last executing test programs: 10.872810624s ago: executing program 0 (id=2643): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) socket$inet6(0xa, 0x3, 0x7) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd6000000010902"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r5 = syz_io_uring_setup(0x800000cf, &(0x7f0000000440)={0x0, 0x0, 0x4, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/60, 0x3c}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0xb, 0x0, &(0x7f00000001c0)) 8.57204897s ago: executing program 1 (id=2653): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0x8c, 0x0, 0x4) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000000c0)={0x1, 0x2}, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x9, 0x6, 0xfc, 0x9, 0x2, "f70020000300000000001d00", '\x00', "030404e8", "fd000001", ["50d5b600000000008000", "150000010000000100000010", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000180)={0x7, 0x5, 0x5, 0x3ae9, 0x1c6, 0x20000004, "02f800", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x0, @void, @value}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) getsockopt$inet6_int(r3, 0x29, 0x24, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="8500000062000000660000000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x4, 0x56, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 7.602128434s ago: executing program 0 (id=2658): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="00032abd7000fcdbdf253a00000008000300", @ANYRES32=r2, @ANYBLOB="31005b003d5086eb327a66e7175e57b06f8b2bd0465bafd0c47deb508da8ab20a25c1d4604b0415d3d65eca1e8c094aeea00000056005b000e3bbd41b20ef825e541fbff9a7da9a6f7cd875212b1007901c6c7aadc305a66077949ff8749464a5a31a5344391984ec50283400d4c3ead2732b497abc78384ce3c0bb2299d60c31a1d40bfaa2ae9a503670000"], 0xa8}, 0x1, 0x0, 0x0, 0xc000}, 0xd4) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x48}}, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) utimensat(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) (async) r4 = io_uring_setup(0x3642, &(0x7f0000000400)={0x0, 0xeb8a, 0x1000, 0xffffffff, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000700)=[{0x0}], 0x1) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 7.431195276s ago: executing program 3 (id=2659): syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000C000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x41, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x5083}) io_setup(0x6, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000100)="00010000000100000044", 0xa, 0x9, 0x0, 0x4}]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec3b32cdb18345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706050000001d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918ebd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53892cf2b3f41d58e08bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e80200000000000000279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be249975f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb24b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8cc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf977eaf37d043c407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed89008db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6903771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512ae8be2f86b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fc4f4097c2a5189b10c1776713f78193c6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2814cb02511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b38f07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34e77bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f0015f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x27}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getown(r2, 0x9) openat$misdntimer(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0xf4ef12bda94b3a, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0xea1085a4413175e2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffe00}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa0dbb000000000000"]) 7.35096221s ago: executing program 0 (id=2660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) nanosleep(&(0x7f0000000300), &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x40047452, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$media(0x0, 0x0, 0x101d01) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) dup(r5) ftruncate(0xffffffffffffffff, 0xc17a) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x80010, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 7.145741382s ago: executing program 2 (id=2662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) syz_usb_connect(0x0, 0x62, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x300000b, 0x11, r2, 0x0) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x9, 0x1}}, 0x30) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x1000001c}) truncate(0x0, 0xfe0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.071211841s ago: executing program 1 (id=2663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000780)='net/tcp6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x700) 6.889837456s ago: executing program 3 (id=2664): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'macvtap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x800800, &(0x7f0000000540)={0x11, 0xb, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14) 6.882536038s ago: executing program 1 (id=2665): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x401, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x4, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000060036000b"], 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) 6.649774325s ago: executing program 3 (id=2667): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090251910101000000090400001602020000052406000005240000000d240f010000000000000000000905810340000000000905820200000000000905030240"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0xfd, 0x67b}]}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x34, &(0x7f0000000000)=0x1, 0x59) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 6.25864693s ago: executing program 2 (id=2669): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) socket$inet6(0xa, 0x3, 0x7) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd6000000010902"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r5 = syz_io_uring_setup(0x800000cf, &(0x7f0000000440)={0x0, 0x0, 0x4, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/60, 0x3c}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0xb, 0x0, &(0x7f00000001c0)) 6.079279916s ago: executing program 1 (id=2670): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$TIOCNXCL(r2, 0x540d) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000280)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xf, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0xa, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xf7ffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0xfffffffd, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @remote}}, 0xfffffff7, 0x200, 0x0, 0xd, 0x5}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000004c0)={r7, 0x2, 0x2, 0x40, 0x4, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000440)={r8, 0x9}, 0x8) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x4470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 4.756348188s ago: executing program 0 (id=2674): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0xbad, 0xffc, 0xb44, 0x9, 0x9, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESDEC=r2, @ANYRES32, @ANYRES8, @ANYRES16=r0, @ANYRES64=r2, @ANYRES32=r2, @ANYRES8=r1, @ANYRES64=r0], 0x50) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0xfffffdfb) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b00130000000800010000000000"], 0x30}}, 0x40) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) sendto$inet(r4, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x7, 0x6, 0x0, 0xc78}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) 4.733091204s ago: executing program 2 (id=2675): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x5}]}) waitid(0x0, r3, 0x0, 0x8, 0x0) (async) waitid(0x0, r3, 0x0, 0x8, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (async) r10 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r10, 0x80045017, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r11, 0x400c4150, &(0x7f00000004c0)={0x0, &(0x7f00000003c0)="a5", 0x1}) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r11, 0x400c4150, &(0x7f00000004c0)={0x0, &(0x7f00000003c0)="a5", 0x1}) ioctl$SNDCTL_DSP_GETODELAY(r10, 0x80045017, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) sched_setaffinity(r12, 0x8, &(0x7f0000000300)=0x2) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 4.655320815s ago: executing program 4 (id=2676): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x800, 0xbbbe, 0x0, 0x18, 0x0, {0x0, 0x0, 0x1}, {0x7, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 4.364184946s ago: executing program 4 (id=2677): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x78) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x7e, 0x8, 0x8, 0x100b49, 0x0, 0x8, 0x8, 0x1}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) gettid() socket$packet(0x11, 0x59e749dad93445d, 0x300) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000206010200000000000000000100000005fa0300000000000900020073797a31"], 0x28}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007003219002bfd000000000000000000af1e4ccfb7b3cad800000800", [0x0, 0x2000000000001]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3, 0xcccccccc}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ptrace(0x10, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000a00)={&(0x7f00000000c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf25080000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9c000280980003801400018004000300040003000600020027000000100001800900020040242d2a000000001400018004000300060002003a00000004000300180001800b000200405b7b2a2a5c00000800010002000000040001801c00018017000200637075616363742e75736167655f7573657200001800018008000200b0502d000800010005000000040003000c00018008000100fcffffff14000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="340001801400020076238120565f366c616e000000c017351f721ce900000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d72656730000000000000000000"], 0x144}, 0x1, 0x0, 0x0, 0x20024040}, 0x4004880) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 3.987402348s ago: executing program 1 (id=2678): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/fib_trie\x00') r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000300)=0x6) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000240)=""/98, 0x62}], 0x3) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000400)=0xfffffffd) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x7, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003904000000000000000040000000", @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) r11 = syz_io_uring_setup(0x88f, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000480)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r11, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket(0x10, 0x803, 0x0) 3.836754892s ago: executing program 3 (id=2679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08001f00090080aa"], 0x44}}, 0x8000) 3.717231983s ago: executing program 0 (id=2680): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1, 0x2000000}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48) 3.668306977s ago: executing program 3 (id=2681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x7f) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x4}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x1, {0x0, r6}}) (async) io_uring_enter(r3, 0x48e9, 0x225e, 0x2, 0x0, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, r1, 0xe3034000) (async, rerun: 64) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 64) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r7, 0x0) (async) futex(&(0x7f000000cffc), 0x1, 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (rerun: 64) 3.607081924s ago: executing program 2 (id=2682): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406316, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffefa, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.462365625s ago: executing program 0 (id=2683): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() (fail_nth: 2) 3.149835532s ago: executing program 1 (id=2684): r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffc04]}, 0x8, 0xc0800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f00000001c0)={0x2, 0x0, 0x2}, 0xc) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe9) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000000c0)={0x8, @pix={0x0, 0x0, 0x31363553, 0x0, 0x0, 0x0, 0x25}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0x2]}}) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x4) write$binfmt_register(0xffffffffffffffff, &(0x7f00000006c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus-usb/00#/00\\\x00\xd552\xa2\x957A:\xe9\xa4[\xa8\x1f\x1d\xc3\xcf\xaez7R\xa4\x88\xd8\xd4\xba|\x87\x02\xab\xa8\xf2.\xd4J\xd1^\xb3/k\xc6*\x96\xd3\x184\x11\xabk\xd0}\x12HO\x83\xce\x15D\xe5{t\xe5XV\x0f\x0f\"DTL7\x80\\$\xa9\xf6\x9d\x0e1\xb7\x05\xd3\xc2\xdf)3|k\xa9\xee8K\xc3\x13\xdeC}J\xa3\x15W\xc1pd\xa8x\xa6q\xfc\xc9Q\xcd\xc9\xf0+n\xe4\x81\xd8\x9a1\x0e\xc3\x1c\xb6;x3\xae\xb9\t\xae\xe7\xcb\x8c\xd4\x97\vTPw\x9c\xc0W\x03N\xab\xf8~Y\xc8\xc1\x1b\x8b\xba8\xdct\xe7\xeey\x864\x90\x03`\bx\xe5\xc2\xca\x88\'\xceBZ\xe6\xa0|', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0', 0x3a, [0x50]}, 0x104) mmap(&(0x7f0000975000/0xd000)=nil, 0xd000, 0x2, 0x4000010, 0xffffffffffffffff, 0xfbe1f000) move_pages(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000454000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYRES64=r0], 0x98}, 0x1, 0x0, 0x0, 0x989923489c41b53f}, 0x200c0000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x58, 0x0, 0x6, 0x0, &(0x7f00000002c0)="f722cb41346e4799f4316950fb766fecc6406339a9493f8a7026690f6e1e0bf78a44ded2bb9d01fc6e0c2b3e05ca2a4ad24d89b9f0fdf41322ce6ba0343d0d384e3c21b9c045ce63cee5f87e67bdcc33477599a3041da57fcae3c01d34ab9ab73e7f45ebe462b8f6db9d8f28e0384dc378896018da52f56972218ef3bd921aa8f5d7eab3d0a13b8b03eb82974a0dfd51efb02e124f6f6932ae73399401cf39f3302769ed7a300a0d8b31e78af503d329878dc49710f800dbea51cd5db1233f9b20df4000fd1f659a3788b3cc0462", 0x7fffffff, 0x0, 0x1, {0x1}}) write(r4, &(0x7f0000000240)="9c1467cbfb06d55d1e8106345a6d34a6482be6a4d5b751b0171a37e58e8007a5f5140629a669", 0x26) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYRES16=r7, @ANYBLOB="8b707492c6408aeffb77426c141ef8473f6af96fdb7c5f7ff670ce5216270460bf5e3f8400c6587e2c2573ce40f4a98df873655d0dd78253d76348d8a1787444065b77817b93d8a407cb83d87cf00656aa7f287746259450fbeee804d35f78159481c8055e8c6d867dad87e6", @ANYRES32=0x0], 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 3.148508895s ago: executing program 2 (id=2685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) nanosleep(&(0x7f0000000300), &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$media(0x0, 0x0, 0x101d01) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) dup(r3) ftruncate(0xffffffffffffffff, 0xc17a) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x80010, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 2.311060737s ago: executing program 3 (id=2686): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) socket$inet6(0xa, 0x3, 0x7) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd6000000010902"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) syz_io_uring_setup(0x800000cf, &(0x7f0000000440)={0x0, 0x0, 0x4, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0xb, 0x0, &(0x7f00000001c0)) 1.871622354s ago: executing program 4 (id=2687): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x0, 0x9, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6, 0xab, 0x2}, {0xe, 0x2, 0x4, 0x9}, {0xfff7, 0x3, 0x3, 0x7a9}]}) r3 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f00000000c0)={0x2, 0x3, 0x8}) connect$inet6(r2, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000040)="0af3", 0x2}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x44}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x840, 0x0, 0x0) r6 = semget$private(0x0, 0x2, 0x52) semctl$SEM_STAT(r6, 0x1, 0x12, &(0x7f0000000340)=""/186) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000080)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000280)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) ftruncate(r7, 0x3) 933.869619ms ago: executing program 2 (id=2688): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000a00275bc5c2aad4a69d0000e7018a1e0a00", @ANYRES32=0x0, @ANYBLOB="04000c0414000300070400000000000000000000000000000800040040000000"], 0x38}}, 