last executing test programs: 22.628415779s ago: executing program 1 (id=6837): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, 0x1, r1, 0x8}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffff001, 0x0, 0x8, r1, 0xc}) 22.605346628s ago: executing program 2 (id=6838): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, 0x0}) userfaultfd(0x80001) 22.147965831s ago: executing program 2 (id=6839): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0xbde, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r1, 0xe, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040), 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0205647, &(0x7f00000002c0)={0x2, @pix={0xfffffb71, 0x0, 0x38414762, 0x0, 0x0, 0x0, 0x1, 0x4}}) 4.820106491s ago: executing program 0 (id=6841): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000001380)) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1, 0x81000}) r3 = syz_clone(0x100000, &(0x7f0000001780)="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", 0x1000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="55a16da5649b70082169b1810896b0505086c8113bc4778c86688c5dee94c3dcd43e364d0172e8b278bd2ff50ae3234307888a0e3912072e6475f0eeab4f7daf2bed65e9b352e7303efab6e5c88b80342697477d098dd9321e1cd4cc37fa7c0b542328f33ea171f0075ff0ba9024e7398bb7f35048a0c06c023c874bfa05a12f03564effcaa117ee2ae6d3bfd8bed3ab6e7bf9b10cb9d345fbf1857bf9879e6e4df93773cee7158e1b8fcc4ecdbeaf606c2b770da99a6f4d8515e254253e00aad159fb96354f235f97275511c4726651445294ecfcaba66cff6699ccae718294ea5e4266a65c2f6979e3e0") sched_getattr(r3, &(0x7f0000000480)={0x38}, 0x38, 0x0) socket$rxrpc(0x21, 0x2, 0xa) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/168, 0xa8) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="97410cfd53a69c5cc3d21e240100a48a15a9af1e308b28d7e0dd3bc5233cb8cf3909d730e674a6d37d6a7e2c9b992462d23b73ba039d0410a54fcadcd7a283bee4886f3924d54d2c3410da6bc466fb7f25504fdd88013d22283c4c6374c7bcfeba05819f50a57d9b711ae3ee3b38a0abbf20628a226aeb8dd53c4efa573db80cf59e9cab1645369061fe", 0x8a, 0x200080c5, &(0x7f0000000000)={0xa, 0x4e1f, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) 4.819583143s ago: executing program 2 (id=6842): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x604) 4.816402703s ago: executing program 2 (id=6843): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000240)={r4, r5, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={r4, r5, 0x1, 0x0, 0x3}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) close(r7) syz_clone3(&(0x7f0000000700)={0x200800000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) ioctl$SNDCTL_DSP_POST(r7, 0x5008, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x7, 0x28002}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010003000000000000000a"], 0x24}}, 0x80) 4.814198448s ago: executing program 4 (id=6844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6537a7e5) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) r1 = syz_io_uring_complete(0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="b336093b7f985109f94aedc56a43f9ec9a075f791f5d6e349d69078d2bcc6be319f2ab17854dd7c439fb384c0bca0af964d0082d4ede06fef0f9b2740cc00f16a37d16c753b8e214953dc334e52ee95b2ad74ef96950bf682ab629c122e521", 0x5f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004000) recvmmsg(r3, &(0x7f00000047c0), 0x0, 0x20000161, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x40c81, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200540600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001320"], 0x0) 4.813080084s ago: executing program 3 (id=6845): r0 = syz_usb_connect(0x0, 0x25c, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e9b7e3405e04bf02069e0000000109024a0201000020000904"], 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x90, 0xee, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x8, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xff, 0x9}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xba, 0xfd, 0x80, 0x20, 0xc}, 0x50, &(0x7f0000000d00)=ANY=[@ANYBLOB="050f5000024410f98a0240468ba2a37bbea88fdb6c6cd0b5cbb5176d0ba06222cb46aeb678134ccff2302ffb2c51e0896348bb98283820753ab16d4938219c186571fdef76b047a9af439907100204930400"], 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x861}}, {0x9f, &(0x7f0000000180)=@string={0x9f, 0x3, "eb004ff2530cb12e453a28f799ed02a0b1f7fc8d346cb3764489402a9d8f8070ccf1ed43fdc0d294316418a1fed1d27fb261a9ce2f4e6e54c167d4c277e61cabcc3c78fa72641d81fe8b3fab2bc1280dd47935a0a80569812d056faad0da06d1016015ee9f84bf5ea08723502761b05841ff2aeb499592fbc3781958a556fc9a05a9fb769b0b623944bdcbafef5c09fb57129a4d44943d45fb635199d4"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x20, 0x2, 0xf1, {0xf1, 0xb, "5b834762a97cba1a9527d9a6cf1d839e0e08a2aa6ef0af2965783ff8bfddf24e11fadc1f0f6ce28d2cfe8a664c27b8add0bbd456e5317e5379ed9f951ff378c006a51b4f49c3c1882d7f29c8e26d62f0f06479005c73ad1ceb55e18bc0d4abfc566c3b9bb9493acb2518c61b003e922785ba2f3e09ced39cf8e4c54fefab9beac55e80ba0d11af2b2353dc2025f06b25d169be642d19c037ba1b6cb05a0015938b094ae36c7dcd7d46f8160808608a196032d8aeb883b1bdb851ca6d13452181a3773d000ec1d245565009a0bb4bad55c0a12d558895673e7e04c6b4e1a3ac9e3c49142e790ddd73c2705d0c8a8d0f"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x40, 0x10, 0x82, "90b72b9f10315af77c51713828b9c5749577266a1d7f1f4c4b4271e5b7349b1651da3c970dd8a76346649d78fd213ff9ef927a9fe695f007938873b72f780a37162c48309de4e1c425780af61c695e3daecfe52dd75ae7056130cc298fa1f50e9123da033d336b328b6fda6dccde44d47b6dd33477e1754c279373ecc2312c8dfe2e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x5, 0x7, 0x1000, 0x6, 0x7fff, 0x200, 0x4, 0xffffffff, 0x3, 0x9, 0x1}}, &(0x7f0000000c80)={0x20, 0x85, 0x4, 0x100}, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) io_setup(0x2007, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1000}) io_uring_enter(r6, 0x2ffb, 0x0, 0x0, 0x0, 0x0) r9 = eventfd2(0x0, 0x800) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000240)="7a8c06bd91b4f3b7", 0xffffffffffffff89, 0x7, 0x0, 0x1, r9}]) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) r10 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x1}) r11 = syz_usb_connect(0x4, 0x33e, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x75, 0xb6, 0xaf, 0xff, 0x2001, 0x7e35, 0x86dc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32c, 0x1, 0x7f, 0x6, 0x10, 0x0, [{{0x9, 0x4, 0x4, 0x2, 0xb, 0xbc, 0x92, 0x47, 0x77, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x40, 0x3, 0xff, "8ddf6f06f6ab9d"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x400, 0x81, 0xf8, "2a68743a03"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x400, 0x6, 0x3, "52adc49e22c7ca7fce"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x8b, "31bb", "d22abd"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x8, "c0b1", "9b"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x2, 0x3, "82c7050248"}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "a35c56"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4e69, 0x200, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x8, 0xf, 0xf2, 0x0, 0x7}]}], [{{0x9, 0x5, 0x80, 0x1c, 0x40, 0x3, 0x16, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x2}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xb, 0x5, 0xf4, [@generic={0x2b, 0x22, "ecbd8eb5416a6564029e846aa26cf0ea816094808edc9ca98ee66f890aed7a9431e8eb9e7a26958ba2"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x1, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0xa, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7fff}]}}, {{0x9, 0x5, 0xb1938ff5aea53e89, 0x2, 0x200, 0x7, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xcc, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x1, 0xf, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x8001}, @generic={0xc2, 0xd, "95bb654dd845e419e141c173a8d293ba4daa9df00541bf69e965d371b2e19955de27f1e20d8a604d0a1f9ca7e5aaaffa7a2ef2e7bcf5518fbac69ee6e106c8e29bcf8f068706dd9356838477cd7434ae8518d14cfd10133f5095e273362edf2ce2a07c1f3c8eeaa34d8592506a1036dff95e3365be64695b272edc72b634be598aa3a1ae3e226e92a2d65342258c5ff530552dff13058236c2360bb60bfeb132c4a09f778d7fcbb7a6ded6ff043e81688a2e3d5bf0d820fcf18addd90a55e62a"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x1, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc7, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x12}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x828, 0x2, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x100}]}}, {{0x9, 0x5, 0x4, 0x10, 0x470, 0xd7, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x1}]}}, {{0x9, 0x5, 0x7, 0x16, 0x400, 0x77, 0x8, 0x0, [@generic={0x39, 0x2, "1c4195dc73a6b28a72e832d36e5be97c1e69b02a80ae4061095d6e331ed258816a6562e7d27ef7f5bf010577e413bf08583f1a4c75179f"}, @generic={0xc8, 0xb, "2b1c393dc5daa0171f78f9b7a6f3f156a07fead39f22cc317c2e2590d2489c7e687a19f756891e07c269fbcce5274c88ae0652c1cd766d82c74c8beb2d05fa2a76cbd180f268007a6f019840580ca98d3ef9ceda13f6237533f331a371cd3f297fdf0c799ff1a9f66c6e985240f9e95c86db9df696b15b3b20ea078b63a3ae5df46c4b6dfe841c8643ab0fd07b53d27907634c978cae6c4406650d0b2a028bc229596a1266758f65abb746592e57442ae991d04672baa4f0325c88f3877767e862f16bc8ba48"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x300, 0x5, 0x1d, 0xe, 0x8, 0x4}, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f1b00020b10010c0a007f033e0d050b10010400a140017a630000000000000000008000"], 0x2, [{0xcb, &(0x7f0000000ac0)=@string={0xcb, 0x3, "1c377a108dac94339e59fb96d9ce48b405e6ddea21bfb8ea037b8def84f308fb63306f89dbb73200044b82255a31ca53fa5beadf257954dfac98fe2ec21171e37c48ee09c30db079ebd539f4363dcdaf54353c27969b3caac90266f1729484c5643940860b6129327561b36babe9411894a7eb71dcd770cc4384c7cf0a9d5b6e4ad6a38c9500ede9b7eeaca86aea9900fa9f0131bb5169d31bde1c521b6a239910f6860c277e201dcfe836e471e651077896f162c553833a9affa9713fa165e466fa71c351c5617180"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4}}]}) bind$tipc(0xffffffffffffffff, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r11, 0x6, 0x3c, &(0x7f0000000c40)="a0fa18c08dcdb748cca33cc7bd1618cff429d1bc936bb6a35dc4cbc5e7c2ee5fa74422828c7e049bd437df112fe6742b7e8e0659cbfd8af3e1ece0c0") 4.812177462s ago: executing program 2 (id=6846): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x280000, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder1\x00', 0x2, 0x0) dup3(r2, r3, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x9624, 0x3180, 0x7ffe, 0x195}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4.808575457s ago: executing program 0 (id=6847): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1b) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2000081}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000be260000029078ac14142fffffffff117ce86000"/42], 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000340)) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000014400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800e00010069703665727370616e000000240002801400050000000000000000000000000000000001040012000500160001000000"], 0x58}}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r9, 0x11, 0x0, 0x7c000) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$inet6(r3, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e23, 0x3, @remote, 0xfc}, 0x1c, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000000360000003a000000000000002400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x0) 4.807984419s ago: executing program 2 (id=6848): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0xa, 0x147b42) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0xffff3f01, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.806972562s ago: executing program 4 (id=6849): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) userfaultfd(0x80001) 4.803196893s ago: executing program 1 (id=6840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c0000001000010000000000000000000000000a2800"], 0x7c}}, 0x0) r1 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f00000003c0)={0x0, 0xec25, 0x800, 0x0, 0x48000335}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x6, &(0x7f0000000380)=[{0x0}], 0x1}) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xd87a5668, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r5, @ANYRES64=0x0, @ANYRES64=r1], 0x146}, 0x4048081) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x2f, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r10, &(0x7f0000007fc0), 0x0, 0xc801c) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 4.802087487s ago: executing program 0 (id=6850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c0000001000010000000000000000000000000a2800"], 0x7c}}, 0x0) r1 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x6, &(0x7f0000000380)=[{0x0}], 0x1}) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xd87a5668, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r4, @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=r1], 0x146}, 0x4048081) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x2f, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x0, 0xc801c) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 4.801809192s ago: executing program 1 (id=6851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r5, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1bcf000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r6, 0x2c9ab000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0) 4.751160032s ago: executing program 3 (id=6853): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x20, 0x6, 0x7, 0x1ffd, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0xffc0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 4.747292214s ago: executing program 4 (id=6854): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0xfffffffffffffffb) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000100)=0x6, 0x207033c6866186bb) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x0, 0x2}}, 0x20) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}]}, @nested={0x4, 0x3c}]}, 0x24}], 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x11) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x38}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="1f000000190081054e81f782db4cb9040263cb848a0ef30b1bffff070a000a", 0x1f}], 0x1}, 0x14) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 4.395721476s ago: executing program 3 (id=6855): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0xd5, @mcast1, 0x1}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x5c7, @private1, 0x4}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x78) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xa, 0x0, &(0x7f0000000040)=0x17) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r5, {0xe, 0xffff}, {}, {0x0, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x9, @empty, 0x40fff}], 0x2c) (async) r6 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) (async) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x3f8, 0x300, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) (async) io_uring_enter(r8, 0x154e, 0xfffffffc, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x9) 3.838941661s ago: executing program 3 (id=6856): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f00000005c0)=@v2={0x3, 0x1, 0x18, 0x3, 0xa9, "bbf6da4e49733b51011abe089dba0eb01cf43f81070aa9eed72051483418b52bbb40c35200f7c4e4d5361621789a6b015266405a4d8870a83317b13b163bffad87e4ce75e4302c08d6e4e75128a9f20f27af93ae022b61b282341d1cb5b094dedb340074024f8c0db73187a99a31477c1db0985325e455394014f52a7a46d232d9d28fd3c99d7651a81b7982daefbe7c6c3a0ded97460b3acc5d10b5368eb86b40eb5588a084501389"}, 0xb2, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a0000000215", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000880)={0x0, 0x120, "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"}, &(0x7f0000000080)=0x128) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f0000000080)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f00000005c0)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x2003, 0x8, 0x4, 0xf11, 0xe4, 0x0, 0x1, {0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x3, 0xe5, 0xde, 0x1b, 0x7fff}}, &(0x7f0000000280)=0xb0) listen(r0, 0xfff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000500)={0x0, 0x7, 0x3c13}) r6 = socket(0x40000000015, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000580)) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x101}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000700)) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045fc0014bbac1414aa00004e2200"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 3.783202043s ago: executing program 4 (id=6857): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) connect$qrtr(r4, &(0x7f0000000140)={0x2a, 0x3, 0x7fff}, 0xc) fsopen(&(0x7f0000000040)='binder\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) syz_usb_connect$cdc_ecm(0x6, 0x58, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109024600010106600009040004020206000909240600008c21f71505240006000d240f01e80800002a0e080007072414e800fd8c09058202ff0380000509050302080007ab03"], &(0x7f0000000700)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x0, 0x0, 0xc, 0x20, 0x1}, 0x18, &(0x7f00000004c0)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xd, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x33, 0x0, 0x1, 0xf, 0x45}]}, 0x3, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x42f}}, {0x55, &(0x7f0000000680)=ANY=[@ANYBLOB="5503009b1447bd5f43eedd9d534c13f6f33ed4d1315bc879cf622d1b9af856d8a18929228dcaf4fd12aaf384d57a61d3d3e53b19a6d7d5afb945cc1d5100735ab4b2cda7a9320fc0ba1ea96802ccf679ce9f41a8b6"]}]}) syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120110006a249f08"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 3.533368623s ago: executing program 0 (id=6858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000c40)={0x20, r5, &(0x7f0000000c00)=[{0x1, 0x5}], 0xdeadbeef, 0x8, 0x1}) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x1, 0x3}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xfffffffd, @local, 0x2}, 0x1c, 0x0}}], 0x1, 0xff00) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="be14278c2d", 0x5}], 0x1, &(0x7f0000002080)=[{0x10, 0x112, 0x4}], 0x10}, 0x4000000) 3.454325078s ago: executing program 3 (id=6859): r0 = syz_usb_connect(0x0, 0x25c, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e9b7e3405e04bf02069e0000000109024a0201000020000904"], 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x90, 0xee, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x8, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xff, 0x9}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xba, 0xfd, 0x80, 0x20, 0xc}, 0x50, &(0x7f0000000d00)=ANY=[@ANYBLOB="050f5000024410f98a0240468ba2a37bbea88fdb6c6cd0b5cbb5176d0ba06222cb46aeb678134ccff2302ffb2c51e0896348bb98283820753ab16d4938219c186571fdef76b047a9af439907100204930400"], 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x861}}, {0x9f, &(0x7f0000000180)=@string={0x9f, 0x3, "eb004ff2530cb12e453a28f799ed02a0b1f7fc8d346cb3764489402a9d8f8070ccf1ed43fdc0d294316418a1fed1d27fb261a9ce2f4e6e54c167d4c277e61cabcc3c78fa72641d81fe8b3fab2bc1280dd47935a0a80569812d056faad0da06d1016015ee9f84bf5ea08723502761b05841ff2aeb499592fbc3781958a556fc9a05a9fb769b0b623944bdcbafef5c09fb57129a4d44943d45fb635199d4"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x20, 0x2, 0xf1, {0xf1, 0xb, "5b834762a97cba1a9527d9a6cf1d839e0e08a2aa6ef0af2965783ff8bfddf24e11fadc1f0f6ce28d2cfe8a664c27b8add0bbd456e5317e5379ed9f951ff378c006a51b4f49c3c1882d7f29c8e26d62f0f06479005c73ad1ceb55e18bc0d4abfc566c3b9bb9493acb2518c61b003e922785ba2f3e09ced39cf8e4c54fefab9beac55e80ba0d11af2b2353dc2025f06b25d169be642d19c037ba1b6cb05a0015938b094ae36c7dcd7d46f8160808608a196032d8aeb883b1bdb851ca6d13452181a3773d000ec1d245565009a0bb4bad55c0a12d558895673e7e04c6b4e1a3ac9e3c49142e790ddd73c2705d0c8a8d0f"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x40, 0x10, 0x82, "90b72b9f10315af77c51713828b9c5749577266a1d7f1f4c4b4271e5b7349b1651da3c970dd8a76346649d78fd213ff9ef927a9fe695f007938873b72f780a37162c48309de4e1c425780af61c695e3daecfe52dd75ae7056130cc298fa1f50e9123da033d336b328b6fda6dccde44d47b6dd33477e1754c279373ecc2312c8dfe2e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x5, 0x7, 0x1000, 0x6, 0x7fff, 0x200, 0x4, 0xffffffff, 0x3, 0x9, 0x1}}, &(0x7f0000000c80)={0x20, 0x85, 0x4, 0x100}, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) io_setup(0x2007, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1000}) io_uring_enter(r6, 