last executing test programs: 8.123910266s ago: executing program 3 (id=1078): socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r0 = io_uring_setup(0x1ef3, &(0x7f0000000100)={0x0, 0xfc0f, 0x40, 0x3, 0x1a3}) syz_io_uring_setup(0x4a1c, &(0x7f0000000180)={0x0, 0xb01, 0x80, 0x0, 0x2a6, 0x0, r0}, 0x0, 0x0) (async) syz_io_uring_setup(0x4a1c, &(0x7f0000000180)={0x0, 0xb01, 0x80, 0x0, 0x2a6, 0x0, r0}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) socket$netlink(0x10, 0x3, 0xb) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c00725110000000000010902"], 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pread64(r1, &(0x7f00000003c0)=""/210, 0xd2, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x5) (async) r3 = fsmount(r2, 0x0, 0x5) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/154, 0x9a) lseek(r4, 0x8, 0x1) getdents64(r4, 0x0, 0x0) (async) getdents64(r4, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) (async) socket(0x40000000015, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0x4, 0x0, 0x1, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x19, 0x3, 0x25, '\x00', 0x2}, {0x8, 0x2}, {0x0, 0x0, 0x7f}, {0x0, 0x0, 0x0, '\x00', 0x5}, {0x81, 0x65, 0xff}, {0x0, 0x0, 0x2f, '\x00', 0x7}, {0x0, 0x6}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x0, 0xa, 0x5, '\x00', 0x1}, {}, {0x3, 0x0, 0x0, '\x00', 0xc4}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x0, 0x2, 0x7f}, {0x0, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x0, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x9, 0x6, 0x0, '\x00', 0x5}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9, '\x00', 0x4}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0x4, 0x0, 0x1, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x19, 0x3, 0x25, '\x00', 0x2}, {0x8, 0x2}, {0x0, 0x0, 0x7f}, {0x0, 0x0, 0x0, '\x00', 0x5}, {0x81, 0x65, 0xff}, {0x0, 0x0, 0x2f, '\x00', 0x7}, {0x0, 0x6}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x0, 0xa, 0x5, '\x00', 0x1}, {}, {0x3, 0x0, 0x0, '\x00', 0xc4}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x0, 0x2, 0x7f}, {0x0, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x0, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x9, 0x6, 0x0, '\x00', 0x5}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9, '\x00', 0x4}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r7, 0xaec7) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000380)={0xa, 0x7}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) 7.918525999s ago: executing program 1 (id=1080): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b0000100000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006000000000000000000000018"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.801635394s ago: executing program 1 (id=1082): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xb8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') unshare(0x2c020400) syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0xdb0d, 0x3f, 0xfffffffe, 0x24000}, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x8, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x5, 0x3abc50, 0x2c8240}) close_range(r4, 0xffffffffffffffff, 0x10000000000000) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 7.241268888s ago: executing program 0 (id=1083): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x2, 0x100000000000, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0xff, 0x480000, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x8000, 0x80000000, 0x0, 0x0, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0x0) statx(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0x0, 0x80, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008340)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4716e26b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb4f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0010000801964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, r7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000340)="544a66c2d6904f681b699a631c83ace7f9135b60da8fcdaa29a687abe852b8a8ba08ef61a3c0ccea2e414c30c108299dbd630cf6867e50b2632ebb", 0x3b}, {&(0x7f0000000380)="4d9deeaa690d3563e4e1952bab17a0803f643052f99c2562f255f22127fdd180bea90aa74ab7ded17e2120c0a5478057ee474c74a342aa30d27a36a3c8dd8e03a5df108ff467dadefe03ff1259e86ed3f725d3010d352455c9315bd85ab68da011a09883e61e1a6888fe5e1e8b2a1adfe04984", 0x73}, {&(0x7f0000000400)="dae8a40b6aa58585a5f4b01f97fb4ad7b090e74bbd86160f9d8da7f7ba932a4124caffa23d6018ab4f527b7a8c9b668dd3d7850cc68cb4c7abff2a69127ef9252c42827a93d67743aa1a83c00b10abd3c478dc3398b5e940758853f82b6fda048b178558", 0x64}, {&(0x7f0000000580)="f190374c64d23bbd96d5d16b5dc005aa131fb5c70ce4e3c034f109f99efb96c2c48f8b13bfd42f8458bdec7380d1117fc815264a4a5d51ba9b5b7f5606d9ed8130cbe64f13723f90055172e2", 0x4c}, {&(0x7f00000006c0)="d2c501304d0e64e479ce405575a2151a2fec075fe73d664f7c2238739d9b68580ced97c01e9324e897d99b5b0a757eac70175e8d513b167a34524383f533ff969c9a3d5273d1f0a793306bf86249ead195ad110ec9115e27518dbef89e165f790ed368a55895c2d27210110154e61715604260afb34fb850d9a71908e7ea1fb48ffb87879954933c5035e9185497c1da2f3ff90636618cbf1128274083bdc93315c61a466dab921fe55ad0e059d4bd75b2a62bcdd982cc3c960890a303fb543f75ce51deb09fa952da245b0c8f1d37247380166932186e2106098d8e7cde6a4dea7279df227017255b2a8f748af2", 0xee}, {&(0x7f00000007c0)="0fca0c629f94c414912cabe7726f74509eb477cd4927cea06a951f1d0b1e1799bb17b9d8081654461d8f0c3fa3e4624af0f430fca5a0724602a0892600c92443a860e55d0c3d8ef6cd3d803ca0a12ac411979ef1828e0f1759b536d8e75527936d1afcfb7e793a5e7202ea1a830a8f191504005515850169fcbe9173d4ba28579cd70d846825b6394cef100554f971fecf1658d48651c586fdfde23942c27a6a1c9c992831d8795b6b9e7216b3b64d05491ed94fbbf2", 0xb6}, {&(0x7f00000008c0)="11cc4ced624fb8babacb6605a6ddf795eab72b165ad4845033d3c49416f67ebad39045415c6ceac420cd593d3b0fdfadfbe11955a9eceb1f8040d344976847324b0f080fb4e290948dfd9f2e80c2f91fa26ca822a70f822c981e058d0e6fc99fa9b203d158bb65e1d500dca085e564753c007cdd11c82bb970dfc5bdebd689382688ab3b3aa627da7c08f0d0d524cb03ee1409f71149ec58cfab2fbb5ef82a514c9386158e235b90f7e7b264c11e1568cc97ae68d528ed949e680b6062f2099fc7778c309d397c2075ec3dbc640124a16f5b2ddc2dc615ef5cf5a1a951bc90d5a7fa8584006a885d5c6793", 0xeb}, {&(0x7f00000009c0)="18ca81f21639d85f14a86e0f6b18d96baac76400bc01844bfa1758e8ebade2444ae2e3afe2ac677122215f136128d718ee09973f9e432cbb17e5ffe6237de5ef9e97c2ba7a65f5eb67724cba22ec7a8c45c9c54f79db2fd92ce425b6a26003a8906e73ceccd243c9a9abdbfba8314e651dc900fb4066975ab5adf972a1d1caa5775a43adae57", 0x86}, {&(0x7f0000000a80)="b7c086a085f25f09bf82cb1eb40184484122a3f834def1e016c6a36616882419a0b99e7807f6314f5a7778062e38c859b764314ac47f728957fc3405f68adfc10f08c531d9326188aa87e9a3cc806fe3054d777022b4a90f98ab071b7093e82970517192dd2faa04c52b955bf700706f76d4ba01de384789cd55e39a27aec57b20fb4ee921fb18e0ce00", 0x8a}, {&(0x7f0000000600)="606ccc2fa56a8de45338ddacb17f83c6919e61ff18aefd70af4b40087457849cd5be0df92ee47c86df1164dd199d9397b42a8b2d3ed46d75436bed9c7afcfc3ddf6008030b74ecfa66d5f7e43cdc032f2835224abe7571951d2794a23abfbc2f21fb84637641004e0f45fb", 0x6b}], 0xa, 0xfffffffffffffffd, 0x0, 0x4004040}}, {{&(0x7f0000000c00)=@file={0x86844fee30a023da, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000c80)="95d20c04a19b20c8a0eca4c882f6e7909c26232b25ceb31bf818b9a69d58cdf9caef51f1c6209aae3dbaf4f2d569bf59344812330900055eb1f0c09710e465b6be97d7c4ab03c6b494ab2854e513345bf93de1362057425617bac3a67841426702faaef2d9348c6d41ecc93e21037560d66399d661dcf9294a0a557208aeb3ab3f1081ac65aec2b0934e006b97b0caf0d75cd7a5243eb021ff0dbfd6eb556a6272d4edaf63a233b163eaad6aefd08ecd4270e60cd79e2194013c88e895d2c06efb5b366e8e9036d59cf4097713768cc665109c5ce4f8dd877b224d", 0xdb}, {&(0x7f0000000d80)="2353d9670a78511d6c23a0441ce477d86ad866fd4e93471e6e3e565102aacfa33beba666df220565eee3f62c6dde65a6053e67da9cd1541a7650a1ccd1c97e2557eb392d9496faf2a1f6e5a1c494a1458a1b5ee7b851ed07863208f267ee64763b89feaba355e0b858162c3ca7801eb0695815c7575a90c9b8c738dded4bf7dd48134dd954a7d9876dcb7b305b7c44f14939985155266be063c5359aa42d706cc8f5d260ba960a67d2", 0xa9}, {&(0x7f0000000e40)="195d373987e50dc8bb099508", 0xc}, {&(0x7f0000000e80)="77534ee207d27f99e6f583ac3faf430a297d10487d33990d76991945bf993322", 0x20}, {&(0x7f0000000ec0)="25f1aec715cc3e3cef72c6cf597d5d84377ff3bc87dc2936c869fc96426923aee1a05be0fe42bc4edb68bf6f26dc216529301ad39f196f7fcfd5ba41e1ae3e4bc8f35e4aeacbdb6730dbb62368e27f407f3c187e579402591f02a3cd43fe30795252a06b135fbed8ae57499e86c417903ff0ba7413cdcfcf56b621c2f269053bd6", 0x81}, {&(0x7f0000000f80)="605aef397dffa2c14eb2dbe8ad6b2e03d15df68ddecec21d12bee72c99e28cfe2a22ccf8f5b19158b4dda57042de6ee439710479768ca266e434d6f9d511ea1329e9431b46068ea07f2a8d79972fc5fc3ee593c49610c68474c9a429429def467de58d660d5cbc0fef49cb38621663cbbc7b1d16daef95c6fecdcff6518ae53593bb69734dd22cda20eb1183859a51852aaea2a019e99c11d9", 0x99}, {&(0x7f0000001040)="32ea2a33cc09888fe58b1a90e542d4bb5fab91323dd5e8e08c8b8abf7ce5b30dbb93928ca78dc9d32103871e2c8f192d1b57c1a1bbd1d7b206516fb760f1ca14123fab14da8d0391ea55d73fc14c7543f0df18067cb0bba3d18cdfc5c1d33f4a39624493db", 0x65}], 0x7, &(0x7f0000001140)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4}}], 0x2, 0x20000000) r8 = dup(r2) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000040)=0x13}) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000100)) ioctl$SNDCTL_SEQ_GETTIME(r8, 0x80045113, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="10000000000000000b010000000000001800000000000000100100000a"], 0x28}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, 0xffffffffffffffff, 0xc6f33000) 6.486468695s ago: executing program 4 (id=1084): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1100000008000000ff7f00000e00000081120200", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e2b452ad113a95ef005d0000050000000500001c0000000000000000950a8151ca062c442696c7"], 0x50) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x2, @thr={&(0x7f0000000b00)="ab000000000000000056e088000000f08dc70394a63b7f2648851d6a9c1b314ed54d3e6e1779bdf623a28b2ad17d7b5a95f82123998b663619f6a7520092ba5e38dde655d469eb4bf60e08b8875eece621e86900"/99, &(0x7f0000000540)="d3ed28a805a3c7de598a8e8f778dcddab0aa5d76ed19f6e0a02700dc831451de6ee9df321c64b10abba74fb53ecb7be03e7371f879af86995690d7b0a8365402f771aae72250403f1ac768e10dea45cfde481f204841df9a7c8438ac8c552634cadefdf3d97025efafefd310fe58ff"}}, &(0x7f0000000000)) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/183, 0xb7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000a6bd374d2f3e0e4f973dc75545414f9850cec778d31405392452c78ebd31e3a634d59a77334e0043123ee6d5edd98903abd89b1118aea3692d84e774b35aa3b6e343111b2ae9ffa03164fe39f9020e2ebc0beb0dd8d87a5d4902746a14557c8cf94c0bff8efcd188929961ec0a309120"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 6.380419691s ago: executing program 0 (id=1085): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x28, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000007000000000000000100008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000850000008600000818160000cccfbf33d4616ed5cd875c53dd7e09561a0f067546027939eb0200831682dc0a1df351b2d222239f13ff45e3e6676d375904b33303aa9863b43a95d83880a3012dad6f5ee903961df28c4dcd4378b0cbac1006b8cc58a1d0aa806a94c0a6d21487881e266cf3e552cb43af49c091ece09071d20af1c43ad1ccaf6f745844e183ce21fe293bd549ae0e3ab5050bd8a58c60f641e5a9978bd9c2ba53dab507f68f93fb738fad9ba8458327e0b85a1e7385348ee6b7c35d0e68c994da22fcd0d19be3aea55c804c3a0e0bb55a0f61e1d67678e5b1662317ef2341bc605ec8", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008500000064000000d559e0fffcffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xc, 0xe1, &(0x7f0000000e40)=""/225, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x9, 0x9, 0x4}, 0x10, 0x236d9, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x0, 0x6e, 0x0, &(0x7f00000004c0)=""/110, 0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@local}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="3abdac7400", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="aefa90823281cd24143b69c19cbebeef", 0x10) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000b00)={{@any, 0xffffffff}, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000003}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f0000000bc0)={&(0x7f00000009c0)=@sco, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/159, 0x9f}, {&(0x7f0000000b40)=""/60, 0x3c}], 0x2}, 0x41) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={0x0}) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="eaaaaaaaaaaa000000000000080045005cbf0c50c04fdc"], 0x0) 5.366111072s ago: executing program 4 (id=1087): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="602b132583", 0x5}], 0x1, 0x0, 0x60, 0xcc11}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x40801) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000200)=0x7fd, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1bc444, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00004fe000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaad11, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5.153727735s ago: executing program 0 (id=1088): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000006c0)={0x20}, 0x0, 0x0}) 4.922734039s ago: executing program 3 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x58, r1, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x6}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x32, @val={0x8c, 0x18, {0x77, "245271fd63c1", @long="778789bfa5ce70db359d885eaa2e95a6"}}}}]}, 0x58}}, 0x8000) (fail_nth: 5) 4.747696599s ago: executing program 2 (id=1090): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x3, 0x0, 0x6000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) 4.649179086s ago: executing program 1 (id=1091): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4c23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x10001, 0x2) lsetxattr$security_ima(0x0, &(0x7f0000000000), &(0x7f0000000140)=ANY=[], 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x62) readahead(0xffffffffffffffff, 0xf0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet(0x2, 0x5, 