0x8004) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000189000/0x4000)=nil, 0x4000, 0x1000000, 0x112, r2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000080), &(0x7f0000000100)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000200)}) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000001840), 0x400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x403c5404, &(0x7f0000001880)={{0x3, 0x3, 0x1, 0x0, 0x9}, 0x5, 0x9}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r5 = userfaultfd(0x800) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="040b0200d9f202bc"], 0x0, 0x0, 0x0, 0x0}, 0x0) 720.688937ms ago: executing program 4 (id=2689): socket$inet6(0xa, 0x2, 0x0) socket(0x18, 0x803, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) statx(r1, 0x0, 0x1000, 0x6000, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64]) 219.286105ms ago: executing program 4 (id=2690): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x40045436, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x34000, 0x0, 0x10048047}, 0x4000050) 0s ago: executing program 4 (id=2691): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x8001}, &(0x7f0000000240)=0x8) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) connect$tipc(r0, &(0x7f0000000440)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x10) r2 = socket$kcm(0xa, 0x3, 0x87) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x80000000) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 0 [ 762.281438][T12314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.299523][T12314] usb 2-1: Product: syz [ 762.303906][T12314] usb 2-1: Manufacturer: syz [ 762.308648][T12314] usb 2-1: SerialNumber: syz [ 762.464019][T14546] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 762.665425][T12314] usb 2-1: USB disconnect, device number 84 [ 762.803240][ T8082] udevd[8082]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.871509][ T5839] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 763.133201][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.153786][ T5839] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 763.192076][ T5839] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 763.201337][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.213502][ T5839] usb 4-1: Product: syz [ 763.217762][ T5839] usb 4-1: Manufacturer: syz [ 763.229898][ T5839] usb 4-1: SerialNumber: syz [ 763.242594][ T5839] usb 4-1: config 0 descriptor?? [ 763.689465][ T5839] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 763.980473][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 763.995973][ T5839] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 764.006568][ T5839] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 764.021370][ T5839] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 764.373230][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.718210][ T5920] usb 3-1: USB disconnect, device number 85 [ 765.607504][T14573] @0Ù: renamed from bond_slave_1 [ 765.784365][ T5839] usb 4-1: USB disconnect, device number 90 [ 766.269421][T12315] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 766.429465][T12315] usb 4-1: Using ep0 maxpacket: 16 [ 766.439738][T12335] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 766.461088][T12315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 766.473395][T12315] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 766.482873][T12315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.509234][T12315] usb 4-1: Product: syz [ 766.513875][T12315] usb 4-1: Manufacturer: syz [ 766.518513][T12315] usb 4-1: SerialNumber: syz [ 766.620449][T12335] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 766.630097][T12335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.639761][T12335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.651485][T12335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.660891][T12335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.678147][T12335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.690003][T12335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.698904][T12335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.708272][T12335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.720635][T12335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.728626][T12335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.737942][T12335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.749181][T12335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.752106][T14582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 766.757293][T12335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.772577][T12335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.783794][T12335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.792254][T12335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.814646][T12335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.826610][T12335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.836071][T12335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.846341][T12335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.878667][T12335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.887823][T12335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.897324][T12335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.908560][T12335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.919286][T12335] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 766.928955][T12335] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 766.937460][T12335] usb 5-1: Product: syz [ 766.941962][T12335] usb 5-1: Manufacturer: syz [ 766.946614][T12335] usb 5-1: SerialNumber: syz [ 766.958665][T12335] usb 5-1: config 0 descriptor?? [ 766.969402][T12335] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 767.003885][T12315] cdc_ncm 4-1:1.0: bind() failure [ 767.015568][T12315] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 767.028349][T12315] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 767.043412][T12315] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 767.059240][T12315] usb 4-1: USB disconnect, device number 91 [ 768.250245][T12315] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 768.389549][ T5920] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 768.568802][T12315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.579411][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 768.588470][T12315] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.604536][ T5920] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 768.618145][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.719751][ T5920] usb 2-1: Product: syz [ 769.002976][ T5920] usb 2-1: Manufacturer: syz [ 769.020275][ T5920] usb 2-1: SerialNumber: syz [ 769.029157][ T5920] usb 2-1: config 0 descriptor?? [ 769.259526][T12315] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 769.271555][T12315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.279876][T12315] usb 4-1: Product: syz [ 769.284193][T12315] usb 4-1: Manufacturer: syz [ 769.319526][T12315] usb 4-1: SerialNumber: syz [ 769.360465][ T5920] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 769.391569][T12315] usb 4-1: config 0 descriptor?? [ 769.449682][T14612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.553015][T12315] usb 5-1: USB disconnect, device number 96 [ 769.565722][T12315] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 770.661187][T14628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.698662][T14639] 8021q: VLANs not supported on ip6gre0 [ 770.811534][T14619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.890033][T14619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.997475][ T5920] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 771.013557][ T5920] usb 2-1: USB disconnect, device number 85 [ 771.104329][T12335] usb 4-1: USB disconnect, device number 92 [ 771.231937][T14649] Invalid logical block size (1310720) [ 772.444306][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 772.869467][ T5839] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 773.121273][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 773.293719][ T5839] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 773.303868][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.393889][ T5839] usb 2-1: Product: syz [ 773.401468][ T5839] usb 2-1: Manufacturer: syz [ 773.428539][ T5839] usb 2-1: SerialNumber: syz [ 773.458651][ T5839] usb 2-1: config 0 descriptor?? [ 773.701066][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2364'. [ 773.776981][ T5839] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 774.750119][T12336] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 775.123630][T12336] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 775.138641][T12336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.169557][T12336] usb 4-1: config 0 has no interface number 0 [ 775.233521][T12336] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 775.298246][T12336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.329570][T12315] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 775.411655][T12336] usb 4-1: config 0 descriptor?? [ 775.458422][T12336] usb 4-1: bad CDC descriptors [ 775.470727][T12336] cdc_acm 4-1:0.9: Zero length descriptor references [ 775.480535][T12315] usb 5-1: Using ep0 maxpacket: 32 [ 775.498649][T12336] cdc_acm 4-1:0.9: probe with driver cdc_acm failed with error -22 [ 775.816617][T14710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.825886][T14710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.916694][T12315] usb 5-1: unable to get BOS descriptor or descriptor too short [ 775.936668][T12315] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 775.957035][T12315] usb 5-1: can't read configurations, error -71 [ 776.241013][ T5839] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 776.937212][T12336] usb 2-1: USB disconnect, device number 86 [ 777.709503][T12315] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 778.079477][T12315] usb 2-1: Using ep0 maxpacket: 8 [ 778.170508][T12315] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 778.274777][T14729] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 778.281857][T14729] syzkaller1: linktype set to 769 [ 778.328653][T12315] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 778.362953][T14731] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.2375'. [ 778.427063][T12315] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 778.469077][T12315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.471017][T14731] FAULT_INJECTION: forcing a failure. [ 778.471017][T14731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 778.503517][ T24] usb 4-1: USB disconnect, device number 93 [ 778.608164][T14716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.679475][T14731] CPU: 1 UID: 0 PID: 14731 Comm: syz.0.2375 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 778.679500][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 778.679510][T14731] Call Trace: [ 778.679517][T14731] [ 778.679524][T14731] dump_stack_lvl+0x189/0x250 [ 778.679553][T14731] ? __pfx____ratelimit+0x10/0x10 [ 778.679582][T14731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.679607][T14731] ? __pfx__printk+0x10/0x10 [ 778.679626][T14731] ? fs_reclaim_acquire+0x7d/0x100 [ 778.679653][T14731] should_fail_ex+0x414/0x560 [ 778.679678][T14731] prepare_alloc_pages+0x213/0x610 [ 778.679705][T14731] __alloc_frozen_pages_noprof+0x123/0x370 [ 778.679729][T14731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 778.679758][T14731] ? policy_nodemask+0x27c/0x720 [ 778.679773][T14731] ? __lock_acquire+0xab9/0xd20 [ 778.679799][T14731] alloc_pages_mpol+0x232/0x4a0 [ 778.679820][T14731] vma_alloc_folio_noprof+0xe4/0x200 [ 778.679837][T14731] ? page_table_check_set+0x18d/0x730 [ 778.679855][T14731] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 778.679882][T14731] folio_prealloc+0x30/0x180 [ 778.679900][T14731] __handle_mm_fault+0x2c88/0x5620 [ 778.679930][T14731] ? __pfx___handle_mm_fault+0x10/0x10 [ 778.679956][T14731] ? follow_page_pte+0x8d6/0x14b0 [ 778.679977][T14731] handle_mm_fault+0x40a/0x8e0 [ 778.680000][T14731] __get_user_pages+0x1af4/0x30b0 [ 778.680049][T14731] ? __pfx___get_user_pages+0x10/0x10 [ 778.680071][T14731] ? __gup_longterm_locked+0xbf7/0x15b0 [ 778.680094][T14731] ? down_read_killable+0x1d1/0x350 [ 778.680111][T14731] ? try_get_folio+0x633/0x660 [ 778.680128][T14731] __gup_longterm_locked+0xd66/0x15b0 [ 778.680156][T14731] ? try_grab_folio_fast+0x35b/0x4f0 [ 778.680174][T14731] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 778.680203][T14731] gup_fast_fallback+0x1cd4/0x2260 [ 778.680271][T14731] ? __pfx_gup_fast_fallback+0x10/0x10 [ 778.680297][T14731] ? rds_info_getsockopt+0x1db/0x470 [ 778.680314][T14731] ? rcu_is_watching+0x15/0xb0 [ 778.680328][T14731] ? is_valid_gup_args+0x11f/0x200 [ 778.680351][T14731] ? pin_user_pages_fast+0x4d/0xb0 [ 778.680376][T14731] rds_info_getsockopt+0x1fb/0x470 [ 778.680396][T14731] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 778.680413][T14731] ? __might_fault+0xb0/0x130 [ 778.680431][T14731] ? rds_getsockopt+0x2e6/0x500 [ 778.680454][T14731] do_sock_getsockopt+0x35d/0x650 [ 778.680476][T14731] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 778.680496][T14731] ? __fget_files+0x2a/0x420 [ 778.680512][T14731] ? __fget_files+0x3a0/0x420 [ 778.680529][T14731] ? __fget_files+0x2a/0x420 [ 778.680551][T14731] __ia32_sys_getsockopt+0x1a5/0x250 [ 778.680577][T14731] __do_fast_syscall_32+0xb6/0x2b0 [ 778.680594][T14731] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.680620][T14731] do_fast_syscall_32+0x34/0x80 [ 778.680635][T14731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 778.680653][T14731] RIP: 0023:0xf7f38539 [ 778.680666][T14731] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 778.680679][T14731] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 778.680695][T14731] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000114 [ 778.680705][T14731] RDX: 0000000000002715 RSI: 0000000080000580 RDI: 0000000080000000 [ 778.680715][T14731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 778.680724][T14731] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 778.680732][T14731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 778.680753][T14731] [ 779.189588][T12315] usb 2-1: USB disconnect, device number 87 [ 779.518692][T14731] tipc: Enabling of bearer rejected, failed to enable media [ 780.816855][T14756] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.2383'. [ 780.831247][T14756] tipc: Started in network mode [ 780.836287][T14756] tipc: Node identity fef331000000000000000000000000aa, cluster identity 4711 [ 780.847014][T14756] tipc: Enabling of bearer rejected, failed to enable media [ 781.129162][T14760] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2384'. [ 781.144260][T14760] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2384'. [ 781.166191][T14760] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 781.225416][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 781.324937][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2386'. [ 781.611709][T12315] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 781.721521][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 781.721541][ T30] audit: type=1326 audit(1749422328.712:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 781.762358][ T30] audit: type=1326 audit(1749422328.712:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 781.787747][ T30] audit: type=1326 audit(1749422328.712:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 781.813681][ T30] audit: type=1326 audit(1749422328.722:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 781.838573][ T30] audit: type=1326 audit(1749422328.722:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 781.862301][T12315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.872691][T12315] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 781.883055][ T30] audit: type=1326 audit(1749422328.722:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 781.905932][ T30] audit: type=1326 audit(1749422328.722:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 781.979627][T12315] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 781.999469][T12315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.007627][T12315] usb 2-1: Product: syz [ 782.016973][T12315] usb 2-1: Manufacturer: syz [ 782.038765][T12315] usb 2-1: SerialNumber: syz [ 782.075397][T12315] usb 2-1: config 0 descriptor?? [ 782.095818][ T30] audit: type=1326 audit(1749422328.752:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 782.191583][ T30] audit: type=1326 audit(1749422328.752:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 782.224671][ T30] audit: type=1326 audit(1749422328.752:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 