0x2ffb, 0x0, 0x0, 0x0, 0x0) r9 = eventfd2(0x0, 0x800) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000240)="7a8c06bd91b4f3b7", 0xffffffffffffff89, 0x7, 0x0, 0x1, r9}]) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) r10 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x1}) r11 = syz_usb_connect(0x4, 0x33e, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x75, 0xb6, 0xaf, 0xff, 0x2001, 0x7e35, 0x86dc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32c, 0x1, 0x7f, 0x6, 0x10, 0x0, [{{0x9, 0x4, 0x4, 0x2, 0xb, 0xbc, 0x92, 0x47, 0x77, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x40, 0x3, 0xff, "8ddf6f06f6ab9d"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x400, 0x81, 0xf8, "2a68743a03"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x400, 0x6, 0x3, "52adc49e22c7ca7fce"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x8b, "31bb", "d22abd"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x8, "c0b1", "9b"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x2, 0x3, "82c7050248"}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "a35c56"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4e69, 0x200, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x8, 0xf, 0xf2, 0x0, 0x7}]}], [{{0x9, 0x5, 0x80, 0x1c, 0x40, 0x3, 0x16, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x2}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xb, 0x5, 0xf4, [@generic={0x2b, 0x22, "ecbd8eb5416a6564029e846aa26cf0ea816094808edc9ca98ee66f890aed7a9431e8eb9e7a26958ba2"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x1, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0xa, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7fff}]}}, {{0x9, 0x5, 0xb1938ff5aea53e89, 0x2, 0x200, 0x7, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xcc, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x1, 0xf, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x8001}, @generic={0xc2, 0xd, "95bb654dd845e419e141c173a8d293ba4daa9df00541bf69e965d371b2e19955de27f1e20d8a604d0a1f9ca7e5aaaffa7a2ef2e7bcf5518fbac69ee6e106c8e29bcf8f068706dd9356838477cd7434ae8518d14cfd10133f5095e273362edf2ce2a07c1f3c8eeaa34d8592506a1036dff95e3365be64695b272edc72b634be598aa3a1ae3e226e92a2d65342258c5ff530552dff13058236c2360bb60bfeb132c4a09f778d7fcbb7a6ded6ff043e81688a2e3d5bf0d820fcf18addd90a55e62a"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x1, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc7, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x12}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x828, 0x2, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x100}]}}, {{0x9, 0x5, 0x4, 0x10, 0x470, 0xd7, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x1}]}}, {{0x9, 0x5, 0x7, 0x16, 0x400, 0x77, 0x8, 0x0, [@generic={0x39, 0x2, "1c4195dc73a6b28a72e832d36e5be97c1e69b02a80ae4061095d6e331ed258816a6562e7d27ef7f5bf010577e413bf08583f1a4c75179f"}, @generic={0xc8, 0xb, "2b1c393dc5daa0171f78f9b7a6f3f156a07fead39f22cc317c2e2590d2489c7e687a19f756891e07c269fbcce5274c88ae0652c1cd766d82c74c8beb2d05fa2a76cbd180f268007a6f019840580ca98d3ef9ceda13f6237533f331a371cd3f297fdf0c799ff1a9f66c6e985240f9e95c86db9df696b15b3b20ea078b63a3ae5df46c4b6dfe841c8643ab0fd07b53d27907634c978cae6c4406650d0b2a028bc229596a1266758f65abb746592e57442ae991d04672baa4f0325c88f3877767e862f16bc8ba48"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x300, 0x5, 0x1d, 0xe, 0x8, 0x4}, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f1b00020b10010c0a007f033e0d050b10010400a140017a630000000000000000008000"], 0x2, [{0xcb, &(0x7f0000000ac0)=@string={0xcb, 0x3, "1c377a108dac94339e59fb96d9ce48b405e6ddea21bfb8ea037b8def84f308fb63306f89dbb73200044b82255a31ca53fa5beadf257954dfac98fe2ec21171e37c48ee09c30db079ebd539f4363dcdaf54353c27969b3caac90266f1729484c5643940860b6129327561b36babe9411894a7eb71dcd770cc4384c7cf0a9d5b6e4ad6a38c9500ede9b7eeaca86aea9900fa9f0131bb5169d31bde1c521b6a239910f6860c277e201dcfe836e471e651077896f162c553833a9affa9713fa165e466fa71c351c5617180"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4}}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r11, 0x6, 0x3c, &(0x7f0000000c40)="a0fa18c08dcdb748cca33cc7bd1618cff429d1bc936bb6a35dc4cbc5e7c2ee5fa74422828c7e049bd437df112fe6742b7e8e0659cbfd8af3e1ece0c0") 3.199931856s ago: executing program 0 (id=6860): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0xb8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0xc0000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000300)={0xc}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0x3dfc, &(0x7f0000000400)={0x0, 0x100004, 0x20, 0xfe, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x200, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r9, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000680)}, 0x5}], 0x1, 0x10000, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0xff39) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000040)="06", 0x1}, {&(0x7f0000000200)="05551d86c826370cc3165bad150516704b955379c403fa4484c771e2a5afa94b26635a88ce7e9bab4c7a107e98ec52109c2315b9c97c7b846a93995f221712c4dd50da2706329e91a437bb08b36bf7d32dd27216", 0x54}], 0x2) 2.907664178s ago: executing program 1 (id=6861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c0000001000010000000000000000000000000a2800"], 0x7c}}, 0x0) r1 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f00000003c0)={0x0, 0xec25, 0x800, 0x0, 0x48000335}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x6, &(0x7f0000000380)=[{0x0}], 0x1}) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xd87a5668, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r5, @ANYRES64=0x0, @ANYRES64=r1], 0x146}, 0x4048081) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x2f, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r10, &(0x7f0000007fc0), 0x0, 0xc801c) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000001040102000000000000000005000006050001000100000008000340000000030a0002000000007f00000000050001000200000005005eae0200000006000640000300000500010008000000050001000100000066bec61ff320e7c4e7e5698d098f826977ab22dfc503fee986fcce3118e1b16e66e65d02d55ab9c9e0275d25fc4b5686e70861e915f37a7ef2b3b6ed8e69c41ebf121134222510ad60f0369cd78a7418e989aa400a11945e487dedf485046b7bc4a226a3e438fb5a943589cf4ffb5f7d16ff87d6c6c75163d1b9095a9fd92ff08522a265159b1e14417b719f1ca9f282620c22cd96162ef935b824e09606f1ad741406b536b0e605ce0309d0f5669202981e2fcc89b6180ee013cfbb2efc56be1c2e0afe0e293def61d71756b565c985e8000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.851009724s ago: executing program 1 (id=6862): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000200), 0x0, &(0x7f0000000340)) getgid() sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000280)="bd985d", 0x3}], 0x2, 0x0, 0x0, 0x1}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000440)="ba430066b87e210e9d66ef660f3aceac750005baf80c66b87a04ee8266efbafc0ced66b9860a000066b80000000066ba000000000f30660fea11670f01d1b800008ee8f0ff06237a660f38804400c4c3a5cf8f0c00de", 0x56}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x29, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000002081b00000000000305000320210000000900010073797a30000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}]}, 0x2c}}, 0x4004844) 639.947547ms ago: executing program 4 (id=6863): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$sock(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="6d3e850851", 0x5}], 0x1}}], 0x1, 0x4000840) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cfa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r5 = socket(0x2, 0x80805, 0x0) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000003000)=""/4106, 0x100a}], 0x1, 0x0, 0x0) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xfffffffffffffdd3) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r6, r7) 497.908243ms ago: executing program 0 (id=6864): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) eventfd2(0x4629, 0x800) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r2 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x2000000, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendmmsg$inet(r0, 0x0, 0x0, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d30001280200001810a00010071756f7461000000100002800c00014000000000800000010c0001800700010063740000080003400000011014"], 0xbc}}, 0x20050800) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) r8 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x80c82) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0x80045530, &(0x7f0000000100)=""/85) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x0, 0x7, r7, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r7}) 385.337542ms ago: executing program 4 (id=6865): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) fcntl$lock(r2, 0x403, &(0x7f0000000700)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x6, @loopback, 0x1ff}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f0000001100)=""/4096, &(0x7f0000000000)=0x1000) r4 = syz_open_dev$media(0x0, 0x9, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x249249249249269, 0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r9 = getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$uinput_user_dev(r10, &(0x7f0000000240)={'syz0\x00', {0xf, 0x7, 0x7, 0x6}, 0x4a, [0x80000000, 0x3, 0x5, 0x40, 0x0, 0x2, 0x0, 0x80, 0x13, 0x5, 0x22a7, 0x6, 0x0, 0x0, 0x6, 0x1000000, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb6, 0x11e, 0x0, 0x2, 0x0, 0x2, 0xccbd, 0xffff, 0xa, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x2, 0x20000, 0xa, 0xfffffffe, 0x1, 0x0, 0xe, 0x7, 0x0, 0x4, 0x57, 0x5, 0xfffffffa, 0x0, 0xf67e, 0x0, 0x1ab9, 0x0, 0x8, 0x0, 0xfffffffb, 0x1c15d73a], [0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x7, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x9, 0x0, 0xd, 0x80000002, 0x0, 0x0, 0x9, 0x0, 0x9, 0x2, 0xff, 0x5, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10000010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x441238ca, 0x0, 0x0, 0x2, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x0, 0x3, 0x9f5, 0x0, 0xe, 0x1c75, 0xf51, 0x0, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x2, 0x6, 0x208, 0x5, 0x0, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x9, 0x63, 0x0, 0x0, 0x0, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x4, 0xb0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x3f, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0xddde, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x5, 0x0, 0x2040, 0x2, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x2, 0x0, 0x0, 0x84, 0x45d, 0x4, 0x0, 0xfff, 0x400b2, 0x9, 0xb]}, 0x45c) ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000040)=0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x1e, 0x37, 0x2, {0x1, 0x89ee, 0x5e8a56d6, r11}}, 0x1e) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$netlink(r3, &(0x7f0000000980)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)=[{&(0x7f00000002c0)={0xb8, 0x1e, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@generic="33ac32b3a247b3f71854cc4fa3c0b7333e70301f30b2a8f0a5de25ec2546fcc8cb2d3120cd5c3af18670e72bbf45652dc958d767be65df5ad2de10e1bd52068faa14eda00dc89d98ed328171ade079eb56b57d00d744c9324f6f4af4b8bf99a167a866447917ad98b818ccd3777d3e689daf241d3b665419f390d80620ae8b12596e705743781385b9a0a7f85944ce2b06c48fada09172d71228fe3f70d6b8a27cadf6590f"]}, 0xb8}, {&(0x7f0000002100)={0x2384, 0x18, 0x400, 0x2, 0x25dfdbfd, "", [@generic="f3fe31a8b940aece4914952f97cf0e7decd9404313f9cc7259147745e56d527a81ceacc6b53dbacb9e82bd39c6e7e8b2478d2ca988ba77", @nested={0x58, 0xa5, 0x0, 0x1, [@generic="c17971f85a39a39d6b767ea94d28af3e8a81c77998e3f472614e9ac41aace849f201af325d0a7b2529627b1ef531845d", @typed={0xc, 0xa4, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0xf1, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa7, 0x0, 0x0, @fd}, @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="005bb194bd7f1498d4c711ad8c2294114fe3cb1f4834ddbf868ad4a42bfe2211938c9e4b99d4f36537f379a8576801120f27c669374db863599f75bda27507ed0850781d5e2fb96dffa532cc85636605a8e3df9f272d0aa334ca0b02736d957ae7d2520ed8e87b6d52b3e740e055c5ca19aad206895e80a4cf31fb05d675d15ce3c356634a3d1260052e47b234f153a62cf61064f2a7a32176ca3369", @generic="2a7a0f135faa39f198f2188d4f807b693c143c1b410c16fa972df69269543d38ff981074faf8e9e61549b03913397b84b56f23a8b57a5ef9689abcca46306c2abe25210db18f4c92fc490af71607fc290dc653c2230c61b1c77f7abfc4791eaa624c57bd77c331373b1abf5d89e3ab20b85a5361403ed16db4a59d65a99abfa305be305db776fdb2dd97cb5306f39b4917ca532640b2423a38df4fa011607035d58a8d662f07e672d69ec0f48eb0334e0e0eb6db8b77cca011b0", @nested={0x2010, 0x12d, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="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", @typed={0x8, 0x114, 0x0, 0x0, @pid}, @generic="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"]}, @generic="703f5afb6497b773fcf3d5ec5449dd436005eb3d16ea261680c80bd2389f190629015eac3a3d4cad5c8130f43efaab1a5b8207e715860094c333a9c37126ef4b1e01835f0ac8a5f39b0f", @generic="9e4ead1b54add4f3079218885633b707db2f931d472bb61e99c01cb3ffdac5635eab112602252ca67a99bbf88305721629c14a4553634c836b85a01a365aaac3e0f7f707a6d3a3b204ff42e3fdba37ab58f92994c157ada5eb56348bfd", @generic="311be63f85c6fecd10755d2ba28ceaabad1aa9f0868c70806ee3b90b3a4fb7a6662a383b9cceebe927f546bbc98033b816979badafb87d9cca7722a7998ed163b1e1629755a676a465970a797072ba354a1ad571d4c5934c41bcd5f62cf95c544caebeae74602cfa50902cce8319a99124171d485e2372cc29141653611ff4b41dcd2352f43ab3baf7233a129657ee626345945e5e61068a0b60b1124171d91b936e87e76c8c4884dc2c8eae0d537a829181eefd6908cae0e1fc926bb92aee8a094f005610859232c7", @generic="be9fe52b10a10af307050f2c"]}, 0x2384}, {&(0x7f00000044c0)={0x1348, 0x33, 0x800, 0x70bd25, 0x25dfdbfc, "", [@generic="4fa7440acb5502953719dde794f4cb774e2ea394bc5e892f47aa2c9bd9db20ef19b15c10fae9c1c0193b9edf64b813d681068a35b2adaf7978651a72a82e36", @nested={0x1ca, 0xc8, 0x0, 0x1, [@generic="15b82696c9b6ed17b1176d4d489d1615a070fa6386336c4b8c1aab703997233e18801ab4a101377b33d97d2efefbaf07cfb5219aab2844360bf0696e384f9df3ee44059f84a342a195fd3c0695f3451d8c2668da941058ec755f576dcc78cb2e998177a7b5499bd0557a5477c281dcdedfc64167f1df3b50288284f9a8c45fd5e1f4e9a71fb406f77c5a778c628ea40f7901b4bcc0cf7f74d4b93cb2dedfd72bfd8dfbef1a96", @generic="f9597c6bc06f06703d71d22df131ba8c132f0cfada07951fe8b5b6ad5ad167309a3e825ddec5ca3725134a1364386be2a36e81c1e7db59d02ec006819a89d4aadf156cffea826381f243b03c7f5c2120c1905c708f706f6dc0464ce13b7e9536b6a9b183ed48a53ad60fd43bb50c21a3ae04d21779b9fd542537f93197a9c9772fa6951be7b2cd2f9f0d8a340f", @generic="6d2835d56426e7426b840d84d21d8bf1d4709c264ee739a09dfc833b4f1b65482f8c0e6946d5a7b4e1cdde7ffaa76365e6d111a31693a19f6d460bf4f70571c78173b0cb0f309b8d53276d62426f681fab9c2d8accdb7c1e40175c7348c91d4ade7a6b417f5bc7616d3c6877b7f2b9876a102b1542246b895bef027926f6de7ece6a3297ff2ff6", @typed={0x8, 0x10c, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x112}]}, @typed={0x8, 0x103, 0x0, 0x0, @pid=r9}, @nested={0x1008, 0xe0, 0x0, 0x1, [@nested={0x4, 0xc3}, @generic="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"]}, @nested={0x8, 0xe4, 0x0, 0x1, [@nested={0x4, 0x92}]}, @generic="bd1d3ce370e8572638a8fd154f31304fe5d2df3786277a63f0d57f9e5b4cf9b820d7fdffa1d5b2db5e6190f38003b91b943caa5ea92d040b215f38531dec6444720bbe", @nested={0x5e, 0xdc, 0x0, 0x1, [@typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x4, 0x119}, @typed={0x4, 0xee}, @generic="fb574b7f82cf113cc19b655fbfbc5e6ea4e7019139d4e68bb03a5e2f883250e8e4479dea5893796274d59c9ec7a67ec307108c6a2db7d4b5c9f513eddf54"]}, @typed={0x6e, 0x132, 0x0, 0x0, @binary="8d58ad33db46f0650af1b85976cfd0414bb94676fd002eb486829e52890dc4a81956420b83460028b4e719d00e8337c221fd6e35a2b3325ff0fcee4bfbf0d9ce065dd87aad342f7919284bda0759c018468b3ea860486fa71c14d241c776d72e755b4bcff779cfc2de4a"}]}, 0x1348}, {&(0x7f0000005840)={0x1014, 0x13, 0x200, 0x70bd26, 0x25dfdbfd, "", [@typed={0x1004, 0x12e, 0x0, 0x0, @binary="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"}]}, 0x1014}, {&(0x7f0000000480)={0x278, 0x32, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x265, 0x76, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @pid=r11}, @generic="6139d6ebeb0e4be0addd1f504411455fbcb822fd4e8315fe54e5fad6aee61823bc0bbed5c99f71bcd8ba95e24e93d0e75a0fcc8c58a1e8d8c4bd300ee1bff54ff9d430a0f18c6e3f518048eba7b0501c976a991b9ff81062b37ac96d35f3e39a573a25aec09e4d578021cba6714fcd90215c611fe31defe5d1bfd356aa56cdf3fae106e2b4747ae025e6c93e1aadf28cc64b8cd39856e61ee46e6af17fa7886ca105601cf0c792eb866f342c1ebb99d3d399fb0d1478b0f6786e6dc6f50fdc", @nested={0x4, 0xa}, @typed={0x8, 0x141, 0x0, 0x0, @fd=r4}, @typed={0x6, 0x35, 0x0, 0x0, @str='^\x00'}, @typed={0x9d, 0x1d, 0x0, 0x0, @binary="5d5f97e17e30a1df462ab0d73d58b1acd86395479659f3d88618b27673e435272f31b37e0f583fe99d2dd389bb4aa261efb245e17b8430b55bd4f5b296e7e81f006da28c38bab4ea568eeb393838f439cb9753f6fbe6f689e7fac207ca6f70f35983bed9d2a4525071f601b6c9ba4bc0d401ed3ab1e4d61a048770d0d35e9b39ab9c87947045de0ae0aba8a0f183b211fd5099fb904683f824"}, @nested={0x4, 0x126}, @generic="9b60398dfb57bdc46992ec305ff5a531578cf4058b032ba9d015ae3bce3721ec3adb38c6feca9ac9d72cedd133d200e7ffc5752f940e9579ff0bc2e8e410c682367a3976f6cbc57e15fcab41444c353189fe7b8ee4b312e8f67d89206e19728a26e8242138ab6c2117a8e13b768035535c1cea36810ee8be0b096cdc6ee34b233916ad41f5469545859f8e", @typed={0x8, 0x32, 0x0, 0x0, @fd=r5}, @generic="a876af00350af196f6652da411576c138ba894dda246f6a745c5bd71e356a6b6ea21d0adf2d9ba51a036a20e1ee3e9b20c2918ff054ccf4915bafbc4e997fcf9d61045459a73cf5711653269e30415"]}]}, 0x278}, {&(0x7f0000000740)={0x140, 0x19, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@generic="860cba703e32ff21244390fd6c7d3bb5a4d85babca9bbb1f8b9cc842489bfb1ce3edaf6c89aa83972801c6fbc805a729a30eefba60c849dc96d79d8dcdc24dd1ccddeaa9ec80ee2ae9cdb9d636e91b6b55779e98582aa9a7dc07ec452421f63999e9a2e590856fd74b5214328a4ffc8df5b74971260a770d80b3c7121ddae8a044f6fd806c691611d649df5da3580c5bcac758d49822bf838a1b8826cd0af5b75da34ef68e47acd4b337b33e3c80d23654f2ce0bda0c53cbd72e2cce9c9744922801ea8254b5b2675dcc87e0e0b3d349a8aebefb5a9b7749", @generic="cecbc2dc2d8392d0c4b3f26b2498ee6c544f29af6cedcd372228b17c8dd3d823cdb40006a78bd08aaf078e0ba86417485b09acfd352346e1bb5e79e3e3f83e47176d3d519950dd83f8325f0c01fe957d73ebe98d7ecff5ea"]}, 0x140}, {&(0x7f0000006880)={0x1274, 0x3f, 0x10, 0x70bd29, 0x25dfdbfb, "", [@generic="b14d208fff11622aefa66f81206fae076677defdf426215ce8f40333b27a127d56a2aa4c3a14f7007f909b8a31497de8f25b1d4735fd8d5650de6b0975127d17ab5b5d0c7b695c1fe7f10edcb04e5122432d9cfca5ae0ff12b2e62cac5669e70832255e88a0f5a26b753453cb1d91447e8c2af225266e549d93ad8bd467021e2d1d5631939541784fb6c8b40d8d6d7c512296569f6ce7dcbf7e61e198936f25804c291ab7a15e92dccf6639513fddf9a95d2348ac2449d61f3e062dc70c15215acee921624727408b14a056c5b9bb723627bdff215585db3d8", @generic="efe92b9c421017c5f96dea20e221ea5acaa67fad618a05ed121d0fcc0d339b42e3f717d7dba6a88a0d586c69dfd656e3fae0853bfbd591b08c6c8e9de0937ecb2ceb0a6927f114a7403dc11c79cce1b2a03b2595157fa3714703199f2a229f8b459112c6c48832bad403c0db281dbc56b362936b41952816e2b152788a3d69ad750879fac91f358842cacf052ac41705b055eb0e48ce756a1b155f56b3ac0b8eaed7e48b546975", @nested={0x101c, 0x48, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}, @generic="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", @typed={0x4, 0x5c}, @typed={0x4, 0x140}, @typed={0x8, 0x22, 0x0, 0x0, @uid=r12}]}, @nested={0xc7, 0x11b, 0x0, 0x1, [@nested={0x4, 0xc0}, @nested={0x4, 0xea}, @nested={0x4, 0xad}, @nested={0x4, 0xe5}, @generic="a875b5fc786a6a2cd9b4cd5973bd59f168d184a14837852069affc0181ace43f2ddd7a56070ccdc908b6f93a3da8ebc890b82899252fdd6169380e820be0d109dda73b8912b2ecc3359e56e714d28bdcf27af0436d6bb2edd96613d07bd159557d84f719cfd7fcc0e06977e2a7af6d663c74a6afa0e3028539551be6756bd3949f412919ee31c54b71969d3ef87caed4836ca7b02518e6e19d10aa2e20416648281d9ba835c63ca250ea9c", @typed={0x5, 0x2e, 0x0, 0x0, @str='\x00'}]}]}, 0x1274}], 0x7, 0x0, 0x0, 0x1}, 0xe9c73345e0ecb90e) 269.839275ms ago: executing program 3 (id=6866): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x5000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x2, 0x9, 0x1ff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r1, &(0x7f0000002f80)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)='y', 0x1}], 0x1}}, {{&(0x7f0000002900)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe254}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='C', 0x1}], 0x1}}], 