_del_adapter+0x581/0x6e0 [ 902.858136][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 902.863961][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 902.874967][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 902.885192][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 902.904898][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 902.917941][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 902.928231][ T31] usb_probe_interface+0x641/0xbc0 [ 902.941274][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 902.960118][ T31] really_probe+0x26a/0x9a0 [ 902.976594][ T31] __driver_probe_device+0x18c/0x2f0 [ 902.987875][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 903.081331][ T31] driver_probe_device+0x4f/0x430 [ 903.103197][ T31] __device_attach_driver+0x2ce/0x530 [ 903.119711][ T31] bus_for_each_drv+0x251/0x2e0 [ 903.128555][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 903.142721][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 903.153713][ T31] __device_attach+0x2b8/0x400 [ 903.165242][ T31] ? __pfx___device_attach+0x10/0x10 [ 903.268050][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 903.282358][ T31] bus_probe_device+0x185/0x260 [ 903.293316][ T31] device_add+0x7b6/0xb50 [ 903.307454][ T31] usb_set_configuration+0x1a87/0x20e0 [ 903.479570][ T31] usb_generic_driver_probe+0x8d/0x150 [ 903.548704][ T31] usb_probe_device+0x1c1/0x390 [ 903.572936][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 903.589017][ T31] really_probe+0x26a/0x9a0 [ 903.594811][ T31] __driver_probe_device+0x18c/0x2f0 [ 903.605066][ T31] driver_probe_device+0x4f/0x430 [ 903.613896][ T31] __device_attach_driver+0x2ce/0x530 [ 903.624045][ T31] bus_for_each_drv+0x251/0x2e0 [ 903.639601][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 903.658046][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 903.668454][ T31] __device_attach+0x2b8/0x400 [ 903.680226][ T31] ? __pfx___device_attach+0x10/0x10 [ 903.697871][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 903.705030][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 903.711745][ T31] bus_probe_device+0x185/0x260 [ 903.716732][ T31] device_add+0x7b6/0xb50 [ 903.723303][ T31] usb_new_device+0xa39/0x16c0 [ 903.728414][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 903.735158][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 903.743540][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 903.751100][ T31] hub_event+0x2941/0x4a00 [ 903.757343][ T31] ? __pfx_hub_event+0x10/0x10 [ 903.764648][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 903.773684][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 903.781501][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 903.793785][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 903.799898][ T31] process_scheduled_works+0xae1/0x17b0 [ 903.805811][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 903.828741][ T31] worker_thread+0x8a0/0xda0 [ 903.837603][ T31] kthread+0x70e/0x8a0 [ 903.843432][ T31] ? __pfx_worker_thread+0x10/0x10 [ 903.849044][ T31] ? __pfx_kthread+0x10/0x10 [ 903.853840][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 903.859665][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 903.865082][ T31] ? __pfx_kthread+0x10/0x10 [ 903.870239][ T31] ret_from_fork+0x3f9/0x770 [ 903.875089][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 903.923308][ T31] ? __switch_to_asm+0x39/0x70 [ 903.934191][ T31] ? __switch_to_asm+0x33/0x70 [ 903.940225][ T31] ? __pfx_kthread+0x10/0x10 [ 903.945023][ T31] ret_from_fork_asm+0x1a/0x30 [ 903.950299][ T31] [ 903.953735][ T31] [ 903.953735][ T31] Showing all locks held in the system: [ 903.966415][ T31] 1 lock held by khungtaskd/31: [ 903.971722][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 903.991309][ T31] 2 locks held by getty/5594: [ 903.996183][ T31] #0: ffff8880347e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 904.007245][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 904.022487][ T31] 5 locks held by kworker/0:5/5925: [ 904.028226][ T31] #0: ffff888021ed4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 904.041001][ T31] #1: ffffc90004927bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 904.075449][ T31] #2: ffff88802828f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 904.087393][ T31] #3: ffff88807ad57198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 904.103850][ T31] #4: ffff88803043d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 904.118193][ T31] 4 locks held by udevd/6925: [ 904.123025][ T31] #0: ffff888027e3ce80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 904.132848][ T31] #1: ffff888059e0cc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 904.142471][ T31] #2: ffff888079933c38 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 904.152182][ T31] #3: ffff88807ad57198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 904.161740][ T31] [ 904.164122][ T31] ============================================= [ 904.164122][ T31] [ 904.172838][ T31] NMI backtrace for cpu 1 [ 904.172855][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 904.172880][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 904.172893][ T31] Call Trace: [ 904.172902][ T31] [ 904.172911][ T31] dump_stack_lvl+0x189/0x250 [ 904.172947][ T31] ? __wake_up_klogd+0xd9/0x110 [ 904.172975][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 904.173006][ T31] ? __pfx__printk+0x10/0x10 [ 904.173043][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 904.173076][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 904.173100][ T31] ? _printk+0xcf/0x120 [ 904.173127][ T31] ? __pfx__printk+0x10/0x10 [ 904.173152][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 904.173183][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 904.173214][ T31] watchdog+0xfee/0x1030 [ 904.173245][ T31] ? watchdog+0x1de/0x1030 [ 904.173281][ T31] kthread+0x70e/0x8a0 [ 904.173307][ T31] ? __pfx_watchdog+0x10/0x10 [ 904.173340][ T31] ? __pfx_kthread+0x10/0x10 [ 904.173366][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 904.173396][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 904.173426][ T31] ? __pfx_kthread+0x10/0x10 [ 904.173451][ T31] ret_from_fork+0x3f9/0x770 [ 904.173484][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 904.173519][ T31] ? __switch_to_asm+0x39/0x70 [ 904.173539][ T31] ? __switch_to_asm+0x33/0x70 [ 904.173559][ T31] ? __pfx_kthread+0x10/0x10 [ 904.173584][ T31] ret_from_fork_asm+0x1a/0x30 [ 904.173621][ T31] [ 904.173630][ T31] Sending NMI from CPU 1 to CPUs 0: [ 904.333108][ C0] NMI backtrace for cpu 0 [ 904.333125][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 904.333147][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 904.333158][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 904.333185][ C0] RIP: 0010:trace_kfree_skb+0x1/0x200 [ 904.333211][ C0] Code: 48 89 df 5b e9 c0 39 21 00 e8 2b 18 77 f8 5b c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 48 89 cb 89 d5 49 89 f6 49 89 ff e8 f6 [ 904.333227][ C0] RSP: 0018:ffffc90000127970 EFLAGS: 00000293 [ 904.333242][ C0] RAX: ffffffff8945cffe RBX: ffff888033d3dc80 RCX: 0000000000000000 [ 904.333255][ C0] RDX: 0000000000000002 RSI: ffffffff8adbc5c7 RDI: ffff888033d3dc80 [ 904.333268][ C0] RBP: 00000000fffd0002 R08: ffff888033d3dd67 R09: 1ffff110067a7bac [ 904.333280][ C0] R10: dffffc0000000000 R11: ffffed10067a7bad R12: ffff888033d3dd64 [ 904.333294][ C0] R13: ffff888062e6cd80 R14: 0000000000000002 R15: 0000000000000000 [ 904.333306][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 904.333321][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 904.333333][ C0] CR2: 0000000080202018 CR3: 000000000df38000 CR4: 00000000003526f0 [ 904.333348][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 904.333359][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 904.333370][ C0] Call Trace: [ 904.333377][ C0] [ 904.333386][ C0] sk_skb_reason_drop+0xe1/0x170 [ 904.333411][ C0] ieee80211_iface_work+0x997/0xfe0 [ 904.333434][ C0] cfg80211_wiphy_work+0x2df/0x460 [ 904.333454][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 904.333482][ C0] process_scheduled_works+0xae1/0x17b0 [ 904.333523][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 904.333565][ C0] worker_thread+0x8a0/0xda0 [ 904.333594][ C0] kthread+0x70e/0x8a0 [ 904.333615][ C0] ? __pfx_worker_thread+0x10/0x10 [ 904.333630][ C0] ? __pfx_kthread+0x10/0x10 [ 904.333651][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 904.333676][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 904.333702][ C0] ? __pfx_kthread+0x10/0x10 [ 904.333722][ C0] ret_from_fork+0x3f9/0x770 [ 904.333748][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 904.333774][ C0] ? __switch_to_asm+0x39/0x70 [ 904.333792][ C0] ? __switch_to_asm+0x33/0x70 [ 904.333809][ C0] ? __pfx_kthread+0x10/0x10 [ 904.333828][ C0] ret_from_fork_asm+0x1a/0x30 [ 904.333855][ C0] [ 904.334310][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 904.587808][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 904.599298][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 904.609363][ T31] Call Trace: [ 904.612651][ T31] [ 904.615590][ T31] dump_stack_lvl+0x99/0x250 [ 904.620219][ T31] ? __asan_memcpy+0x40/0x70 [ 904.624833][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 904.630048][ T31] ? __pfx__printk+0x10/0x10 [ 904.634654][ T31] panic+0x2db/0x790 [ 904.638612][ T31] ? __pfx_panic+0x10/0x10 [ 904.643041][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 904.648857][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 904.654238][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 904.660405][ T31] watchdog+0x102d/0x1030 [ 904.664748][ T31] ? watchdog+0x1de/0x1030 [ 904.669181][ T31] kthread+0x70e/0x8a0 [ 904.673264][ T31] ? __pfx_watchdog+0x10/0x10 [ 904.677971][ T31] ? __pfx_kthread+0x10/0x10 [ 904.682600][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 904.687822][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 904.693056][ T31] ? __pfx_kthread+0x10/0x10 [ 904.697667][ T31] ret_from_fork+0x3f9/0x770 [ 904.702295][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 904.707422][ T31] ? __switch_to_asm+0x39/0x70 [ 904.712424][ T31] ? __switch_to_asm+0x33/0x70 [ 904.718060][ T31] ? __pfx_kthread+0x10/0x10 [ 904.722664][ T31] ret_from_fork_asm+0x1a/0x30 [ 904.727456][ T31] [ 904.730841][ T31] Kernel Offset: disabled [ 904.735205][ T31] Rebooting in 86400 seconds..