782.286891][T14786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.302681][T14786] netlink: 'syz.4.2391': attribute type 72 has an invalid length. [ 782.311185][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2391'. [ 782.669572][ T5839] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 782.832387][ T5839] usb 4-1: config 0 has no interfaces? [ 782.838104][ T5839] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 782.849197][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.885993][ T5839] usb 4-1: config 0 descriptor?? [ 782.946749][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 782.959008][T14793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2393'. [ 783.062631][T14782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.115869][ T5839] usb 4-1: USB disconnect, device number 94 [ 784.271963][T14805] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 784.313222][T14805] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 784.617259][ T5839] usb 2-1: USB disconnect, device number 88 [ 785.178838][T14831] FAULT_INJECTION: forcing a failure. [ 785.178838][T14831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.193001][T14831] CPU: 0 UID: 0 PID: 14831 Comm: syz.2.2404 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 785.193031][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.193044][T14831] Call Trace: [ 785.193054][T14831] [ 785.193063][T14831] dump_stack_lvl+0x189/0x250 [ 785.193103][T14831] ? __pfx____ratelimit+0x10/0x10 [ 785.193137][T14831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.193170][T14831] ? __pfx__printk+0x10/0x10 [ 785.193223][T14831] should_fail_ex+0x414/0x560 [ 785.193257][T14831] _copy_to_user+0x31/0xb0 [ 785.193283][T14831] simple_read_from_buffer+0xe1/0x170 [ 785.193312][T14831] proc_fail_nth_read+0x1df/0x250 [ 785.193360][T14831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.193392][T14831] ? rw_verify_area+0x258/0x650 [ 785.193412][T14831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.193441][T14831] vfs_read+0x1fd/0x980 [ 785.193469][T14831] ? __pfx___mutex_lock+0x10/0x10 [ 785.193512][T14831] ? __pfx_vfs_read+0x10/0x10 [ 785.193536][T14831] ? __fget_files+0x2a/0x420 [ 785.193567][T14831] ? __fget_files+0x3a0/0x420 [ 785.193595][T14831] ? __fget_files+0x2a/0x420 [ 785.193631][T14831] ksys_read+0x145/0x250 [ 785.193655][T14831] ? __pfx_ksys_read+0x10/0x10 [ 785.193679][T14831] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 785.193702][T14831] ? lockdep_hardirqs_on+0x9c/0x150 [ 785.193739][T14831] __do_fast_syscall_32+0xb6/0x2b0 [ 785.193763][T14831] ? lockdep_hardirqs_on+0x9c/0x150 [ 785.193802][T14831] do_fast_syscall_32+0x34/0x80 [ 785.193825][T14831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 785.193852][T14831] RIP: 0023:0xf7ff1539 [ 785.193872][T14831] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 785.193899][T14831] RSP: 002b:00000000f5116590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 785.193922][T14831] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5116620 [ 785.193938][T14831] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 785.193952][T14831] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 785.193965][T14831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 785.193979][T14831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 785.194011][T14831] [ 786.619435][T12335] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 786.802737][T12335] usb 2-1: config 0 has no interfaces? [ 786.808308][T12335] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 786.818028][T12335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.843050][T12335] usb 2-1: config 0 descriptor?? [ 786.889005][T14844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.067865][T12335] usb 2-1: USB disconnect, device number 89 [ 787.509510][T12335] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 788.181615][T12335] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.271778][T12335] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 788.344808][T12335] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 788.437603][T12335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.456681][T12335] usb 4-1: Product: syz [ 788.498961][T12335] usb 4-1: Manufacturer: syz [ 788.508965][T12335] usb 4-1: SerialNumber: syz [ 788.520407][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2413'. [ 788.536437][T12335] usb 4-1: config 0 descriptor?? [ 788.641448][ T30] audit: type=1400 audit(1749422335.642:3168): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14869 comm="syz.0.2414" [ 788.957622][T14877] FAULT_INJECTION: forcing a failure. [ 788.957622][T14877] name failslab, interval 1, probability 0, space 0, times 0 [ 788.973339][T14877] CPU: 1 UID: 0 PID: 14877 Comm: syz.4.2417 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 788.973361][T14877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 788.973372][T14877] Call Trace: [ 788.973379][T14877] [ 788.973386][T14877] dump_stack_lvl+0x189/0x250 [ 788.973414][T14877] ? __pfx____ratelimit+0x10/0x10 [ 788.973439][T14877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 788.973463][T14877] ? __pfx__printk+0x10/0x10 [ 788.973484][T14877] ? __pfx___might_resched+0x10/0x10 [ 788.973501][T14877] should_fail_ex+0x414/0x560 [ 788.973527][T14877] should_failslab+0xa8/0x100 [ 788.973545][T14877] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 788.973563][T14877] ? xfrm_add_sa+0x2633/0x4050 [ 788.973586][T14877] kmemdup_noprof+0x2b/0x70 [ 788.973608][T14877] xfrm_add_sa+0x2633/0x4050 [ 788.973634][T14877] ? __pfx_xfrm_add_sa+0x10/0x10 [ 788.973658][T14877] ? __nla_parse+0x40/0x60 [ 788.973684][T14877] xfrm_user_rcv_msg+0x7a3/0xab0 [ 788.973708][T14877] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 788.973753][T14877] ? __mutex_trylock_common+0x153/0x260 [ 788.973772][T14877] ? __pfx___mutex_trylock_common+0x10/0x10 [ 788.973792][T14877] ? rcu_is_watching+0x15/0xb0 [ 788.973806][T14877] ? trace_contention_end+0x39/0x120 [ 788.973827][T14877] netlink_rcv_skb+0x208/0x470 [ 788.973848][T14877] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 788.973869][T14877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.973900][T14877] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.973918][T14877] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.973939][T14877] xfrm_netlink_rcv+0x79/0x90 [ 788.973958][T14877] netlink_unicast+0x75b/0x8d0 [ 788.973983][T14877] netlink_sendmsg+0x805/0xb30 [ 788.974010][T14877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.974031][T14877] ? __import_iovec+0x5d4/0x7f0 [ 788.974046][T14877] ? aa_sock_msg_perm+0x94/0x160 [ 788.974068][T14877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.974089][T14877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.974109][T14877] __sock_sendmsg+0x219/0x270 [ 788.974127][T14877] ____sys_sendmsg+0x505/0x830 [ 788.974151][T14877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.974184][T14877] ___sys_sendmsg+0x21f/0x2a0 [ 788.974211][T14877] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.974260][T14877] ? __fget_files+0x2a/0x420 [ 788.974277][T14877] ? __fget_files+0x3a0/0x420 [ 788.974303][T14877] __sys_sendmsg+0x164/0x220 [ 788.974344][T14877] ? __pfx___sys_sendmsg+0x10/0x10 [ 788.974375][T14877] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 788.974392][T14877] ? lockdep_hardirqs_on+0x9c/0x150 [ 788.974418][T14877] __do_fast_syscall_32+0xb6/0x2b0 [ 788.974434][T14877] ? lockdep_hardirqs_on+0x9c/0x150 [ 788.974460][T14877] do_fast_syscall_32+0x34/0x80 [ 788.974476][T14877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.974494][T14877] RIP: 0023:0xf709e539 [ 788.974507][T14877] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 788.974521][T14877] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 788.974537][T14877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 788.974548][T14877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.974557][T14877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.974566][T14877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 788.974574][T14877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.974595][T14877] [ 789.871398][T14880] sctp: [Deprecated]: syz.1.2418 (pid 14880) Use of int in max_burst socket option deprecated. [ 789.871398][T14880] Use struct sctp_assoc_value instead [ 789.982446][T14882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.997820][T14882] netlink: 'syz.2.2420': attribute type 72 has an invalid length. [ 790.011146][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2420'. [ 790.198696][T12335] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 790.413466][ T24] usb 4-1: USB disconnect, device number 95 [ 790.432136][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 790.466621][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 790.535781][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 790.605811][T12335] usb 2-1: config 0 has an invalid interface number: 93 but max is 0 [ 790.615157][T12335] usb 2-1: config 0 has no interface number 0 [ 790.645189][T12335] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 790.677628][T12335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.738905][T12335] usb 2-1: Product: syz [ 790.753252][T12335] usb 2-1: Manufacturer: syz [ 790.925552][T12335] usb 2-1: SerialNumber: syz [ 790.980636][T12335] usb 2-1: config 0 descriptor?? [ 791.060564][ T24] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 791.249538][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 791.516238][T12335] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 791.530469][T12335] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 791.550072][T12335] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 791.558920][T12335] usb 2-1: media controller created [ 791.583471][T12335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 791.587034][ T24] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 791.620994][ T24] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 791.853733][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 791.878475][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.131469][T12335] DVB: Unable to find symbol dib7000p_attach() [ 792.137668][T12335] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 792.159634][T12335] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 792.178410][ T5839] usb 4-1: USB disconnect, device number 96 [ 792.227602][T12335] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 792.322871][T12335] usb 2-1: media controller created [ 792.362679][T12335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 792.390702][T12335] dib0700: the master dib7090 has to be initialized first [ 792.411274][T12335] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 792.769508][T12335] rc_core: IR keymap rc-dib0700-rc5 not found [ 792.777830][T12335] Registered IR keymap rc-empty [ 792.784367][T12335] dvb-usb: could not initialize remote control. [ 792.799338][T12335] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 792.877128][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2425'. [ 792.893804][T12335] usb 2-1: USB disconnect, device number 90 [ 792.952923][T12335] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 793.171435][T14915] batadv0: entered promiscuous mode [ 793.177528][T14915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.836810][T14938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.876377][T12314] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 794.885878][T14938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2433'. [ 794.898378][T12314] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 794.944619][ T5839] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 795.405893][T12114] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 795.630597][ T60] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 795.670465][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.685944][ T5839] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 795.786808][ T5839] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 795.789812][ T60] wlan1: authentication with 08:02:11:00:00:00 timed out [ 795.796957][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.882517][ T5839] usb 3-1: Product: syz [ 795.905277][ T5839] usb 3-1: Manufacturer: syz [ 795.929376][ T5839] usb 3-1: SerialNumber: syz [ 795.945247][ T5839] usb 3-1: config 0 descriptor?? [ 796.179735][T12336] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 796.235864][T14951] random: crng reseeded on system resumption [ 796.343050][T12336] usb 4-1: Using ep0 maxpacket: 32 [ 796.352232][T12336] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 796.364007][T12336] usb 4-1: config 0 has no interface number 0 [ 796.400410][T12336] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 796.411098][T12336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.422753][T12336] usb 4-1: Product: syz [ 796.437475][T12336] usb 4-1: Manufacturer: syz [ 796.452350][T12336] usb 4-1: SerialNumber: syz [ 796.470355][T12336] usb 4-1: config 0 descriptor?? [ 796.494817][T12336] smsc95xx v2.0.0 [ 798.248015][ T24] usb 3-1: USB disconnect, device number 86 [ 798.306658][T14971] FAULT_INJECTION: forcing a failure. [ 798.306658][T14971] name failslab, interval 1, probability 0, space 0, times 0 [ 798.335462][T14971] CPU: 1 UID: 0 PID: 14971 Comm: syz.2.2442 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 798.335494][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 798.335509][T14971] Call Trace: [ 798.335518][T14971] [ 798.335528][T14971] dump_stack_lvl+0x189/0x250 [ 798.335577][T14971] ? __pfx____ratelimit+0x10/0x10 [ 798.335613][T14971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.335647][T14971] ? __pfx__printk+0x10/0x10 [ 798.335667][T14971] ? trace_contention_end+0x39/0x120 [ 798.335692][T14971] ? __mutex_lock+0x330/0xe80 [ 798.335718][T14971] ? _copy_from_iter+0x24c/0x16f0 [ 798.335757][T14971] should_fail_ex+0x414/0x560 [ 798.335792][T14971] should_failslab+0xa8/0x100 [ 798.335819][T14971] __kmalloc_cache_noprof+0x70/0x3d0 [ 798.335844][T14971] ? vhost_iotlb_add_range_ctx+0x1a8/0x6b0 [ 798.335876][T14971] vhost_iotlb_add_range_ctx+0x1a8/0x6b0 [ 798.335909][T14971] vhost_chr_write_iter+0x9db/0xad0 [ 798.335941][T14971] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 798.335970][T14971] ? security_file_permission+0x75/0x290 [ 798.336005][T14971] vfs_write+0x54b/0xa90 [ 798.336031][T14971] ? __pfx_vhost_vsock_chr_write_iter+0x10/0x10 [ 798.336058][T14971] ? __pfx_vfs_write+0x10/0x10 [ 798.336092][T14971] ? __fget_files+0x2a/0x420 [ 798.336128][T14971] ksys_write+0x145/0x250 [ 798.336153][T14971] ? __pfx_ksys_write+0x10/0x10 [ 798.336176][T14971] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 798.336198][T14971] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.336236][T14971] __do_fast_syscall_32+0xb6/0x2b0 [ 798.336260][T14971] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.336299][T14971] do_fast_syscall_32+0x34/0x80 [ 798.336321][T14971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.336347][T14971] RIP: 0023:0xf7ff1539 [ 798.336365][T14971] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 798.336384][T14971] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 798.336407][T14971] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 798.336423][T14971] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.336435][T14971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.336448][T14971] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 798.336461][T14971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.336492][T14971] [ 800.048313][T12336] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 800.089962][T12336] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 800.109740][T12336] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 800.111142][T14983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.132184][T12336] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 800.161896][T14984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2445'. [ 800.167113][T12336] usb 4-1: USB disconnect, device number 97 [ 800.343978][T14998] FAULT_INJECTION: forcing a failure. [ 800.343978][T14998] name failslab, interval 1, probability 0, space 0, times 0 [ 800.760168][T14998] CPU: 1 UID: 0 PID: 14998 Comm: syz.0.2448 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 800.760196][T14998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 800.760206][T14998] Call Trace: [ 800.760212][T14998] [ 800.760219][T14998] dump_stack_lvl+0x189/0x250 [ 800.760245][T14998] ? __pfx____ratelimit+0x10/0x10 [ 800.760275][T14998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.760307][T14998] ? __pfx__printk+0x10/0x10 [ 800.760330][T14998] ? __pfx___might_resched+0x10/0x10 [ 800.760347][T14998] ? fs_reclaim_acquire+0x7d/0x100 [ 