0x2, 0x20000040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r3}, 0x10) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x65) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x700, 0x40, 0x8, 0x40, {{0x12, 0x4, 0x0, 0x1a, 0x48, 0x67, 0x0, 0x5, 0x29, 0x0, @loopback, @local, {[@noop, @noop, @ssrr={0x89, 0x7, 0x24, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x1f, 0x29, [@multicast2, @multicast1, @broadcast, @empty, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}]}, @lsrr={0x83, 0xb, 0xfe, [@private=0xa010102, @private=0xa010100]}]}}}}}) syz_clone3(&(0x7f0000000380)={0x44004000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0), {0x16}, &(0x7f0000000240)=""/32, 0x20, &(0x7f0000000280)=""/159, &(0x7f0000000340)=[0x0], 0x1, {r8}}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x20, &(0x7f0000001840)=ANY=[@ANYBLOB="180000007f000000085ec63fbf9b90bd7d6553e9041943ec7271fbeaf3125accd2a0e41889277ecf6e68949c210276c1551a1fc3f87c7bf69a8e654e29d52a6070b572208e766f2014553a07ea7cfe681e62a590a71c8da1f5c45a5b189b60a0ef39f94ee990f03bca887274ddeb060ac9bf20ca9ec0af28240980566f1dc82516f86e937df6400d5b2000c350722cbe213f59036dd8a62b9fd8e4eda4dcbbd12bc164e433868567f56f2ab8454f", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183b000002000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000bb0600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000852000000300000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000540)=""/4096, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001580)={0x5, 0xb, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x5}, 0x94) recvfrom$packet(0xffffffffffffffff, &(0x7f0000001740)=""/246, 0xf6, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="1e6caf7609cd6603f9bc77f5306bdfd42acc00325db1bb1e7a66250944431771780243c0639e8aac4e35267195fa2d38c39931ab7ff9d2a1b4c3ec4cf31fb6281916b759596bd6c6314c3e87e916f4ba26dac4df6f4961bfe2a616a2dd9b6fdf2593d60a5241848aa9ed9656e601f1a8fa84168bd147e2533545322f594001e67722184993c2abf592831f518e", 0x8d}, {&(0x7f0000001a00)="60a527594a456e5c1790b306f4df1d7875a1b367ad5c809220f9d01cac75e6afbbb4254482bb4c0d86303c288e074d3c04e2785875def5a802c88c173012325a4e95f84148be69b94765ab8f6e319d40a990b757a3cc", 0x56}], 0x2, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x38, 0x890}}], 0x1, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=6867): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000acc029cb00"/22, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) kernel console output (not intermixed with test programs): 97691][ T2767] ? __might_fault+0xb0/0x130 [ 3122.997733][ T2767] should_fail_ex+0x414/0x560 [ 3122.997763][ T2767] _copy_from_iter+0x1db/0x16f0 [ 3122.997785][ T2767] ? rcu_is_watching+0x15/0xb0 [ 3122.997804][ T2767] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 3122.997832][ T2767] ? __pfx__copy_from_iter+0x10/0x10 [ 3122.997860][ T2767] ? __build_skb_around+0x257/0x3e0 [ 3122.997889][ T2767] ? netlink_sendmsg+0x642/0xb30 [ 3122.997912][ T2767] ? skb_put+0x11b/0x210 [ 3122.997938][ T2767] netlink_sendmsg+0x6b2/0xb30 [ 3122.997964][ T2767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3122.997984][ T2767] ? aa_sock_msg_perm+0x94/0x160 [ 3122.998005][ T2767] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3122.998021][ T2767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3122.998040][ T2767] __sock_sendmsg+0x21c/0x270 [ 3122.998066][ T2767] ____sys_sendmsg+0x505/0x830 [ 3122.998090][ T2767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3122.998119][ T2767] ? import_iovec+0x74/0xa0 [ 3122.998142][ T2767] ___sys_sendmsg+0x21f/0x2a0 [ 3122.998164][ T2767] ? __pfx____sys_sendmsg+0x10/0x10 [ 3122.998212][ T2767] ? __fget_files+0x2a/0x420 [ 3122.998235][ T2767] ? __fget_files+0x3a0/0x420 [ 3122.998267][ T2767] __x64_sys_sendmsg+0x19b/0x260 [ 3122.998289][ T2767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3122.998316][ T2767] ? __pfx_ksys_write+0x10/0x10 [ 3122.998335][ T2767] ? rcu_is_watching+0x15/0xb0 [ 3122.998367][ T2767] ? do_syscall_64+0xbe/0x3b0 [ 3122.998393][ T2767] do_syscall_64+0xfa/0x3b0 [ 3122.998415][ T2767] ? lockdep_hardirqs_on+0x9c/0x150 [ 3122.998436][ T2767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3122.998452][ T2767] ? clear_bhb_loop+0x60/0xb0 [ 3122.998472][ T2767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3122.998488][ T2767] RIP: 0033:0x7f806158e9a9 [ 3122.998502][ T2767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3122.998518][ T2767] RSP: 002b:00007f8062477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3122.998537][ T2767] RAX: ffffffffffffffda RBX: 00007f80617b5fa0 RCX: 00007f806158e9a9 [ 3122.998550][ T2767] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 3122.998560][ T2767] RBP: 00007f8062477090 R08: 0000000000000000 R09: 0000000000000000 [ 3122.998571][ T2767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3122.998581][ T2767] R13: 0000000000000000 R14: 00007f80617b5fa0 R15: 00007f80618dfa28 [ 3122.998605][ T2767] [ 3123.293304][ C0] vkms_vblank_simulate: vblank timer overrun [ 3123.591600][T17765] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 3123.764376][T17765] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3123.774835][T17765] usb 4-1: config 25 has an invalid interface number: 105 but max is 0 [ 3123.792063][T17765] usb 4-1: config 25 has no interface number 0 [ 3123.808875][T17765] usb 4-1: config 25 interface 105 has no altsetting 0 [ 3123.832632][T17765] usb 4-1: New USB device found, idVendor=1f4d, idProduct=a115, bcdDevice=c5.ca [ 3123.843082][T17765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3123.892215][T17765] usb 4-1: Product: syz [ 3123.924324][T17765] usb 4-1: Manufacturer: syz [ 3123.952350][T17765] usb 4-1: SerialNumber: syz [ 3123.965442][ T2783] sch_fq: defrate 6 ignored. [ 3124.263530][T17765] usb 4-1: USB disconnect, device number 88 [ 3124.463196][ T2796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3124.637752][ T2796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3125.443496][ T2823] usb usb7: usbfs: process 2823 (syz.3.6535) did not claim interface 0 before use [ 3125.673950][ T2826] kvm: kvm [2814]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 3125.725074][ T2826] kvm: kvm [2814]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 3125.745416][ T2826] kvm: kvm [2814]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 3125.795031][ T2826] kvm_intel: kvm [2814]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 3129.305134][ T30] audit: type=1326 audit(1753877727.959:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2864 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3129.533022][ T30] audit: type=1326 audit(1753877727.959:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2864 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3129.717761][ T30] audit: type=1326 audit(1753877727.959:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2864 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3129.977454][ T30] audit: type=1326 audit(1753877727.959:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2864 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3130.001394][ C0] vkms_vblank_simulate: vblank timer overrun [ 3130.067187][ T30] audit: type=1326 audit(1753877727.959:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2864 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3130.186563][ T30] audit: type=1326 audit(1753877727.959:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2864 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3130.265391][ T30] audit: type=1326 audit(1753877727.959:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2864 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3130.293014][T17765] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 3130.426221][ T30] audit: type=1326 audit(1753877727.959:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2864 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3130.449385][ C0] vkms_vblank_simulate: vblank timer overrun [ 3130.467269][ T30] audit: type=1326 audit(1753877727.959:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2864 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3130.497386][ T30] audit: type=1326 audit(1753877727.959:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2864 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3130.550637][T17765] usb 4-1: device descriptor read/64, error -71 [ 3130.640028][ T2877] netlink: 'syz.2.6544': attribute type 5 has an invalid length. [ 3130.790613][T17765] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 3130.966709][T17765] usb 4-1: device descriptor read/64, error -71 [ 3131.081747][T17765] usb usb4-port1: attempt power cycle [ 3131.360607][T27105] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 3131.430587][T17765] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 3131.451243][T17765] usb 4-1: device descriptor read/8, error -71 [ 3131.543730][T27105] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3131.557013][T27105] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3131.569667][T27105] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3131.589769][T27105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3131.609384][ T2892] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 3131.644060][T27105] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3131.690896][T17765] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 3131.723486][T17765] usb 4-1: device descriptor read/8, error -71 [ 3131.852951][T17765] usb usb4-port1: unable to enumerate USB device [ 3134.640365][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 3134.640389][ T30] audit: type=1326 audit(1753877733.319:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.4.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0250f2ab89 code=0x7ffc0000 [ 3134.671045][ C1] vkms_vblank_simulate: vblank timer overrun [ 3134.711198][T17765] usb 2-1: USB disconnect, device number 97 [ 3134.770028][ T30] audit: type=1326 audit(1753877733.319:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.4.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0250f8e9a9 code=0x7ffc0000 [ 3134.873359][ T2931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6562'. [ 3134.900666][ T30] audit: type=1326 audit(1753877733.319:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.4.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0250f8e9a9 code=0x7ffc0000 [ 3134.923853][ C1] vkms_vblank_simulate: vblank timer overrun [ 3134.965137][ T2934] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.6564'. [ 3135.015389][ T30] audit: type=1326 audit(1753877733.319:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.4.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0250f2ab89 code=0x7ffc0000 [ 3135.038303][ C1] vkms_vblank_simulate: vblank timer overrun [ 3135.124626][ T30] audit: type=1326 audit(1753877733.319:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.4.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0250f8e9a9 code=0x7ffc0000 [ 3135.201813][ T2939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3135.214824][ T30] audit: type=1326 audit(1753877733.329:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.4.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0250f8e9a9 code=0x7ffc0000 [ 3135.225871][ T2917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6557'. [ 3135.237312][ C1] vkms_vblank_simulate: vblank timer overrun [ 3135.258773][ T2939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3135.321611][ T30] audit: type=1326 audit(1753877733.329:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.4.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0250f2ab89 code=0x7ffc0000 [ 3135.345406][ T30] audit: type=1326 audit(1753877733.329:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.4.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0250f8e9a9 code=0x7ffc0000 [ 3135.369087][ C1] vkms_vblank_simulate: vblank timer overrun [ 3135.477978][ T30] audit: type=1326 audit(1753877733.329:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.4.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0250f2ab89 code=0x7ffc0000 [ 3135.502871][ C1] vkms_vblank_simulate: vblank timer overrun [ 3135.503407][T17765] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3135.519470][ T2948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3135.533319][ T2948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3135.544962][T27105] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3135.593561][ T30] audit: type=1326 audit(1753877733.329:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.4.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0250f2ab89 code=0x7ffc0000 [ 3135.650641][T17765] usb 1-1: Using ep0 maxpacket: 32 [ 3135.664643][T17765] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3135.674270][T17765] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3135.685922][T17765] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3135.708413][T17765] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3135.823721][T17765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3135.835970][T17765] usb 1-1: Product: syz [ 3135.841082][T17765] usb 1-1: Manufacturer: syz [ 3135.845984][T17765] usb 1-1: SerialNumber: syz [ 3135.893115][T27105] usb 2-1: config index 0 descriptor too short (expected 135, got 77) [ 3135.907277][T27105] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3135.926348][T27105] usb 2-1: config 0 has no interfaces? [ 3136.026849][T27105] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3136.046702][T27105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3136.076360][T27105] usb 2-1: Product: syz [ 3136.085564][T27105] usb 2-1: Manufacturer: syz [ 3136.099288][T27105] usb 2-1: SerialNumber: syz [ 3136.134019][T27105] usb 2-1: config 0 descriptor?? [ 3136.158159][ T2943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3136.172590][ T2943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3136.335929][ T2943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6565'. [ 3136.440711][ T2947] xt_socket: unknown flags 0xc [ 3136.637105][T17765] usb 1-1: 0:2 : does not exist [ 3136.749033][T17765] usb 1-1: USB disconnect, device number 59 [ 3136.832935][ T2956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3136.932025][ T2956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3137.192480][ T2956] xt_CT: No such helper "snmp" [ 3138.993592][T27105] usb 2-1: USB disconnect, device number 98 [ 3139.193579][ T2975] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6577'. [ 3139.794802][ T2984] syzkaller1: entered promiscuous mode [ 3139.803303][ T2984] syzkaller1: entered allmulticast mode [ 3140.424945][ T2988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6582'. [ 3140.616278][ T2986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6581'. [ 3141.910501][T27096] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 3142.050495][T27096] usb 4-1: device descriptor read/64, error -71 [ 3142.302569][T27096] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 3142.440884][T27096] usb 4-1: device descriptor read/64, error -71 [ 3142.551866][T27096] usb usb4-port1: attempt power cycle [ 3142.778641][ T3022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6589'. [ 3142.900693][T27096] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 3142.932240][T27096] usb 4-1: device descriptor read/8, error -71 [ 3143.394176][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 3143.396081][ T30] audit: type=1326 audit(1753877741.999:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3025 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3143.517331][ T3032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3143.640402][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.647368][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.663926][T27096] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 3143.741070][ T30] audit: type=1326 audit(1753877741.999:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3025 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3143.774312][T27096] usb 4-1: device descriptor read/8, error -71 [ 3143.901214][T27096] usb usb4-port1: unable to enumerate USB device [ 3143.966444][ T30] audit: type=1326 audit(1753877742.009:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3025 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3143.989825][ C1] vkms_vblank_simulate: vblank timer overrun [ 3144.020468][ T30] audit: type=1326 audit(1753877742.009:7821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3025 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3144.053573][ T30] audit: type=1326 audit(1753877742.009:7822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3025 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3144.155146][ T30] audit: type=1326 audit(1753877742.019:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3025 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3144.188272][ T30] audit: type=1326 audit(1753877742.019:7824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3025 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3144.222413][ T30] audit: type=1326 audit(1753877742.019:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3025 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3144.283334][ T30] audit: type=1326 audit(1753877742.019:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3025 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3144.306549][ C1] vkms_vblank_simulate: vblank timer overrun [ 3144.323826][ T30] audit: type=1326 audit(1753877742.029:7827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3025 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f790e58e9a9 code=0x7ffc0000 [ 3145.111554][ T3053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 3145.122692][ T3053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6599'. [ 3145.300149][T27096] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 3145.460431][T27096] usb 2-1: Using ep0 maxpacket: 16 [ 3145.474907][T27096] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 3145.484508][T27096] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3145.510804][T27096] usb 2-1: config 0 has no interface number 0 [ 3145.551906][T27096] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 3145.567067][T27096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3145.576808][T27096] usb 2-1: Product: syz [ 3145.584888][T27096] usb 2-1: Manufacturer: syz [ 3145.591413][T27096] usb 2-1: SerialNumber: syz [ 3145.638981][T27096] usb 2-1: config 0 descriptor?? [ 3145.713341][T27096] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 3145.730694][T27096] usb 2-1: No valid video chain found. [ 3145.798488][ T3063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6602'. [ 3146.254430][ T3071] ALSA: mixer_oss: invalid index 40000 [ 3146.351321][ T3074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3146.468535][ T3074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3146.587005][ T3073] binder: BINDER_SET_CONTEXT_MGR already set [ 3146.594967][ T3073] binder: 3067:3073 ioctl 4018620d 2000000001c0 returned -16 [ 3146.656248][ T3074] binder: 3067:3074 ioctl c0306201 0 returned -14 [ 3149.396070][T27125] usb 2-1: USB disconnect, device number 99 [ 3149.541880][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 3149.541904][ T30] audit: type=1326 audit(1753877748.189:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3090 comm="syz.3.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3149.572260][ C1] vkms_vblank_simulate: vblank timer overrun [ 3149.590797][ T30] audit: type=1326 audit(1753877748.189:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3090 comm="syz.3.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3149.614004][ T30] audit: type=1326 audit(1753877748.189:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3090 comm="syz.3.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3149.641653][ T30] audit: type=1326 audit(1753877748.189:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3090 comm="syz.3.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3149.828326][ T30] audit: type=1326 audit(1753877748.199:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3090 comm="syz.3.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3149.968076][ T30] audit: type=1326 audit(1753877748.199:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3090 comm="syz.3.