0x80000001) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@empty, 0x4e26, 0x0, 0x4e21, 0x800, 0xa, 0x80, 0x80}, {0x0, 0x2000000000000401, 0xb8, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x1}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) connect(r3, &(0x7f0000000100)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, 0x80) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f04"], 0x7) rseq(0x0, 0x0, 0x0, 0x0) 4.573262851s ago: executing program 4 (id=1092): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b0000100000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006000000000000000000000018"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.187915026s ago: executing program 4 (id=1093): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_io_uring_setup(0x2fad, &(0x7f0000001fc0)={0x0, 0x820e06d, 0x1000, 0x2, 0x113}, &(0x7f0000002040), &(0x7f0000002080)) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0)=0xd, 0x12) 4.147394495s ago: executing program 2 (id=1094): r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000400)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) unshare(0x2040400) r1 = syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, 0x0, &(0x7f0000000300)) fcntl$notify(r1, 0x402, 0x80000028) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) userfaultfd(0x80000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)) 4.05454924s ago: executing program 3 (id=1095): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa10000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000340)=[{0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x0, 0x6e, 0x0, &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.053738179s ago: executing program 1 (id=1096): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r1}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setpriority(0x2, 0x0, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) 3.873764734s ago: executing program 4 (id=1097): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1100000008000000ff7f00000e00000081120200", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e2b452ad113a95ef005d0000050000000500001c0000000000000000950a8151ca062c442696c7"], 0x50) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x2, @thr={&(0x7f0000000b00)="ab000000000000000056e088000000f08dc70394a63b7f2648851d6a9c1b314ed54d3e6e1779bdf623a28b2ad17d7b5a95f82123998b663619f6a7520092ba5e38dde655d469eb4bf60e08b8875eece621e86900"/99, &(0x7f0000000540)="d3ed28a805a3c7de598a8e8f778dcddab0aa5d76ed19f6e0a02700dc831451de6ee9df321c64b10abba74fb53ecb7be03e7371f879af86995690d7b0a8365402f771aae72250403f1ac768e10dea45cfde481f204841df9a7c8438ac8c552634cadefdf3d97025efafefd310fe58ff"}}, &(0x7f0000000000)) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/183, 0xb7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000a6bd374d2f3e0e4f973dc75545414f9850cec778d31405392452c78ebd31e3a634d59a77334e0043123ee6d5edd98903abd89b1118aea3692d84e774b35aa3b6e343111b2ae9ffa03164fe39f9020e2ebc0beb0dd8d87a5d4902746a14557c8cf94c0bff8efcd188929961ec0a309120"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3.399317015s ago: executing program 3 (id=1098): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000001c0), 0x0, 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004044) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r5 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r9, r9], &(0x7f0000000580)}) 3.202483396s ago: executing program 4 (id=1099): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) syz_emit_ethernet(0x2e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000232b43ff08831f9c8567d57690ccd90008004500002000000000001190780000000064c7c77023ae174f3d74064e58fead36f19404dc83f47e9fb7dfc6742b110fc3b4faf103ac545c247f857fa99fcf3edb543fcf44d28d5efab56334726003ef317aead75ddd50fe9570914c8c9273452137dc2621"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0xeeef0000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)=@x86={0x8, 0x5, 0x4, 0x0, 0x7, 0x0, 0x7, 0x9b, 0x2, 0x8, 0xc0, 0xc0, 0x0, 0x1, 0x2, 0x0, 0x9, 0x2f, 0x70, '\x00', 0x8, 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x5, 0x0, 0x0, 0x615, 0x3, 0x4, 0x3e, 0xa, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_disconnect(r0) userfaultfd(0x80801) syz_usb_connect(0x0, 0x1b, &(0x7f0000000140)=ANY=[@ANYBLOB="120150029765b920a8170201937e0102030109020900000f050008"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0xa0, &(0x7f00000001c0)=@string={0xa0, 0x3, "dedd5ecdab630a08be19f856180dc087d32c26e661c5149abec7fc6aeb78c1b180faa9d510faf45aead521d1c60102ec47e787c0c7eb5a1c4a6447c32ebe82212cea89e8cd3331057f1573aed2d00ed4a2db25e3e4edacb8c83e99bd36399b189ffdc26b149d4d40dbe2c51f993d89b9a27141559c3eb625c03c786164da905bd42eaf2a2653ff216634192e3fe7a41f7278c8392dbf0b21bfda72955226"}}]}) 3.183321993s ago: executing program 1 (id=1100): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) syz_emit_ethernet(0x2e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000232b43ff08831f9c8567d57690ccd90008004500002000000000001190780000000064c7c77023ae174f3d74064e58fead36f19404dc83f47e9fb7dfc6742b110fc3b4faf103ac545c247f857fa99fcf3edb543fcf44d28d5efab56334726003ef317aead75ddd50fe9570914c8c9273452137dc2621"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0xeeef0000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)=@x86={0x8, 0x5, 0x4, 0x0, 0x7, 0x0, 0x7, 0x9b, 0x2, 0x8, 0xc0, 0xc0, 0x0, 0x1, 0x2, 0x0, 0x9, 0x2f, 0x70, '\x00', 0x8, 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x5, 0x0, 0x0, 0x615, 0x3, 0x4, 0x3e, 0xa, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_disconnect(r0) userfaultfd(0x80801) syz_usb_connect(0x0, 0x1b, &(0x7f0000000140)=ANY=[@ANYBLOB="120150029765b920a8170201937e0102030109020900000f050008"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0xa0, &(0x7f00000001c0)=@string={0xa0, 0x3, "dedd5ecdab630a08be19f856180dc087d32c26e661c5149abec7fc6aeb78c1b180faa9d510faf45aead521d1c60102ec47e787c0c7eb5a1c4a6447c32ebe82212cea89e8cd3331057f1573aed2d00ed4a2db25e3e4edacb8c83e99bd36399b189ffdc26b149d4d40dbe2c51f993d89b9a27141559c3eb625c03c786164da905bd42eaf2a2653ff216634192e3fe7a41f7278c8392dbf0b21bfda72955226"}}]}) 3.017918265s ago: executing program 3 (id=1101): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x2, 0x400000000000003, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xe8}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@mcast1}]}]}, 0x174}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b00001000", @ANYRES32, @ANYRES32, @ANYBLOB="000000000000010185100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006000000000000000000000018"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[r1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3], &(0x7f0000000340)=[{0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0x0, 0x6e, 0x0, &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_io_uring_setup(0x10c, &(0x7f0000000240)={0x0, 0xffeffffe, 0x3000, 0x3, 0x108}, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r10 = dup(r9) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3dadc796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbc37c3eb37b4fe035bbb095", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0xda}], 0x18, 0x80}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r12, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r13, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_clone3(&(0x7f0000000840)={0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000600), {0xa}, &(0x7f0000000700)=""/222, 0xde, &(0x7f0000000640)=""/43, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r11}}, 0x58) 2.772999504s ago: executing program 3 (id=1102): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) memfd_create(0x0, 0xe) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSERGETLSR(r4, 0x5459, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, 0x0, 0x4000800) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000240)={0x1, [0x4, 0x1, 0xb], [{0x3ff, 0x3ff, 0x0, 0x0, 0x0, 0x1}, {0x10000, 0xb, 0x0, 0x0, 0x1}, {0x100, 0x7, 0x1, 0x1, 0x1, 0x1}, {0xcd, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x7}, {0x5, 0xde1, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x10000, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x80000000, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1}, {0x401, 0xfffffffd, 0x1, 0x1, 0x1}], 0x2}) r7 = io_uring_setup(0x30d5, &(0x7f00000001c0)) r8 = syz_open_dev$usbmon(&(0x7f0000007040), 0x3, 0x0) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f00000070c0)={0x0, 0x0, 0x80}) close_range(r7, 0xffffffffffffffff, 0x0) 2.374586291s ago: executing program 2 (id=1103): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b0000100000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006000000000000000000000018"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.327115007s ago: executing program 2 (id=1104): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x3, 0x0, 0x6000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) 2.22740222s ago: executing program 2 (id=1105): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40000) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x500, 0x40420f00}}}, 0x90) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x4000000}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000005cc96b560000000800040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000305000000df2500000000ba931392cacf426ef5c9c911e8b871caf246933a01356296280312e93bac825b83f198b4f5518639ce56f8899f3ce99ef5afc34e9e92db75f191bfc1e2151ed72eae77eb1bc9efae8524e808", @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES8=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x44}}, 0x20000000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x107342, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 2.178527408s ago: executing program 0 (id=1106): personality(0xeaffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x7, 0x3, {[0x7, 0x8, 0x2, 0x9, 0x7699, 0x1, 0xfffe, 0xffff]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010f59d9ef6000000000000000000000a6c000000060a0104000000cb7802e5dfad000000000002000000400004803c0001800b00010065787468647200002c000280050002001d00000008000440000000010800064000000002080001400000001308000340000000180900010073797a30000000000900020073797a32000000"], 0x94}}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6252}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x22044029}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0xfffe, @multicast2}}, 0x1}, 0x90) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r11, 0x0, 0x41, &(0x7f0000000b00)={'nat\x00', 0x1000, "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"}, &(0x7f0000000540)=0x1024) close(r5) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x3, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001001d108bd03d28df230000000a140000001e0a0501000000000000000007000000140000001000010000000080000000000084000a"], 0x3c}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) 1.52671592s ago: executing program 0 (id=1107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b705"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x23, 0x0, &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0xc, 0x0, 0x607}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) connect$rxrpc(r4, &(0x7f00000007c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @local, 0x6}}, 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000002c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r8, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000015001001800128008000100677470000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="4dda451b47d2095abc232e0e6dd19a5dc5c153bd4a4a819a742a8a721932f8ef084eabc515372498bf2010bae2bec4238216c16bf64e4ecb00450227d607d23a9066"], 0x40}}, 0x2400c080) 794.930925ms ago: executing program 0 (id=1108): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0], 0x1c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r3, &(0x7f0000000280)='.log\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xce, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x7, 0xff, 0x8, 0x6}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) r7 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r7, 0x107, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000fc42a40e0000000000ba4c0f8f9b2b3b4ed8c9505ba182000000009110"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 173.88283ms ago: executing program 2 (id=1109): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1100000008000000ff7f00000e00000081120200", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e2b452ad113a95ef005d0000050000000500001c0000000000000000950a8151ca062c442696c7"], 0x50) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x2, @thr={&(0x7f0000000b00)="ab000000000000000056e088000000f08dc70394a63b7f2648851d6a9c1b314ed54d3e6e1779bdf623a28b2ad17d7b5a95f82123998b663619f6a7520092ba5e38dde655d469eb4bf60e08b8875eece621e86900"/99, &(0x7f0000000540)="d3ed28a805a3c7de598a8e8f778dcddab0aa5d76ed19f6e0a02700dc831451de6ee9df321c64b10abba74fb53ecb7be03e7371f879af86995690d7b0a8365402f771aae72250403f1ac768e10dea45cfde481f204841df9a7c8438ac8c552634cadefdf3d97025efafefd310fe58ff10dd"}}, &(0x7f0000000000)) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/183, 0xb7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000a6bd374d2f3e0e4f973dc75545414f9850cec778d31405392452c78ebd31e3a634d59a77334e0043123ee6d5edd98903abd89b1118aea3692d84e774b35aa3b6e343111b2ae9ffa03164fe39f9020e2ebc0beb0dd8d87a5d4902746a14557c8cf94c0bff8efcd188929961ec0a309120"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 0s ago: executing program 1 (id=1110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r1}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setpriority(0x2, 0x0, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): 409 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134c78d169 code=0x7ffc0000 [ 273.711835][ T30] audit: type=1326 audit(1744598405.535:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f134c78d169 