800.760368][T14998] should_fail_ex+0x414/0x560 [ 800.760390][T14998] should_failslab+0xa8/0x100 [ 800.760407][T14998] kmem_cache_alloc_noprof+0x73/0x3c0 [ 800.760421][T14998] ? security_file_alloc+0x34/0x330 [ 800.760440][T14998] security_file_alloc+0x34/0x330 [ 800.760457][T14998] init_file+0x93/0x2f0 [ 800.760478][T14998] alloc_empty_file+0x6e/0x1d0 [ 800.760515][T14998] alloc_file_pseudo+0x13d/0x210 [ 800.760537][T14998] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 800.760560][T14998] ? alloc_fd+0x64c/0x6c0 [ 800.760589][T14998] sock_alloc_file+0xb8/0x2e0 [ 800.760603][T14998] ? __sys_socket+0x12c/0x1b0 [ 800.760620][T14998] __sys_socket+0x13d/0x1b0 [ 800.760639][T14998] __ia32_compat_sys_socketcall+0x6df/0x9c0 [ 800.760663][T14998] ? __fget_files+0x3a0/0x420 [ 800.760682][T14998] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 800.760705][T14998] ? fput+0xa0/0xd0 [ 800.760725][T14998] ? ksys_write+0x22a/0x250 [ 800.760745][T14998] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 800.760761][T14998] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.760786][T14998] __do_fast_syscall_32+0xb6/0x2b0 [ 800.760802][T14998] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.760827][T14998] do_fast_syscall_32+0x34/0x80 [ 800.760842][T14998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 800.760860][T14998] RIP: 0023:0xf7f38539 [ 800.760874][T14998] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 800.760887][T14998] RSP: 002b:00000000f50344f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 800.760903][T14998] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f5034500 [ 800.760913][T14998] RDX: 00000000f73c2ff4 RSI: 0000000000000000 RDI: 00000000f73c2ff4 [ 800.760923][T14998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 800.760931][T14998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 800.760940][T14998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 800.760960][T14998] [ 801.759455][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 801.922535][ T24] usb 4-1: device descriptor read/64, error -71 [ 802.144017][T15025] tmpfs: Unknown parameter '‹˜žôø®¹çr%ÞÒ´\wÓ R(4æÀ;¯«a;‘ [ 802.144017][T15025] ž MU¶ÁgÊ6••&x@2<›5Ê„ëæ2TþóñÌ­Z5üÀwìšVý•þU„Í]©´±¡TΞ®m¼ÎùšÜçPåZ¼ª<M;€ëžxY9]gÅž‚‹ônñÛÆìæ;O‡‘Ûó훌u [ 802.144017][T15025] ~^à>Ƥùηr&­öœãàDòq.;ÙÂ쀯<2³A‡¦úU,1) r0 ' [ 802.279433][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 802.328109][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 802.339161][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 802.365946][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 802.473155][T12336] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 802.489643][ T5839] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 802.514598][ T24] usb 4-1: device descriptor read/64, error -71 [ 802.649709][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 802.660796][T12336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.676079][T12336] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 802.686113][ T5839] usb 5-1: config 0 has an invalid descriptor of length 241, skipping remainder of the config [ 802.731619][T12336] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 802.741777][T12336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.750570][T12336] usb 3-1: Product: syz [ 802.751356][T15033] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 802.755177][ T5839] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 802.761446][T15033] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 802.779065][T12336] usb 3-1: Manufacturer: syz [ 802.783938][ T24] usb usb4-port1: attempt power cycle [ 802.784123][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.797747][T12336] usb 3-1: SerialNumber: syz [ 802.803855][ T5839] usb 5-1: Product: syz [ 802.808919][T12336] usb 3-1: config 0 descriptor?? [ 802.836330][T15033] vhci_hcd vhci_hcd.0: Device attached [ 802.847472][ T5839] usb 5-1: Manufacturer: syz [ 802.859460][ T5839] usb 5-1: SerialNumber: syz [ 802.878764][T15036] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 802.885427][T15036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 802.894093][ T5839] usb 5-1: config 0 descriptor?? [ 802.916316][ T5839] usb 5-1: bad CDC descriptors [ 802.931225][ T5839] usb 5-1: unsupported MDLM descriptors [ 802.945535][T15036] vhci_hcd vhci_hcd.0: Device attached [ 802.972800][T15039] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 802.979483][T15039] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 803.021227][T15039] vhci_hcd vhci_hcd.0: Device attached [ 803.047597][T12315] vhci_hcd: vhci_device speed not set [ 803.133794][ T5839] usb 5-1: USB disconnect, device number 99 [ 803.325543][T15039] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(26) [ 803.332180][T15039] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 803.441948][T12315] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 803.469876][T15039] vhci_hcd vhci_hcd.0: Device attached [ 803.509579][T15033] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(23) [ 803.516249][T15033] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 803.569736][T15033] vhci_hcd vhci_hcd.0: Device attached [ 803.599631][T15036] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(20) [ 803.606303][T15036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 803.779551][T15036] vhci_hcd vhci_hcd.0: Device attached [ 803.818754][T15057] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 803.963267][T15033] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(22) [ 803.969929][T15033] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 803.985606][T15033] vhci_hcd vhci_hcd.0: Device attached [ 803.997063][T15033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 804.010099][ T24] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 804.063776][T15049] vhci_hcd: connection closed [ 804.065210][T15050] vhci_hcd: connection closed [ 804.065361][ T60] vhci_hcd: stop threads [ 804.070548][T15047] vhci_hcd: connection closed [ 804.079710][T15037] vhci_hcd: connection closed [ 804.085453][T15034] vhci_hcd: connection reset by peer [ 804.115733][T15040] vhci_hcd: connection closed [ 804.130149][ T60] vhci_hcd: release socket [ 804.155711][ T60] vhci_hcd: disconnect device [ 804.159438][ T24] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 804.168303][ T60] vhci_hcd: stop threads [ 804.184192][ T60] vhci_hcd: release socket [ 804.192033][T15058] vhci_hcd: connection closed [ 804.193410][ T60] vhci_hcd: disconnect device [ 804.206700][ T60] vhci_hcd: stop threads [ 804.211653][ T60] vhci_hcd: release socket [ 804.211825][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.216672][ T60] vhci_hcd: disconnect device [ 804.237250][ T60] vhci_hcd: stop threads [ 804.243773][ T60] vhci_hcd: release socket [ 804.249941][ T60] vhci_hcd: disconnect device [ 804.256339][ T60] vhci_hcd: stop threads [ 804.262742][ T60] vhci_hcd: release socket [ 804.262772][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 804.268679][ T60] vhci_hcd: disconnect device [ 804.293660][ T60] vhci_hcd: stop threads [ 804.299264][ T60] vhci_hcd: release socket [ 804.313457][ T60] vhci_hcd: disconnect device [ 804.328151][ T60] vhci_hcd: stop threads [ 804.333444][ T60] vhci_hcd: release socket [ 804.335106][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 804.340076][ T60] vhci_hcd: disconnect device [ 804.377382][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.396221][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.415243][ T24] usb 4-1: Product: syz [ 804.422597][ T24] usb 4-1: Manufacturer: syz [ 804.433307][ T24] usb 4-1: SerialNumber: syz [ 804.452147][T15056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 804.927795][T15069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2460'. [ 805.012451][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 805.217357][T12336] usb 3-1: USB disconnect, device number 87 [ 805.286359][T15056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.336767][T15056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.358940][T15056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.368716][T15056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.584686][ T24] cdc_ncm 4-1:1.0: bind() failure [ 805.794643][ T24] usb 4-1: USB disconnect, device number 101 [ 807.860953][T15102] bond2: (slave gretap1): Releasing backup interface [ 808.224078][T15092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.427711][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'. [ 808.599554][T12315] vhci_hcd: vhci_device speed not set [ 808.614354][ T30] audit: type=1326 audit(1749422355.582:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 808.685505][ T30] audit: type=1326 audit(1749422355.582:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 808.717849][ T30] audit: type=1326 audit(1749422355.582:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 808.758612][ T30] audit: type=1326 audit(1749422355.582:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 808.791444][ T30] audit: type=1326 audit(1749422355.582:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 808.828009][ T30] audit: type=1326 audit(1749422355.582:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 808.831560][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.861193][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.878579][ T30] audit: type=1326 audit(1749422355.582:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 808.919379][ T30] audit: type=1326 audit(1749422355.592:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 809.064558][ T30] audit: type=1326 audit(1749422355.592:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 809.115721][ T30] audit: type=1326 audit(1749422355.592:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 809.158937][T15124] FAULT_INJECTION: forcing a failure. [ 809.158937][T15124] name failslab, interval 1, probability 0, space 0, times 0 [ 809.174462][T15124] CPU: 1 UID: 0 PID: 15124 Comm: syz.1.2477 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 809.174492][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 809.174506][T15124] Call Trace: [ 809.174515][T15124] [ 809.174525][T15124] dump_stack_lvl+0x189/0x250 [ 809.174580][T15124] ? __pfx____ratelimit+0x10/0x10 [ 809.174615][T15124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 809.174650][T15124] ? __pfx__printk+0x10/0x10 [ 809.174680][T15124] ? __pfx___might_resched+0x10/0x10 [ 809.174708][T15124] ? fs_reclaim_acquire+0x7d/0x100 [ 809.174741][T15124] should_fail_ex+0x414/0x560 [ 809.174776][T15124] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 809.174808][T15124] should_failslab+0xa8/0x100 [ 809.174834][T15124] __kvmalloc_node_noprof+0x161/0x5f0 [ 809.174859][T15124] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 809.174899][T15124] alloc_netdev_mqs+0x8e5/0x11e0 [ 809.174940][T15124] rtnl_create_link+0x31f/0xd10 [ 809.174983][T15124] rtnl_newlink_create+0x25c/0xb00 [ 809.175018][T15124] ? __pfx_aa_get_newest_label+0x10/0x10 [ 809.175052][T15124] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 809.175079][T15124] ? rtnl_newlink+0x8db/0x1c70 [ 809.175106][T15124] ? __pfx___mutex_lock+0x10/0x10 [ 809.175141][T15124] ? ns_capable+0x8a/0xf0 [ 809.175178][T15124] rtnl_newlink+0x16d6/0x1c70 [ 809.175222][T15124] ? __pfx_rtnl_newlink+0x10/0x10 [ 809.175255][T15124] ? __lock_acquire+0xab9/0xd20 [ 809.175301][T15124] ? __lock_acquire+0xab9/0xd20 [ 809.175353][T15124] ? is_bpf_text_address+0x26/0x2b0 [ 809.175380][T15124] ? is_bpf_text_address+0x292/0x2b0 [ 809.175400][T15124] ? is_bpf_text_address+0x26/0x2b0 [ 809.175424][T15124] ? kernel_text_address+0xa5/0xe0 [ 809.175468][T15124] ? __lock_acquire+0xab9/0xd20 [ 809.175527][T15124] ? __pfx_rtnl_newlink+0x10/0x10 [ 809.175551][T15124] rtnetlink_rcv_msg+0x7cc/0xb70 [ 809.175581][T15124] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 809.175605][T15124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 809.175649][T15124] netlink_rcv_skb+0x208/0x470 [ 809.175679][T15124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 809.175724][T15124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 809.175766][T15124] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.175792][T15124] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.175825][T15124] netlink_unicast+0x75b/0x8d0 [ 809.175861][T15124] netlink_sendmsg+0x805/0xb30 [ 809.175898][T15124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.175928][T15124] ? __import_iovec+0x5d4/0x7f0 [ 809.175949][T15124] ? aa_sock_msg_perm+0x94/0x160 [ 809.175979][T15124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 809.176008][T15124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.176036][T15124] __sock_sendmsg+0x219/0x270 [ 809.176062][T15124] ____sys_sendmsg+0x505/0x830 [ 809.176096][T15124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.176142][T15124] ___sys_sendmsg+0x21f/0x2a0 [ 809.176174][T15124] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.176243][T15124] ? __fget_files+0x2a/0x420 [ 809.176268][T15124] ? __fget_files+0x3a0/0x420 [ 809.176305][T15124] __sys_sendmsg+0x164/0x220 [ 809.176336][T15124] ? __pfx___sys_sendmsg+0x10/0x10 [ 809.176381][T15124] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 809.176403][T15124] ? lockdep_hardirqs_on+0x9c/0x150 [ 809.176440][T15124] __do_fast_syscall_32+0xb6/0x2b0 [ 809.176463][T15124] ? lockdep_hardirqs_on+0x9c/0x150 [ 809.176501][T15124] do_fast_syscall_32+0x34/0x80 [ 809.176522][T15124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 809.176548][T15124] RIP: 0023:0xf709e539 [ 809.176567][T15124] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 809.176597][T15124] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 809.176618][T15124] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 809.176631][T15124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 809.176643][T15124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 809.176655][T15124] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 809.176667][T15124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 809.176705][T15124] [ 810.157723][ T5920] usb usb34-port1: attempt power cycle [ 810.179494][T12330] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 810.752991][ T5920] usb usb34-port1: unable to enumerate USB device [ 810.989768][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2489'. [ 811.324878][T15167] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 811.350081][T15167] FAULT_INJECTION: forcing a failure. [ 811.350081][T15167] name failslab, interval 1, probability 0, space 0, times 0 [ 811.363831][T15167] CPU: 0 UID: 0 PID: 15167 Comm: syz.4.2493 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 811.363859][T15167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 811.363871][T15167] Call Trace: [ 811.363880][T15167] [ 811.363890][T15167] dump_stack_lvl+0x189/0x250 [ 811.363926][T15167] ? __pfx____ratelimit+0x10/0x10 [ 811.363959][T15167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.363990][T15167] ? __pfx__printk+0x10/0x10 [ 811.364014][T15167] ? __pfx___might_resched+0x10/0x10 [ 811.364034][T15167] ? fs_reclaim_acquire+0x7d/0x100 [ 811.364065][T15167] should_fail_ex+0x414/0x560 [ 811.364097][T15167] should_failslab+0xa8/0x100 [ 811.364122][T15167] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 811.364145][T15167] ? kobject_rename+0x134/0x420 [ 811.364172][T15167] kstrdup+0x42/0x100 [ 811.364201][T15167] kobject_rename+0x134/0x420 [ 811.364228][T15167] ? __pfx_kobject_rename+0x10/0x10 [ 811.364253][T15167] ? sysfs_rename_link_ns+0x178/0x1b0 [ 811.364282][T15167] device_rename+0x15d/0x1f0 [ 811.364311][T15167] netif_change_name+0x28c/0x960 [ 811.364337][T15167] ? __mutex_lock+0x330/0xe80 [ 811.364361][T15167] ? dev_change_name+0x125/0x260 [ 811.364387][T15167] ? __pfx_aa_get_newest_label+0x10/0x10 [ 811.364415][T15167] ? __pfx_netif_change_name+0x10/0x10 [ 811.364439][T15167] ? netdev_name_node_lookup+0xdf/0x120 [ 811.364487][T15167] dev_change_name+0x125/0x260 [ 811.364533][T15167] dev_ioctl+0x5ec/0x1150 [ 811.364562][T15167] sock_do_ioctl+0x22c/0x300 [ 811.364587][T15167] ? __pfx_sock_do_ioctl+0x10/0x10 [ 811.364606][T15167] ? unix_ioctl+0x27c/0x830 [ 811.364638][T15167] ? __pfx_unix_ioctl+0x10/0x10 [ 811.364676][T15167] compat_sock_ioctl+0xb8d/0xc80 [ 811.364716][T15167] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 811.364754][T15167] ? __fget_files+0x3a0/0x420 [ 811.364778][T15167] ? __fget_files+0x2a/0x420 [ 811.364807][T15167] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 811.364844][T15167] __ia32_compat_sys_ioctl+0x543/0x840 [ 811.364882][T15167] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 811.364917][T15167] ? __fget_files+0x3a0/0x420 [ 811.364950][T15167] ? fput+0xa0/0xd0 [ 811.364979][T15167] ? ksys_write+0x22a/0x250 [ 