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3149.991732][ C1] vkms_vblank_simulate: vblank timer overrun [ 3150.060237][ T5925] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 3150.128614][ T30] audit: type=1326 audit(1753877748.199:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3090 comm="syz.3.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3150.154216][ C1] vkms_vblank_simulate: vblank timer overrun [ 3150.265286][ T5925] usb 2-1: config 0 has no interfaces? [ 3150.278186][ T5925] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3150.330701][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3150.342145][ T30] audit: type=1326 audit(1753877748.199:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3090 comm="syz.3.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3150.384443][ T5925] usb 2-1: Product: syz [ 3150.405857][ T5925] usb 2-1: Manufacturer: syz [ 3150.432444][ T5925] usb 2-1: SerialNumber: syz [ 3150.791683][ T5925] usb 2-1: config 0 descriptor?? [ 3150.799677][ T30] audit: type=1326 audit(1753877748.199:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3090 comm="syz.3.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3150.822651][ C1] vkms_vblank_simulate: vblank timer overrun [ 3150.848348][ T30] audit: type=1326 audit(1753877748.199:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3090 comm="syz.3.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3150.872705][ C1] vkms_vblank_simulate: vblank timer overrun [ 3151.234657][ T3102] binder: 3094:3102 ioctl c0306201 0 returned -14 [ 3151.455883][ T3104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6614'. [ 3151.665432][ T3110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6615'. [ 3151.865314][ T3114] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6616'. [ 3151.909321][ T3115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3151.981018][ T3115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3153.068962][ T3130] FAULT_INJECTION: forcing a failure. [ 3153.068962][ T3130] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.082874][ T3130] CPU: 1 UID: 0 PID: 3130 Comm: syz.3.6622 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3153.082906][ T3130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3153.082917][ T3130] Call Trace: [ 3153.082925][ T3130] [ 3153.082933][ T3130] dump_stack_lvl+0x189/0x250 [ 3153.082958][ T3130] ? __pfx____ratelimit+0x10/0x10 [ 3153.082981][ T3130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3153.082999][ T3130] ? __pfx__printk+0x10/0x10 [ 3153.083023][ T3130] ? __lock_acquire+0xab9/0xd20 [ 3153.083053][ T3130] should_fail_ex+0x414/0x560 [ 3153.083081][ T3130] should_failslab+0xa8/0x100 [ 3153.083107][ T3130] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3153.083130][ T3130] ? skb_clone+0x212/0x3a0 [ 3153.083151][ T3130] ? __pfx_skb_network_protocol+0x10/0x10 [ 3153.083174][ T3130] skb_clone+0x212/0x3a0 [ 3153.083194][ T3130] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 3153.083214][ T3130] dev_queue_xmit_nit+0x416/0xcc0 [ 3153.083232][ T3130] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 3153.083267][ T3130] dev_hard_start_xmit+0x1be/0x830 [ 3153.083302][ T3130] __dev_queue_xmit+0x1adf/0x3a70 [ 3153.083328][ T3130] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 3153.083352][ T3130] ? __dev_queue_xmit+0x27e/0x3a70 [ 3153.083374][ T3130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3153.083401][ T3130] ? __pfx___dev_queue_xmit+0x10/0x10 [ 3153.083435][ T3130] ? __copy_skb_header+0xa7/0x550 [ 3153.083456][ T3130] ? __asan_memcpy+0x40/0x70 [ 3153.083489][ T3130] ? skb_clone+0x246/0x3a0 [ 3153.083512][ T3130] __netlink_deliver_tap+0x5ad/0x850 [ 3153.083541][ T3130] ? netlink_deliver_tap+0x2e/0x1b0 [ 3153.083560][ T3130] netlink_deliver_tap+0x19c/0x1b0 [ 3153.083578][ T3130] netlink_unicast+0x730/0x8e0 [ 3153.083613][ T3130] netlink_sendmsg+0x805/0xb30 [ 3153.083639][ T3130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3153.083659][ T3130] ? aa_sock_msg_perm+0x94/0x160 [ 3153.083681][ T3130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3153.083698][ T3130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3153.083716][ T3130] __sock_sendmsg+0x21c/0x270 [ 3153.083743][ T3130] ____sys_sendmsg+0x505/0x830 [ 3153.083768][ T3130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3153.083795][ T3130] ? import_iovec+0x74/0xa0 [ 3153.083819][ T3130] ___sys_sendmsg+0x21f/0x2a0 [ 3153.083841][ T3130] ? __pfx____sys_sendmsg+0x10/0x10 [ 3153.083897][ T3130] ? __fget_files+0x2a/0x420 [ 3153.083920][ T3130] ? __fget_files+0x3a0/0x420 [ 3153.083952][ T3130] __x64_sys_sendmsg+0x19b/0x260 [ 3153.083975][ T3130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3153.084003][ T3130] ? __pfx_ksys_write+0x10/0x10 [ 3153.084022][ T3130] ? rcu_is_watching+0x15/0xb0 [ 3153.084043][ T3130] ? do_syscall_64+0xbe/0x3b0 [ 3153.084070][ T3130] do_syscall_64+0xfa/0x3b0 [ 3153.084092][ T3130] ? lockdep_hardirqs_on+0x9c/0x150 [ 3153.084114][ T3130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3153.084131][ T3130] ? clear_bhb_loop+0x60/0xb0 [ 3153.084151][ T3130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3153.084168][ T3130] RIP: 0033:0x7f836c18e9a9 [ 3153.084184][ T3130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3153.084199][ T3130] RSP: 002b:00007f836d095038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3153.084218][ T3130] RAX: ffffffffffffffda RBX: 00007f836c3b5fa0 RCX: 00007f836c18e9a9 [ 3153.084230][ T3130] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 3153.084241][ T3130] RBP: 00007f836d095090 R08: 0000000000000000 R09: 0000000000000000 [ 3153.084251][ T3130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3153.084261][ T3130] R13: 0000000000000000 R14: 00007f836c3b5fa0 R15: 00007f836c4dfa28 [ 3153.084286][ T3130] [ 3153.621215][ T5925] usb 2-1: USB disconnect, device number 100 [ 3154.198455][ T3112] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 3154.320275][T27125] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 3154.398085][ T3144] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6628'. [ 3154.472033][T27125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3154.485849][T27125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3154.505955][T27125] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 3154.534088][T27125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3154.629637][T27125] usb 4-1: config 0 descriptor?? [ 3154.770862][T27096] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 3154.883962][ T3135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3154.899944][ T3135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3154.939691][T27096] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3154.957509][T27096] usb 1-1: config 0 has no interfaces? [ 3154.974305][T27096] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 3154.985380][T27096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3155.009741][T27096] usb 1-1: Product: syz [ 3155.016957][T27096] usb 1-1: Manufacturer: syz [ 3155.024441][T27096] usb 1-1: SerialNumber: syz [ 3155.038872][T27096] usb 1-1: config 0 descriptor?? [ 3155.134703][T27125] waterforce 0003:1044:7A4D.0058: unknown main item tag 0x0 [ 3155.153013][T27125] waterforce 0003:1044:7A4D.0058: unknown main item tag 0x0 [ 3155.163196][T27125] waterforce 0003:1044:7A4D.0058: unknown main item tag 0x0 [ 3155.180767][T27125] waterforce 0003:1044:7A4D.0058: item fetching failed at offset 6/7 [ 3155.266367][T27125] waterforce 0003:1044:7A4D.0058: hid parse failed with -22 [ 3155.284158][T27125] waterforce 0003:1044:7A4D.0058: probe with driver waterforce failed with error -22 [ 3155.360692][T27125] usb 4-1: USB disconnect, device number 97 [ 3155.569515][ T3157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3155.579625][ T3157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3155.604106][ T3157] binder: BINDER_SET_CONTEXT_MGR already set [ 3155.610403][ T3157] binder: 3152:3157 ioctl 4018620d 2000000001c0 returned -16 [ 3155.687144][ T3159] binder: 3152:3159 ioctl c0306201 0 returned -14 [ 3156.154179][T27105] hid-generic 0000:0D17:0000.0059: item fetching failed at offset 0/2 [ 3156.478757][ T3169] FAULT_INJECTION: forcing a failure. [ 3156.478757][ T3169] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.511854][T27105] hid-generic 0000:0D17:0000.0059: probe with driver hid-generic failed with error -22 [ 3156.628933][ T3169] CPU: 0 UID: 0 PID: 3169 Comm: syz.3.6635 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3156.628965][ T3169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3156.628980][ T3169] Call Trace: [ 3156.628990][ T3169] [ 3156.629000][ T3169] dump_stack_lvl+0x189/0x250 [ 3156.629029][ T3169] ? __pfx____ratelimit+0x10/0x10 [ 3156.629058][ T3169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3156.629082][ T3169] ? __pfx__printk+0x10/0x10 [ 3156.629116][ T3169] ? __pfx___might_resched+0x10/0x10 [ 3156.629136][ T3169] ? fs_reclaim_acquire+0x7d/0x100 [ 3156.629162][ T3169] should_fail_ex+0x414/0x560 [ 3156.629196][ T3169] should_failslab+0xa8/0x100 [ 3156.629228][ T3169] __kmalloc_noprof+0xcb/0x4f0 [ 3156.629254][ T3169] ? kfree+0x4d/0x440 [ 3156.629277][ T3169] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3156.629311][ T3169] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3156.629341][ T3169] ? tomoyo_domain+0xd9/0x130 [ 3156.629376][ T3169] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3156.629400][ T3169] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3156.629425][ T3169] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3156.629447][ T3169] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3156.629483][ T3169] ? __lock_acquire+0xab9/0xd20 [ 3156.629534][ T3169] ? __fget_files+0x2a/0x420 [ 3156.629581][ T3169] ? __fget_files+0x2a/0x420 [ 3156.629610][ T3169] ? __fget_files+0x3a0/0x420 [ 3156.629649][ T3169] ? __fget_files+0x2a/0x420 [ 3156.629684][ T3169] security_file_ioctl+0xcb/0x2d0 [ 3156.629710][ T3169] __se_sys_ioctl+0x47/0x170 [ 3156.629739][ T3169] do_syscall_64+0xfa/0x3b0 [ 3156.629768][ T3169] ? lockdep_hardirqs_on+0x9c/0x150 [ 3156.629798][ T3169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3156.629820][ T3169] ? clear_bhb_loop+0x60/0xb0 [ 3156.629845][ T3169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3156.629864][ T3169] RIP: 0033:0x7f836c18e5ab [ 3156.629882][ T3169] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 3156.629899][ T3169] RSP: 002b:00007f836d093490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3156.629922][ T3169] RAX: ffffffffffffffda RBX: 00007f836d093be0 RCX: 00007f836c18e5ab [ 3156.629937][ T3169] RDX: 00007f836d093be0 RSI: 000000004020ae46 RDI: 0000000000000003 [ 3156.629950][ T3169] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000004 [ 3156.629961][ T3169] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000006 [ 3156.629972][ T3169] R13: 0000200000fee000 R14: 0000200000fe8000 R15: 00000000fec00000 [ 3156.630003][ T3169] [ 3156.950813][ T3169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3157.532003][ T5926] usb 1-1: USB disconnect, device number 60 [ 3158.120781][ T3180] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3158.664067][ T3187] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6640'. [ 3159.175614][ T3191] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3160.583407][T27105] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 3160.826403][T27105] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3160.844191][T27105] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3160.854762][T27105] usb 4-1: config 1 has no interface number 1 [ 3160.868123][T27105] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3160.965053][T27105] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3160.980455][T27105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3161.032229][T27105] usb 4-1: Product: syz [ 3161.068528][T27105] usb 4-1: Manufacturer: syz [ 3161.097379][T27105] usb 4-1: SerialNumber: syz [ 3161.555430][T27105] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 3161.564081][T27105] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 3161.575240][T27105] usb 4-1: failed to enable PITCH for EP 0x82 [ 3161.621843][T27105] usb 4-1: USB disconnect, device number 98 [ 3161.795010][ T1199] udevd[1199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3161.831458][T27125] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 3161.844059][ T3220] FAULT_INJECTION: forcing a failure. [ 3161.844059][ T3220] name failslab, interval 1, probability 0, space 0, times 0 [ 3161.875934][ T3220] CPU: 0 UID: 0 PID: 3220 Comm: syz.1.6649 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3161.875967][ T3220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3161.875982][ T3220] Call Trace: [ 3161.875992][ T3220] [ 3161.876002][ T3220] dump_stack_lvl+0x189/0x250 [ 3161.876033][ T3220] ? __pfx____ratelimit+0x10/0x10 [ 3161.876064][ T3220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3161.876088][ T3220] ? __pfx__printk+0x10/0x10 [ 3161.876125][ T3220] ? __pfx___might_resched+0x10/0x10 [ 3161.876146][ T3220] ? fs_reclaim_acquire+0x7d/0x100 [ 3161.876174][ T3220] should_fail_ex+0x414/0x560 [ 3161.876221][ T3220] ? nf_hook_entries_grow+0x27c/0x710 [ 3161.876241][ T3220] should_failslab+0xa8/0x100 [ 3161.876275][ T3220] __kvmalloc_node_noprof+0x161/0x5f0 [ 3161.876309][ T3220] ? nf_hook_entries_grow+0x27c/0x710 [ 3161.876337][ T3220] nf_hook_entries_grow+0x27c/0x710 [ 3161.876375][ T3220] __nf_register_net_hook+0x2c9/0x930 [ 3161.876410][ T3220] nf_register_net_hook+0xb2/0x190 [ 3161.876436][ T3220] nf_register_net_hooks+0x44/0x1b0 [ 3161.876463][ T3220] nf_ct_netns_do_get+0x212/0x5a0 [ 3161.876492][ T3220] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 3161.876513][ T3220] ? __mutex_trylock_common+0x153/0x260 [ 3161.876543][ T3220] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3161.876576][ T3220] xt_ct_tg_check+0xf1/0xa90 [ 3161.876609][ T3220] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 3161.876633][ T3220] ? xt_find_target+0x1f3/0x240 [ 3161.876668][ T3220] xt_check_target+0x3c0/0xa90 [ 3161.876700][ T3220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3161.876734][ T3220] ? __pfx_xt_check_target+0x10/0x10 [ 3161.876765][ T3220] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 3161.876805][ T3220] ? xt_find_target+0x1f3/0x240 [ 3161.876840][ T3220] translate_table+0x186b/0x2040 [ 3161.876892][ T3220] ? __pfx_translate_table+0x10/0x10 [ 3161.876920][ T3220] ? __might_fault+0xb0/0x130 [ 3161.876973][ T3220] ? _copy_from_user+0x94/0xb0 [ 3161.877009][ T3220] do_ip6t_set_ctl+0x970/0xce0 [ 3161.877039][ T3220] ? rcu_is_watching+0x15/0xb0 [ 3161.877063][ T3220] ? trace_contention_end+0x39/0x120 [ 3161.877088][ T3220] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 3161.877139][ T3220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3161.877168][ T3220] ? aa_sk_perm+0x81e/0x950 [ 3161.877209][ T3220] ? __pfx_aa_sk_perm+0x10/0x10 [ 3161.877241][ T3220] nf_setsockopt+0x26f/0x290 [ 3161.877270][ T3220] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 3161.877309][ T3220] do_sock_setsockopt+0x17c/0x1b0 [ 3161.877341][ T3220] __x64_sys_setsockopt+0x13f/0x1b0 [ 3161.877374][ T3220] do_syscall_64+0xfa/0x3b0 [ 3161.877404][ T3220] ? lockdep_hardirqs_on+0x9c/0x150 [ 3161.877432][ T3220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3161.877455][ T3220] ? clear_bhb_loop+0x60/0xb0 [ 3161.877482][ T3220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3161.877504][ T3220] RIP: 0033:0x7f806158e9a9 [ 3161.877524][ T3220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3161.877543][ T3220] RSP: 002b:00007f8062477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3161.877570][ T3220] RAX: ffffffffffffffda RBX: 00007f80617b5fa0 RCX: 00007f806158e9a9 [ 3161.877587][ T3220] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 3161.877601][ T3220] RBP: 00007f8062477090 R08: 00000000000003b8 R09: 0000000000000000 [ 3161.877616][ T3220] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3161.877630][ T3220] R13: 0000000000000000 R14: 00007f80617b5fa0 R15: 00007f80618dfa28 [ 3161.877665][ T3220] [ 3162.444501][T27125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3162.474777][T27125] usb 1-1: config 0 has no interfaces? [ 3162.492042][T27125] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 3162.516745][T27125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3162.536515][T27125] usb 1-1: Product: syz [ 3162.615463][T27125] usb 1-1: Manufacturer: syz [ 3162.668468][T27125] usb 1-1: SerialNumber: syz [ 3162.709550][ T3222] kvm: kvm [3215]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 3162.742833][ T3222] kvm: kvm [3215]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 3162.770785][ T3222] kvm: kvm [3215]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 3162.784347][T27125] usb 1-1: config 0 descriptor?? [ 3162.851865][ T3222] kvm_intel: kvm [3215]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 3163.301563][ T3235] net_ratelimit: 10 callbacks suppressed [ 3163.301580][ T3235] netlink: zone id is out of range [ 3163.324576][ T3235] netlink: zone id is out of range [ 3163.380001][ T3235] netlink: zone id is out of range [ 3163.386071][T27125] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 3163.428933][ T3235] netlink: zone id is out of range [ 3163.461169][ T3235] netlink: zone id is out of range [ 3163.480741][ T3235] netlink: zone id is out of range [ 3163.490555][ T3235] netlink: zone id is out of range [ 3163.504854][ T3235] netlink: zone id is out of range [ 3163.511696][ T3235] netlink: zone id is out of range [ 3163.520128][ T3235] netlink: zone id is out of range [ 3163.615514][T27125] usb 4-1: config 0 has no interfaces? [ 3163.652033][T27125] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3163.701156][T27125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3163.718215][T27125] usb 4-1: Product: syz [ 3163.723294][T27125] usb 4-1: Manufacturer: syz [ 3163.729405][T27125] usb 4-1: SerialNumber: syz [ 3163.748419][T27125] usb 4-1: config 0 descriptor?? [ 3164.073078][ T3246] binder: 3232:3246 ioctl c0306201 0 returned -14 [ 3164.210617][T27096] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3164.412494][T27096] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 3164.422029][T27096] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3164.461759][T27096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3164.513810][T27096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3164.589679][T27096] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3164.644085][T27096] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3164.662437][T27125] usb 1-1: USB disconnect, device number 61 [ 3164.717573][T27096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3164.782439][T27096] usb 2-1: config 0 descriptor?? [ 3164.830364][ T3245] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 3165.676961][ T3245] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 3165.782200][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 3165.782222][ T30] audit: type=1326 audit(1753877764.459:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3252 comm="syz.2.6659" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbb0b8e9a9 code=0x0 [ 3166.084186][T17765] IPVS: starting estimator thread 0... [ 3166.188983][ T3263] nvme_fabrics: missing parameter 'transport=%s' [ 3166.197173][ T3263] nvme_fabrics: missing parameter 'nqn=%s' [ 3166.247761][T27096] usbhid 2-1:0.0: can't add hid device: -71 [ 3166.277503][T27096] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3166.320376][T27096] usb 2-1: USB disconnect, device number 101 [ 3166.330360][ T3266] IPVS: using max 27 ests per chain, 64800 per kthread [ 3166.488831][ T3270] FAULT_INJECTION: forcing a failure. [ 3166.488831][ T3270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3166.580411][ T3270] CPU: 1 UID: 0 PID: 3270 Comm: syz.1.6661 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3166.580444][ T3270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3166.580457][ T3270] Call Trace: [ 3166.580466][ T3270] [ 3166.580478][ T3270] dump_stack_lvl+0x189/0x250 [ 3166.580500][ T3270] ? __pfx____ratelimit+0x10/0x10 [ 3166.580522][ T3270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3166.580539][ T3270] ? __pfx__printk+0x10/0x10 [ 3166.580568][ T3270] should_fail_ex+0x414/0x560 [ 3166.580594][ T3270] _copy_to_user+0x31/0xb0 [ 3166.580615][ T3270] simple_read_from_buffer+0xe1/0x170 [ 3166.580641][ T3270] proc_fail_nth_read+0x1b3/0x220 [ 3166.580659][ T3270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3166.580677][ T3270] ? rw_verify_area+0x258/0x650 [ 3166.580696][ T3270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3166.580712][ T3270] vfs_read+0x1fd/0x980 [ 3166.580737][ T3270] ? __pfx_vfs_read+0x10/0x10 [ 3166.580764][ T3270] ? __asan_memset+0x22/0x50 [ 3166.580781][ T3270] ? xsk_setsockopt+0x1bd/0x710 [ 3166.580798][ T3270] ? do_sys_openat2+0x154/0x1c0 [ 3166.580816][ T3270] ? __pfx_xsk_setsockopt+0x10/0x10 [ 3166.580841][ T3270] ksys_read+0x145/0x250 [ 3166.580862][ T3270] ? __pfx_ksys_read+0x10/0x10 [ 3166.580891][ T3270] ? do_syscall_64+0xbe/0x3b0 [ 3166.580915][ T3270] do_syscall_64+0xfa/0x3b0 [ 3166.580935][ T3270] ? lockdep_hardirqs_on+0x9c/0x150 [ 3166.580954][ T3270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3166.580969][ T3270] ? clear_bhb_loop+0x60/0xb0 [ 3166.580987][ T3270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3166.581002][ T3270] RIP: 0033:0x7f806158d3bc [ 3166.581015][ T3270] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3166.581028][ T3270] RSP: 002b:00007f8062477030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3166.581046][ T3270] RAX: ffffffffffffffda RBX: 00007f80617b5fa0 RCX: 00007f806158d3bc [ 3166.581057][ T3270] RDX: 000000000000000f RSI: 00007f80624770a0 RDI: 0000000000000004 [ 3166.581066][ T3270] RBP: 00007f8062477090 R08: 0000000000000000 R09: 0000000000000000 [ 3166.581075][ T3270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3166.581084][ T3270] R13: 0000000000000000 R14: 00007f80617b5fa0 R15: 00007f80618dfa28 [ 3166.581106][ T3270] [ 3166.600206][T17765] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3166.986499][T27105] usb 4-1: USB disconnect, device number 99 [ 3167.253717][T17765] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3167.271595][T17765] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 3167.293105][T17765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3167.322252][ T3276] loop8: detected capacity change from 0 to 16383 [ 3167.333801][T17765] usb 1-1: config 0 descriptor?? [ 3167.365852][T17765] gspca_main: kinect-2.14.0 probing 045e:02bf [ 3167.441478][T17037] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3167.592192][ T5926] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 3167.623570][ T3268] vivid-007: ================= START STATUS ================= [ 3167.640207][T17037] usb 2-1: Using ep0 maxpacket: 8 [ 3167.651187][ T3268] vivid-007: Enable Output Cropping: true [ 3167.669358][T17037] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 3167.689761][ T3268] vivid-007: Enable Output Composing: true [ 3167.699945][T17037] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3167.715069][ T3278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3167.739893][T17037] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3167.743636][ T3268] vivid-007: Enable Output Scaler: true [ 3167.756984][ T3268] vivid-007: Tx RGB Quantization Range: Automatic [ 3167.764538][ T5926] usb 4-1: device descriptor read/64, error -71 [ 3167.767672][ T3278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3167.780747][T17037] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3167.814194][ T3268] vivid-007: Transmit Mode: HDMI [ 3167.819290][ T3268] vivid-007: Hotplug Present: 0x00000000 [ 3167.829720][T17037] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3167.830583][ T3268] vivid-007: RxSense Present: [ 3167.850069][T17037] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3167.870631][ T3268] 0x00000000 [ 3167.873928][ T3268] vivid-007: EDID Present: 0x00000000 [ 3167.884301][ T3268] vivid-007: ================== END STATUS ================== [ 3167.889903][T17037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3168.030176][ T5926] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 3168.108881][T17037] usb 2-1: usb_control_msg returned -32 [ 3168.117641][T17037] usbtmc 2-1:16.0: can't read capabilities [ 3168.170230][ T5926] usb 4-1: device descriptor read/64, error -71 [ 3168.290564][ T5926] usb usb4-port1: attempt power cycle [ 3168.640001][ T5926] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 3168.671089][ T5926] usb 4-1: device descriptor read/8, error -71 [ 3168.910383][ T5926] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 3168.951606][ T5926] usb 4-1: device descriptor read/8, error -71 [ 3169.078507][ T5926] usb usb4-port1: unable to enumerate USB device [ 3169.746417][ T5926] usb 1-1: USB disconnect, device number 62 [ 3170.067245][T17765] usb 2-1: USB disconnect, device number 102 [ 3170.090289][ T3285] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 3170.413617][ T3315] FAULT_INJECTION: forcing a failure. [ 3170.413617][ T3315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3170.490464][ T3315] CPU: 1 UID: 0 PID: 3315 Comm: syz.2.6673 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3170.490496][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3170.490509][ T3315] Call Trace: [ 3170.490518][ T3315] [ 3170.490528][ T3315] dump_stack_lvl+0x189/0x250 [ 3170.490557][ T3315] ? __pfx____ratelimit+0x10/0x10 [ 3170.490585][ T3315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3170.490619][ T3315] ? __pfx__printk+0x10/0x10 [ 3170.490646][ T3315] ? __might_fault+0xb0/0x130 [ 3170.490685][ T3315] should_fail_ex+0x414/0x560 [ 3170.490722][ T3315] _copy_from_user+0x2d/0xb0 [ 3170.490750][ T3315] video_usercopy+0x354/0x14f0 [ 3170.490784][ T3315] ? __pfx___video_do_ioctl+0x10/0x10 [ 3170.490806][ T3315] ? __pfx_video_usercopy+0x10/0x10 [ 3170.490839][ T3315] ? __fget_files+0x2a/0x420 [ 3170.490874][ T3315] ? __fget_files+0x2a/0x420 [ 3170.490904][ T3315] ? __fget_files+0x3a0/0x420 [ 3170.490936][ T3315] v4l2_ioctl+0x18d/0x1e0 [ 3170.490957][ T3315] ? __pfx_v4l2_ioctl+0x10/0x10 [ 3170.490976][ T3315] __se_sys_ioctl+0xf9/0x170 [ 3170.491004][ T3315] do_syscall_64+0xfa/0x3b0 [ 3170.491031][ T3315] ? lockdep_hardirqs_on+0x9c/0x150 [ 3170.491057][ T3315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3170.491078][ T3315] ? clear_bhb_loop+0x60/0xb0 [ 3170.491103][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3170.491124][ T3315] RIP: 0033:0x7fbbb0b8e9a9 [ 3170.491143][ T3315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3170.491161][ T3315] RSP: 002b:00007fbbb1adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3170.491188][ T3315] RAX: ffffffffffffffda RBX: 00007fbbb0db5fa0 RCX: 00007fbbb0b8e9a9 [ 3170.491203][ T3315] RDX: 0000200000000140 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 3170.491218][ T3315] RBP: 00007fbbb1adf090 R08: 0000000000000000 R09: 0000000000000000 [ 3170.491231][ T3315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3170.491244][ T3315] R13: 0000000000000000 R14: 00007fbbb0db5fa0 R15: 00007fbbb0edfa28 [ 3170.491276][ T3315] [ 3170.737420][T17037] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3170.750694][ T3318] binder: BINDER_SET_CONTEXT_MGR already set [ 3170.757518][ T3318] binder: 3317:3318 ioctl 4018620d 200000000040 returned -16 [ 3170.900250][T17037] usb 1-1: Using ep0 maxpacket: 16 [ 3170.907258][T17037] usb 1-1: config 0 has an invalid interface number: 190 but max is 1 [ 3170.917045][T17037] usb 1-1: config 0 has an invalid interface number: 2 but max is 1 [ 3170.925150][T17037] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 3170.934672][T17037] usb 1-1: config 0 has no interface number 1 [ 3170.942082][T17037] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3170.955369][T17037] usb 1-1: config 0 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 3170.972886][T17037] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3171.010696][T17037] usb 1-1: config 0 interface 2 has no altsetting 0 [ 3171.120260][T17037] usb 1-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice=f6.7f [ 3171.129442][T17037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3171.138703][T17037] usb 1-1: Product: syz [ 3171.143307][T17037] usb 1-1: Manufacturer: syz [ 3171.148065][T17037] usb 1-1: SerialNumber: syz [ 3171.193146][T17037] usb 1-1: config 0 descriptor?? [ 3171.290585][T27096] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 3171.390697][ T3330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3171.531278][T17037] usb 1-1: selecting invalid altsetting 0 [ 3171.542233][ T3330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3171.590560][T27096] usb 4-1: Using ep0 maxpacket: 8 [ 3171.625537][T27096] usb 4-1: config 9 has an invalid interface number: 227 but max is 0 [ 3171.660249][T27096] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 3171.731524][T17037] usb 1-1: USB disconnect, device number 63 [ 3171.748205][T27096] usb 4-1: config 9 has no interface number 0 [ 3171.797370][T27096] usb 4-1: config 9 interface 227 has no altsetting 0 [ 3172.331578][ T1200] udevd[1200]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.190/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3172.414378][T27096] usb 4-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=10.67 [ 3172.508933][T27096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3172.594824][T27096] usb 4-1: Product: syz [ 3172.640791][T27096] usb 4-1: Manufacturer: syz [ 3172.674715][T27096] usb 4-1: SerialNumber: syz [ 3172.823047][T28554] cgroup: fork rejected by pids controller in /syz0 [ 3173.047033][ T3324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3173.091349][ T3324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3173.885841][ T845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3174.462784][ T845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3174.687830][ T845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3174.879131][ T845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3175.066297][T27096] usb 4-1: unknown interface protocol 0x91, assuming v1 [ 3175.084159][T27096] usb 4-1: cannot find UAC_HEADER [ 3175.164416][T27096] snd-usb-audio 4-1:9.227: probe with driver snd-usb-audio failed with error -22 [ 3175.274463][T27096] usb 4-1: USB disconnect, device number 104 [ 3175.381147][ T1200] udevd[1200]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.227/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3175.752466][ T845] bridge_slave_1: left allmulticast mode [ 3175.857507][ T845] bridge_slave_1: left promiscuous mode [ 3176.074482][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 3176.223040][T27096] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 3176.255638][ T845] bridge_slave_0: left promiscuous mode [ 3176.286579][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 3176.358300][ T3361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3176.460375][ T3361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3176.521573][T27096] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3176.548307][ T3360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3176.595925][T27096] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3176.611199][ T3360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3176.740505][T27096] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3176.780695][T27096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3176.876631][ T3363] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3176.917317][T27096] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3177.163741][T27096] usb 4-1: USB disconnect, device number 105 [ 3177.510457][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3177.540328][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3177.566045][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3177.610534][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3177.622795][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3177.730618][T27125] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3177.791673][ T9341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3177.834395][ T9341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3177.845321][ T9341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3177.856821][ T9341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3177.866904][ T9341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3177.906755][T27125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3177.929906][T27125] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 3177.939086][T27125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3177.958345][T27125] usb 2-1: config 0 descriptor?? [ 3177.970105][T27125] gspca_main: kinect-2.14.0 probing 045e:02bf [ 3178.201502][ T3371] vivid-007: ================= START STATUS ================= [ 3178.238784][ T3371] vivid-007: Enable Output Cropping: true [ 3178.279285][ T3371] vivid-007: Enable Output Composing: true [ 3178.288949][ T3398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3178.299726][ T3371] vivid-007: Enable Output Scaler: true [ 3178.329080][ T3371] vivid-007: Tx RGB Quantization Range: Automatic [ 3178.470488][ T3398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3178.470783][ T3371] vivid-007: Transmit Mode: HDMI [ 3178.550067][ T3371] vivid-007: Hotplug Present: 0x00000000 [ 3178.624103][ T3371] vivid-007: RxSense Present: 0x00000000 [ 3178.681069][ T3371] vivid-007: EDID Present: 0x00000000 [ 3178.712304][ T3371] vivid-007: ================== END STATUS ================== [ 3179.861682][ T845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3179.877310][ T845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3179.889260][ T845] bond0 (unregistering): Released all slaves [ 3179.950297][ T9341] Bluetooth: hci1: command tx timeout [ 3180.477485][ T3422] net_ratelimit: 9 callbacks suppressed [ 3180.477507][ T3422] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 3180.824496][T27096] usb 2-1: USB disconnect, device number 103 [ 3180.964498][ T3435] loop5: detected capacity change from 0 to 3359 [ 3181.058971][ T1200] buffer_io_error: 27 callbacks suppressed [ 3181.058988][ T1200] Buffer I/O error on dev loop5, logical block 419, async page read [ 3181.179308][ T3436] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 3181.748610][ T3447] FAULT_INJECTION: forcing a failure. [ 3181.748610][ T3447] name failslab, interval 1, probability 0, space 0, times 0 [ 3181.801793][ T3445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6700'. [ 3181.818162][ T3445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6700'. [ 3181.830453][ T845] hsr_slave_0: left promiscuous mode [ 3181.857813][ T845] hsr_slave_1: left promiscuous mode [ 3181.871780][ T845] batman_adv: batadv0: Interface deactivated: dummy0 [ 3181.878690][ T845] batman_adv: batadv0: Removing interface: dummy0 [ 3181.900543][ T3447] CPU: 1 UID: 0 PID: 3447 Comm: syz.1.6699 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3181.900578][ T3447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3181.900593][ T3447] Call Trace: [ 3181.900603][ T3447] [ 3181.900613][ T3447] dump_stack_lvl+0x189/0x250 [ 3181.900645][ T3447] ? __pfx____ratelimit+0x10/0x10 [ 3181.900675][ T3447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3181.900700][ T3447] ? __pfx__printk+0x10/0x10 [ 3181.900745][ T3447] ? __pfx___might_resched+0x10/0x10 [ 3181.900773][ T3447] should_fail_ex+0x414/0x560 [ 3181.900812][ T3447] should_failslab+0xa8/0x100 [ 3181.900847][ T3447] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3181.900876][ T3447] ? mas_alloc_nodes+0x2e9/0x8e0 [ 3181.900911][ T3447] mas_alloc_nodes+0x2e9/0x8e0 [ 3181.900949][ T3447] mas_preallocate+0x3ad/0x6f0 [ 3181.900980][ T3447] ? mt_find+0x15c/0x5f0 [ 3181.901010][ T3447] ? __pfx_mas_preallocate+0x10/0x10 [ 3181.901051][ T3447] ? __mas_set_range+0x12f/0x3c0 [ 3181.901084][ T3447] vma_link+0x102/0x450 [ 3181.901114][ T3447] ? __pfx_vma_link+0x10/0x10 [ 3181.901146][ T3447] ? percpu_counter_add_batch+0xea/0x1e0 [ 3181.901183][ T3447] ? __vm_enough_memory+0x11b/0x380 [ 3181.901211][ T3447] insert_vm_struct+0x199/0x260 [ 3181.901245][ T3447] create_init_stack_vma+0x2de/0x680 [ 3181.901283][ T3447] alloc_bprm+0x476/0x5b0 [ 3181.901315][ T3447] do_execveat_common+0x1b3/0x6a0 [ 3181.901357][ T3447] __x64_sys_execve+0x94/0xb0 [ 3181.901388][ T3447] do_syscall_64+0xfa/0x3b0 [ 3181.901417][ T3447] ? lockdep_hardirqs_on+0x9c/0x150 [ 3181.901446][ T3447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3181.901469][ T3447] ? clear_bhb_loop+0x60/0xb0 [ 3181.901496][ T3447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3181.901518][ T3447] RIP: 0033:0x7f806158e9a9 [ 3181.901537][ T3447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3181.901562][ T3447] RSP: 002b:00007f8062477038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 3181.901589][ T3447] RAX: ffffffffffffffda RBX: 00007f80617b5fa0 RCX: 00007f806158e9a9 [ 3181.901617][ T3447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 3181.901630][ T3447] RBP: 00007f8062477090 R08: 0000000000000000 R09: 0000000000000000 [ 3181.901644][ T3447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3181.901657][ T3447] R13: 0000000000000000 R14: 00007f80617b5fa0 R15: 00007f80618dfa28 [ 3181.901690][ T3447] [ 3182.179038][ T9341] Bluetooth: hci1: command tx timeout [ 3182.351273][ T845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3182.358964][ T845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3182.431321][ T845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3182.490636][ T845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3182.603615][ T845] veth1_macvtap: left promiscuous mode [ 3182.609584][ T845] veth0_macvtap: left promiscuous mode [ 3182.623797][ T845] veth1_vlan: left promiscuous mode [ 3182.629396][ T845] veth0_vlan: left promiscuous mode [ 3183.582465][ T845] team0 (unregistering): Port device team_slave_1 removed [ 3183.695749][ T845] team0 (unregistering): Port device team_slave_0 removed [ 3184.190200][ T9341] Bluetooth: hci1: command tx timeout [ 3184.793810][ T3380] chnl_net:caif_netlink_parms(): no params data found [ 3185.096825][ T3466] team0: Port device bridge4 added [ 3185.260516][T27096] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 3185.470647][ T30] audit: type=1326 audit(1753877784.049:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.2.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3185.515848][ T3380] bridge0: port 1(bridge_slave_0) entered blocking state [ 3185.532049][ T3380] bridge0: port 1(bridge_slave_0) entered disabled state [ 3185.540553][T27096] usb 4-1: Using ep0 maxpacket: 8 [ 3185.548741][T27096] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3185.565938][T27096] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3185.585094][T27096] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3185.592822][T27096] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 3185.605316][T27096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3185.616692][ T30] audit: type=1326 audit(1753877784.059:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.2.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3185.641156][T27096] usb 4-1: config 0 descriptor?? [ 3185.646740][ T3380] bridge_slave_0: entered allmulticast mode [ 3185.675044][ T3380] bridge_slave_0: entered promiscuous mode [ 3185.693120][ T3380] bridge0: port 2(bridge_slave_1) entered blocking state [ 3185.715645][ T30] audit: type=1326 audit(1753877784.069:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.2.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3185.772274][ T30] audit: type=1326 audit(1753877784.069:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.2.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3185.799106][ T30] audit: type=1326 audit(1753877784.069:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.2.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3185.826170][ T30] audit: type=1326 audit(1753877784.079:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.2.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3185.855956][ T3380] bridge0: port 2(bridge_slave_1) entered disabled state [ 3185.878309][ T3380] bridge_slave_1: entered allmulticast mode [ 3185.887549][ T3380] bridge_slave_1: entered promiscuous mode [ 3185.911986][ T30] audit: type=1326 audit(1753877784.079:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.2.