code=0x7ffc0000 [ 273.711877][ T30] audit: type=1326 audit(1744598405.535:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134c78d169 code=0x7ffc0000 [ 273.793818][ T30] audit: type=1326 audit(1744598405.535:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134c78d169 code=0x7ffc0000 [ 273.816142][ T30] audit: type=1326 audit(1744598405.535:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f134c78d169 code=0x7ffc0000 [ 273.839128][ T30] audit: type=1326 audit(1744598405.535:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134c78d169 code=0x7ffc0000 [ 273.855548][ T8410] CPU: 0 UID: 0 PID: 8410 Comm: syz.1.828 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 273.855579][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.855593][ T8410] Call Trace: [ 273.855602][ T8410] [ 273.855611][ T8410] dump_stack_lvl+0x241/0x360 [ 273.855652][ T8410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.855685][ T8410] ? __pfx__printk+0x10/0x10 [ 273.855718][ T8410] ? __pfx_snprintf+0x10/0x10 [ 273.855762][ T8410] should_fail_ex+0x424/0x570 [ 273.855792][ T8410] should_failslab+0xac/0x100 [ 273.855825][ T8410] __kmalloc_noprof+0xdf/0x4d0 [ 273.855858][ T8410] ? aa_label_asxprint+0x6e/0x130 [ 273.855889][ T8410] aa_label_asxprint+0x6e/0x130 [ 273.855919][ T8410] apparmor_lsmprop_to_secctx+0x9e/0x180 [ 273.855958][ T8410] security_lsmprop_to_secctx+0x93/0x2b0 [ 273.855983][ T8410] audit_log_task_context+0x101/0x280 [ 273.856017][ T8410] ? ktime_get_coarse_real_ts64+0x122/0x140 [ 273.856041][ T8410] ? __pfx_audit_log_task_context+0x10/0x10 [ 273.856075][ T8410] ? __pfx_audit_log_format+0x10/0x10 [ 273.856122][ T8410] audit_log_task+0x1a2/0x3e0 [ 273.856154][ T8410] ? __pfx_audit_log_task+0x10/0x10 [ 273.856182][ T8410] ? __pfx___cant_migrate+0x10/0x10 [ 273.856218][ T8410] audit_seccomp+0x7b/0x1f0 [ 273.856251][ T8410] __seccomp_filter+0xaea/0x1f20 [ 273.856300][ T8410] ? __pfx___seccomp_filter+0x10/0x10 [ 273.856335][ T8410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 273.856363][ T8410] ? __fget_files+0x2a/0x420 [ 273.856387][ T8410] ? __fget_files+0x2a/0x420 [ 273.856427][ T8410] ? __secure_computing+0xef/0x2f0 [ 273.856460][ T8410] syscall_trace_enter+0xa6/0x150 [ 273.856489][ T8410] do_syscall_64+0xcc/0x230 [ 273.856516][ T8410] ? clear_bhb_loop+0x45/0xa0 [ 273.856543][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.856568][ T8410] RIP: 0033:0x7f134c78d169 [ 273.856588][ T8410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.856606][ T8410] RSP: 002b:00007f134d61e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.856630][ T8410] RAX: ffffffffffffffda RBX: 00007f134c9a5fa0 RCX: 00007f134c78d169 [ 273.856647][ T8410] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000006 [ 273.856661][ T8410] RBP: 00007f134d61e090 R08: 0000000000000000 R09: 0000000000000000 [ 273.856675][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.856689][ T8410] R13: 0000000000000000 R14: 00007f134c9a5fa0 R15: 00007f134cacfa28 [ 273.856723][ T8410] [ 273.856818][ T8410] audit: error in audit_log_task_context [ 273.862230][ T30] audit: type=1326 audit(1744598405.535:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134c78d169 code=0x7ffc0000 [ 273.954748][ T8413] netlink: 412 bytes leftover after parsing attributes in process `syz.0.829'. [ 274.020357][ T5945] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 274.035336][ T30] audit: type=1326 audit(1744598405.535:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f134c78d169 code=0x7ffc0000 [ 274.203884][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 274.238221][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.248763][ T8413] netlink: 92 bytes leftover after parsing attributes in process `syz.0.829'. [ 274.274086][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.314321][ T5945] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.336751][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.377470][ T5945] usb 5-1: config 0 descriptor?? [ 274.518403][ T5894] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 274.811462][ T5894] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 274.819987][ T5894] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 274.962456][ T5894] usb 4-1: config 220 has no interface number 2 [ 274.976483][ T5894] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 275.007921][ T5894] usb 4-1: config 220 interface 0 has no altsetting 0 [ 275.025171][ T5894] usb 4-1: config 220 interface 76 has no altsetting 0 [ 275.040066][ T5894] usb 4-1: config 220 interface 1 has no altsetting 0 [ 275.050739][ T5894] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 275.112418][ T5945] usbhid 5-1:0.0: can't add hid device: -71 [ 275.118810][ T5945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 275.135313][ T5945] usb 5-1: USB disconnect, device number 46 [ 275.144327][ T8419] dccp_close: ABORT with 32 bytes unread [ 275.189990][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.318340][ T5894] usb 4-1: Product: syz [ 275.322587][ T5894] usb 4-1: Manufacturer: syz [ 275.327204][ T5894] usb 4-1: SerialNumber: syz [ 275.430056][ T5894] usb 4-1: can't set config #220, error -71 [ 275.478525][ T5894] usb 4-1: USB disconnect, device number 43 [ 275.858161][ T5894] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 276.023641][ T8448] kvm: MONITOR instruction emulated as NOP! [ 276.124164][ T8452] FAULT_INJECTION: forcing a failure. [ 276.124164][ T8452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.170681][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 276.178264][ T8452] CPU: 1 UID: 0 PID: 8452 Comm: syz.1.840 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 276.178300][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.178313][ T8452] Call Trace: [ 276.178321][ T8452] [ 276.178330][ T8452] dump_stack_lvl+0x241/0x360 [ 276.178368][ T8452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.178398][ T8452] ? __pfx__printk+0x10/0x10 [ 276.178442][ T8452] should_fail_ex+0x424/0x570 [ 276.178470][ T8452] _copy_to_iter+0x43f/0x1c90 [ 276.178513][ T8452] ? __pfx__copy_to_iter+0x10/0x10 [ 276.178540][ T8452] ? __x64_sys_recvmmsg+0x1ca/0x260 [ 276.178562][ T8452] ? do_syscall_64+0xf3/0x230 [ 276.178589][ T8452] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 276.178620][ T8452] ? skb_recv_datagram+0x26e/0x310 [ 276.178649][ T8452] __skb_datagram_iter+0x101/0x940 [ 276.178677][ T8452] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 276.178709][ T8452] skb_copy_datagram_iter+0xd1/0x250 [ 276.178739][ T8452] netlink_recvmsg+0x2d4/0x1180 [ 276.178778][ T8452] ? __pfx_netlink_recvmsg+0x10/0x10 [ 276.178810][ T8452] ? __kmalloc_noprof+0x2ae/0x4d0 [ 276.178841][ T8452] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.178874][ T8452] ? aa_sock_msg_perm+0x91/0x160 [ 276.178906][ T8452] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 276.178924][ T8452] ? __pfx_netlink_recvmsg+0x10/0x10 [ 276.178957][ T8452] sock_recvmsg+0x22f/0x280 [ 276.178991][ T8452] ____sys_recvmsg+0x1c8/0x480 [ 276.179024][ T8452] ? __pfx_____sys_recvmsg+0x10/0x10 [ 276.179073][ T8452] do_recvmmsg+0x428/0xab0 [ 276.179110][ T8452] ? __pfx_do_recvmmsg+0x10/0x10 [ 276.179157][ T8452] ? __lock_acquire+0xad5/0xd80 [ 276.179216][ T8452] ? get_timespec64+0x1a8/0x290 [ 276.179256][ T8452] __x64_sys_recvmmsg+0x1ca/0x260 [ 276.179284][ T8452] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 276.179325][ T8452] ? do_syscall_64+0xb6/0x230 [ 276.179355][ T8452] do_syscall_64+0xf3/0x230 [ 276.179381][ T8452] ? clear_bhb_loop+0x45/0xa0 [ 276.179407][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.179426][ T8452] RIP: 0033:0x7f134c78d169 [ 276.179445][ T8452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.179463][ T8452] RSP: 002b:00007f134d61e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 276.179486][ T8452] RAX: ffffffffffffffda RBX: 00007f134c9a5fa0 RCX: 00007f134c78d169 [ 276.179501][ T8452] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 276.179515][ T8452] RBP: 00007f134d61e090 R08: 0000200000003700 R09: 0000000000000000 [ 276.179529][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.179542][ T8452] R13: 0000000000000000 R14: 00007f134c9a5fa0 R15: 00007f134cacfa28 [ 276.179574][ T8452] [ 276.941689][ T5894] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 276.965753][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.049264][ T5894] usb 4-1: config 0 descriptor?? [ 277.323966][ T5894] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 277.378289][ T5945] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 277.558415][ T50] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 277.569237][ T5945] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.12 [ 277.618883][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.642885][ T5945] usb 2-1: Product: syz [ 277.647156][ T5945] usb 2-1: Manufacturer: syz [ 277.655729][ T5945] usb 2-1: SerialNumber: syz [ 277.668895][ T5945] usb 2-1: config 0 descriptor?? [ 277.740159][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.833619][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.882345][ T5945] hso 2-1:0.0: Failed to find INT IN ep [ 277.891418][ T50] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 277.924613][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.058177][ T50] usb 3-1: config 0 descriptor?? [ 278.087403][ T5945] usb 2-1: USB disconnect, device number 40 [ 278.127917][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.139584][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.285386][ T50] usbhid 3-1:0.0: can't add hid device: -71 [ 278.305760][ T50] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 278.331189][ T50] usb 3-1: USB disconnect, device number 57 [ 278.419983][ T8476] hub 1-0:1.0: USB hub found [ 278.427471][ T8476] hub 1-0:1.0: 1 port detected [ 278.745396][ T8483] FAULT_INJECTION: forcing a failure. [ 278.745396][ T8483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.759151][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: syz.1.850 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 278.759177][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.759190][ T8483] Call Trace: [ 278.759198][ T8483] [ 278.759207][ T8483] dump_stack_lvl+0x241/0x360 [ 278.759245][ T8483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.759275][ T8483] ? __pfx__printk+0x10/0x10 [ 278.759325][ T8483] should_fail_ex+0x424/0x570 [ 278.759354][ T8483] _copy_to_iter+0x43f/0x1c90 [ 278.759397][ T8483] ? __pfx__copy_to_iter+0x10/0x10 [ 278.759423][ T8483] ? __x64_sys_recvmmsg+0x1ca/0x260 [ 278.759444][ T8483] ? do_syscall_64+0xf3/0x230 [ 278.759471][ T8483] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 278.759503][ T8483] ? skb_recv_datagram+0x26e/0x310 [ 278.759531][ T8483] __skb_datagram_iter+0x101/0x940 [ 278.759558][ T8483] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 278.759589][ T8483] skb_copy_datagram_iter+0xd1/0x250 [ 278.759618][ T8483] netlink_recvmsg+0x2d4/0x1180 [ 278.759661][ T8483] ? __pfx_netlink_recvmsg+0x10/0x10 [ 278.759692][ T8483] ? __kmalloc_noprof+0x2ae/0x4d0 [ 278.759721][ T8483] ? __pfx_aa_sk_perm+0x10/0x10 [ 278.759752][ T8483] ? aa_sock_msg_perm+0x91/0x160 [ 278.759782][ T8483] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 278.759801][ T8483] ? __pfx_netlink_recvmsg+0x10/0x10 [ 278.759834][ T8483] sock_recvmsg+0x22f/0x280 [ 278.759866][ T8483] ____sys_recvmsg+0x1c8/0x480 [ 278.759898][ T8483] ? __pfx_____sys_recvmsg+0x10/0x10 [ 278.759946][ T8483] do_recvmmsg+0x428/0xab0 [ 278.759982][ T8483] ? __pfx_do_recvmmsg+0x10/0x10 [ 278.760026][ T8483] ? __lock_acquire+0xad5/0xd80 [ 278.760082][ T8483] ? get_timespec64+0x1a8/0x290 [ 278.760121][ T8483] __x64_sys_recvmmsg+0x1ca/0x260 [ 278.760147][ T8483] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 278.760178][ T8483] ? do_syscall_64+0xb6/0x230 [ 278.760207][ T8483] do_syscall_64+0xf3/0x230 [ 278.760233][ T8483] ? clear_bhb_loop+0x45/0xa0 [ 278.760258][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.760278][ T8483] RIP: 0033:0x7f134c78d169 [ 278.760294][ T8483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.760312][ T8483] RSP: 002b:00007f134d61e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 278.760339][ T8483] RAX: ffffffffffffffda RBX: 00007f134c9a5fa0 RCX: 00007f134c78d169 [ 278.760353][ T8483] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 278.760367][ T8483] RBP: 00007f134d61e090 R08: 0000200000003700 R09: 0000000000000000 [ 278.760381][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.760393][ T8483] R13: 0000000000000000 R14: 00007f134c9a5fa0 R15: 00007f134cacfa28 [ 278.760424][ T8483] [ 279.118440][ T5895] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 279.189127][ T975] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 279.288300][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 279.314674][ T5894] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 279.331033][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 279.342530][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 279.351453][ T5894] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 279.363693][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.378549][ T5895] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 279.387951][ T975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.409268][ T5894] asix 4-1:0.0: probe with driver asix failed with error -71 [ 279.418990][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.433629][ T5895] usb 1-1: Product: syz [ 279.440438][ T975] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.451242][ T5894] usb 4-1: USB disconnect, device number 44 [ 279.457487][ T5895] usb 1-1: Manufacturer: syz [ 279.464756][ T5895] usb 1-1: SerialNumber: syz [ 279.472082][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.483485][ T5895] usb 1-1: config 0 descriptor?? [ 279.494340][ T975] usb 5-1: config 0 descriptor?? [ 279.525432][ T9] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 