811.365009][T15167] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 811.365033][T15167] ? lockdep_hardirqs_on+0x9c/0x150 [ 811.365069][T15167] __do_fast_syscall_32+0xb6/0x2b0 [ 811.365092][T15167] ? lockdep_hardirqs_on+0x9c/0x150 [ 811.365129][T15167] do_fast_syscall_32+0x34/0x80 [ 811.365152][T15167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 811.365179][T15167] RIP: 0023:0xf709e539 [ 811.365198][T15167] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 811.365218][T15167] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 811.365241][T15167] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008923 [ 811.365256][T15167] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 811.365270][T15167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 811.365283][T15167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 811.365297][T15167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.365329][T15167] [ 811.867417][T15173] loop6: detected capacity change from 0 to 32 [ 812.409910][T15179] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 813.538181][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 813.601566][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 813.610788][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 814.506703][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'. [ 814.589675][T12330] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 814.751918][T12330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 814.766090][T12330] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 814.782195][T12330] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 814.796790][T12330] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 814.817178][T12330] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 814.834364][T12330] usb 2-1: config 129 has no interface number 0 [ 814.840855][T12330] usb 2-1: config 129 has no interface number 1 [ 814.847255][T12330] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 814.860638][T12330] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 814.871864][T12330] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 814.889826][T12330] usb 2-1: config 129 interface 135 has no altsetting 0 [ 814.905329][T12330] usb 2-1: config 129 interface 5 has no altsetting 0 [ 814.925193][T12330] usb 2-1: string descriptor 0 read error: -22 [ 814.945467][T12330] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 814.978207][T12330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.046233][T12330] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 815.070247][T12330] usb 2-1: MIDIStreaming interface descriptor not found [ 815.231924][T12336] usb 2-1: USB disconnect, device number 92 [ 815.398297][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.425529][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.630051][T12315] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 815.775555][T15229] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2513'. [ 815.779486][T12335] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 815.799784][T12315] usb 5-1: Using ep0 maxpacket: 8 [ 815.826029][T12315] usb 5-1: config 0 has an invalid interface number: 176 but max is 1 [ 815.836480][T12315] usb 5-1: config 0 has no interface number 1 [ 815.848910][T12315] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 815.858920][T12315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.929947][T12335] usb 4-1: device descriptor read/64, error -71 [ 816.052511][T12315] usb 5-1: config 0 descriptor?? [ 816.144744][T12315] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 816.166251][T12315] usb 5-1: unknown number of interfaces: 2 [ 816.305448][T12335] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 816.345483][T12315] usb 5-1: USB disconnect, device number 100 [ 816.464291][T12335] usb 4-1: device descriptor read/64, error -71 [ 816.485721][T15240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.557409][T15240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.599789][T12335] usb usb4-port1: attempt power cycle [ 816.814624][T15245] netlink: 'syz.1.2519': attribute type 39 has an invalid length. [ 816.885133][T15245] FAULT_INJECTION: forcing a failure. [ 816.885133][T15245] name failslab, interval 1, probability 0, space 0, times 0 [ 816.918494][T15245] CPU: 0 UID: 0 PID: 15245 Comm: syz.1.2519 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 816.918529][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 816.918544][T15245] Call Trace: [ 816.918554][T15245] [ 816.918564][T15245] dump_stack_lvl+0x189/0x250 [ 816.918605][T15245] ? __pfx____ratelimit+0x10/0x10 [ 816.918641][T15245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 816.918677][T15245] ? __pfx__printk+0x10/0x10 [ 816.918708][T15245] ? __pfx___might_resched+0x10/0x10 [ 816.918729][T15245] ? fs_reclaim_acquire+0x7d/0x100 [ 816.918764][T15245] should_fail_ex+0x414/0x560 [ 816.918800][T15245] should_failslab+0xa8/0x100 [ 816.918828][T15245] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 816.918852][T15245] ? __alloc_skb+0x112/0x2d0 [ 816.918882][T15245] __alloc_skb+0x112/0x2d0 [ 816.918909][T15245] rtmsg_ifa+0xf8/0x1f0 [ 816.918941][T15245] __inet_del_ifa+0x869/0x1040 [ 816.918982][T15245] inetdev_event+0x632/0x15b0 [ 816.919009][T15245] ? __pfx_del_netdev_ips+0x10/0x10 [ 816.919032][T15245] ? __pfx_pass_all_filter+0x10/0x10 [ 816.919057][T15245] ? __pfx_inetdev_event+0x10/0x10 [ 816.919093][T15245] notifier_call_chain+0x1b3/0x3e0 [ 816.919117][T15245] unregister_netdevice_many_notify+0x15d8/0x2320 [ 816.919159][T15245] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 816.919190][T15245] ? rtnl_dellink+0x331/0x710 [ 816.919217][T15245] ? unregister_netdevice_queue+0x1b3/0x380 [ 816.919258][T15245] ? __nla_parse+0x40/0x60 [ 816.919295][T15245] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 816.919327][T15245] rtnl_dellink+0x488/0x710 [ 816.919358][T15245] ? __pfx_rtnl_dellink+0x10/0x10 [ 816.919395][T15245] ? __lock_acquire+0xab9/0xd20 [ 816.919512][T15245] ? __pfx_rtnl_dellink+0x10/0x10 [ 816.919537][T15245] rtnetlink_rcv_msg+0x7cc/0xb70 [ 816.919567][T15245] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 816.919592][T15245] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 816.919630][T15245] netlink_rcv_skb+0x208/0x470 [ 816.919654][T15245] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 816.919676][T15245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 816.919710][T15245] ? netlink_deliver_tap+0x2e/0x1b0 [ 816.919732][T15245] ? netlink_deliver_tap+0x2e/0x1b0 [ 816.919760][T15245] netlink_unicast+0x75b/0x8d0 [ 816.919789][T15245] netlink_sendmsg+0x805/0xb30 [ 816.919820][T15245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.919845][T15245] ? __import_iovec+0x5d4/0x7f0 [ 816.919863][T15245] ? aa_sock_msg_perm+0x94/0x160 [ 816.919900][T15245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 816.919924][T15245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.919947][T15245] __sock_sendmsg+0x219/0x270 [ 816.919967][T15245] ____sys_sendmsg+0x505/0x830 [ 816.919997][T15245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.920034][T15245] ___sys_sendmsg+0x21f/0x2a0 [ 816.920060][T15245] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.920112][T15245] ? __fget_files+0x2a/0x420 [ 816.920132][T15245] ? __fget_files+0x3a0/0x420 [ 816.920161][T15245] __sys_sendmsg+0x164/0x220 [ 816.920186][T15245] ? __pfx___sys_sendmsg+0x10/0x10 [ 816.920221][T15245] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 816.920246][T15245] ? lockdep_hardirqs_on+0x9c/0x150 [ 816.920275][T15245] __do_fast_syscall_32+0xb6/0x2b0 [ 816.920294][T15245] ? lockdep_hardirqs_on+0x9c/0x150 [ 816.920324][T15245] do_fast_syscall_32+0x34/0x80 [ 816.920342][T15245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 816.920363][T15245] RIP: 0023:0xf709e539 [ 816.920378][T15245] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 816.920394][T15245] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 816.920413][T15245] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000600 [ 816.920425][T15245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 816.920435][T15245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 816.920446][T15245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 816.920456][T15245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 816.920481][T15245] [ 817.320012][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.347893][T12335] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 817.371679][T12335] usb 4-1: device descriptor read/8, error -71 [ 817.479389][T12315] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 817.609476][T12335] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 817.629571][T12315] usb 3-1: Using ep0 maxpacket: 32 [ 817.636191][T12335] usb 4-1: device descriptor read/8, error -71 [ 817.647218][T12315] usb 3-1: unable to get BOS descriptor or descriptor too short [ 817.656035][T12315] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 817.663965][T12330] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 817.671840][T12315] usb 3-1: can't read configurations, error -71 [ 817.742949][ T5920] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 817.760688][T12335] usb usb4-port1: unable to enumerate USB device [ 817.831101][T12330] usb 5-1: config 0 has no interfaces? [ 817.836646][T12330] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 817.846472][T12330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.860189][T12330] usb 5-1: config 0 descriptor?? [ 817.880374][ T5920] usb 2-1: device descriptor read/64, error -71 [ 818.119726][ T5920] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 818.319608][ T5920] usb 2-1: device descriptor read/64, error -71 [ 818.373396][T15258] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2524'. [ 818.430076][ T5920] usb usb2-port1: attempt power cycle [ 818.769513][ T5920] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 818.810215][ T5920] usb 2-1: device descriptor read/8, error -71 [ 819.090020][ T5920] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 819.130168][ T5920] usb 2-1: device descriptor read/8, error -71 [ 819.259881][ T5920] usb usb2-port1: unable to enumerate USB device [ 819.469932][T12336] usb 5-1: USB disconnect, device number 101 [ 820.344630][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 820.354899][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 820.374471][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 820.383765][T15288] netlink: 'syz.4.2533': attribute type 10 has an invalid length. [ 820.404059][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 820.413342][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 820.422501][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 820.503116][T15288] veth1_vlan: entered allmulticast mode [ 820.547469][T15288] veth1_vlan: left promiscuous mode [ 820.574961][T15288] team0: Device veth1_vlan failed to register rx_handler [ 821.231201][T15299] netlink: zone id is out of range [ 821.236492][T15299] netlink: zone id is out of range [ 821.249471][T15299] netlink: zone id is out of range [ 821.322968][T15299] netlink: zone id is out of range [ 821.346677][T15299] netlink: zone id is out of range [ 821.361421][T15299] netlink: zone id is out of range [ 821.366778][T15299] netlink: zone id is out of range [ 821.376531][T15299] netlink: zone id is out of range [ 821.397878][T15299] netlink: zone id is out of range [ 821.404504][T15299] netlink: zone id is out of range [ 821.674684][T15306] CIFS: VFS: Malformed UNC in devname [ 821.792473][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 821.792487][ T30] audit: type=1326 audit(1749422368.792:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.3.2539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 821.863434][ T30] audit: type=1326 audit(1749422368.842:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.3.2539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 821.885601][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.945835][ T30] audit: type=1326 audit(1749422368.842:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.3.2539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 821.968022][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.031358][ T30] audit: type=1326 audit(1749422368.842:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.3.2539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 822.071841][ T30] audit: type=1326 audit(1749422368.842:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.3.2539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 822.156132][ T30] audit: type=1326 audit(1749422368.852:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.3.2539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 822.389429][ T30] audit: type=1326 audit(1749422368.852:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.3.2539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 822.496132][ T30] audit: type=1326 audit(1749422368.852:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.3.2539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 822.518327][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.639409][ T30] audit: type=1326 audit(1749422368.852:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.3.2539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 822.758458][ T30] audit: type=1326 audit(1749422368.852:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.3.2539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 822.780682][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.888355][T15319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2543'. [ 823.746153][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 823.938419][T15346] fuse: Unknown parameter 'f$' [ 823.955897][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2554'. [ 823.970972][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2554'. [ 824.759442][ T24] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 824.789638][T15370] FAULT_INJECTION: forcing a failure. [ 824.789638][T15370] name failslab, interval 1, probability 0, space 0, times 0 [ 824.814452][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.2.2562 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 824.814484][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 824.814497][T15370] Call Trace: [ 824.814507][T15370] [ 824.814517][T15370] dump_stack_lvl+0x189/0x250 [ 824.814558][T15370] ? __pfx____ratelimit+0x10/0x10 [ 824.814593][T15370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.814629][T15370] ? __pfx__printk+0x10/0x10 [ 824.814658][T15370] ? __pfx___might_resched+0x10/0x10 [ 824.814677][T15370] ? fs_reclaim_acquire+0x7d/0x100 [ 824.814709][T15370] should_fail_ex+0x414/0x560 [ 824.814742][T15370] should_failslab+0xa8/0x100 [ 824.814764][T15370] __kmalloc_cache_noprof+0x70/0x3d0 [ 824.814779][T15370] ? drm_master_create+0x51/0x3c0 [ 824.814802][T15370] drm_master_create+0x51/0x3c0 [ 824.814822][T15370] drm_mode_create_lease_ioctl+0x6eb/0x1970 [ 824.814855][T15370] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 824.814892][T15370] ? do_raw_spin_unlock+0x122/0x240 [ 824.814912][T15370] ? _raw_spin_unlock+0x28/0x50 [ 824.814934][T15370] ? drm_is_current_master+0x19f/0x200 [ 824.814955][T15370] drm_ioctl_kernel+0x2cc/0x390 [ 824.814976][T15370] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 824.814999][T15370] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 824.815028][T15370] drm_ioctl+0x67f/0xb10 [ 824.815047][T15370] ? __lock_acquire+0xab9/0xd20 [ 824.815071][T15370] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 824.815097][T15370] ? __pfx_drm_ioctl+0x10/0x10 [ 824.815128][T15370] ? __fget_files+0x3a0/0x420 [ 824.815146][T15370] ? __fget_files+0x2a/0x420 [ 824.815181][T15370] ? drm_compat_ioctl+0xa7/0x330 [ 824.815197][T15370] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 824.815224][T15370] __ia32_compat_sys_ioctl+0x543/0x840 [ 824.815252][T15370] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 824.815279][T15370] ? __fget_files+0x3a0/0x420 [ 824.815304][T15370] ? fput+0xa0/0xd0 [ 824.815325][T15370] ? ksys_write+0x22a/0x250 [ 824.815345][T15370] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 824.815369][T15370] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.815396][T15370] __do_fast_syscall_32+0xb6/0x2b0 [ 824.815412][T15370] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.815439][T15370] do_fast_syscall_32+0x34/0x80 [ 824.815455][T15370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 824.815473][T15370] RIP: 0023:0xf7ff1539 [ 824.815486][T15370] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 824.815500][T15370] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 824.815517][T15370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 824.815528][T15370] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 