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3185.938253][ T30] audit: type=1326 audit(1753877784.079:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.2.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3186.026498][ T30] audit: type=1326 audit(1753877784.079:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.2.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3186.064788][ T30] audit: type=1326 audit(1753877784.079:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.2.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3186.169035][ T3469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3186.182463][ T3469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3186.252444][ T3469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3186.262661][ T3469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3186.280621][ T9341] Bluetooth: hci1: command tx timeout [ 3186.332420][T27096] smartjoyplus 0003:0B43:0003.005A: ignoring exceeding usage max [ 3186.393636][T27096] smartjoyplus 0003:0B43:0003.005A: item fetching failed at offset 7/11 [ 3186.481007][T27096] smartjoyplus 0003:0B43:0003.005A: parse failed [ 3186.572506][ T3380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3186.603561][T27096] smartjoyplus 0003:0B43:0003.005A: probe with driver smartjoyplus failed with error -22 [ 3186.659496][T27096] usb 4-1: USB disconnect, device number 106 [ 3186.701927][ T3380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3187.031728][ T3380] team0: Port device team_slave_0 added [ 3187.094922][ T3380] team0: Port device team_slave_1 added [ 3187.395462][ T3380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3187.441972][ T3380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3187.534140][ T3380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3187.594413][ T3380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3187.630191][ T3380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3187.731036][ T3380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3188.138112][ T3380] hsr_slave_0: entered promiscuous mode [ 3188.148382][ T3380] hsr_slave_1: entered promiscuous mode [ 3188.167182][ T3380] debugfs: 'hsr0' already exists in 'hsr' [ 3188.176804][ T3380] Cannot create hsr debugfs directory [ 3190.349878][ T3537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3190.358964][ T3537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3190.382397][ T3537] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 3190.440103][ T3279] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 3190.679336][ T3279] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 3190.764090][ T3279] usb 4-1: config 0 has no interface number 0 [ 3190.808324][ T3279] usb 4-1: config 0 interface 16 has no altsetting 0 [ 3190.858653][ T3279] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3190.951192][ T3279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3191.041214][ T3279] usb 4-1: config 0 descriptor?? [ 3191.524204][ T3380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3191.563011][ T3380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3191.586204][ T3380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3191.638095][ T3380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3191.660738][ T3279] asix 4-1:0.16 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 3191.763390][ T3279] asix 4-1:0.16: probe with driver asix failed with error -61 [ 3192.520425][ T3380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3192.565590][ T3380] 8021q: adding VLAN 0 to HW filter on device team0 [ 3192.629192][T28505] bridge0: port 1(bridge_slave_0) entered blocking state [ 3192.636858][T28505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3192.674055][T28505] bridge0: port 2(bridge_slave_1) entered blocking state [ 3192.681630][T28505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3193.030404][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 3193.030424][ T30] audit: type=1326 audit(1753877791.659:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3564 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3193.106448][ T3380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3193.111486][ T30] audit: type=1326 audit(1753877791.659:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3564 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3193.168759][ T30] audit: type=1326 audit(1753877791.659:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3564 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3193.232846][ T30] audit: type=1326 audit(1753877791.669:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3564 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3193.285122][ T30] audit: type=1326 audit(1753877791.669:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3564 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3193.329473][ T3380] veth0_vlan: entered promiscuous mode [ 3193.382843][ T30] audit: type=1326 audit(1753877791.669:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3564 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3193.448561][ T3380] veth1_vlan: entered promiscuous mode [ 3193.467345][ T30] audit: type=1326 audit(1753877791.669:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3564 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3193.580554][ T30] audit: type=1326 audit(1753877791.669:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3564 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3193.606380][ T3380] veth0_macvtap: entered promiscuous mode [ 3193.636128][ T3380] veth1_macvtap: entered promiscuous mode [ 3193.692690][ T30] audit: type=1326 audit(1753877791.679:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3564 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3193.721073][ T3279] usb 4-1: USB disconnect, device number 107 [ 3193.767943][ T3380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3193.781077][ T30] audit: type=1326 audit(1753877791.679:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3564 comm="syz.2.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fbbb0b8e9a9 code=0x7ffc0000 [ 3193.813807][ T3380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3193.874467][ T3380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3193.911636][ T3380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3193.950639][ T3380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3193.990370][ T3380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3194.390521][T17765] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 3194.593804][T20387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3194.615859][T20387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3194.637020][T17765] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3194.667288][T17765] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3194.726918][T17765] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3194.765674][T17765] usb 4-1: config 1 has no interface number 1 [ 3194.780610][T17765] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3194.802308][T17765] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3194.824057][T17765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3194.851571][ T845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3194.868980][T17765] usb 4-1: Product: syz [ 3194.878467][ T845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3194.892794][T17765] usb 4-1: Manufacturer: syz [ 3194.904381][T17765] usb 4-1: SerialNumber: syz [ 3195.114346][ T3598] FAULT_INJECTION: forcing a failure. [ 3195.114346][ T3598] name failslab, interval 1, probability 0, space 0, times 0 [ 3195.129020][ T3598] CPU: 0 UID: 0 PID: 3598 Comm: syz.0.6684 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3195.129052][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3195.129067][ T3598] Call Trace: [ 3195.129077][ T3598] [ 3195.129087][ T3598] dump_stack_lvl+0x189/0x250 [ 3195.129123][ T3598] ? __pfx____ratelimit+0x10/0x10 [ 3195.129154][ T3598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3195.129179][ T3598] ? __pfx__printk+0x10/0x10 [ 3195.129215][ T3598] ? __pfx___might_resched+0x10/0x10 [ 3195.129237][ T3598] ? fs_reclaim_acquire+0x7d/0x100 [ 3195.129264][ T3598] should_fail_ex+0x414/0x560 [ 3195.129302][ T3598] should_failslab+0xa8/0x100 [ 3195.129336][ T3598] __kmalloc_noprof+0xcb/0x4f0 [ 3195.129363][ T3598] ? kfree+0x4d/0x440 [ 3195.129387][ T3598] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3195.129424][ T3598] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3195.129456][ T3598] ? tomoyo_domain+0xd9/0x130 [ 3195.129491][ T3598] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3195.129517][ T3598] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3195.129545][ T3598] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3195.129570][ T3598] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 3195.129606][ T3598] ? rcu_is_watching+0x15/0xb0 [ 3195.129640][ T3598] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 3195.129696][ T3598] ? __rcu_read_unlock+0x84/0xe0 [ 3195.129725][ T3598] ? __fget_files+0x2a/0x420 [ 3195.129778][ T3598] ? __fget_files+0x3a0/0x420 [ 3195.129815][ T3598] ? __fget_files+0x2a/0x420 [ 3195.129851][ T3598] security_file_ioctl+0xcb/0x2d0 [ 3195.129876][ T3598] __se_sys_ioctl+0x47/0x170 [ 3195.129905][ T3598] do_syscall_64+0xfa/0x3b0 [ 3195.129938][ T3598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3195.129958][ T3598] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3195.129981][ T3598] ? clear_bhb_loop+0x60/0xb0 [ 3195.130008][ T3598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3195.130029][ T3598] RIP: 0033:0x7fa03858e9a9 [ 3195.130049][ T3598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3195.130066][ T3598] RSP: 002b:00007fa03944e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3195.130089][ T3598] RAX: ffffffffffffffda RBX: 00007fa0387b5fa0 RCX: 00007fa03858e9a9 [ 3195.130106][ T3598] RDX: 0000200000000000 RSI: 0000000000008933 RDI: 0000000000000004 [ 3195.130120][ T3598] RBP: 00007fa03944e090 R08: 0000000000000000 R09: 0000000000000000 [ 3195.130134][ T3598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3195.130147][ T3598] R13: 0000000000000000 R14: 00007fa0387b5fa0 R15: 00007fa0388dfa28 [ 3195.130181][ T3598] [ 3195.694166][T17765] usb 4-1: Failed to set altset [ 3195.704787][T17765] usb 4-1: 0:2: cannot create sequencer device [ 3195.706237][ T3598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3195.719044][T17765] usb 4-1: Failed to set altset [ 3195.809591][T17765] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 3195.885600][T17765] usb 4-1: USB disconnect, device number 108 [ 3195.976311][ T1200] udevd[1200]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3196.023667][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6728'. [ 3196.064876][ T3604] FAULT_INJECTION: forcing a failure. [ 3196.064876][ T3604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3196.113312][ T3604] CPU: 1 UID: 0 PID: 3604 Comm: syz.2.6728 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3196.113345][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3196.113359][ T3604] Call Trace: [ 3196.113372][ T3604] [ 3196.113384][ T3604] dump_stack_lvl+0x189/0x250 [ 3196.113412][ T3604] ? __pfx____ratelimit+0x10/0x10 [ 3196.113442][ T3604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3196.113465][ T3604] ? __pfx__printk+0x10/0x10 [ 3196.113505][ T3604] should_fail_ex+0x414/0x560 [ 3196.113541][ T3604] _copy_to_user+0x31/0xb0 [ 3196.113571][ T3604] simple_read_from_buffer+0xe1/0x170 [ 3196.113606][ T3604] proc_fail_nth_read+0x1b3/0x220 [ 3196.113632][ T3604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3196.113659][ T3604] ? rw_verify_area+0x258/0x650 [ 3196.113685][ T3604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3196.113705][ T3604] vfs_read+0x1fd/0x980 [ 3196.113731][ T3604] ? fdget_pos+0x247/0x320 [ 3196.113767][ T3604] ? __pfx___mutex_lock+0x10/0x10 [ 3196.113798][ T3604] ? __pfx_vfs_read+0x10/0x10 [ 3196.113826][ T3604] ? __fget_files+0x2a/0x420 [ 3196.113861][ T3604] ? __fget_files+0x3a0/0x420 [ 3196.113891][ T3604] ? __fget_files+0x2a/0x420 [ 3196.113947][ T3604] ksys_read+0x145/0x250 [ 3196.113978][ T3604] ? __pfx_ksys_read+0x10/0x10 [ 3196.114003][ T3604] ? rcu_is_watching+0x15/0xb0 [ 3196.114030][ T3604] ? do_syscall_64+0xbe/0x3b0 [ 3196.114063][ T3604] do_syscall_64+0xfa/0x3b0 [ 3196.114091][ T3604] ? lockdep_hardirqs_on+0x9c/0x150 [ 3196.114118][ T3604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3196.114140][ T3604] ? clear_bhb_loop+0x60/0xb0 [ 3196.114167][ T3604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3196.114189][ T3604] RIP: 0033:0x7fbbb0b8d3bc [ 3196.114209][ T3604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3196.114228][ T3604] RSP: 002b:00007fbbb1adf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3196.114253][ T3604] RAX: ffffffffffffffda RBX: 00007fbbb0db5fa0 RCX: 00007fbbb0b8d3bc [ 3196.114270][ T3604] RDX: 000000000000000f RSI: 00007fbbb1adf0a0 RDI: 0000000000000005 [ 3196.114284][ T3604] RBP: 00007fbbb1adf090 R08: 0000000000000000 R09: 0000000000000000 [ 3196.114297][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3196.114311][ T3604] R13: 0000000000000000 R14: 00007fbbb0db5fa0 R15: 00007fbbb0edfa28 [ 3196.114345][ T3604] [ 3196.364290][ C1] vkms_vblank_simulate: vblank timer overrun [ 3197.215291][ T3621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3197.224826][ T3621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3197.271767][ T3621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3197.326232][ T3621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3197.480617][T17037] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 3197.974584][T17037] usb 4-1: config 0 has no interfaces? [ 3197.995246][T17037] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3198.027747][T17037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3198.062052][T17037] usb 4-1: Product: syz [ 3198.080795][T17037] usb 4-1: Manufacturer: syz [ 3198.088637][T17037] usb 4-1: SerialNumber: syz [ 3198.111657][T17037] usb 4-1: config 0 descriptor?? [ 3198.737189][ T3642] binder: 3616:3642 ioctl c0306201 0 returned -14 [ 3199.235011][ T3638] netlink: 'syz.4.6732': attribute type 5 has an invalid length. [ 3201.265238][T27097] usb 4-1: USB disconnect, device number 109 [ 3201.320718][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 3201.320746][ T30] audit: type=1326 audit(1753877799.979:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3658 comm="syz.0.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03858e9a9 code=0x7ffc0000 [ 3201.569538][ T30] audit: type=1326 audit(1753877799.979:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3658 comm="syz.0.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03858e9a9 code=0x7ffc0000 [ 3201.592516][ C1] vkms_vblank_simulate: vblank timer overrun [ 3201.722337][ T30] audit: type=1326 audit(1753877799.979:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3658 comm="syz.0.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa03858e9a9 code=0x7ffc0000 [ 3201.745271][ C1] vkms_vblank_simulate: vblank timer overrun [ 3202.010366][ T30] audit: type=1326 audit(1753877799.979:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3658 comm="syz.0.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03858e9a9 code=0x7ffc0000 [ 3202.251967][ T30] audit: type=1326 audit(1753877799.979:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3658 comm="syz.0.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03858e9a9 code=0x7ffc0000 [ 3202.353271][ T3685] usb usb8: usbfs: process 3685 (syz.4.6737) did not claim interface 0 before use [ 3202.407217][ T30] audit: type=1326 audit(1753877799.979:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3658 comm="syz.0.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa03858e9a9 code=0x7ffc0000 [ 3202.682172][ T30] audit: type=1326 audit(1753877799.979:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3658 comm="syz.0.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03858e9a9 code=0x7ffc0000 [ 3202.839947][ T30] audit: type=1326 audit(1753877799.979:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3658 comm="syz.0.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03858e9a9 code=0x7ffc0000 [ 3202.909228][ T3689] FAULT_INJECTION: forcing a failure. [ 3202.909228][ T3689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3203.021732][ T3689] CPU: 1 UID: 0 PID: 3689 Comm: syz.1.6739 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3203.021755][ T3689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3203.021767][ T3689] Call Trace: [ 3203.021774][ T3689] [ 3203.021782][ T3689] dump_stack_lvl+0x189/0x250 [ 3203.021806][ T3689] ? __pfx____ratelimit+0x10/0x10 [ 3203.021828][ T3689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3203.021845][ T3689] ? __pfx__printk+0x10/0x10 [ 3203.021867][ T3689] ? __might_fault+0xb0/0x130 [ 3203.021897][ T3689] should_fail_ex+0x414/0x560 [ 3203.021925][ T3689] _copy_from_user+0x2d/0xb0 [ 3203.021945][ T3689] get_timespec64+0x8e/0x1a0 [ 3203.021969][ T3689] ? __pfx_get_timespec64+0x10/0x10 [ 3203.021991][ T3689] ? trace_kmalloc+0x1f/0xd0 [ 3203.022011][ T3689] ? io_uring_alloc_async_data+0x7a/0x120 [ 3203.022033][ T3689] __io_timeout_prep+0x365/0x780 [ 3203.022059][ T3689] ? io_task_refs_refill+0xbb/0x180 [ 3203.022080][ T3689] io_submit_sqes+0x8f3/0x1d10 [ 3203.022127][ T3689] __se_sys_io_uring_enter+0x2df/0x2b20 [ 3203.022165][ T3689] ? ksys_write+0x1cb/0x250 [ 3203.022188][ T3689] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 3203.022210][ T3689] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 3203.022235][ T3689] ? __pfx_vfs_write+0x10/0x10 [ 3203.022257][ T3689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3203.022283][ T3689] ? __fget_files+0x3a0/0x420 [ 3203.022311][ T3689] ? fput+0xa0/0xd0 [ 3203.022327][ T3689] ? ksys_write+0x22a/0x250 [ 3203.022349][ T3689] ? __pfx_ksys_write+0x10/0x10 [ 3203.022368][ T3689] ? rcu_is_watching+0x15/0xb0 [ 3203.022388][ T3689] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 3203.022414][ T3689] do_syscall_64+0xfa/0x3b0 [ 3203.022435][ T3689] ? lockdep_hardirqs_on+0x9c/0x150 [ 3203.022456][ T3689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3203.022471][ T3689] ? clear_bhb_loop+0x60/0xb0 [ 3203.022497][ T3689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3203.022513][ T3689] RIP: 0033:0x7f806158e9a9 [ 3203.022528][ T3689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3203.022543][ T3689] RSP: 002b:00007f8062477038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3203.022563][ T3689] RAX: ffffffffffffffda RBX: 00007f80617b5fa0 RCX: 00007f806158e9a9 [ 3203.022575][ T3689] RDX: 0000000000000000 RSI: 0000000000000a3d RDI: 0000000000000003 [ 3203.022585][ T3689] RBP: 00007f8062477090 R08: 0000000000000000 R09: 000000000000ff39 [ 3203.022596][ T3689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3203.022605][ T3689] R13: 0000000000000000 R14: 00007f80617b5fa0 R15: 00007f80618dfa28 [ 3203.022629][ T3689] [ 3203.302344][ T30] audit: type=1326 audit(1753877799.979:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3658 comm="syz.0.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa03858e9a9 code=0x7ffc0000 [ 3203.330372][ T30] audit: type=1326 audit(1753877799.979:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3658 comm="syz.0.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03858e9a9 code=0x7ffc0000 [ 3203.780817][ T3694] vim2m vim2m.0: vidioc_s_fmt queue busy [ 3203.990764][ T3694] FAULT_INJECTION: forcing a failure. [ 3203.990764][ T3694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3204.221197][ T3694] CPU: 0 UID: 0 PID: 3694 Comm: syz.1.6741 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3204.221221][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3204.221231][ T3694] Call Trace: [ 3204.221238][ T3694] [ 3204.221246][ T3694] dump_stack_lvl+0x189/0x250 [ 3204.221268][ T3694] ? __pfx____ratelimit+0x10/0x10 [ 3204.221290][ T3694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3204.221308][ T3694] ? __pfx__printk+0x10/0x10 [ 3204.221338][ T3694] should_fail_ex+0x414/0x560 [ 3204.221371][ T3694] _copy_to_user+0x31/0xb0 [ 3204.221393][ T3694] simple_read_from_buffer+0xe1/0x170 [ 3204.221419][ T3694] proc_fail_nth_read+0x1b3/0x220 [ 3204.221438][ T3694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3204.221458][ T3694] ? rw_verify_area+0x258/0x650 [ 3204.221580][ T3694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3204.221611][ T3694] vfs_read+0x1fd/0x980 [ 3204.221633][ T3694] ? fdget_pos+0x247/0x320 [ 3204.221660][ T3694] ? __pfx___mutex_lock+0x10/0x10 [ 3204.221684][ T3694] ? __pfx_vfs_read+0x10/0x10 [ 3204.221709][ T3694] ? __fget_files+0x2a/0x420 [ 3204.221735][ T3694] ? __fget_files+0x3a0/0x420 [ 3204.221756][ T3694] ? __fget_files+0x2a/0x420 [ 3204.221784][ T3694] ksys_read+0x145/0x250 [ 3204.221806][ T3694] ? __pfx_ksys_read+0x10/0x10 [ 3204.221823][ T3694] ? rcu_is_watching+0x15/0xb0 [ 3204.221844][ T3694] ? do_syscall_64+0xbe/0x3b0 [ 3204.221869][ T3694] do_syscall_64+0xfa/0x3b0 [ 3204.221889][ T3694] ? lockdep_hardirqs_on+0x9c/0x150 [ 3204.221909][ T3694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3204.221924][ T3694] ? clear_bhb_loop+0x60/0xb0 [ 3204.221943][ T3694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3204.221957][ T3694] RIP: 0033:0x7f806158d3bc [ 3204.221975][ T3694] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3204.221989][ T3694] RSP: 002b:00007f8062477030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3204.222007][ T3694] RAX: ffffffffffffffda RBX: 00007f80617b5fa0 RCX: 00007f806158d3bc [ 3204.222019][ T3694] RDX: 000000000000000f RSI: 00007f80624770a0 RDI: 0000000000000004 [ 3204.222030][ T3694] RBP: 00007f8062477090 R08: 0000000000000000 R09: 0000000000000000 [ 3204.222040][ T3694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3204.222049][ T3694] R13: 0000000000000000 R14: 00007f80617b5fa0 R15: 00007f80618dfa28 [ 3204.222073][ T3694] [ 3204.998084][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.010489][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.259190][ T3708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6743'. [ 3205.398037][ T3715] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6746'. [ 3205.635245][ T3714] netlink: 548 bytes leftover after parsing attributes in process `syz.4.6748'. [ 3205.848295][ T3697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3205.906403][ T3697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3205.995514][ T3697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3206.032520][ T3697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3206.052710][ T3697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3206.063238][ T3697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3207.074504][T17037] hid-generic 0000:0D17:0000.005B: item fetching failed at offset 0/2 [ 3207.088055][T17037] hid-generic 0000:0D17:0000.005B: probe with driver hid-generic failed with error -22 [ 3210.025891][ T3805] ALSA: seq fatal error: cannot create timer (-22) [ 3210.398749][ T3813] fuse: Unknown parameter 'grou00000000000000000000' [ 3210.734314][ T3820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6772'. [ 3210.890958][T27097] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3211.067287][T27097] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3211.096946][T27097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3211.111875][T27097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3211.124989][T27097] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3211.187638][T27097] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3211.292891][T27097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3211.352490][T27097] usb 2-1: config 0 descriptor?? [ 3211.580287][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 3211.580325][ T30] audit: type=1326 audit(1753877810.179:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3211.646170][T27097] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3211.685863][ T30] audit: type=1326 audit(1753877810.179:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3211.735136][ T30] audit: type=1326 audit(1753877810.189:8128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3211.760968][ T3279] usb 2-1: USB disconnect, device number 104 [ 3211.968093][ T30] audit: type=1326 audit(1753877810.189:8129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3212.079218][ T3841] fido_id[3841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3212.174944][ T30] audit: type=1326 audit(1753877810.189:8130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3212.197963][ C0] vkms_vblank_simulate: vblank timer overrun [ 3212.207200][ T30] audit: type=1326 audit(1753877810.189:8131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3212.230482][ C0] vkms_vblank_simulate: vblank timer overrun [ 3212.239431][ T30] audit: type=1326 audit(1753877810.189:8132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3212.264101][ C0] vkms_vblank_simulate: vblank timer overrun [ 3212.272800][ T30] audit: type=1326 audit(1753877810.189:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3212.295550][ C0] vkms_vblank_simulate: vblank timer overrun [ 3212.304461][ T30] audit: type=1326 audit(1753877810.199:8134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3212.385947][ T30] audit: type=1326 audit(1753877810.199:8135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f836c18e9a9 code=0x7ffc0000 [ 3212.669228][ T3850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6780'. [ 3212.755911][ T3853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6780'. [ 3212.971842][ T3584] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 3213.042879][ T3861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3213.081484][ T3861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3213.251786][ T3584] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 3213.334654][ T3584] usb 1-1: config 0 has no interface number 0 [ 3213.579250][ T3584] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3213.596291][ T3584] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 3213.596328][ T3584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3213.596352][ T3584] usb 1-1: Product: syz [ 3213.596368][ T3584] usb 1-1: Manufacturer: syz [ 3213.596386][ T3584] usb 1-1: SerialNumber: syz [ 3213.606583][ T3584] usb 1-1: config 0 descriptor?? [ 3213.928544][ T3584] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 3213.928804][ T3584] keyspan 1-1:0.133: unsupported endpoint type 0 [ 3213.961463][ T3584] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 3213.961554][ T3584] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 3213.961617][ T3584] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 3213.967228][ T3584] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 3214.062272][ T3584] usb 1-1: USB disconnect, device number 64 [ 3214.078318][ T3584] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 3214.078807][ T3584] keyspan 1-1:0.133: device disconnected [ 3214.338626][ T3868] binder: 3867:3868 ioctl c00c6211 0 returned -14 [ 3214.828239][ T3872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6787'. [ 3216.514996][ T3903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3216.529334][ T3903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3216.560736][ T3584] hid-generic 0000:0D17:0000.005D: unknown main item tag 0x0 [ 3216.614207][ T3584] hid-generic 0000:0D17:0000.005D: unknown main item tag 0x0 [ 3216.661570][ T3584] hid-generic 0000:0D17:0000.005D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3216.842856][ T3906] fido_id[3906]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3217.859383][ T3924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3217.905670][ T3924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3217.944187][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6806'. [ 3218.763524][ T3937] FAULT_INJECTION: forcing a failure. [ 3218.763524][ T3937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3218.870311][ T3937] CPU: 1 UID: 0 PID: 3937 Comm: syz.1.6808 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3218.870349][ T3937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3218.870364][ T3937] Call Trace: [ 3218.870375][ T3937] [ 3218.870386][ T3937] dump_stack_lvl+0x189/0x250 [ 3218.870417][ T3937] ? __pfx____ratelimit+0x10/0x10 [ 3218.870447][ T3937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3218.870471][ T3937] ? __pfx__printk+0x10/0x10 [ 3218.870498][ T3937] ? __might_fault+0xb0/0x130 [ 3218.870538][ T3937] should_fail_ex+0x414/0x560 [ 3218.870566][ T3937] _copy_from_user+0x2d/0xb0 [ 3218.870587][ T3937] video_usercopy+0x354/0x14f0 [ 3218.870612][ T3937] ? __pfx___video_do_ioctl+0x10/0x10 [ 3218.870628][ T3937] ? __pfx_video_usercopy+0x10/0x10 [ 3218.870652][ T3937] ? __fget_files+0x2a/0x420 [ 3218.870679][ T3937] ? __fget_files+0x2a/0x420 [ 3218.870701][ T3937] ? __fget_files+0x3a0/0x420 [ 3218.870727][ T3937] v4l2_ioctl+0x18d/0x1e0 [ 3218.870743][ T3937] ? __pfx_v4l2_ioctl+0x10/0x10 [ 3218.870758][ T3937] __se_sys_ioctl+0xf9/0x170 [ 3218.870779][ T3937] do_syscall_64+0xfa/0x3b0 [ 3218.870802][ T3937] ? lockdep_hardirqs_on+0x9c/0x150 [ 3218.870823][ T3937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3218.870840][ T3937] ? clear_bhb_loop+0x60/0xb0 [ 3218.870859][ T3937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3218.870875][ T3937] RIP: 0033:0x7f806158e9a9 [ 3218.870890][ T3937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3218.870904][ T3937] RSP: 002b:00007f8062477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3218.870923][ T3937] RAX: ffffffffffffffda RBX: 00007f80617b5fa0 RCX: 00007f806158e9a9 [ 3218.870935][ T3937] RDX: 00002000000002c0 RSI: 00000000c0205647 RDI: 0000000000000003 [ 3218.870946][ T3937] RBP: 00007f8062477090 R08: 0000000000000000 R09: 0000000000000000 [ 3218.870956][ T3937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3218.870966][ T3937] R13: 0000000000000000 R14: 00007f80617b5fa0 R15: 00007f80618dfa28 [ 3218.870989][ T3937] [ 3219.786691][ T3942] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6809'. [ 3220.108647][ T3951] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 3220.571390][T17037] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 3220.640406][ T3279] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3220.762804][T17037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3220.779874][T17037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3220.806562][T17037] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 3220.820259][ T3279] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3220.843844][ T3279] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3220.859827][T17037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3220.891728][ T3279] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3220.909868][T17037] usb 4-1: config 0 descriptor?? [ 3220.929289][ T3279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3220.961218][ T3966] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 3220.972815][ T3279] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3221.227216][ T3971] FAULT_INJECTION: forcing a failure. [ 3221.227216][ T3971] name failslab, interval 1, probability 0, space 0, times 0 [ 3221.246817][ T3963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3221.311373][ T3963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3221.338861][ T3971] CPU: 1 UID: 0 PID: 3971 Comm: syz.0.6821 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3221.338890][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3221.338903][ T3971] Call Trace: [ 3221.338910][ T3971] [ 3221.338917][ T3971] dump_stack_lvl+0x189/0x250 [ 3221.338941][ T3971] ? __pfx____ratelimit+0x10/0x10 [ 3221.338963][ T3971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3221.338982][ T3971] ? __pfx__printk+0x10/0x10 [ 3221.339008][ T3971] ? __pfx___might_resched+0x10/0x10 [ 3221.339029][ T3971] should_fail_ex+0x414/0x560 [ 3221.339057][ T3971] should_failslab+0xa8/0x100 [ 3221.339083][ T3971] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3221.339106][ T3971] ? __alloc_skb+0x112/0x2d0 [ 3221.339127][ T3971] __alloc_skb+0x112/0x2d0 [ 3221.339155][ T3971] netlink_sendmsg+0x5c6/0xb30 [ 3221.339181][ T3971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3221.339201][ T3971] ? aa_sock_msg_perm+0x94/0x160 [ 3221.339223][ T3971] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3221.339240][ T3971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3221.339258][ T3971] __sock_sendmsg+0x21c/0x270 [ 3221.339285][ T3971] ____sys_sendmsg+0x505/0x830 [ 3221.339308][ T3971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3221.339335][ T3971] ? import_iovec+0x74/0xa0 [ 3221.339359][ T3971] ___sys_sendmsg+0x21f/0x2a0 [ 3221.339381][ T3971] ? __pfx____sys_sendmsg+0x10/0x10 [ 3221.339428][ T3971] ? __fget_files+0x2a/0x420 [ 3221.339451][ T3971] ? __fget_files+0x3a0/0x420 [ 3221.339483][ T3971] __x64_sys_sendmsg+0x19b/0x260 [ 3221.339505][ T3971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3221.339533][ T3971] ? __pfx_ksys_write+0x10/0x10 [ 3221.339552][ T3971] ? rcu_is_watching+0x15/0xb0 [ 3221.339575][ T3971] ? do_syscall_64+0xbe/0x3b0 [ 3221.339601][ T3971] do_syscall_64+0xfa/0x3b0 [ 3221.339622][ T3971] ? lockdep_hardirqs_on+0x9c/0x150 [ 3221.339643][ T3971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3221.339659][ T3971] ? clear_bhb_loop+0x60/0xb0 [ 3221.339678][ T3971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3221.339694][ T3971] RIP: 0033:0x7fa03858e9a9 [ 3221.339709][ T3971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3221.339724][ T3971] RSP: 002b:00007fa03944e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3221.339743][ T3971] RAX: ffffffffffffffda RBX: 00007fa0387b5fa0 RCX: 00007fa03858e9a9 [ 3221.339757][ T3971] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 3221.339772][ T3971] RBP: 00007fa03944e090 R08: 0000000000000000 R09: 0000000000000000 [ 3221.339785][ T3971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3221.339798][ T3971] R13: 0000000000000000 R14: 00007fa0387b5fa0 R15: 00007fa0388dfa28 [ 3221.339827][ T3971] [ 3221.651936][ T3279] usb 2-1: USB disconnect, device number 105 [ 3221.886077][ T1624] udevd[1624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3221.947866][T17037] waterforce 0003:1044:7A4D.005E: unknown main item tag 0x0 [ 3221.971970][T17037] waterforce 0003:1044:7A4D.005E: unknown main item tag 0x0 [ 3221.982219][ T3973] loop6: detected capacity change from 0 to 524287999 [ 3221.999722][T17037] waterforce 0003:1044:7A4D.005E: unknown main item tag 0x0 [ 3222.034381][T17037] waterforce 0003:1044:7A4D.005E: item fetching failed at offset 6/7 [ 3222.077667][T17037] waterforce 0003:1044:7A4D.005E: hid parse failed with -22 [ 3222.107809][ T3982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3222.118746][T17037] waterforce 0003:1044:7A4D.005E: probe with driver waterforce failed with error -22 [ 3222.155926][ T3982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3222.197579][ T3982] vivid-007: ================= START STATUS ================= [ 3222.213315][T17037] usb 4-1: USB disconnect, device number 110 [ 3222.218531][ T3982] vivid-007: Enable Output Cropping: true [ 3222.258866][ T3982] vivid-007: Enable Output Composing: true [ 3222.287891][ T3982] vivid-007: Enable Output Scaler: true [ 3222.312499][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3222.333589][ T3982] vivid-007: Tx RGB Quantization Range: Automatic [ 3222.395046][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3222.419948][ T3982] vivid-007: Transmit Mode: HDMI [ 3222.432620][ T3982] vivid-007: Hotplug Present: 0x00000000 [ 3222.806953][ T3982] vivid-007: RxSense Present: 0x00000000 [ 3222.864136][ T3982] vivid-007: EDID Present: 0x00000000 [ 3222.939933][ T3982] vivid-007: ================== END STATUS ================== [ 3223.325033][ T4004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6827'. [ 3223.363404][ T4004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6827'. [ 3223.427099][ T4004] gretap0: entered promiscuous mode [ 3223.462750][ T4004] batadv_slave_1: entered promiscuous mode [ 3223.497091][ T4004] debugfs: 'hsr0' already exists in 'hsr' [ 3223.583354][ T4004] Cannot create hsr debugfs directory [ 3223.622424][ T4004] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 3223.857128][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 3223.857149][ T30] audit: type=1326 audit(1753877822.559:8191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4009 comm="syz.1.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806158e9a9 code=0x7ffc0000 [ 3224.081531][ T4022] usb usb7: usbfs: process 4022 (syz.4.6832) did not claim interface 0 before use [ 3224.146536][ T30] audit: type=1326 audit(1753877822.599:8192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4009 comm="syz.1.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f806158e9a9 code=0x7ffc0000 [ 3224.235746][ T30] audit: type=1326 audit(1753877822.599:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4009 comm="syz.1.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806158e9a9 code=0x7ffc0000 [ 3224.288880][ T30] audit: type=1326 audit(1753877822.599:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4009 comm="syz.1.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f806158e9a9 code=0x7ffc0000 [ 3224.312664][ C0] vkms_vblank_simulate: vblank timer overrun [ 3224.468209][ T30] audit: type=1326 audit(1753877822.599:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4009 comm="syz.1.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806158e9a9 code=0x7ffc0000 [ 3224.689115][ T30] audit: type=1326 audit(1753877822.599:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4009 comm="syz.1.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f806158e9a9 code=0x7ffc0000 [ 3224.712270][ C0] vkms_vblank_simulate: vblank timer overrun [ 3224.761123][ T30] audit: type=1326 audit(1753877822.599:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4009 comm="syz.1.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806158e9a9 code=0x7ffc0000 [ 3224.960288][ T4030] syz.3.6833 (4030): /proc/4023/oom_adj is deprecated, please use /proc/4023/oom_score_adj instead. [ 3225.031150][ T30] audit: type=1326 audit(1753877822.609:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4009 comm="syz.1.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f806158e9a9 code=0x7ffc0000 [ 3225.171193][ T30] audit: type=1326 audit(1753877822.609:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4009 comm="syz.1.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806158e9a9 code=0x7ffc0000 [ 3225.194783][ C0] vkms_vblank_simulate: vblank timer overrun [ 3225.357386][ T30] audit: type=1326 audit(1753877822.609:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4009 comm="syz.1.