824.815537][T15370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 824.815546][T15370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 824.815555][T15370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 824.815575][T15370] [ 825.385145][T15374] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 825.395017][ T24] usb 4-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 825.409830][T12336] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 825.414154][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.471217][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 825.480731][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 825.488918][ T24] usb 4-1: SerialNumber: syz [ 825.569803][T12336] usb 5-1: Using ep0 maxpacket: 32 [ 825.585475][T12336] usb 5-1: config 0 has an invalid interface number: 210 but max is 0 [ 825.607487][T12336] usb 5-1: config 0 has no interface number 0 [ 825.621746][T12336] usb 5-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=9e.d7 [ 825.631125][T12336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.639155][T12336] usb 5-1: Product: syz [ 825.656728][T12336] usb 5-1: Manufacturer: syz [ 825.661555][T12336] usb 5-1: SerialNumber: syz [ 825.669835][T12336] usb 5-1: config 0 descriptor?? [ 825.677419][T12336] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 825.712664][ T24] usb 4-1: 0:2 : does not exist [ 825.718357][T15377] FAULT_INJECTION: forcing a failure. [ 825.718357][T15377] name failslab, interval 1, probability 0, space 0, times 0 [ 825.734951][T15377] CPU: 0 UID: 0 PID: 15377 Comm: syz.1.2564 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 825.734982][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.734996][T15377] Call Trace: [ 825.735005][T15377] [ 825.735014][T15377] dump_stack_lvl+0x189/0x250 [ 825.735054][T15377] ? __pfx____ratelimit+0x10/0x10 [ 825.735090][T15377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 825.735123][T15377] ? __pfx__printk+0x10/0x10 [ 825.735153][T15377] ? __pfx___might_resched+0x10/0x10 [ 825.735173][T15377] ? fs_reclaim_acquire+0x7d/0x100 [ 825.735204][T15377] should_fail_ex+0x414/0x560 [ 825.735238][T15377] should_failslab+0xa8/0x100 [ 825.735265][T15377] __kmalloc_cache_noprof+0x70/0x3d0 [ 825.735287][T15377] ? snd_ctl_ioctl_compat+0x326/0xdd0 [ 825.735322][T15377] snd_ctl_ioctl_compat+0x326/0xdd0 [ 825.735358][T15377] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 825.735388][T15377] ? __fget_files+0x2a/0x420 [ 825.735418][T15377] ? __fget_files+0x3a0/0x420 [ 825.735442][T15377] ? __fget_files+0x2a/0x420 [ 825.735471][T15377] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 825.735509][T15377] __ia32_compat_sys_ioctl+0x543/0x840 [ 825.735559][T15377] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 825.735593][T15377] ? __fget_files+0x3a0/0x420 [ 825.735626][T15377] ? fput+0xa0/0xd0 [ 825.735655][T15377] ? ksys_write+0x22a/0x250 [ 825.735684][T15377] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 825.735707][T15377] ? lockdep_hardirqs_on+0x9c/0x150 [ 825.735743][T15377] __do_fast_syscall_32+0xb6/0x2b0 [ 825.735766][T15377] ? lockdep_hardirqs_on+0x9c/0x150 [ 825.735803][T15377] do_fast_syscall_32+0x34/0x80 [ 825.735826][T15377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 825.735852][T15377] RIP: 0023:0xf709e539 [ 825.735870][T15377] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 825.735889][T15377] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 825.735910][T15377] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c2c45512 [ 825.735924][T15377] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 825.735938][T15377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.735951][T15377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 825.735964][T15377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.735994][T15377] [ 825.736285][ T24] usb 4-1: unit 225 not found! [ 825.894268][T15372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.937689][ T24] usb 4-1: USB disconnect, device number 106 [ 825.996224][T15372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.042582][T12336] usb 5-1: USB disconnect, device number 102 [ 826.110998][T15379] __nla_validate_parse: 2 callbacks suppressed [ 826.111018][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'. [ 826.147200][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'. [ 826.191574][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'. [ 826.292054][T15381] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 826.323168][T15381] batman_adv: batadv0: Adding interface: ip6gretap1 [ 826.357575][T15381] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 826.719490][ T24] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 826.758900][T15401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.783854][T15404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.824331][T15407] binder: 15406:15407 ioctl c0306201 800002c0 returned -14 [ 826.836443][T15407] binder: 15406:15407 ioctl 6609 0 returned -22 [ 826.901457][ T24] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 826.911188][ T24] usb 2-1: config 8 has no interface number 0 [ 826.917697][ T24] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 826.930328][ T24] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 826.942079][ T24] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 826.987190][ T24] usb 2-1: config 8 interface 177 has no altsetting 0 [ 827.047918][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 827.133706][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.320348][T15392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 827.730382][T15423] FAULT_INJECTION: forcing a failure. [ 827.730382][T15423] name failslab, interval 1, probability 0, space 0, times 0 [ 827.795948][T15423] CPU: 1 UID: 0 PID: 15423 Comm: syz.3.2578 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 827.795981][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 827.795994][T15423] Call Trace: [ 827.796006][T15423] [ 827.796016][T15423] dump_stack_lvl+0x189/0x250 [ 827.796054][T15423] ? __pfx____ratelimit+0x10/0x10 [ 827.796088][T15423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.796121][T15423] ? __pfx__printk+0x10/0x10 [ 827.796148][T15423] ? __pfx___might_resched+0x10/0x10 [ 827.796167][T15423] ? fs_reclaim_acquire+0x7d/0x100 [ 827.796197][T15423] should_fail_ex+0x414/0x560 [ 827.796231][T15423] should_failslab+0xa8/0x100 [ 827.796257][T15423] __kmalloc_noprof+0xcb/0x4f0 [ 827.796278][T15423] ? security_prepare_creds+0x52/0x390 [ 827.796310][T15423] security_prepare_creds+0x52/0x390 [ 827.796340][T15423] prepare_creds+0x497/0x6c0 [ 827.796378][T15423] join_session_keyring+0x1b/0x440 [ 827.796411][T15423] lookup_user_key+0x4a3/0x1090 [ 827.796440][T15423] ? irqentry_exit+0x74/0x90 [ 827.796460][T15423] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.796497][T15423] ? __pfx_lookup_user_key+0x10/0x10 [ 827.796528][T15423] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 827.796565][T15423] ? rep_movs_alternative+0x4a/0x90 [ 827.796596][T15423] __se_sys_add_key+0x2f5/0x400 [ 827.796622][T15423] ? __pfx___se_sys_add_key+0x10/0x10 [ 827.796649][T15423] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 827.796672][T15423] ? __ia32_sys_add_key+0x20/0xc0 [ 827.796697][T15423] __do_fast_syscall_32+0xb6/0x2b0 [ 827.796720][T15423] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.796758][T15423] do_fast_syscall_32+0x34/0x80 [ 827.796780][T15423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 827.796805][T15423] RIP: 0023:0xf708e539 [ 827.796823][T15423] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 827.796840][T15423] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 827.796863][T15423] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000000 [ 827.796878][T15423] RDX: 0000000080000100 RSI: 00000000000fffff RDI: 00000000fffffffd [ 827.796891][T15423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 827.796903][T15423] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 827.796915][T15423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 827.796943][T15423] [ 828.041890][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.214160][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2579'. [ 828.386221][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2579'. [ 828.410508][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2579'. [ 828.684218][T12335] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 828.849900][T12335] usb 3-1: Using ep0 maxpacket: 16 [ 828.857807][T12335] usb 3-1: config 75 has an invalid interface number: 136 but max is 0 [ 828.866718][T12335] usb 3-1: config 75 has no interface number 0 [ 828.897816][T12335] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=bc.ca [ 828.915186][T12335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.941002][T12335] usb 3-1: Product: syz [ 828.952731][T12335] usb 3-1: Manufacturer: syz [ 828.964772][T12335] usb 3-1: SerialNumber: syz [ 829.197752][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2580'. [ 829.292162][T12335] ftdi_sio 3-1:75.136: FTDI USB Serial Device converter detected [ 829.338396][T12335] ftdi_sio ttyUSB0: unknown device type: 0xbcca [ 829.382960][ T24] usb 2-1: string descriptor 0 read error: -71 [ 829.412992][T12335] usb 3-1: USB disconnect, device number 90 [ 829.457836][T12335] ftdi_sio 3-1:75.136: device disconnected [ 829.458453][ T24] ir_toy 2-1:8.177: required endpoints not found [ 829.545973][ T24] usb 2-1: USB disconnect, device number 97 [ 830.566081][T15457] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 830.780228][T12314] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 831.017620][T12314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.050708][T12314] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 831.151953][T12314] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 831.195673][T12314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.195726][T12314] usb 3-1: Product: syz [ 831.195746][T12314] usb 3-1: Manufacturer: syz [ 831.195765][T12314] usb 3-1: SerialNumber: syz [ 831.198967][T12314] usb 3-1: config 0 descriptor?? [ 832.185946][T15470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2592'. [ 832.820709][T15487] FAULT_INJECTION: forcing a failure. [ 832.820709][T15487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.882040][T15487] CPU: 0 UID: 0 PID: 15487 Comm: syz.4.2596 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 832.882074][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 832.882089][T15487] Call Trace: [ 832.882099][T15487] [ 832.882110][T15487] dump_stack_lvl+0x189/0x250 [ 832.882151][T15487] ? __pfx____ratelimit+0x10/0x10 [ 832.882186][T15487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.882220][T15487] ? __pfx__printk+0x10/0x10 [ 832.882246][T15487] ? __might_fault+0xb0/0x130 [ 832.882281][T15487] should_fail_ex+0x414/0x560 [ 832.882318][T15487] _copy_from_user+0x2d/0xb0 [ 832.882344][T15487] csum_and_copy_from_iter_full+0x1e1/0x1eb0 [ 832.882401][T15487] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 832.882438][T15487] ? __alloc_skb+0x142/0x2d0 [ 832.882471][T15487] ? trace_kmalloc+0x1f/0xd0 [ 832.882496][T15487] ip_generic_getfrag+0x12f/0x2b0 [ 832.882536][T15487] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 832.882575][T15487] ? skb_put+0x11b/0x210 [ 832.882608][T15487] __ip_append_data+0x3240/0x40f0 [ 832.882652][T15487] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 832.882721][T15487] ? __pfx___ip_append_data+0x10/0x10 [ 832.882749][T15487] ? __local_bh_enable_ip+0x12d/0x1c0 [ 832.882783][T15487] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.882821][T15487] ip_append_data+0x10e/0x190 [ 832.882847][T15487] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 832.882885][T15487] udp_sendmsg+0x550/0x2300 [ 832.882919][T15487] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 832.882958][T15487] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 832.882994][T15487] ? __pfx_udp_sendmsg+0x10/0x10 [ 832.883023][T15487] ? __lock_acquire+0xab9/0xd20 [ 832.883082][T15487] ? __pfx_aa_sk_perm+0x10/0x10 [ 832.883107][T15487] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 832.883144][T15487] ? __fget_files+0x2a/0x420 [ 832.883169][T15487] ? sock_rps_record_flow+0x19/0x410 [ 832.883196][T15487] ? inet_sendmsg+0x29c/0x370 [ 832.883218][T15487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 832.883253][T15487] __sock_sendmsg+0x19c/0x270 [ 832.883280][T15487] __sys_sendto+0x3bd/0x520 [ 832.883311][T15487] ? __pfx___sys_sendto+0x10/0x10 [ 832.883335][T15487] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 832.883372][T15487] ? __fget_files+0x3a0/0x420 [ 832.883410][T15487] ? ksys_write+0x22a/0x250 [ 832.883443][T15487] __ia32_sys_sendto+0xdd/0x100 [ 832.883475][T15487] __do_fast_syscall_32+0xb6/0x2b0 [ 832.883499][T15487] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.883539][T15487] do_fast_syscall_32+0x34/0x80 [ 832.883563][T15487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 832.883590][T15487] RIP: 0023:0xf709e539 [ 832.883610][T15487] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 832.883629][T15487] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 832.883654][T15487] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000c80 [ 832.883670][T15487] RDX: 0000000000006200 RSI: 0000000012000000 RDI: 0000000000000000 [ 832.883693][T15487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 832.883706][T15487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 832.883720][T15487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 832.883751][T15487] [ 833.211941][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.228122][ T5920] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 833.467418][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 833.471543][T12335] usb 3-1: USB disconnect, device number 91 [ 833.537217][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.578259][ T5920] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 833.595505][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.619472][ T5920] usb 2-1: Product: syz [ 833.623721][ T5920] usb 2-1: Manufacturer: syz [ 833.628351][ T5920] usb 2-1: SerialNumber: syz [ 833.659037][ T5920] usb 2-1: config 0 descriptor?? [ 833.681586][ T5920] usb 2-1: bad CDC descriptors [ 833.700136][ T5920] usb 2-1: unsupported MDLM descriptors [ 834.124151][T15481] fuse: Unknown parameter '' [ 834.199766][T12335] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 834.303394][T15481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.332402][T15481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.368927][ T24] usb 2-1: USB disconnect, device number 98 [ 834.419384][T12335] usb 5-1: Using ep0 maxpacket: 16 [ 834.427416][T12335] usb 5-1: unable to get BOS descriptor or descriptor too short [ 834.436990][T12335] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 834.452293][T12335] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 834.466044][T12335] usb 5-1: config 1 interface 0 has no altsetting 0 [ 834.478457][T12335] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 834.488948][T12335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.497229][T12335] usb 5-1: Product: syz [ 834.501903][T12335] usb 5-1: Manufacturer: syz [ 834.506555][T12335] usb 5-1: SerialNumber: syz [ 835.046329][T15510] batman_adv: batadv0: Removing interface: ip6gretap1 [ 835.184025][ T24] IPVS: starting estimator thread 0... [ 835.349956][T15513] IPVS: using max 36 ests per chain, 86400 per kthread [ 835.706171][T15505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.839796][T12336] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 836.003390][T12336] usb 2-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.028157][T12336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 836.088687][T12336] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 836.203058][T12336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.251146][T15517] kvm: user requested TSC rate below hardware speed [ 836.301047][T12336] usb 2-1: config 0 descriptor?? [ 836.743495][T12336] a4tech 0003:09DA:001A.0029: unbalanced collection at end of report description [ 836.808394][T12336] a4tech 0003:09DA:001A.0029: parse failed [ 836.845439][T12336] a4tech 0003:09DA:001A.0029: probe with driver a4tech failed with error -22 [ 837.006244][T12335] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 837.412255][T12335] usb 5-1: USB disconnect, device number 103 [ 837.592448][T12336] usb 2-1: USB disconnect, device number 99 [ 837.994034][T12335] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 838.013483][T15539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 838.026218][T15539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 838.036513][T15539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 