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f806158e9a9 code=0x7ffc0000 [ 3225.381117][ C0] vkms_vblank_simulate: vblank timer overrun [ 3225.781060][ T3584] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 3225.910026][T17037] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 3226.093919][T17037] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3226.106666][ T3584] usb 4-1: Using ep0 maxpacket: 8 [ 3226.115422][T17037] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3226.137184][T17037] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3226.175400][T17037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3226.303957][ T3584] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 3226.321083][ T3584] usb 4-1: config 0 has no interface number 0 [ 3226.327908][ T4037] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 3226.358850][ T3584] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3226.405727][T17037] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3226.419586][ T3584] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 3226.458994][ T3584] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 3226.555706][ T3584] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 3226.622166][ T3584] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3226.684445][T17037] usb 1-1: USB disconnect, device number 65 [ 3226.703853][ T3584] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 3226.714071][ T3584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3226.732996][ T3584] usb 4-1: Product: syz [ 3226.754887][ T3584] usb 4-1: Manufacturer: syz [ 3226.814740][ T3584] usb 4-1: SerialNumber: syz [ 3226.886808][ T3584] usb 4-1: config 0 descriptor?? [ 3228.911468][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3228.930585][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3228.946611][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3228.957216][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3229.051349][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3229.703636][ T4064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'. [ 3230.327061][ T7020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3230.446560][ T3584] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 3230.654651][ T3584] usb 4-1: USB disconnect, device number 111 [ 3231.013593][ T7020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3231.199079][ T7020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3231.230574][ T5843] Bluetooth: hci5: command tx timeout [ 3231.230967][ T3584] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 3231.517575][ T3584] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3231.562488][ T3584] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 3231.609476][ T3584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3231.669317][ T3584] usb 4-1: config 0 descriptor?? [ 3231.712499][ T3584] gspca_main: kinect-2.14.0 probing 045e:02bf [ 3231.901039][ T4073] vivid-007: ================= START STATUS ================= [ 3231.973814][ T4073] vivid-007: Enable Output Cropping: true [ 3231.982187][ T4086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3231.994691][ T4073] vivid-007: Enable Output Composing: true [ 3232.121079][ T4086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3232.163073][ T4073] vivid-007: Enable Output Scaler: true [ 3232.203270][ T4073] vivid-007: Tx RGB Quantization Range: Automatic [ 3232.301639][ T4073] vivid-007: Transmit Mode: HDMI [ 3232.306798][ T4073] vivid-007: Hotplug Present: 0x00000000 [ 3232.390391][ T4073] vivid-007: RxSense Present: 0x00000000 [ 3232.429657][ T4073] vivid-007: EDID Present: 0x00000000 [ 3232.520289][ T4094] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 3232.560839][ T4073] vivid-007: ================== END STATUS ================== [ 3233.085957][ T4084] netlink: 'syz.0.6847': attribute type 5 has an invalid length. [ 3233.319935][ T5843] Bluetooth: hci5: command tx timeout [ 3233.991225][ T4060] chnl_net:caif_netlink_parms(): no params data found [ 3234.037351][ T7020] bridge_slave_1: left allmulticast mode [ 3234.068312][ T7020] bridge_slave_1: left promiscuous mode [ 3234.108917][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 3234.192772][ T7020] bridge_slave_0: left allmulticast mode [ 3234.220501][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 3234.616750][T17765] usb 4-1: USB disconnect, device number 112 [ 3235.407490][ T5843] Bluetooth: hci5: command tx timeout [ 3235.571427][ T7020] team0: Port device geneve0 removed [ 3235.794947][ T7020] team0: Port device bridge2 removed [ 3235.902715][ T7020] team0: Port device bridge3 removed [ 3235.952644][ T7020] team0: Port device bridge4 removed [ 3236.183085][ T7020] bond0 (unregistering): Released all slaves [ 3236.357943][ T4060] bridge0: port 1(bridge_slave_0) entered blocking state [ 3236.377811][ T4060] bridge0: port 1(bridge_slave_0) entered disabled state [ 3236.386232][ T4060] bridge_slave_0: entered allmulticast mode [ 3236.402934][ T4060] bridge_slave_0: entered promiscuous mode [ 3236.420654][ T4060] bridge0: port 2(bridge_slave_1) entered blocking state [ 3236.428326][ T4060] bridge0: port 2(bridge_slave_1) entered disabled state [ 3236.436891][ T4060] bridge_slave_1: entered allmulticast mode [ 3236.446474][ T4060] bridge_slave_1: entered promiscuous mode [ 3236.512691][ T4060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3236.536874][ T4060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3236.623185][ T4060] team0: Port device team_slave_0 added [ 3236.642979][ T4060] team0: Port device team_slave_1 added [ 3236.722595][ T4060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3236.731553][ T4060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3236.767910][ T4060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3236.792223][ T4060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3236.799609][ T4060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3236.835696][ T4060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3236.936726][ T4060] hsr_slave_0: entered promiscuous mode [ 3236.946719][ T4060] hsr_slave_1: entered promiscuous mode [ 3236.959136][ T4060] debugfs: 'hsr0' already exists in 'hsr' [ 3236.968643][ T4060] Cannot create hsr debugfs directory [ 3237.470527][ T5843] Bluetooth: hci5: command tx timeout [ 3237.749099][ T7020] tipc: Left network mode [ 3237.982835][ T4060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3237.998000][ T4060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3238.019034][ T4060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3238.045330][ T4060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3238.395487][ T4060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3238.460559][ T7020] hsr_slave_0: left promiscuous mode [ 3238.467102][ T7020] hsr_slave_1: left promiscuous mode [ 3238.515222][ T7020] veth0_macvtap: left promiscuous mode [ 3238.528982][ T7020] veth1_vlan: left promiscuous mode [ 3238.538156][ T7020] veth0_vlan: left promiscuous mode [ 3238.774499][ T7020] team0 (unregistering): Port device batadv1 removed [ 3238.811060][ T7020] team0 (unregistering): Port device batadv0 removed [ 3238.854061][ T7020] pimreg (unregistering): left allmulticast mode [ 3239.159157][ T7020] team0 (unregistering): Port device virt_wifi0 removed [ 3239.508700][ T7020] team0 (unregistering): Port device team_slave_1 removed [ 3239.588689][ T7020] team0 (unregistering): Port device team_slave_0 removed [ 3240.326737][ T4060] 8021q: adding VLAN 0 to HW filter on device team0 [ 3240.362988][ T842] bridge0: port 1(bridge_slave_0) entered blocking state [ 3240.370872][ T842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3240.384695][ T842] bridge0: port 2(bridge_slave_1) entered blocking state [ 3240.392353][ T842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3240.507578][ T4060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3240.634425][ T4060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3240.745659][ T4060] veth0_vlan: entered promiscuous mode [ 3240.782060][ T4060] veth1_vlan: entered promiscuous mode [ 3240.861757][ T4060] veth0_macvtap: entered promiscuous mode [ 3240.879164][ T4060] veth1_macvtap: entered promiscuous mode [ 3240.925682][ T4060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3240.957042][ T4060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3240.984471][ T4060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3240.997117][ T4060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3241.016559][ T4060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3241.026842][ T4060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3241.235923][ T839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3241.266731][ T839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3241.319136][ T839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3241.338945][ T839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3241.474637][ T4189] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6840'. [ 3244.017088][ T4195] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6850'. [ 3244.476797][ T4207] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6854'. [ 3244.687120][T28102] raw-gadget.1 gadget.2: failed to queue disconnect event [ 3245.224521][ T4217] binder: 4216:4217 ioctl c00c6211 0 returned -14 [ 3245.437907][ T4219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3245.547111][ T9341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3245.561822][ T9341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3245.574090][ T9341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3245.590657][ T9341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3245.603120][ T9341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3245.750564][T27097] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 3245.937756][ T4227] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6861'. [ 3245.943561][T27097] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3245.971087][T27097] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 3245.982958][ T3584] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 3245.992319][T27097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3246.025289][T27097] usb 4-1: config 0 descriptor?? [ 3246.046830][T27097] gspca_main: kinect-2.14.0 probing 045e:02bf [ 3246.163526][ T3584] usb 1-1: Using ep0 maxpacket: 32 [ 3246.182383][ T3584] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 3246.215602][ T3584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3246.242466][ T3584] usb 1-1: config 0 descriptor?? [ 3246.265005][ T3584] gspca_main: sunplus-2.14.0 probing 041e:400b [ 3246.279240][ T4221] vivid-007: ================= START STATUS ================= [ 3246.354084][ T4221] vivid-007: Enable Output Cropping: true [ 3246.409375][ T4235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3246.435431][ T4221] vivid-007: Enable Output Composing: true [ 3246.473072][ T4235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3246.497549][ T4221] vivid-007: Enable Output Scaler: true [ 3246.506474][ T4221] vivid-007: Tx RGB Quantization Range: Automatic [ 3246.518607][ T4221] vivid-007: Transmit Mode: HDMI [ 3246.542448][ T4225] chnl_net:caif_netlink_parms(): no params data found [ 3246.591619][ T4221] vivid-007: Hotplug Present: 0x00000000 [ 3246.634065][ T4221] vivid-007: RxSense Present: 0x00000000 [ 3246.681913][ T4221] vivid-007: EDID Present: 0x00000000 [ 3246.688867][ T4221] vivid-007: ================== END STATUS ================== [ 3246.845865][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 3246.867648][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 3246.878015][ T4225] bridge_slave_0: entered allmulticast mode [ 3246.888726][ T4225] bridge_slave_0: entered promiscuous mode [ 3246.902642][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 3246.929554][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state [ 3246.938381][ T4225] bridge_slave_1: entered allmulticast mode [ 3246.950726][ T4225] bridge_slave_1: entered promiscuous mode [ 3247.095966][ T4225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3247.120714][ T4225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3247.166172][ T4245] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6862'. [ 3247.419578][ T4225] team0: Port device team_slave_0 added [ 3247.471540][ T4225] team0: Port device team_slave_1 added [ 3247.570984][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3247.578507][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3247.610494][ T4225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3247.638092][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3247.646495][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3247.689098][ T3584] gspca_sunplus: reg_w_riv err -71 [ 3247.695691][ T3584] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 3247.719976][ T9341] Bluetooth: hci0: command tx timeout [ 3247.758864][ T3584] usb 1-1: USB disconnect, device number 66 [ 3247.871511][ T4225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3248.026137][ T4225] hsr_slave_0: entered promiscuous mode [ 3248.042194][ T4225] hsr_slave_1: entered promiscuous mode [ 3248.544427][T17765] usb 4-1: USB disconnect, device number 113 [ 3248.764312][ T4257] ================================================================== [ 3248.772733][ T4257] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3248.781779][ T4257] Write of size 1280 at addr ffffc9000f73bb40 by task vivid-000-vid-c/4257 [ 3248.790551][ T4257] [ 3248.792930][ T4257] CPU: 0 UID: 0 PID: 4257 Comm: vivid-000-vid-c Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3248.792959][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3248.792973][ T4257] Call Trace: [ 3248.792983][ T4257] [ 3248.792993][ T4257] dump_stack_lvl+0x189/0x250 [ 3248.793020][ T4257] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3248.793053][ T4257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3248.793076][ T4257] ? __pfx__printk+0x10/0x10 [ 3248.793102][ T4257] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 3248.793130][ T4257] ? __virt_addr_valid+0xdc/0x5c0 [ 3248.793156][ T4257] ? __virt_addr_valid+0xdc/0x5c0 [ 3248.793182][ T4257] print_report+0xca/0x240 [ 3248.793213][ T4257] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3248.793242][ T4257] kasan_report+0x118/0x150 [ 3248.793273][ T4257] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3248.793307][ T4257] kasan_check_range+0x2b0/0x2c0 [ 3248.793335][ T4257] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3248.793366][ T4257] __asan_memcpy+0x40/0x70 [ 3248.793390][ T4257] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3248.793459][ T4257] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 3248.793492][ T4257] ? __lock_acquire+0xab9/0xd20 [ 3248.793529][ T4257] ? __free_object+0x4d4/0x6c0 [ 3248.793561][ T4257] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 3248.793595][ T4257] ? __lock_acquire+0xab9/0xd20 [ 3248.793628][ T4257] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 3248.793667][ T4257] ? cgroup_freezing+0x29a/0x350 [ 3248.793699][ T4257] vivid_thread_vid_cap+0x8da/0x10d0 [ 3248.793741][ T4257] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 3248.793776][ T4257] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3248.793802][ T4257] ? __kthread_parkme+0x7b/0x200 [ 3248.793825][ T4257] ? __kthread_parkme+0x1a1/0x200 [ 3248.793856][ T4257] kthread+0x711/0x8a0 [ 3248.793883][ T4257] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 3248.793910][ T4257] ? __pfx_kthread+0x10/0x10 [ 3248.793936][ T4257] ? _raw_spin_unlock_irq+0x23/0x50 [ 3248.793960][ T4257] ? lockdep_hardirqs_on+0x9c/0x150 [ 3248.793986][ T4257] ? __pfx_kthread+0x10/0x10 [ 3248.794011][ T4257] ret_from_fork+0x3fc/0x770 [ 3248.794033][ T4257] ? __pfx_ret_from_fork+0x10/0x10 [ 3248.794056][ T4257] ? __switch_to_asm+0x39/0x70 [ 3248.794079][ T4257] ? __switch_to_asm+0x33/0x70 [ 3248.794104][ T4257] ? __pfx_kthread+0x10/0x10 [ 3248.794128][ T4257] ret_from_fork_asm+0x1a/0x30 [ 3248.794162][ T4257] [ 3248.794169][ T4257] [ 3249.032362][ T4257] The buggy address belongs to a 3-page vmalloc region starting at 0xffffc9000f739000 allocated at vb2_vmalloc_alloc+0xef/0x340 [ 3249.045607][ T4257] The buggy address belongs to the physical page: [ 3249.052137][ T4257] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x586b7 [ 3249.060914][ T4257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 3249.068054][ T4257] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 3249.076839][ T4257] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 3249.085467][ T4257] page dumped because: kasan: bad access detected [ 3249.091922][ T4257] page_owner tracks the page as allocated [ 3249.097781][ T4257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN), pid 4256, tgid 4255 (syz.4.6865), ts 3248678702133, free_ts 3248638354699 [ 3249.116594][ T4257] post_alloc_hook+0x240/0x2a0 [ 3249.121540][ T4257] get_page_from_freelist+0x21e4/0x22c0 [ 3249.127314][ T4257] __alloc_frozen_pages_noprof+0x181/0x370 [ 3249.133416][ T4257] alloc_pages_mpol+0x232/0x4a0 [ 3249.138414][ T4257] alloc_pages_noprof+0xa9/0x190 [ 3249.143403][ T4257] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 3249.149700][ T4257] vmalloc_user_noprof+0xad/0xf0 [ 3249.154684][ T4257] vb2_vmalloc_alloc+0xef/0x340 [ 3249.159748][ T4257] __vb2_queue_alloc+0x9bf/0x15a0 [ 3249.164839][ T4257] vb2_core_reqbufs+0xc31/0x1420 [ 3249.170211][ T4257] vb2_ioctl_reqbufs+0x4c0/0x830 [ 3249.175296][ T4257] __video_do_ioctl+0xc98/0xdb0 [ 3249.180186][ T4257] video_usercopy+0x871/0x14f0 [ 3249.185121][ T4257] v4l2_ioctl+0x18d/0x1e0 [ 3249.189483][ T4257] __se_sys_ioctl+0xf9/0x170 [ 3249.194148][ T4257] do_syscall_64+0xfa/0x3b0 [ 3249.198718][ T4257] page last free pid 27097 tgid 27097 stack trace: [ 3249.205551][ T4257] __free_frozen_pages+0xc71/0xe70 [ 3249.210697][ T4257] vfree+0x25a/0x400 [ 3249.214848][ T4257] delayed_vfree_work+0x55/0x80 [ 3249.220217][ T4257] process_scheduled_works+0xade/0x17b0 [ 3249.225838][ T4257] worker_thread+0x8a0/0xda0 [ 3249.230594][ T4257] kthread+0x711/0x8a0 [ 3249.234719][ T4257] ret_from_fork+0x3fc/0x770 [ 3249.239325][ T4257] ret_from_fork_asm+0x1a/0x30 [ 3249.244115][ T4257] [ 3249.246568][ T4257] Memory state around the buggy address: [ 3249.252304][ T4257] ffffc9000f73bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3249.260781][ T4257] ffffc9000f73bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3249.268877][ T4257] >ffffc9000f73c000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3249.277058][ T4257] ^ [ 3249.281163][ T4257] ffffc9000f73c080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3249.289468][ T4257] ffffc9000f73c100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3249.297664][ T4257] ================================================================== [ 3249.377106][ T4257] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3249.384468][ T4257] CPU: 0 UID: 0 PID: 4257 Comm: vivid-000-vid-c Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3249.397200][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3249.407667][ T4257] Call Trace: [ 3249.411158][ T4257] [ 3249.414235][ T4257] dump_stack_lvl+0x99/0x250 [ 3249.418882][ T4257] ? __asan_memcpy+0x40/0x70 [ 3249.423523][ T4257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3249.428861][ T4257] ? __pfx__printk+0x10/0x10 [ 3249.433826][ T4257] panic+0x2db/0x790 [ 3249.438054][ T4257] ? __pfx_panic+0x10/0x10 [ 3249.442520][ T4257] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 3249.448815][ T4257] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3249.455475][ T4257] ? print_memory_metadata+0x314/0x400 [ 3249.461171][ T4257] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3249.467223][ T4257] check_panic_on_warn+0x89/0xb0 [ 3249.472489][ T4257] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3249.478333][ T4257] end_report+0x78/0x160 [ 3249.482703][ T4257] kasan_report+0x129/0x150 [ 3249.487262][ T4257] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3249.493254][ T4257] kasan_check_range+0x2b0/0x2c0 [ 3249.498230][ T4257] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3249.503993][ T4257] __asan_memcpy+0x40/0x70 [ 3249.508433][ T4257] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 3249.513966][ T4257] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 3249.519710][ T4257] ? __lock_acquire+0xab9/0xd20 [ 3249.524630][ T4257] ? __free_object+0x4d4/0x6c0 [ 3249.529935][ T4257] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 3249.536367][ T4257] ? __lock_acquire+0xab9/0xd20 [ 3249.541357][ T4257] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 3249.547569][ T4257] ? cgroup_freezing+0x29a/0x350 [ 3249.552628][ T4257] vivid_thread_vid_cap+0x8da/0x10d0 [ 3249.558077][ T4257] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 3249.563854][ T4257] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3249.569952][ T4257] ? __kthread_parkme+0x7b/0x200 [ 3249.575183][ T4257] ? __kthread_parkme+0x1a1/0x200 [ 3249.580519][ T4257] kthread+0x711/0x8a0 [ 3249.584723][ T4257] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 3249.591352][ T4257] ? __pfx_kthread+0x10/0x10 [ 3249.596152][ T4257] ? _raw_spin_unlock_irq+0x23/0x50 [ 3249.602053][ T4257] ? lockdep_hardirqs_on+0x9c/0x150 [ 3249.607309][ T4257] ? __pfx_kthread+0x10/0x10 [ 3249.612073][ T4257] ret_from_fork+0x3fc/0x770 [ 3249.616780][ T4257] ? __pfx_ret_from_fork+0x10/0x10 [ 3249.621960][ T4257] ? __switch_to_asm+0x39/0x70 [ 3249.626746][ T4257] ? __switch_to_asm+0x33/0x70 [ 3249.631620][ T4257] ? __pfx_kthread+0x10/0x10 [ 3249.636247][ T4257] ret_from_fork_asm+0x1a/0x30 [ 3249.641034][ T4257] [ 3249.644393][ T4257] Kernel Offset: disabled [ 3249.648757][ T4257] Rebooting in 86400 seconds..