838.237216][T12335] usb 5-1: config 0 has no interfaces? [ 838.243354][T12335] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 838.258134][T12335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.363416][T12335] usb 5-1: config 0 descriptor?? [ 838.524664][T12314] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 838.652709][T12335] usb 5-1: USB disconnect, device number 104 [ 838.689440][T12314] usb 4-1: Using ep0 maxpacket: 16 [ 838.702832][T12314] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 838.717190][T12314] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 838.752869][T12314] usb 4-1: Product: syz [ 838.770045][T12314] usb 4-1: Manufacturer: syz [ 838.784972][T12314] usb 4-1: SerialNumber: syz [ 838.826127][T12314] usb 4-1: config 0 descriptor?? [ 838.985117][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2612'. [ 839.279901][T12314] usb 4-1: USB disconnect, device number 107 [ 839.417032][T15554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.554871][T15560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2616'. [ 839.662131][T15564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.676409][T15564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.741970][T15547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.899905][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 842.056845][ T5920] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 842.231781][ T5920] usb 5-1: config 0 has no interfaces? [ 842.237551][ T5920] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 842.247324][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.302921][ T5920] usb 5-1: config 0 descriptor?? [ 842.394977][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 842.414940][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 842.430569][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 842.564884][ T5920] usb 5-1: USB disconnect, device number 105 [ 843.092662][T15583] syz.0.2618 (15583): drop_caches: 2 [ 843.414125][T15621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.635941][T15626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.666208][T15626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.697363][T15626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.708459][T15626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.717870][T15626] geneve0: entered promiscuous mode [ 843.775049][T15626] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2634'. [ 844.305637][T15645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2640'. [ 844.604266][T15627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.710275][ T5920] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 844.899617][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 844.912370][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.936186][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 844.957354][ T5920] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 844.966896][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.986166][ T5920] usb 5-1: config 0 descriptor?? [ 845.452797][ T5920] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 845.467384][ T5920] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 845.482548][ T5920] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 845.490356][ T5920] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 845.553789][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2647'. [ 845.563634][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2647'. [ 845.589864][ T5920] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 845.603046][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2647'. [ 845.635005][ T5920] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 845.657508][ T5920] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 845.670155][ T5920] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 845.684006][ T5920] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 845.694949][ T5920] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 845.717653][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 845.728373][ T5920] HID 045e:07da: Invalid code 768 type 1 [ 845.728399][ T5920] HID 045e:07da: Invalid code 769 type 1 [ 845.728416][ T5920] HID 045e:07da: Invalid code 770 type 1 [ 845.728432][ T5920] HID 045e:07da: Invalid code 771 type 1 [ 845.728464][ T5920] HID 045e:07da: Invalid code 772 type 1 [ 845.728480][ T5920] HID 045e:07da: Invalid code 773 type 1 [ 845.728495][ T5920] HID 045e:07da: Invalid code 774 type 1 [ 845.728511][ T5920] HID 045e:07da: Invalid code 775 type 1 [ 845.728526][ T5920] HID 045e:07da: Invalid code 776 type 1 [ 845.759714][ T5920] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002A/input/input29 [ 845.925632][ T5920] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 846.397795][T15675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.917395][T15682] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 846.930411][T15682] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 846.944875][T15682] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 847.117790][T15686] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 847.124384][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 847.134887][T15686] vhci_hcd vhci_hcd.0: Device attached [ 847.156725][T15686] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 847.163405][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 847.169488][T15692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.178932][T15686] vhci_hcd vhci_hcd.0: Device attached [ 847.213499][T15692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2655'. [ 847.224077][T15686] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 847.230757][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 847.243673][T15686] vhci_hcd vhci_hcd.0: Device attached [ 847.258072][T15686] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 847.264752][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 847.278694][T15686] vhci_hcd vhci_hcd.0: Device attached [ 847.297007][T15686] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 847.303697][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 847.319124][T15686] vhci_hcd vhci_hcd.0: Device attached [ 847.325134][T12335] vhci_hcd: vhci_device speed not set [ 847.340881][T15686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 847.359746][T15686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 847.390228][T12335] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 847.424609][T15699] vhci_hcd: connection closed [ 847.424880][T12114] vhci_hcd: stop threads [ 847.425480][T15697] vhci_hcd: connection closed [ 847.429758][T12114] vhci_hcd: release socket [ 847.429876][T12114] vhci_hcd: disconnect device [ 847.448482][T15695] vhci_hcd: connection closed [ 847.460347][T15688] vhci_hcd: connection reset by peer [ 847.470808][T15693] vhci_hcd: connection closed [ 847.497415][T12336] usb 5-1: USB disconnect, device number 106 [ 847.538570][T12114] vhci_hcd: stop threads [ 847.566225][T12114] vhci_hcd: release socket [ 847.589745][T12114] vhci_hcd: disconnect device [ 847.597816][T12114] vhci_hcd: stop threads [ 847.604360][T12114] vhci_hcd: release socket [ 847.609129][T12114] vhci_hcd: disconnect device [ 847.617597][T12114] vhci_hcd: stop threads [ 847.624827][T12114] vhci_hcd: release socket [ 847.632620][T12114] vhci_hcd: disconnect device [ 847.644380][T12114] vhci_hcd: stop threads [ 847.648882][T12114] vhci_hcd: release socket [ 847.657323][T12114] vhci_hcd: disconnect device [ 847.943546][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2656'. [ 848.138932][T15713] fuse: Bad value for 'fd' [ 848.678342][T15727] batman_adv: batadv0: Adding interface: macvlan2 [ 848.708939][T15727] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.746185][T15727] batman_adv: batadv0: Interface activated: macvlan2 [ 848.757498][T15732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2666'. [ 848.785383][T15731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.968625][T15736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.980880][T15736] netlink: 'syz.4.2668': attribute type 72 has an invalid length. [ 849.052117][T15712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.074305][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2668'. [ 849.210684][ T5920] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 849.371898][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 849.378850][ T5920] usb 4-1: config index 0 descriptor too short (expected 37201, got 68) [ 849.398107][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.411664][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 849.431570][ T5920] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 849.444377][ T5920] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 849.455821][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 849.459490][ T5972] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 849.522816][ T5920] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 849.534727][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 849.599399][ T5920] usb 4-1: SerialNumber: syz [ 849.608070][T15734] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 849.627297][T15743] input: syz0 as /devices/virtual/input/input30 [ 849.658553][ T5920] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 849.693448][ T5972] usb 3-1: config 0 has no interfaces? [ 849.700614][ T5972] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 849.715185][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.747283][ T5972] usb 3-1: config 0 descriptor?? [ 849.795896][ T5920] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 849.805840][T15745] FAULT_INJECTION: forcing a failure. [ 849.805840][T15745] name failslab, interval 1, probability 0, space 0, times 0 [ 849.826926][T15745] CPU: 0 UID: 0 PID: 15745 Comm: syz.4.2671 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 849.826950][T15745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 849.826960][T15745] Call Trace: [ 849.826967][T15745] [ 849.826974][T15745] dump_stack_lvl+0x189/0x250 [ 849.827004][T15745] ? __pfx____ratelimit+0x10/0x10 [ 849.827029][T15745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.827066][T15745] ? __pfx__printk+0x10/0x10 [ 849.827084][T15745] ? __pfx___might_resched+0x10/0x10 [ 849.827098][T15745] ? fs_reclaim_acquire+0x7d/0x100 [ 849.827121][T15745] should_fail_ex+0x414/0x560 [ 849.827146][T15745] should_failslab+0xa8/0x100 [ 849.827164][T15745] __kmalloc_noprof+0xcb/0x4f0 [ 849.827178][T15745] ? tomoyo_encode+0x28b/0x550 [ 849.827203][T15745] tomoyo_encode+0x28b/0x550 [ 849.827229][T15745] tomoyo_realpath_from_path+0x58d/0x5d0 [ 849.827258][T15745] ? tomoyo_domain+0xd9/0x130 [ 849.827285][T15745] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 849.827304][T15745] tomoyo_path_number_perm+0x1e8/0x5a0 [ 849.827324][T15745] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 849.827356][T15745] ? __lock_acquire+0xab9/0xd20 [ 849.827392][T15745] ? __fget_files+0x2a/0x420 [ 849.827413][T15745] ? __fget_files+0x3a0/0x420 [ 849.827429][T15745] ? __fget_files+0x2a/0x420 [ 849.827450][T15745] security_file_ioctl_compat+0xcb/0x2d0 [ 849.827469][T15745] __ia32_compat_sys_ioctl+0x128/0x840 [ 849.827495][T15745] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 849.827521][T15745] ? __fget_files+0x3a0/0x420 [ 849.827544][T15745] ? fput+0xa0/0xd0 [ 849.827564][T15745] ? ksys_write+0x22a/0x250 [ 849.827584][T15745] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 849.827600][T15745] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.827625][T15745] __do_fast_syscall_32+0xb6/0x2b0 [ 849.827641][T15745] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.827667][T15745] do_fast_syscall_32+0x34/0x80 [ 849.827682][T15745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 849.827700][T15745] RIP: 0023:0xf709e539 [ 849.827713][T15745] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 849.827727][T15745] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 849.827743][T15745] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089a2 [ 849.827753][T15745] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 849.827762][T15745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 849.827771][T15745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 849.827780][T15745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 849.827800][T15745] [ 849.827818][T15745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 850.017935][T12314] usb 3-1: USB disconnect, device number 92 [ 850.444363][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 850.444383][ T30] audit: type=1326 audit(1749422397.442:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.4.2672" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709e539 code=0x0 [ 850.623265][ T30] audit: type=1326 audit(1749422397.442:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.4.2672" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709e539 code=0x0 [ 850.930039][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2675'. [ 851.021573][T12336] usb 4-1: USB disconnect, device number 108 [ 851.068456][T15767] usb usb8: usbfs: process 15767 (syz.0.2674) did not claim interface 0 before use [ 851.391453][T15772] loop2: detected capacity change from 0 to 7 [ 851.411362][T15772] Dev loop2: unable to read RDB block 7 [ 851.419202][T15772] loop2: AHDI p2 p3 [ 851.434794][T15772] loop2: partition table partially beyond EOD, truncated [ 851.484018][T15772] loop2: p2 size 150995456 extends beyond EOD, truncated [ 851.783604][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 851.813192][ T5207] Dev loop2: unable to read RDB block 7 [ 851.832598][ T5207] loop2: AHDI p2 p3 [ 851.854941][ T5207] loop2: partition table partially beyond EOD, truncated [ 851.878143][ T5207] loop2: p2 size 150995456 extends beyond EOD, truncated [ 851.937927][T15785] binder_alloc: 15784: pid 15784 spamming oneway? 1 buffers allocated for a total size of 4096 [ 852.011813][T15787] binder: 15784:15787 unknown command 1077961494 [ 852.076285][T15787] binder: 15784:15787 ioctl c0306201 80000c00 returned -22 [ 852.105018][ T8082] udevd[8082]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 852.121485][T15782] kvm: user requested TSC rate below hardware speed [ 852.163412][T15782] kvm: user requested TSC rate below hardware speed [ 852.211395][T15782] kvm: user requested TSC rate below hardware speed [ 852.255388][T15790] FAULT_INJECTION: forcing a failure. [ 852.255388][T15790] name failslab, interval 1, probability 0, space 0, times 0 [ 852.288995][T15782] kvm: user requested TSC rate below hardware speed [ 852.304877][T15782] kvm: user requested TSC rate below hardware speed [ 852.360005][T15790] CPU: 0 UID: 0 PID: 15790 Comm: syz.0.2683 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 852.360036][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 852.360050][T15790] Call Trace: [ 852.360059][T15790] [ 852.360069][T15790] dump_stack_lvl+0x189/0x250 [ 852.360108][T15790] ? __pfx____ratelimit+0x10/0x10 [ 852.360141][T15790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 852.360173][T15790] ? __pfx__printk+0x10/0x10 [ 852.360202][T15790] ? __pfx___might_resched+0x10/0x10 [ 852.360227][T15790] should_fail_ex+0x414/0x560 [ 852.360261][T15790] should_failslab+0xa8/0x100 [ 852.360298][T15790] kmem_cache_alloc_noprof+0x73/0x3c0 [ 852.360321][T15790] ? mas_alloc_nodes+0x2e9/0x8e0 [ 852.360345][T15790] mas_alloc_nodes+0x2e9/0x8e0 [ 852.360373][T15790] mas_preallocate+0x39e/0x6b0 [ 852.360409][T15790] ? __pfx_mas_preallocate+0x10/0x10 [ 852.360449][T15790] ? __asan_memset+0x22/0x50 [ 852.360489][T15790] commit_merge+0x1fd/0x700 [ 852.360521][T15790] ? up_write+0x1c4/0x420 [ 852.360543][T15790] ? __pfx___anon_vma_interval_tree_augment_rotate+0x10/0x10 [ 852.360577][T15790] ? __pfx_commit_merge+0x10/0x10 [ 852.360604][T15790] ? anon_vma_clone+0x494/0x4f0 [ 852.360648][T15790] vma_modify+0x1363/0x1970 [ 852.360707][T15790] vma_modify_flags+0x1e8/0x230 [ 852.360739][T15782] kvm: user requested TSC rate below hardware speed [ 852.360745][T15790] ? __pfx_vma_modify_flags+0x10/0x10 [ 852.360798][T15790] mlock_fixup+0x22a/0x360 [ 852.360841][T15790] apply_mlockall_flags+0x2f0/0x3c0 [ 852.360883][T15790] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 852.360932][T15790] ? __pfx_down_write_killable+0x10/0x10 [ 852.360960][T15790] ? ksys_write+0x22a/0x250 [ 852.361014][T15790] __ia32_sys_munlockall+0x10a/0x220 [ 852.361053][T15790] __do_fast_syscall_32+0xb6/0x2b0 [ 852.361081][T15790] ? lockdep_hardirqs_on+0x9c/0x150 [ 852.361130][T15790] do_fast_syscall_32+0x34/0x80 [ 852.361156][T15790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 852.361187][T15790] RIP: 0023:0xf7f38539 [ 852.361208][T15790] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 852.361231][T15790] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000099 [ 852.361257][T15790] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 852.361274][T15790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 852.361299][T15790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 852.361313][T15790] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 852.361329][T15790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 852.361365][T15790] [ 852.519880][T12335] vhci_hcd: vhci_device speed not set [ 852.536604][T15790] vmg ffffc9000b4cfc20 dumped because: VM_WARN_ON_VMG(prev && start <= prev->vm_start) [ 852.665494][T15790] vmg ffffc9000b4cfc20 state: mm ffff88801ef060c0 pgoff 80130 [ 852.665494][T15790] vmi ffffc9000b4cfdc0 [80130000,80800000) [ 852.665494][T15790] prev ffff8880202e0780 middle ffff8880202e0780 next 0000000000000000 target 0000000000000000 [ 852.665494][T15790] start 80130000 end 80800000 flags 28100077 [ 852.665494][T15790] file 0000000000000000 anon_vma ffff888031361ee0 policy 0000000000000000 [ 852.665494][T15790] uffd_ctx 0000000000000000 [ 852.665494][T15790] anon_name 0000000000000000 [ 852.665494][T15790] state 0 [ 852.665494][T15790] just_expand 0 [ 852.665494][T15790] __adjust_middle_start 0 __adjust_next_start 0 [ 852.665494][T15790] __remove_middle 0 __remove_next 0 [ 852.742895][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.872412][T15790] vmg ffffc9000b4cfc20 mm: [ 852.935488][T15790] mm ffff88801ef060c0 task_size 4294959104 [ 852.935488][T15790] mmap_base 139842942144512 mmap_legacy_base 47789853024256 [ 852.935488][T15790] pgd ffff888033fac000 mm_users 3 mm_count 3 pgtables_bytes 114688 map_count 39 [ 852.935488][T15790] hiwater_rss 1e33 hiwater_vm 5f7d total_vm 5f9d locked_vm 6d0 [ 852.935488][T15790] pinned_vm 0 data_vm 23c3 exec_vm 1ac stack_vm 21 [ 852.935488][T15790] start_code f7079000 end_code f72227f8 start_data f73d0000 end_data f73d0000 [ 852.935488][T15790] start_brk 56c32000 brk 56c54000 start_stack ffce5a60 [ 852.935488][T15790] arg_start ffce6f6d arg_end ffce6f81 env_start ffce6f81 env_end ffce6fe9 [ 852.935488][T15790] binfmt ffffffff8e2b6bc0 flags 800207fd [ 852.935488][T15790] ioctx_table 0000000000000000 [ 852.935488][T15790] owner ffff88803905bc00 exe_file ffff888030d1e380 [ 852.935488][T15790] notifier_subscriptions 0000000000000000 [ 852.935488][T15790] numa_next_scan 4295022418 numa_scan_offset 0 numa_scan_seq 0 [ 852.935488][T15790] tlb_flush_pending 0 [ 852.935488][T15790] def_flags: 0x0() [ 853.034034][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.073664][T15790] vmg ffffc9000b4cfc20 prev: [ 853.087134][T15790] vma ffff8880202e0780 start 0000000080130000 end 0000000080800000 mm ffff88801ef060c0 [ 853.087134][T15790] prot 25 anon_vma ffff888031361ee0 vm_ops 0000000000000000 [ 853.087134][T15790] pgoff 80130 file 0000000000000000 private_data 0000000000000000 [ 853.087134][T15790] refcnt 1 [ 853.087134][T15790] flags: 0x28102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty|hugepage) [ 853.124963][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.153356][T15790] vmg ffffc9000b4cfc20 middle: [ 853.158300][T15790] vma ffff8880202e0780 start 0000000080130000 end 0000000080800000 mm ffff88801ef060c0 [ 853.158300][T15790] prot 25 anon_vma ffff888031361ee0 vm_ops 0000000000000000 [ 853.158300][T15790] pgoff 80130 file 0000000000000000 private_data 0000000000000000 [ 853.158300][T15790] refcnt 1 [ 853.158300][T15790] flags: 0x28102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty|hugepage) [ 853.196042][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.203204][ T5920] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 853.222641][T15790] vmg ffffc9000b4cfc20 next: (NULL) [ 853.228039][T15790] vmg ffffc9000b4cfc20 vmi: [ 853.233397][T15790] MAS: tree=ffff88801ef06100 enode=ffff888078d9060c [ 853.233423][T15790] (ma_active) [ 853.241421][T15790] Store Type: [ 853.245966][T15790] node_store [ 853.267484][T15790] [9/14] index=80130000 last=807fffff [ 853.275572][T15790] min=0 max=80ffffff alloc=0000000000000000, depth=0, flags=0 [ 853.284132][T15790] maple_tree(ffff88801ef06100) flags 30B, height 2 root ffff888033ddea1e [ 853.312199][T15790] 0-ffffffffffffffff: node ffff888033ddea00 depth 0 type 3 parent ffff88801ef06101 contents: 293ab000 74014000 0 ffffffff00319000 0 0 0 0 0 0 | 03 03| ffff888078d9060c 80FFFFFF ffff888033ddee0c F6058FFF ffff888033ddfe0c F705FFFF ffff888032919a0c FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 853.348309][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.412940][ T5920] usb 2-1: config 0 has no interfaces? [ 853.419630][T15790] 0-80ffffff: node ffff888078d90600 depth 1 type 1 parent ffff888033ddea06 contents: 0000000000000000 C22FFFF ffff8880365df780 E22FFFF 0000000000000000 3011FFFF ffff8880365df8c0 3015FFFF 0000000000000000 56C31FFF ffff8880365dfa00 56C53FFF 0000000000000000 7FFFEFFF ffff8880365dfb40 7FFFFFFF ffff88802499dc80 8012FFFF ffff8880202e0780 807FFFFF ffff88806c12bdc0 8092FFFF ffff8880202e08c0 80A92FFF ffff8880202e0140 80A95FFF 0000000000000000 80A96FFF ffff88802499d780 80FFFFFF 000000000000000e [ 853.486574][ T5920] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 853.495886][T15794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.514514][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.523063][ T5920] usb 2-1: Product: syz [ 853.529968][T12314] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 853.548304][ T5920] usb 2-1: Manufacturer: syz [ 853.556417][T15790] 0-c22ffff: 0000000000000000 [ 853.563501][ T5920] usb 2-1: SerialNumber: syz [ 853.568634][T15790] c230000-e22ffff: ffff8880365df780 [ 853.591848][ T5920] usb 2-1: config 0 descriptor?? [ 853.596693][T15790] e230000-3011ffff: 0000000000000000 [ 853.606345][T15790] 30120000-3015ffff: ffff8880365df8c0 [ 853.623139][T15790] 30160000-56c31fff: 0000000000000000 [ 853.638153][T15790] 56c32000-56c53fff: ffff8880365dfa00 [ 853.645260][T15790] 56c54000-7fffefff: 0000000000000000 [ 853.651703][T15790] 7ffff000-7fffffff: ffff8880365dfb40 [ 853.657891][T15790] 80000000-8012ffff: ffff88802499dc80 [ 853.664307][T15790] 80130000-807fffff: ffff8880202e0780 [ 853.670935][T15790] 80800000-8092ffff: ffff88806c12bdc0 [ 853.676697][T15790] 80930000-80a92fff: ffff8880202e08c0 [ 853.683392][T15790] 80a93000-80a95fff: ffff8880202e0140 [ 853.689783][T15790] 80a96000-80a96fff: 0000000000000000 [ 853.698408][T15790] 80a97000-80ffffff: ffff88802499d780 [ 853.705354][T15790] 81000000-f6058fff: node ffff888033ddee00 depth 1 type 1 parent ffff888033ddea0e contents: ffff8880365dfdc0 81000FFF 0000000000000000 F5014FFF ffff88806c12bc80 F5015FFF ffff888031b06000 F5035FFF ffff88806c12bb40 F5036FFF ffff88807e3e0b40 F5056FFF ffff8880339a0780 F5057FFF ffff8880663a7a00 F5857FFF ffff888033c76b40 F5858FFF ffff888064bcbb40 F6058FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000009 [ 853.751571][T12314] usb 4-1: config 0 has no interfaces? [ 853.757366][T12314] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 853.765054][T15790] 81000000-81000fff: ffff8880365dfdc0 [ 853.772583][T12314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.780799][T15790] 81001000-f5014fff: 0000000000000000 [ 853.786957][T15790] f5015000-f5015fff: ffff88806c12bc80 [ 853.823241][T15798] loop6: detected capacity change from 0 to 64 [ 853.831930][T15790] f5016000-f5035fff: ffff888031b06000 [ 853.873183][T15805] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 853.890864][T15805] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 853.900962][T15805] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 853.916028][T15790] f5036000-f5036fff: ffff88806c12bb40 [ 854.473576][T15790] f5037000-f5056fff: ffff88807e3e0b40 [ 854.485516][T15798] Invalid logical block size (4) [ 854.647543][T15790] f5057000-f5057fff: ffff8880339a0780 [ 854.690566][T12314] usb 4-1: config 0 descriptor?? [ 854.734568][T15790] f5058000-f5857fff: ffff8880663a7a00 [ 854.742948][T15790] f5858000-f5858fff: ffff888033c76b40 [ 854.748743][T15790] f5859000-f6058fff: ffff888064bcbb40 [ 854.768010][T15790] f6059000-f705ffff: node ffff888033ddfe00 depth 1 type 1 parent ffff888033ddea16 contents: ffff888064bcbdc0 F605AFFF ffff888064bcba00 F645AFFF ffff888064bcbc80 F645CFFF ffff888078501280 F685CFFF ffff888078501500 F685EFFF ffff88807b9e7c80 F6C5EFFF ffff88807b9e7640 F6C5FFFF ffff88807b9e7140 F705FFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000007 [ 854.844911][T15790] f6059000-f605afff: ffff888064bcbdc0 [ 854.853720][T15790] f605b000-f645afff: ffff888064bcba00 [ 854.884643][T15790] f645b000-f645cfff: ffff888064bcbc80 [ 854.893987][T15790] f645d000-f685cfff: ffff888078501280 [ 854.911355][ T5920] usb 4-1: USB disconnect, device number 109 [ 854.925644][T15790] f685d000-f685efff: ffff888078501500 [ 854.943686][T15790] f685f000-f6c5efff: ffff88807b9e7c80 [ 854.949916][T15790] f6c5f000-f6c5ffff: ffff88807b9e7640 [ 854.956245][T15790] f6c60000-f705ffff: ffff88807b9e7140 [ 854.967244][T15790] f7060000-ffffffffffffffff: node ffff888032919a00 depth 1 type 1 parent ffff888033ddea1e contents: ffff88807b9e7500 F7078FFF ffff88807b9e7b40 F7222FFF ffff888078822a00 F72F9FFF ffff888078822b40 F73C2FFF ffff888078822c80 F73CAFFF 0000000000000000 F73CFFFF ffff8880217b6500 F741FFFF ffff8880217b63c0 F7420FFF ffff8880217b6640 F7F2AFFF 0000000000000000 F7F31FFF ffff888030a07780 F7F35FFF ffff888030a07a00 F7F37FFF ffff888030a078c0 F7F39FFF 0000000000000000 FFCC5FFF ffff888031b06280 FFCE6FFF 0000000000000000 [ 855.014172][ C1] vkms_vblank_simulate: vblank timer overrun [ 855.023161][T15790] f7060000-f7078fff: ffff88807b9e7500 [ 855.029043][T15790] f7079000-f7222fff: ffff88807b9e7b40 [ 855.035383][T15790] f7223000-f72f9fff: ffff888078822a00 [ 855.042633][T15790] f72fa000-f73c2fff: ffff888078822b40 [ 855.049167][T15790] f73c3000-f73cafff: ffff888078822c80 [ 855.055321][T15790] f73cb000-f73cffff: 0000000000000000 [ 855.079509][T12314] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 855.133709][T15790] f73d0000-f741ffff: ffff8880217b6500 [ 855.156820][T15790] f7420000-f7420fff: ffff8880217b63c0 [ 855.209187][T15790] f7421000-f7f2afff: ffff8880217b6640 [ 855.222032][T15790] f7f2b000-f7f31fff: 0000000000000000 [ 855.234540][T15790] f7f32000-f7f35fff: ffff888030a07780 [ 855.246423][T15790] f7f36000-f7f37fff: ffff888030a07a00 [ 855.252570][T12314] usb 3-1: Using ep0 maxpacket: 32 [ 855.261949][T12314] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 855.271631][T12314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.280565][T15790] f7f38000-f7f39fff: ffff888030a078c0 [ 855.290736][T15790] f7f3a000-ffcc5fff: 0000000000000000 [ 855.306080][T12314] usb 3-1: config 0 descriptor?? [ 855.318924][T12314] gspca_main: sunplus-2.14.0 probing 041e:400b [ 855.343105][T15790] ffcc6000-ffce6fff: ffff888031b06280 [ 855.364218][T15790] ffce7000-ffffffffffffffff: 0000000000000000 [ 855.382150][T15790] ------------[ cut here ]------------ [ 855.387725][T15790] WARNING: CPU: 0 PID: 15790 at mm/vma.c:821 vma_modify+0x153d/0x1970 [ 855.396200][T15790] Modules linked in: [ 855.401012][T15790] CPU: 0 UID: 0 PID: 15790 Comm: syz.0.2683 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 855.413179][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 855.424128][T15790] RIP: 0010:vma_modify+0x153d/0x1970 [ 855.429646][T15790] Code: 0b 90 e9 9d ed ff ff e8 41 60 ab ff 90 0f 0b 90 e9 a6 ec ff ff e8 33 60 ab ff 4c 89 f7 48 c7 c6 80 92 96 8b e8 b4 06 f3 ff 90 <0f> 0b 90 e9 4f ed ff ff e8 16 60 ab ff e9 52 ee ff ff e8 0c 60 ab [ 855.449715][T15790] RSP: 0018:ffffc9000b4cfb18 EFLAGS: 00010282 [ 855.455901][T15790] RAX: ffffffff8b5e98cd RBX: ffff8880202e0780 RCX: ffff88803905da00 [ 855.464293][T15790] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 855.472840][T15790] RBP: 0000000080130000 R08: ffffc9000b4cf687 R09: 1ffff92001699ed0 [ 855.481420][T15790] R10: dffffc0000000000 R11: fffff52001699ed1 R12: 0000000080130000 [ 855.489686][T15790] R13: ffffc9000b4cfc40 R14: ffffc9000b4cfc20 R15: 1ffff92001699f88 [ 855.497723][T15790] FS: 0000000000000000(0000) GS:ffff888125c52000(0063) knlGS:00000000f5056b40 [ 855.506765][T15790] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 855.514140][T15790] CR2: 00000000801fc018 CR3: 0000000033fac000 CR4: 00000000003526f0 [ 855.522348][T15790] Call Trace: [ 855.525675][T15790] [ 855.528664][T15790] vma_modify_flags+0x1e8/0x230 [ 855.533693][T15790] ? __pfx_vma_modify_flags+0x10/0x10 [ 855.539241][T15790] mlock_fixup+0x22a/0x360 [ 855.544145][T15790] apply_mlockall_flags+0x2f0/0x3c0 [ 855.549500][T15790] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 855.555303][T15790] ? __pfx_down_write_killable+0x10/0x10 [ 855.561060][T15790] ? ksys_write+0x22a/0x250 [ 855.565626][T15790] __ia32_sys_munlockall+0x10a/0x220 [ 855.571321][T15790] __do_fast_syscall_32+0xb6/0x2b0 [ 855.576475][T15790] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.581781][T15790] do_fast_syscall_32+0x34/0x80 [ 855.586671][T15790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 855.593064][T15790] RIP: 0023:0xf7f38539 [ 855.597164][T15790] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 855.617218][T15790] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000099 [ 855.625748][T15790] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 855.633818][T15790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 855.642220][T15790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 855.650509][T15790] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 855.658525][T15790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 855.666668][T15790] [ 855.670172][T15790] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 855.677488][T15790] CPU: 0 UID: 0 PID: 15790 Comm: syz.0.2683 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 855.689235][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 855.699332][T15790] Call Trace: [ 855.702737][T15790] [ 855.705714][T15790] dump_stack_lvl+0x99/0x250 [ 855.710360][T15790] ? __asan_memcpy+0x40/0x70 [ 855.714999][T15790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 855.720237][T15790] ? __pfx__printk+0x10/0x10 [ 855.724875][T15790] panic+0x2db/0x790 [ 855.728831][T15790] ? __pfx_panic+0x10/0x10 [ 855.733298][T15790] __warn+0x31b/0x4b0 [ 855.737336][T15790] ? vma_modify+0x153d/0x1970 [ 855.742053][T15790] ? vma_modify+0x153d/0x1970 [ 855.746765][T15790] report_bug+0x2be/0x4f0 [ 855.751150][T15790] ? vma_modify+0x153d/0x1970 [ 855.755882][T15790] ? vma_modify+0x153d/0x1970 [ 855.760607][T15790] ? vma_modify+0x153f/0x1970 [ 855.765339][T15790] handle_bug+0x84/0x160 [ 855.769607][T15790] exc_invalid_op+0x1a/0x50 [ 855.774138][T15790] asm_exc_invalid_op+0x1a/0x20 [ 855.779036][T15790] RIP: 0010:vma_modify+0x153d/0x1970 [ 855.784348][T15790] Code: 0b 90 e9 9d ed ff ff e8 41 60 ab ff 90 0f 0b 90 e9 a6 ec ff ff e8 33 60 ab ff 4c 89 f7 48 c7 c6 80 92 96 8b e8 b4 06 f3 ff 90 <0f> 0b 90 e9 4f ed ff ff e8 16 60 ab ff e9 52 ee ff ff e8 0c 60 ab [ 855.803982][T15790] RSP: 0018:ffffc9000b4cfb18 EFLAGS: 00010282 [ 855.810100][T15790] RAX: ffffffff8b5e98cd RBX: ffff8880202e0780 RCX: ffff88803905da00 [ 855.818113][T15790] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 855.826118][T15790] RBP: 0000000080130000 R08: ffffc9000b4cf687 R09: 1ffff92001699ed0 [ 855.834120][T15790] R10: dffffc0000000000 R11: fffff52001699ed1 R12: 0000000080130000 [ 855.842343][T15790] R13: ffffc9000b4cfc40 R14: ffffc9000b4cfc20 R15: 1ffff92001699f88 [ 855.850349][T15790] ? mt_dump_node+0x18cd/0x26b0 [ 855.855235][T15790] ? vma_modify+0x153c/0x1970 [ 855.859973][T15790] vma_modify_flags+0x1e8/0x230 [ 855.864853][T15790] ? __pfx_vma_modify_flags+0x10/0x10 [ 855.870278][T15790] mlock_fixup+0x22a/0x360 [ 855.874731][T15790] apply_mlockall_flags+0x2f0/0x3c0 [ 855.879970][T15790] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 855.885716][T15790] ? __pfx_down_write_killable+0x10/0x10 [ 855.891411][T15790] ? ksys_write+0x22a/0x250 [ 855.895943][T15790] __ia32_sys_munlockall+0x10a/0x220 [ 855.901251][T15790] __do_fast_syscall_32+0xb6/0x2b0 [ 855.906380][T15790] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.911611][T15790] do_fast_syscall_32+0x34/0x80 [ 855.916491][T15790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 855.922834][T15790] RIP: 0023:0xf7f38539 [ 855.926912][T15790] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 855.946558][T15790] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000099 [ 855.955000][T15790] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 855.963000][T15790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 855.971179][T15790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 855.979165][T15790] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 855.987156][T15790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 855.995166][T15790] [ 855.998782][T15790] Kernel Offset: disabled [ 856.003162][T15790] Rebooting in 86400 seconds..