279.534918][ T9] usb 3-1: config 0 has no interface number 0 [ 279.542348][ T9] usb 3-1: config 0 interface 101 has no altsetting 0 [ 279.551156][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 279.561355][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.575066][ T9] usb 3-1: config 0 descriptor?? [ 279.585950][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 279.730643][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.744272][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.783940][ T5895] ath6kl: Failed to submit usb control message: -71 [ 279.796573][ T5895] ath6kl: unable to send the bmi data to the device: -71 [ 279.806264][ T5895] ath6kl: Unable to send get target info: -71 [ 279.825320][ T5895] ath6kl: Failed to init ath6kl core: -71 [ 279.835852][ T5895] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 279.872062][ T5895] usb 1-1: USB disconnect, device number 43 [ 280.017375][ T8500] FAULT_INJECTION: forcing a failure. [ 280.017375][ T8500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.036448][ T8500] CPU: 0 UID: 0 PID: 8500 Comm: syz.3.856 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 280.036480][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.036493][ T8500] Call Trace: [ 280.036502][ T8500] [ 280.036511][ T8500] dump_stack_lvl+0x241/0x360 [ 280.036554][ T8500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.036586][ T8500] ? __pfx__printk+0x10/0x10 [ 280.036629][ T8500] should_fail_ex+0x424/0x570 [ 280.036656][ T8500] strncpy_from_user+0x36/0x280 [ 280.036676][ T8500] ? strncpy_from_sockptr+0x31/0xe0 [ 280.036709][ T8500] do_tcp_setsockopt+0x16e/0x2670 [ 280.036746][ T8500] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 280.036781][ T8500] ? rcu_read_lock_any_held+0xbb/0x160 [ 280.036821][ T8500] ? tcp_setsockopt+0x3e/0xf0 [ 280.036849][ T8500] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 280.036883][ T8500] smc_setsockopt+0x25c/0xd50 [ 280.036913][ T8500] ? __pfx_aa_sk_perm+0x10/0x10 [ 280.036940][ T8500] ? __pfx_smc_setsockopt+0x10/0x10 [ 280.036967][ T8500] ? aa_sock_opt_perm+0x79/0x120 [ 280.037002][ T8500] ? __pfx_smc_setsockopt+0x10/0x10 [ 280.037025][ T8500] do_sock_setsockopt+0x3b1/0x710 [ 280.037055][ T8500] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 280.037074][ T8500] ? __fget_files+0x2a/0x420 [ 280.037098][ T8500] ? __fget_files+0x39d/0x420 [ 280.037116][ T8500] ? __fget_files+0x2a/0x420 [ 280.037145][ T8500] __x64_sys_setsockopt+0x1ee/0x280 [ 280.037175][ T8500] do_syscall_64+0xf3/0x230 [ 280.037209][ T8500] ? clear_bhb_loop+0x45/0xa0 [ 280.037235][ T8500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.037256][ T8500] RIP: 0033:0x7f677cd8d169 [ 280.037274][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.037292][ T8500] RSP: 002b:00007f677dc25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.037315][ T8500] RAX: ffffffffffffffda RBX: 00007f677cfa5fa0 RCX: 00007f677cd8d169 [ 280.037330][ T8500] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 280.037343][ T8500] RBP: 00007f677dc25090 R08: 0000000000000006 R09: 0000000000000000 [ 280.037356][ T8500] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.037370][ T8500] R13: 0000000000000000 R14: 00007f677cfa5fa0 R15: 00007f677d0cfa28 [ 280.037402][ T8500] [ 280.267295][ T50] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 280.298268][ T975] usbhid 5-1:0.0: can't add hid device: -71 [ 280.514261][ T975] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 280.526655][ T975] usb 5-1: USB disconnect, device number 47 [ 280.668317][ T50] usb 2-1: device descriptor read/64, error -71 [ 280.682818][ T8504] hub 1-0:1.0: USB hub found [ 280.687993][ T8504] hub 1-0:1.0: 1 port detected [ 280.792850][ T8509] bridge_slave_0: entered promiscuous mode [ 280.806656][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 280.908685][ T50] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 281.048239][ T50] usb 2-1: device descriptor read/64, error -71 [ 281.158542][ T50] usb usb2-port1: attempt power cycle [ 281.528270][ T50] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 281.575448][ T8486] pim6reg: entered allmulticast mode [ 281.581589][ T50] usb 2-1: device descriptor read/8, error -71 [ 281.590351][ T8486] lo: entered allmulticast mode [ 281.598906][ T8486] pim6reg: left allmulticast mode [ 281.604255][ T8486] lo: left allmulticast mode [ 281.664565][ T975] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 281.818528][ T50] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 281.840943][ T50] usb 2-1: device descriptor read/8, error -71 [ 281.860051][ T975] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 281.873271][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.885414][ T975] usb 1-1: Product: syz [ 281.898534][ T9] usb 3-1: USB disconnect, device number 58 [ 281.948516][ T50] usb usb2-port1: unable to enumerate USB device [ 281.961748][ T975] usb 1-1: Manufacturer: syz [ 281.977450][ T975] usb 1-1: SerialNumber: syz [ 282.017816][ T975] usb 1-1: config 0 descriptor?? [ 282.043278][ T975] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 282.096630][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 282.110353][ T8538] netlink: 'syz.3.870': attribute type 7 has an invalid length. [ 282.118512][ T8538] netlink: 'syz.3.870': attribute type 8 has an invalid length. [ 282.127117][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 282.908393][ T5893] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 283.081982][ T5893] usb 3-1: config 0 has no interfaces? [ 283.094197][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 283.109381][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.133758][ T5893] usb 3-1: Product: syz [ 283.143972][ T5893] usb 3-1: Manufacturer: syz [ 283.161458][ T5893] usb 3-1: SerialNumber: syz [ 283.175483][ T5893] usb 3-1: config 0 descriptor?? [ 283.277931][ T975] gspca_sunplus: reg_r err -32 [ 283.292757][ T975] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 283.323793][ T975] usb 1-1: USB disconnect, device number 44 [ 283.401642][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.411861][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.598317][ T50] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 283.738170][ T50] usb 2-1: device descriptor read/64, error -71 [ 283.988245][ T50] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 284.208400][ T50] usb 2-1: device descriptor read/64, error -71 [ 284.318520][ T5945] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 284.326261][ T50] usb usb2-port1: attempt power cycle [ 284.678512][ T50] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 284.719576][ T50] usb 2-1: device descriptor read/8, error -71 [ 284.825213][ T5945] usb 1-1: config 0 has no interfaces? [ 284.839196][ T5945] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 284.848523][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.856628][ T5945] usb 1-1: Product: syz [ 284.871745][ T5945] usb 1-1: Manufacturer: syz [ 284.876409][ T5945] usb 1-1: SerialNumber: syz [ 284.926460][ T5945] usb 1-1: config 0 descriptor?? [ 284.998233][ T50] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 285.018927][ T50] usb 2-1: device descriptor read/8, error -71 [ 285.158589][ T50] usb usb2-port1: unable to enumerate USB device [ 285.587755][ T5893] usb 3-1: USB disconnect, device number 59 [ 285.726860][ T8539] syz.3.870 (8539): drop_caches: 1 [ 287.398350][ T5893] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 287.507589][ T5945] usb 1-1: USB disconnect, device number 45 [ 287.594047][ T5893] usb 2-1: config 0 has no interfaces? [ 287.628127][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 287.637884][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.646141][ T5893] usb 2-1: Product: syz [ 287.658251][ T5893] usb 2-1: Manufacturer: syz [ 287.678192][ T5893] usb 2-1: SerialNumber: syz [ 287.698974][ T5893] usb 2-1: config 0 descriptor?? [ 288.135384][ T8598] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.887'. [ 288.799081][ T8607] hub 1-0:1.0: USB hub found [ 288.808322][ T8623] FAULT_INJECTION: forcing a failure. [ 288.808322][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.823149][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.0.894 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 288.823177][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.823190][ T8623] Call Trace: [ 288.823197][ T8623] [ 288.823203][ T8623] dump_stack_lvl+0x241/0x360 [ 288.823231][ T8623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.823253][ T8623] ? __pfx__printk+0x10/0x10 [ 288.823284][ T8623] should_fail_ex+0x424/0x570 [ 288.823304][ T8623] _copy_to_iter+0x43f/0x1c90 [ 288.823334][ T8623] ? __pfx__copy_to_iter+0x10/0x10 [ 288.823353][ T8623] ? __x64_sys_recvmmsg+0x1ca/0x260 [ 288.823370][ T8623] ? do_syscall_64+0xf3/0x230 [ 288.823390][ T8623] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 288.823420][ T8623] ? skb_recv_datagram+0x26e/0x310 [ 288.823440][ T8623] __skb_datagram_iter+0x101/0x940 [ 288.823460][ T8623] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 288.823484][ T8623] skb_copy_datagram_iter+0xd1/0x250 [ 288.823504][ T8623] netlink_recvmsg+0x2d4/0x1180 [ 288.823534][ T8623] ? __pfx_netlink_recvmsg+0x10/0x10 [ 288.823556][ T8623] ? __kmalloc_noprof+0x2ae/0x4d0 [ 288.823577][ T8623] ? __pfx_aa_sk_perm+0x10/0x10 [ 288.823600][ T8623] ? aa_sock_msg_perm+0x91/0x160 [ 288.823622][ T8623] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 288.823635][ T8623] ? __pfx_netlink_recvmsg+0x10/0x10 [ 288.823658][ T8623] sock_recvmsg+0x22f/0x280 [ 288.823681][ T8623] ____sys_recvmsg+0x1c8/0x480 [ 288.823703][ T8623] ? __pfx_____sys_recvmsg+0x10/0x10 [ 288.823737][ T8623] do_recvmmsg+0x428/0xab0 [ 288.823761][ T8623] ? __pfx_do_recvmmsg+0x10/0x10 [ 288.823793][ T8623] ? __lock_acquire+0xad5/0xd80 [ 288.823832][ T8623] ? get_timespec64+0x1a8/0x290 [ 288.823859][ T8623] __x64_sys_recvmmsg+0x1ca/0x260 [ 288.823878][ T8623] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 288.823899][ T8623] ? do_syscall_64+0xb6/0x230 [ 288.823920][ T8623] do_syscall_64+0xf3/0x230 [ 288.823938][ T8623] ? clear_bhb_loop+0x45/0xa0 [ 288.823956][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.823970][ T8623] RIP: 0033:0x7ff60838d169 [ 288.823983][ T8623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.823996][ T8623] RSP: 002b:00007ff6091be038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 288.824012][ T8623] RAX: ffffffffffffffda RBX: 00007ff6085a5fa0 RCX: 00007ff60838d169 [ 288.824023][ T8623] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 288.824033][ T8623] RBP: 00007ff6091be090 R08: 0000200000003700 R09: 0000000000000000 [ 288.824042][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.824051][ T8623] R13: 0000000000000000 R14: 00007ff6085a5fa0 R15: 00007ff6086cfa28 [ 288.824073][ T8623] [ 288.886230][ T8607] hub 1-0:1.0: 1 port detected [ 288.889147][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.105922][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.111915][ C0] hrtimer: interrupt took 283869894 ns [ 289.211952][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.890563][ T5896] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 290.273416][ T5896] usb 3-1: config 0 has no interfaces? [ 290.452572][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 290.462781][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.471442][ T5896] usb 3-1: Product: syz [ 290.475952][ T5896] usb 3-1: Manufacturer: syz [ 290.480648][ T5896] usb 3-1: SerialNumber: syz [ 290.510078][ T5896] usb 3-1: config 0 descriptor?? [ 291.420694][ T5893] usb 2-1: USB disconnect, device number 49 [ 291.858570][ T5945] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 292.350494][ T5945] usb 4-1: config 0 has no interfaces? [ 292.548760][ T8674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.906'. [ 292.568154][ T8675] netlink: 56 bytes leftover after parsing attributes in process `syz.1.905'. [ 292.582295][ T8675] FAULT_INJECTION: forcing a failure. [ 292.582295][ T8675] name failslab, interval 1, probability 0, space 0, times 0 [ 292.638884][ T8675] CPU: 1 UID: 0 PID: 8675 Comm: syz.1.905 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 292.638914][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.638932][ T8675] Call Trace: [ 292.638940][ T8675] [ 292.638950][ T8675] dump_stack_lvl+0x241/0x360 [ 292.638990][ T8675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.639021][ T8675] ? __pfx__printk+0x10/0x10 [ 292.639055][ T8675] ? __pfx___might_resched+0x10/0x10 [ 292.639094][ T8675] should_fail_ex+0x424/0x570 [ 292.639122][ T8675] should_failslab+0xac/0x100 [ 292.639153][ T8675] kmem_cache_alloc_noprof+0x78/0x390 [ 292.639180][ T8675] ? security_file_alloc+0x32/0x310 [ 292.639204][ T8675] security_file_alloc+0x32/0x310 [ 292.639226][ T8675] init_file+0x90/0x300 [ 292.639243][ T8675] alloc_empty_file+0x70/0x1d0 [ 292.639271][ T8675] path_openat+0x10d/0x35d0 [ 292.639294][ T8675] ? stack_trace_save+0x11a/0x1d0 [ 292.639321][ T8675] ? __pfx_stack_trace_save+0x10/0x10 [ 292.639347][ T8675] ? stack_depot_save_flags+0x44/0x940 [ 292.639364][ T8675] ? lockdep_hardirqs_on+0x81/0x150 [ 292.639390][ T8675] ? kasan_save_track+0x51/0x80 [ 292.639407][ T8675] ? kasan_save_track+0x3f/0x80 [ 292.639424][ T8675] ? __kasan_slab_alloc+0x66/0x80 [ 292.639442][ T8675] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 292.639465][ T8675] ? getname_flags+0xb6/0x530 [ 292.639489][ T8675] ? __pfx_path_openat+0x10/0x10 [ 292.639507][ T8675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.639539][ T8675] do_filp_open+0x284/0x4e0 [ 292.639561][ T8675] ? __pfx_do_filp_open+0x10/0x10 [ 292.639578][ T8675] ? do_raw_spin_lock+0x151/0x370 [ 292.639632][ T8675] do_sys_openat2+0x12b/0x1d0 [ 292.639661][ T8675] ? __pfx_do_sys_openat2+0x10/0x10 [ 292.639688][ T8675] ? __x64_sys_openat+0x1a7/0x2a0 [ 292.639720][ T8675] __x64_sys_openat+0x249/0x2a0 [ 292.639747][ T8675] ? __pfx___x64_sys_openat+0x10/0x10 [ 292.639781][ T8675] ? do_syscall_64+0xb6/0x230 [ 292.639805][ T8675] do_syscall_64+0xf3/0x230 [ 292.639827][ T8675] ? clear_bhb_loop+0x45/0xa0 [ 292.639848][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.639864][ T8675] RIP: 0033:0x7f134c78d169 [ 292.639879][ T8675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.639894][ T8675] RSP: 002b:00007f134d5dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 292.639912][ T8675] RAX: ffffffffffffffda RBX: 00007f134c9a6160 RCX: 00007f134c78d169 [ 292.639925][ T8675] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 292.639936][ T8675] RBP: 00007f134d5dc090 R08: 0000000000000000 R09: 0000000000000000 [ 292.639947][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.639957][ T8675] R13: 0000000000000000 R14: 00007f134c9a6160 R15: 00007f134cacfa28 [ 292.639981][ T8675] [ 292.924716][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.273903][ T8674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.906'. [ 293.396463][ T50] usb 3-1: USB disconnect, device number 60 [ 293.558576][ T5896] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 293.683691][ T8688] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 293.696087][ T8688] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 293.711572][ T8688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.741029][ T5896] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.752485][ T5896] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 293.798646][ T8688] loop6: detected capacity change from 0 to 63 [ 293.811430][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.827316][ T50] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 293.849676][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 293.865723][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.875143][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.883135][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.892348][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 293.900745][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.910012][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 293.917874][ C1] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.927136][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 293.944155][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.953389][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.971097][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.980317][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 293.988276][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.997608][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 294.005497][ C1] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 294.014926][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 294.023154][ T5896] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.037735][ T50] usb 3-1: device descriptor read/64, error -71 [ 294.045328][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 294.054522][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.062568][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 294.084877][ T5896] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.097071][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.106672][ T5896] usb 2-1: Product: syz [ 294.118589][ T5896] usb 2-1: Manufacturer: syz [ 294.128385][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 294.167922][ T5896] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 294.308304][ T50] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 294.341956][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.459843][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 10593, setting to 1024 [ 294.478241][ T5896] usb 2-1: USB disconnect, device number 50 [ 294.507611][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 294.529545][ T50] usb 3-1: device descriptor read/64, error -71 [ 294.605249][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.638476][ T50] usb usb3-port1: attempt power cycle [ 294.681935][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.709608][ T5945] usb 4-1: New USB device found, idVendor=3340, idProduct=043a, bcdDevice=d3.f4 [ 294.726932][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.735914][ T8691] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 294.759644][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.775914][ T5945] usb 4-1: config 0 descriptor?? [ 294.805400][ T5945] usb 4-1: can't set config #0, error -71 [ 294.829609][ T5945] usb 4-1: USB disconnect, device number 45 [ 294.962291][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 295.018166][ T50] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 295.069364][ T50] usb 3-1: device descriptor read/8, error -71 [ 295.349189][ T50] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 295.372259][ T8704] hub 1-0:1.0: USB hub found [ 295.377961][ T8704] hub 1-0:1.0: 1 port detected [ 295.388921][ T50] usb 3-1: device descriptor read/8, error -71 [ 295.499812][ T50] usb usb3-port1: unable to enumerate USB device [ 296.378397][ T975] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 296.540948][ T5895] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 296.561209][ T975] usb 4-1: config 0 has no interfaces? [ 296.577756][ T975] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 296.595638][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.702103][ T5945] usb 5-1: USB disconnect, device number 48 [ 296.721657][ T975] usb 4-1: Product: syz [ 296.734848][ T5895] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 296.745772][ T975] usb 4-1: Manufacturer: syz [ 296.750936][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.759134][ T975] usb 4-1: SerialNumber: syz [ 296.769624][ T5895] usb 2-1: Product: syz [ 296.774024][ T5895] usb 2-1: Manufacturer: syz [ 296.779137][ T5895] usb 2-1: SerialNumber: syz [ 296.811914][ T5895] usb 2-1: config 0 descriptor?? [ 296.844509][ T975] usb 4-1: config 0 descriptor?? [ 296.849893][ T5895] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 296.928435][ T50] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 297.158967][ T50] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.173540][ T50] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 297.579522][ T5895] gspca_sunplus: reg_r err -110 [ 297.584704][ T5895] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 297.589113][ T50] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.638209][ T5945] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 297.731633][ T50] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.868205][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 297.942224][ T50] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.953410][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 297.986740][ T50] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 298.025206][ T50] usb 3-1: Product: syz [ 298.083344][ T50] usb 3-1: Manufacturer: syz [ 298.100621][ T5945] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 298.113930][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.128029][ T50] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 298.140689][ T5945] usb 5-1: Product: syz [ 298.152239][ T5945] usb 5-1: Manufacturer: syz [ 298.167231][ T5945] usb 5-1: SerialNumber: syz [ 298.184389][ T5945] usb 5-1: config 0 descriptor?? [ 298.339864][ T975] usb 3-1: USB disconnect, device number 65 [ 298.368287][ T5895] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 298.400612][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.417291][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.436988][ T5945] ath6kl: Failed to submit usb control message: -71 [ 298.446830][ T5945] ath6kl: unable to send the bmi data to the device: -71 [ 298.458663][ T5945] ath6kl: Unable to send get target info: -71 [ 298.471889][ T5945] ath6kl: Failed to init ath6kl core: -71 [ 298.488258][ T5945] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 298.515510][ T5945] usb 5-1: USB disconnect, device number 49 [ 298.548254][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 298.562210][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 298.579748][ T5895] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 298.590140][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.598374][ T5895] usb 1-1: Product: syz [ 298.602672][ T5895] usb 1-1: Manufacturer: syz [ 298.607379][ T5895] usb 1-1: SerialNumber: syz [ 298.618950][ T5895] usb 1-1: config 0 descriptor?? [ 298.836607][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.856135][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.896248][ T5895] ath6kl: Failed to submit usb control message: -71 [ 298.907083][ T5895] ath6kl: unable to send the bmi data to the device: -71 [ 298.914648][ T5895] ath6kl: Unable to send get target info: -71 [ 298.930932][ T5895] ath6kl: Failed to init ath6kl core: -71 [ 298.960630][ T5895] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 299.017688][ T5895] usb 1-1: USB disconnect, device number 46 [ 299.044748][ T5891] udevd[5891]: setting owner of /dev/bus/usb/001/046 to uid=0, gid=0 failed: No such file or directory [ 299.346667][ T5945] usb 2-1: USB disconnect, device number 51 [ 299.604812][ T5895] usb 4-1: USB disconnect, device number 46 [ 300.001656][ T50] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 300.149247][ T50] usb 1-1: device descriptor read/64, error -71 [ 300.488466][ T50] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 300.514949][ T8769] FAULT_INJECTION: forcing a failure. [ 300.514949][ T8769] name failslab, interval 1, probability 0, space 0, times 0 [ 300.564814][ T8769] CPU: 0 UID: 0 PID: 8769 Comm: syz.2.937 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 300.564842][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 300.564851][ T8769] Call Trace: [ 300.564857][ T8769] [ 300.564863][ T8769] dump_stack_lvl+0x241/0x360 [ 300.564891][ T8769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.564914][ T8769] ? __pfx__printk+0x10/0x10 [ 300.564933][ T8769] ? lockdep_hardirqs_on+0x9d/0x150 [ 300.564954][ T8769] ? __pfx___might_resched+0x10/0x10 [ 300.564975][ T8769] should_fail_ex+0x424/0x570 [ 300.564995][ T8769] should_failslab+0xac/0x100 [ 300.565017][ T8769] kmem_cache_alloc_noprof+0x78/0x390 [ 300.565038][ T8769] ? getname_kernel+0x59/0x2f0 [ 300.565064][ T8769] getname_kernel+0x59/0x2f0 [ 300.565088][ T8769] kern_path+0x1d/0x50 [ 300.565102][ T8769] unix_find_other+0x166/0x990 [ 300.565135][ T8769] ? __pfx_unix_find_other+0x10/0x10 [ 300.565159][ T8769] ? aa_sk_perm+0x96f/0xac0 [ 300.565181][ T8769] unix_dgram_connect+0x4ff/0xdd0 [ 300.565207][ T8769] ? __pfx_unix_dgram_connect+0x10/0x10 [ 300.565237][ T8769] __sys_connect+0x28c/0x2d0 [ 300.565261][ T8769] ? __fget_files+0x2a/0x420 [ 300.565274][ T8769] ? __pfx___sys_connect+0x10/0x10 [ 300.565314][ T8769] __x64_sys_connect+0x7a/0x90 [ 300.565337][ T8769] do_syscall_64+0xf3/0x230 [ 300.565356][ T8769] ? clear_bhb_loop+0x45/0xa0 [ 300.565374][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.565390][ T8769] RIP: 0033:0x7ff05af8d169 [ 300.565403][ T8769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.565415][ T8769] RSP: 002b:00007ff05bd06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 300.565432][ T8769] RAX: ffffffffffffffda RBX: 00007ff05b1a5fa0 RCX: 00007ff05af8d169 [ 300.565443][ T8769] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000005 [ 300.565453][ T8769] RBP: 00007ff05bd06090 R08: 0000000000000000 R09: 0000000000000000 [ 300.565462][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.565471][ T8769] R13: 0000000000000000 R14: 00007ff05b1a5fa0 R15: 00007ff05b2cfa28 [ 300.565493][ T8769] [ 300.618276][ T50] usb 1-1: device descriptor read/64, error -71 [ 301.018224][ T5945] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 301.188701][ T50] usb usb1-port1: attempt power cycle [ 301.221501][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 301.233678][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 301.261386][ T5945] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 301.281351][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.312980][ T5945] usb 4-1: Product: syz [ 301.317183][ T5945] usb 4-1: Manufacturer: syz [ 301.338139][ T5945] usb 4-1: SerialNumber: syz [ 301.369243][ T5945] usb 4-1: config 0 descriptor?? [ 301.528206][ T5896] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 301.598246][ T50] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 301.608588][ T5895] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 301.629418][ T50] usb 1-1: device descriptor read/8, error -71 [ 301.661809][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.678236][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 301.686706][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.702466][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.727283][ T5945] ath6kl: Failed to submit usb control message: -71 [ 301.736449][ T5945] ath6kl: unable to send the bmi data to the device: -71 [ 301.748771][ T5945] ath6kl: Unable to send get target info: -71 [ 301.754981][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.770349][ T5945] ath6kl: Failed to init ath6kl core: -71 [ 301.777715][ T5945] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 301.786406][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 301.807856][ T5896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 301.815734][ T5895] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 301.820430][ T5945] usb 4-1: USB disconnect, device number 47 [ 301.832846][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.834949][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.875306][ T5895] usb 5-1: Product: syz [ 301.878841][ T50] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 301.880369][ T5895] usb 5-1: Manufacturer: syz [ 301.892407][ T5895] usb 5-1: SerialNumber: syz [ 301.913187][ T5895] usb 5-1: config 0 descriptor?? [ 301.934366][ T5896] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.947974][ T5895] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 301.951207][ T50] usb 1-1: device descriptor read/8, error -71 [ 301.965897][ T5896] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.974607][ T5896] usb 3-1: Manufacturer: syz [ 301.988372][ T5893] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 301.989080][ T5896] usb 3-1: config 0 descriptor?? [ 302.080532][ T50] usb usb1-port1: unable to enumerate USB device [ 302.142187][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 302.151600][ T5893] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 302.160206][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.170840][ T5893] usb 2-1: config 0 has no interface number 0 [ 302.177046][ T5893] usb 2-1: config 0 interface 146 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.194682][ T5893] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 302.204196][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.212760][ T5893] usb 2-1: Product: syz [ 302.217830][ T5893] usb 2-1: Manufacturer: syz [ 302.222981][ T5893] usb 2-1: SerialNumber: syz [ 302.232939][ T5893] usb 2-1: config 0 descriptor?? [ 302.243893][ T5893] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 302.448536][ T5893] usb 2-1: USB disconnect, device number 52 [ 302.568398][ T5896] rc_core: IR keymap rc-hauppauge not found [ 302.574369][ T5896] Registered IR keymap rc-empty [ 302.592170][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 302.619021][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 302.642755][ T5896] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 302.680004][ T5896] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 302.698686][ T8798] CUSE: info not properly terminated [ 302.728026][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 302.763208][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 302.848689][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 302.868330][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 302.898532][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 302.938446][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 302.968248][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 302.998196][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.038265][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.058284][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.081253][ T5896] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 303.090663][ T5896] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 303.099340][ T50] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 303.114768][ T5896] usb 3-1: USB disconnect, device number 66 [ 303.248217][ T50] usb 4-1: device descriptor read/64, error -71 [ 303.362490][ T5895] gspca_sunplus: reg_r err -71 [ 303.369131][ T5895] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 303.442851][ T5895] usb 5-1: USB disconnect, device number 50 [ 303.528463][ T50] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 303.749130][ T50] usb 4-1: device descriptor read/64, error -71 [ 303.908405][ T50] usb usb4-port1: attempt power cycle [ 303.981659][ T5895] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 304.064462][ T8825] fuse: Unknown parameter 'rootmod' [ 304.148524][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 304.175576][ T5895] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.197318][ T5895] usb 2-1: config 0 has no interface number 0 [ 304.216937][ T5895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.225319][ T8827] hub 1-0:1.0: USB hub found [ 304.239907][ T8827] hub 1-0:1.0: 1 port detected [ 304.262244][ T5895] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 304.279764][ T50] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 304.314704][ T50] usb 4-1: device descriptor read/8, error -71 [ 304.324514][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.387628][ T5895] usb 2-1: config 0 descriptor?? [ 304.442411][ T5895] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 304.628194][ T50] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 304.638669][ T8810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'. [ 304.668371][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 304.681530][ T5895] usb 2-1: USB disconnect, device number 53 [ 304.783486][ T50] usb 4-1: device descriptor read/8, error -71 [ 304.878323][ T24] usb 5-1: device descriptor read/64, error -71 [ 304.928477][ T50] usb usb4-port1: unable to enumerate USB device [ 305.148166][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 305.289802][ T24] usb 5-1: device descriptor read/64, error -71 [ 305.348985][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.959'. [ 305.396486][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.959'. [ 305.412134][ T24] usb usb5-port1: attempt power cycle [ 305.568606][ T5895] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 305.748506][ T9] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 305.764163][ T5895] usb 1-1: config index 0 descriptor too short (expected 8192, got 77) [ 305.774457][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.778194][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 305.786855][ T5895] usb 1-1: config 0 has no interfaces? [ 305.808784][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 305.826093][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.835394][ T5895] usb 1-1: Product: syz [ 305.848933][ T24] usb 5-1: device descriptor read/8, error -71 [ 305.854109][ T5895] usb 1-1: Manufacturer: syz [ 305.876022][ T5895] usb 1-1: SerialNumber: syz [ 305.910393][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.925871][ T5895] usb 1-1: config 0 descriptor?? [ 305.942957][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 305.993329][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 306.036378][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.045994][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 306.109819][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 306.128220][ T9] usb 2-1: SerialNumber: syz [ 306.155472][ T24] usb 5-1: device descriptor read/8, error -71 [ 306.312352][ T24] usb usb5-port1: unable to enumerate USB device [ 307.808241][ T975] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 307.908234][ T5893] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 307.928369][ T5894] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 307.938482][ T975] usb 3-1: device descriptor read/64, error -71 [ 308.068171][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 308.075673][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 308.090628][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 308.099109][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 308.115981][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 308.127080][ T5893] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 308.141976][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.152144][ T5893] usb 5-1: Product: syz [ 308.156969][ T5893] usb 5-1: Manufacturer: syz [ 308.162595][ T5894] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 308.175597][ T5893] usb 5-1: SerialNumber: syz [ 308.180421][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 308.194599][ T5893] usb 5-1: config 0 descriptor?? [ 308.199847][ T975] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 308.212015][ T5894] usb 4-1: Product: syz [ 308.216941][ T5894] usb 4-1: Manufacturer: syz [ 308.225501][ T5893] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 308.234614][ T5894] usb 4-1: SerialNumber: syz [ 308.246006][ T5894] usb 4-1: config 0 descriptor?? [ 308.262167][ T8862] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 308.286563][ T5894] hub 4-1:0.0: bad descriptor, ignoring hub [ 308.293319][ T5894] hub 4-1:0.0: probe with driver hub failed with error -5 [ 308.342515][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 308.352315][ T975] usb 3-1: device descriptor read/64, error -71 [ 308.377017][ T9] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 308.397042][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 308.425573][ T9] usb 2-1: USB disconnect, device number 54 [ 308.500543][ T975] usb usb3-port1: attempt power cycle [ 308.516364][ T8866] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 308.532742][ T8860] IPVS: stopping backup sync thread 8866 ... [ 308.547362][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.563706][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.599606][ T5893] usb 4-1: USB disconnect, device number 52 [ 308.780166][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 308.860327][ T5895] usb 1-1: USB disconnect, device number 51 [ 308.873025][ T975] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 308.910420][ T975] usb 3-1: device descriptor read/8, error -71 [ 308.958381][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 308.966312][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.977647][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.999050][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 309.011317][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.031739][ T9] usb 2-1: config 0 descriptor?? [ 309.099492][ T9] hub 2-1:0.0: USB hub found [ 309.123075][ T50] usb 5-1: USB disconnect, device number 55 [ 309.158466][ T5893] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 309.166330][ T975] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 309.200297][ T975] usb 3-1: device descriptor read/8, error -71 [ 309.404260][ T9] hub 2-1:0.0: 1 port detected [ 309.458672][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 309.466177][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.476770][ T5893] usb 4-1: config 15 has no interfaces? [ 309.487259][ T5893] usb 4-1: string descriptor 0 read error: -22 [ 309.511092][ T5893] usb 4-1: New USB device found, idVendor=17a8, idProduct=0102, bcdDevice=7e.93 [ 309.525896][ T975] usb usb3-port1: unable to enumerate USB device [ 309.533983][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.718278][ T50] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 309.757781][ T5893] usb 4-1: USB disconnect, device number 53 [ 309.817727][ T9] usb 2-1: USB disconnect, device number 55 [ 309.878398][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 309.890521][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.910925][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.936926][ T50] usb 5-1: New USB device found, idVendor=54d2, idProduct=2686, bcdDevice= 0.15 [ 309.952281][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.980490][ T50] usb 5-1: config 0 descriptor?? [ 310.407493][ T8875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.463145][ T8875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.657478][ T8883] netlink: 'syz.4.969': attribute type 5 has an invalid length. [ 310.666931][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 310.776670][ T8875] IPv6: sit1: Disabled Multicast RS [ 310.824786][ T8883] raw_sendmsg: syz.4.969 forgot to set AF_INET. Fix it! [ 310.879835][ T8875] sit1: entered allmulticast mode [ 311.068428][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 311.074494][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 311.105945][ T50] usb 5-1: USB disconnect, device number 56 [ 311.281098][ T975] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 311.319522][ T975] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 311.450228][ T50] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 311.609995][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.638987][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.678145][ T50] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 311.697649][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.740406][ T50] usb 4-1: config 0 descriptor?? [ 311.758939][ T8896] hid-generic 0000:0000:0000.0010: pid 8896 passed too short report [ 312.052825][ T5945] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 312.250753][ T5945] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 312.308359][ T5945] usb 1-1: config 0 has no interface number 0 [ 312.320427][ T5945] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 312.357136][ T5945] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 312.401671][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.447544][ T5945] usb 1-1: config 0 descriptor?? [ 312.477536][ T5945] ttusbir 1-1:0.83: cannot find expected altsetting [ 314.058330][ T975] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 314.123844][ T8923] netlink: 6 bytes leftover after parsing attributes in process `syz.1.985'. [ 314.282244][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 314.410001][ T5893] usb 1-1: USB disconnect, device number 52 [ 314.449596][ T50] usbhid 4-1:0.0: can't add hid device: -71 [ 314.455653][ T50] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 314.587108][ T50] usb 4-1: USB disconnect, device number 55 [ 314.617316][ T975] usb 3-1: config 0 has no interfaces? [ 314.679481][ T975] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 314.698807][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.743889][ T975] usb 3-1: Product: syz [ 314.791417][ T975] usb 3-1: Manufacturer: syz [ 314.796115][ T975] usb 3-1: SerialNumber: syz [ 314.836970][ T975] usb 3-1: config 0 descriptor?? [ 315.348995][ T975] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 315.722845][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 315.731427][ T975] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 315.846841][ T975] usb 4-1: config 0 has no interfaces? [ 315.899598][ T8947] bridge0: port 1(team0) entered blocking state [ 315.916548][ T975] usb 4-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 315.957679][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.976159][ T8947] bridge0: port 1(team0) entered disabled state [ 315.983182][ T8947] team0: entered allmulticast mode [ 315.993695][ T8947] team0: entered promiscuous mode [ 316.039920][ T975] usb 4-1: Product: syz [ 316.044300][ T975] usb 4-1: Manufacturer: syz [ 316.078167][ T975] usb 4-1: SerialNumber: syz [ 316.112276][ T975] usb 4-1: config 0 descriptor?? [ 316.458536][ T8957] "syz.4.996" (8957) uses obsolete ecb(arc4) skcipher [ 316.494940][ T975] usb 4-1: USB disconnect, device number 56 [ 316.558199][ T5945] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 316.649645][ T8960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.731602][ T8958] netlink: 36 bytes leftover after parsing attributes in process `syz.4.996'. [ 316.825763][ T5945] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 316.863541][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.875712][ T5945] usb 2-1: Product: syz [ 316.884738][ T5945] usb 2-1: Manufacturer: syz [ 316.892351][ T5945] usb 2-1: SerialNumber: syz [ 316.916869][ T5945] usb 2-1: config 0 descriptor?? [ 316.986788][ T5945] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 317.235224][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.244020][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.308490][ T5896] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 317.368306][ T975] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 317.437166][ T5894] usb 3-1: USB disconnect, device number 71 [ 317.462137][ T5896] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.477224][ T5896] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 317.512862][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.549368][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 317.553773][ T5896] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.565040][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 317.597246][ T975] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 317.614282][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.633086][ T975] usb 4-1: Product: syz [ 317.637776][ T975] usb 4-1: Manufacturer: syz [ 317.644933][ T5896] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.647305][ T975] usb 4-1: SerialNumber: syz [ 317.654447][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.679239][ T975] usb 4-1: config 0 descriptor?? [ 317.688244][ T5896] usb 1-1: Product: syz [ 317.693981][ T5896] usb 1-1: Manufacturer: syz [ 317.716623][ T5896] cdc_wdm 1-1:1.0: skipping garbage [ 317.722274][ T5896] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 317.904653][ T8965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.913647][ T8965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.918224][ T5894] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 317.939272][ T5896] usb 1-1: USB disconnect, device number 53 [ 317.945107][ T975] ath6kl: Failed to submit usb control message: -71 [ 317.953812][ T5893] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 317.966309][ T975] ath6kl: unable to send the bmi data to the device: -71 [ 317.975947][ T975] ath6kl: Unable to send get target info: -71 [ 317.995831][ T975] ath6kl: Failed to init ath6kl core: -71 [ 318.005621][ T975] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 318.029390][ T975] usb 4-1: USB disconnect, device number 57 [ 318.080004][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 318.087654][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 318.103140][ T5894] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 318.112705][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.122411][ T5894] usb 3-1: Product: syz [ 318.126715][ T5894] usb 3-1: Manufacturer: syz [ 318.131761][ T5894] usb 3-1: SerialNumber: syz [ 318.139927][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.152061][ T5894] usb 3-1: config 0 descriptor?? [ 318.158433][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.172673][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.186129][ T5893] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.195631][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.210974][ T5893] usb 5-1: config 0 descriptor?? [ 318.380873][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.389938][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.412541][ T5945] usb 2-1: USB disconnect, device number 56 [ 318.441068][ T5894] ath6kl: Failed to submit usb control message: -71 [ 318.453407][ T5894] ath6kl: unable to send the bmi data to the device: -71 [ 318.464745][ T5894] ath6kl: Unable to send get target info: -71 [ 318.484838][ T5894] ath6kl: Failed to init ath6kl core: -71 [ 318.496580][ T5894] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 318.547085][ T5894] usb 3-1: USB disconnect, device number 72 [ 318.710180][ T8978] FAULT_INJECTION: forcing a failure. [ 318.710180][ T8978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.725033][ T8978] CPU: 1 UID: 0 PID: 8978 Comm: syz.3.1003 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 318.725063][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.725077][ T8978] Call Trace: [ 318.725085][ T8978] [ 318.725094][ T8978] dump_stack_lvl+0x241/0x360 [ 318.725132][ T8978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.725162][ T8978] ? __pfx__printk+0x10/0x10 [ 318.725191][ T8978] should_fail_ex+0x424/0x570 [ 318.725216][ T8978] _copy_to_user+0x31/0xb0 [ 318.725249][ T8978] simple_read_from_buffer+0xc4/0x170 [ 318.725285][ T8978] proc_fail_nth_read+0x1ef/0x260 [ 318.725312][ T8978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.725331][ T8978] ? rw_verify_area+0x246/0x630 [ 318.725347][ T8978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.725364][ T8978] vfs_read+0x21f/0xb90 [ 318.725396][ T8978] ? __pfx___mutex_lock+0x10/0x10 [ 318.725424][ T8978] ? __pfx_vfs_read+0x10/0x10 [ 318.725450][ T8978] ? __fget_files+0x2a/0x420 [ 318.725470][ T8978] ? __fget_files+0x39d/0x420 [ 318.725482][ T8978] ? __fget_files+0x2a/0x420 [ 318.725502][ T8978] ksys_read+0x19d/0x2d0 [ 318.725520][ T8978] ? __pfx_ksys_read+0x10/0x10 [ 318.725553][ T8978] ? do_syscall_64+0xb6/0x230 [ 318.725582][ T8978] do_syscall_64+0xf3/0x230 [ 318.725607][ T8978] ? clear_bhb_loop+0x45/0xa0 [ 318.725635][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.725650][ T8978] RIP: 0033:0x7f677cd8bb7c [ 318.725663][ T8978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 318.725676][ T8978] RSP: 002b:00007f677dc25030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.725701][ T8978] RAX: ffffffffffffffda RBX: 00007f677cfa5fa0 RCX: 00007f677cd8bb7c [ 318.725717][ T8978] RDX: 000000000000000f RSI: 00007f677dc250a0 RDI: 0000000000000004 [ 318.725729][ T8978] RBP: 00007f677dc25090 R08: 0000000000000000 R09: 0000000000000000 [ 318.725741][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.725753][ T8978] R13: 0000000000000000 R14: 00007f677cfa5fa0 R15: 00007f677d0cfa28 [ 318.725782][ T8978] [ 318.955379][ T5893] usbhid 5-1:0.0: can't add hid device: -71 [ 318.965740][ T5893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 318.977768][ T5893] usb 5-1: USB disconnect, device number 57 [ 319.076231][ T5945] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 319.228014][ T8986] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 319.229007][ T50] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 319.239005][ T8986] macvlan2: entered promiscuous mode [ 319.246492][ T5945] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 319.258590][ T5945] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 319.269503][ T5945] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 319.273703][ T8986] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 319.282649][ T5945] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.313973][ T5945] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 319.344255][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 319.353861][ T5945] usb 1-1: Product: syz [ 319.383654][ T5945] usb 1-1: Manufacturer: syz [ 319.391386][ T50] usb 4-1: Using ep0 maxpacket: 16 [ 319.401989][ T50] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 319.410632][ T50] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 319.422087][ T50] usb 4-1: config 4 has no interface number 0 [ 319.454437][ T5945] cdc_wdm 1-1:1.0: skipping garbage [ 319.467763][ T50] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 319.487918][ T5945] cdc_wdm 1-1:1.0: skipping garbage [ 319.503744][ T5945] cdc_wdm 1-1:1.0: skipping garbage [ 319.548361][ T5896] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 319.563288][ T5945] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 319.578813][ T50] usb 4-1: config 4 interface 51 has no altsetting 0 [ 319.633437][ T50] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 319.656517][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.748195][ T5896] usb 2-1: device descriptor read/64, error -71 [ 319.775260][ T50] usb 4-1: Product: syz [ 319.805079][ T50] usb 4-1: Manufacturer: syz [ 319.816604][ T50] usb 4-1: SerialNumber: syz [ 319.837843][ T50] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 319.899629][ T5894] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 319.998306][ T5896] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 320.028613][ T5893] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 320.128144][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 320.135289][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 320.147725][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 320.161484][ T5896] usb 2-1: device descriptor read/64, error -71 [ 320.163922][ T5894] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 320.177470][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.185615][ T5894] usb 3-1: Product: syz [ 320.192006][ T5893] usb 5-1: no configurations [ 320.196627][ T5893] usb 5-1: can't read configurations, error -22 [ 320.215893][ T5894] usb 3-1: Manufacturer: syz [ 320.234174][ T5894] usb 3-1: SerialNumber: syz [ 320.256055][ T5894] usb 3-1: config 0 descriptor?? [ 320.268516][ T5896] usb usb2-port1: attempt power cycle [ 320.276778][ T5894] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 320.338236][ T5893] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 320.471063][ T8992] IPVS: stopping backup sync thread 8998 ... [ 320.471941][ T8998] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 320.488975][ T5893] usb 5-1: no configurations [ 320.497140][ T5893] usb 5-1: can't read configurations, error -22 [ 320.504821][ T5893] usb usb5-port1: attempt power cycle [ 320.523009][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.628719][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.718370][ T5896] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 320.750617][ T5894] usb 4-1: USB disconnect, device number 58 [ 320.782319][ T5896] usb 2-1: device descriptor read/8, error -71 [ 320.868290][ T5893] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 320.902088][ T5893] usb 5-1: no configurations [ 320.907198][ T5893] usb 5-1: can't read configurations, error -22 [ 321.028363][ T5896] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 321.048199][ T5893] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 321.056699][ T5896] usb 2-1: device descriptor read/8, error -71 [ 321.103066][ T5893] usb 5-1: no configurations [ 321.107897][ T5893] usb 5-1: can't read configurations, error -22 [ 321.118370][ T5893] usb usb5-port1: unable to enumerate USB device [ 321.188575][ T5896] usb usb2-port1: unable to enumerate USB device [ 321.207994][ T5896] usb 3-1: USB disconnect, device number 73 [ 321.663454][ T9005] FAULT_INJECTION: forcing a failure. [ 321.663454][ T9005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.678001][ T5893] usb 1-1: USB disconnect, device number 54 [ 321.808255][ T9005] CPU: 0 UID: 0 PID: 9005 Comm: syz.2.1010 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 321.808278][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.808287][ T9005] Call Trace: [ 321.808293][ T9005] [ 321.808300][ T9005] dump_stack_lvl+0x241/0x360 [ 321.808335][ T9005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.808357][ T9005] ? __pfx__printk+0x10/0x10 [ 321.808386][ T9005] should_fail_ex+0x424/0x570 [ 321.808406][ T9005] _copy_to_user+0x31/0xb0 [ 321.808430][ T9005] simple_read_from_buffer+0xc4/0x170 [ 321.808455][ T9005] proc_fail_nth_read+0x1ef/0x260 [ 321.808473][ T9005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.808491][ T9005] ? rw_verify_area+0x246/0x630 [ 321.808507][ T9005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.808524][ T9005] vfs_read+0x21f/0xb90 [ 321.808544][ T9005] ? __pfx___mutex_lock+0x10/0x10 [ 321.808567][ T9005] ? __pfx_vfs_read+0x10/0x10 [ 321.808585][ T9005] ? __fget_files+0x2a/0x420 [ 321.808600][ T9005] ? __fget_files+0x39d/0x420 [ 321.808612][ T9005] ? __fget_files+0x2a/0x420 [ 321.808632][ T9005] ksys_read+0x19d/0x2d0 [ 321.808650][ T9005] ? __pfx_ksys_read+0x10/0x10 [ 321.808671][ T9005] ? do_syscall_64+0xb6/0x230 [ 321.808692][ T9005] do_syscall_64+0xf3/0x230 [ 321.808711][ T9005] ? clear_bhb_loop+0x45/0xa0 [ 321.808729][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.808743][ T9005] RIP: 0033:0x7ff05af8bb7c [ 321.808757][ T9005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.808770][ T9005] RSP: 002b:00007ff05bd06030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.808786][ T9005] RAX: ffffffffffffffda RBX: 00007ff05b1a5fa0 RCX: 00007ff05af8bb7c [ 321.808797][ T9005] RDX: 000000000000000f RSI: 00007ff05bd060a0 RDI: 0000000000000004 [ 321.808806][ T9005] RBP: 00007ff05bd06090 R08: 0000000000000000 R09: 0000000000000000 [ 321.808815][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.808823][ T9005] R13: 0000000000000000 R14: 00007ff05b1a5fa0 R15: 00007ff05b2cfa28 [ 321.808845][ T9005] [ 322.311622][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 322.476037][ T9] usb 4-1: config 0 has no interfaces? [ 322.547728][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 322.557417][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.592504][ T9] usb 4-1: Product: syz [ 322.768443][ T9] usb 4-1: Manufacturer: syz [ 322.780298][ T9015] netlink: 'syz.2.1014': attribute type 16 has an invalid length. [ 322.791926][ T9] usb 4-1: SerialNumber: syz [ 322.808910][ T9] usb 4-1: config 0 descriptor?? [ 322.822580][ T9015] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1014'. [ 322.992543][ T9023] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1018'. [ 323.288136][ T5894] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 323.543916][ T9031] FAULT_INJECTION: forcing a failure. [ 323.543916][ T9031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.557773][ T9031] CPU: 1 UID: 0 PID: 9031 Comm: syz.0.1019 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 323.557801][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 323.557815][ T9031] Call Trace: [ 323.557824][ T9031] [ 323.557832][ T9031] dump_stack_lvl+0x241/0x360 [ 323.557872][ T9031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.557903][ T9031] ? __pfx__printk+0x10/0x10 [ 323.557947][ T9031] should_fail_ex+0x424/0x570 [ 323.557975][ T9031] _copy_from_user+0x2d/0xb0 [ 323.558007][ T9031] copy_msghdr_from_user+0xb3/0x580 [ 323.558048][ T9031] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 323.558094][ T9031] do_recvmmsg+0x3bf/0xab0 [ 323.558132][ T9031] ? __pfx_do_recvmmsg+0x10/0x10 [ 323.558174][ T9031] ? rcu_read_lock_any_held+0xbb/0x160 [ 323.558204][ T9031] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 323.558236][ T9031] ? vfs_write+0xb29/0xd10 [ 323.558271][ T9031] ? ksys_write+0x24e/0x2d0 [ 323.558299][ T9031] ? __mutex_unlock_slowpath+0x229/0x800 [ 323.558338][ T9031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 323.558365][ T9031] ? __fget_files+0x2a/0x420 [ 323.558408][ T9031] __x64_sys_recvmmsg+0x1ab/0x260 [ 323.558437][ T9031] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 323.558469][ T9031] ? do_syscall_64+0xb6/0x230 [ 323.558499][ T9031] do_syscall_64+0xf3/0x230 [ 323.558526][ T9031] ? clear_bhb_loop+0x45/0xa0 [ 323.558551][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.558572][ T9031] RIP: 0033:0x7ff60838d169 [ 323.558591][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.558609][ T9031] RSP: 002b:00007ff60917c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 323.558630][ T9031] RAX: ffffffffffffffda RBX: 00007ff6085a6160 RCX: 00007ff60838d169 [ 323.558645][ T9031] RDX: 000000000000045b RSI: 0000200000008880 RDI: 0000000000000006 [ 323.558656][ T9031] RBP: 00007ff60917c090 R08: 0000000000000000 R09: 0000000000000000 [ 323.558666][ T9031] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 323.558676][ T9031] R13: 0000000000000000 R14: 00007ff6085a6160 R15: 00007ff6086cfa28 [ 323.558700][ T9031] [ 323.851002][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.861410][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 323.950719][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 324.053300][ T9035] team0: Device gtp0 is up. Set it down before adding it as a team port [ 324.068198][ T50] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 324.087226][ T5894] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 324.106343][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.288612][ T5894] usb 5-1: Product: syz [ 324.428345][ T5894] usb 5-1: Manufacturer: syz [ 324.443492][ T5894] usb 5-1: SerialNumber: syz [ 324.494473][ T50] usb 2-1: config 4 has an invalid interface number: 97 but max is 0 [ 324.511840][ T50] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 324.524269][ T5894] usb 5-1: config 0 descriptor?? [ 324.947405][ T50] usb 2-1: config 4 has no interface number 0 [ 324.960454][ T50] usb 2-1: too many endpoints for config 4 interface 97 altsetting 99: 107, using maximum allowed: 30 [ 324.989311][ T50] usb 2-1: config 4 interface 97 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 107 [ 325.006842][ T50] usb 2-1: config 4 interface 97 has no altsetting 0 [ 325.123656][ T50] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 325.372189][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.398335][ T5894] usb 5-1: USB disconnect, device number 62 [ 325.798217][ T5896] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 325.853153][ T9049] netlink: 'syz.4.1025': attribute type 3 has an invalid length. [ 325.861577][ T9049] netlink: 1648 bytes leftover after parsing attributes in process `syz.4.1025'. [ 326.024614][ T5896] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.130137][ T5896] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 326.142145][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 326.151423][ T5896] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 326.163264][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 326.174592][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 326.188533][ T5896] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 326.264131][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.313075][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.360652][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 326.373287][ T5896] usb 3-1: Product: syz [ 326.383556][ T5896] usb 3-1: Manufacturer: syz [ 326.526020][ T5945] usb 4-1: USB disconnect, device number 59 [ 326.576386][ T5896] cdc_wdm 3-1:1.0: skipping garbage [ 326.598823][ T5896] cdc_wdm 3-1:1.0: skipping garbage [ 326.614928][ T5896] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 326.626918][ T9058] FAULT_INJECTION: forcing a failure. [ 326.626918][ T9058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.665488][ T9058] CPU: 0 UID: 0 PID: 9058 Comm: syz.4.1029 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 326.665519][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.665533][ T9058] Call Trace: [ 326.665541][ T9058] [ 326.665550][ T9058] dump_stack_lvl+0x241/0x360 [ 326.665588][ T9058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.665620][ T9058] ? __pfx__printk+0x10/0x10 [ 326.665663][ T9058] should_fail_ex+0x424/0x570 [ 326.665691][ T9058] _copy_from_user+0x2d/0xb0 [ 326.665723][ T9058] move_addr_to_kernel+0x7f/0x170 [ 326.665753][ T9058] copy_msghdr_from_user+0x477/0x580 [ 326.665790][ T9058] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 326.665817][ T9058] ? __fget_files+0x2a/0x420 [ 326.665840][ T9058] ? __fget_files+0x2a/0x420 [ 326.665868][ T9058] __sys_sendmmsg+0x361/0x7b0 [ 326.665904][ T9058] ? __pfx___sys_sendmmsg+0x10/0x10 [ 326.665966][ T9058] ? rcu_read_lock_any_held+0xbb/0x160 [ 326.665995][ T9058] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 326.666028][ T9058] ? vfs_write+0xb29/0xd10 [ 326.666064][ T9058] ? ksys_write+0x24e/0x2d0 [ 326.666091][ T9058] ? __mutex_unlock_slowpath+0x229/0x800 [ 326.666153][ T9058] ? ksys_write+0x275/0x2d0 [ 326.666188][ T9058] __x64_sys_sendmmsg+0xa0/0xb0 [ 326.666213][ T9058] do_syscall_64+0xf3/0x230 [ 326.666239][ T9058] ? clear_bhb_loop+0x45/0xa0 [ 326.666262][ T9058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.666281][ T9058] RIP: 0033:0x7ff1db18d169 [ 326.666300][ T9058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.666318][ T9058] RSP: 002b:00007ff1dbfde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 326.666341][ T9058] RAX: ffffffffffffffda RBX: 00007ff1db3a5fa0 RCX: 00007ff1db18d169 [ 326.666356][ T9058] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000045 [ 326.666373][ T9058] RBP: 00007ff1dbfde090 R08: 0000000000000000 R09: 0000000000000000 [ 326.666385][ T9058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.666397][ T9058] R13: 0000000000000000 R14: 00007ff1db3a5fa0 R15: 00007ff1db4cfa28 [ 326.666429][ T9058] [ 327.372967][ T50] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 327.424810][ T9069] netlink: 'syz.4.1031': attribute type 16 has an invalid length. [ 327.433146][ T9069] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1031'. [ 327.788433][ T5945] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 327.950956][ T5945] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 327.970206][ T5945] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 327.997723][ T5945] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 328.025920][ T5945] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.050238][ T5945] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 328.060098][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 328.075499][ T5945] usb 1-1: Product: syz [ 328.080082][ T5945] usb 1-1: Manufacturer: syz [ 328.120285][ T5945] cdc_wdm 1-1:1.0: skipping garbage [ 328.126171][ T5945] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 328.322385][ T5945] usb 1-1: USB disconnect, device number 55 [ 328.569024][ T5894] usb 3-1: USB disconnect, device number 74 [ 328.569126][ T50] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 328.679968][ T50] stv0680 2-1:4.97: STV(e): camera ping failed!! [ 328.707754][ T50] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 328.742592][ T50] stv0680 2-1:4.97: last error: 0, command = 0x0 [ 328.798450][ T50] usb 2-1: USB disconnect, device number 61 [ 328.828459][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 328.992638][ T24] usb 5-1: config 0 has no interfaces? [ 329.004495][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 329.016602][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.024954][ T24] usb 5-1: Product: syz [ 329.029283][ T24] usb 5-1: Manufacturer: syz [ 329.033882][ T24] usb 5-1: SerialNumber: syz [ 329.042935][ T24] usb 5-1: config 0 descriptor?? [ 329.138651][ T5853] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 329.641688][ T9108] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 330.452889][ T9124] loop8: detected capacity change from 0 to 1 [ 330.494927][ T9124] Dev loop8: unable to read RDB block 1 [ 330.510512][ T9124] loop8: unable to read partition table [ 330.522328][ T9125] futex_wake_op: syz.0.1042 tries to shift op by -33; fix this program [ 330.531092][ T9124] loop8: partition table beyond EOD, truncated [ 330.537376][ T9124] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 330.707308][ T9125] netdevsim netdevsim0: Direct firmware load for . [ 330.707308][ T9125] failed with error -2 [ 330.718008][ T9125] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 330.718008][ T9125] [ 330.912068][ T9130] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 330.919090][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 330.998756][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 331.051091][ T9139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 331.120992][ T9130] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 331.127649][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 331.137315][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 331.148264][ T9] vhci_hcd: vhci_device speed not set [ 331.157088][ T9135] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(17) [ 331.163716][ T9135] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 331.179104][ T9130] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(24) [ 331.185738][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 331.194358][ T9135] vhci_hcd vhci_hcd.0: Device attached [ 331.201339][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 331.209193][ T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 331.226079][ T9130] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(19) [ 331.232717][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 331.254153][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 331.273188][ T9135] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 331.303142][ T9130] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 331.317236][ T9130] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 331.348954][ T5894] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 331.379718][ T9143] vhci_hcd: connection closed [ 331.382173][ T1040] vhci_hcd: stop threads [ 331.394959][ T9141] vhci_hcd: connection closed [ 331.395614][ T9145] vhci_hcd: connection closed [ 331.400927][ T9136] vhci_hcd: connection closed [ 331.420965][ T9132] vhci_hcd: connection reset by peer [ 331.453097][ T1040] vhci_hcd: release socket [ 331.475666][ T1040] vhci_hcd: disconnect device [ 331.492347][ T1040] vhci_hcd: stop threads [ 331.497946][ T1040] vhci_hcd: release socket [ 331.510528][ T5894] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 331.522049][ T5894] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 331.535724][ T1040] vhci_hcd: disconnect device [ 331.546788][ T1040] vhci_hcd: stop threads [ 331.553808][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.566263][ T1040] vhci_hcd: release socket [ 331.584456][ T1040] vhci_hcd: disconnect device [ 331.599457][ T5894] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 331.635821][ T1040] vhci_hcd: stop threads [ 331.640608][ T1040] vhci_hcd: release socket [ 331.655800][ T1040] vhci_hcd: disconnect device [ 331.661175][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 331.681016][ T1040] vhci_hcd: stop threads [ 331.699300][ T1040] vhci_hcd: release socket [ 331.703891][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 331.715529][ T1040] vhci_hcd: disconnect device [ 331.725132][ T5894] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.734754][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.750744][ T5894] usb 2-1: Product: syz [ 331.765311][ T5894] usb 2-1: Manufacturer: syz [ 331.833643][ T5894] cdc_wdm 2-1:1.0: skipping garbage [ 331.839669][ T5894] cdc_wdm 2-1:1.0: skipping garbage [ 331.850670][ T9149] FAULT_INJECTION: forcing a failure. [ 331.850670][ T9149] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.865364][ T5894] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 331.927293][ T5893] usb 5-1: USB disconnect, device number 63 [ 331.956584][ T9149] CPU: 0 UID: 0 PID: 9149 Comm: syz.4.1051 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 331.956623][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.956638][ T9149] Call Trace: [ 331.956646][ T9149] [ 331.956655][ T9149] dump_stack_lvl+0x241/0x360 [ 331.956693][ T9149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.956724][ T9149] ? __pfx__printk+0x10/0x10 [ 331.956765][ T9149] should_fail_ex+0x424/0x570 [ 331.956793][ T9149] prepare_alloc_pages+0x220/0x610 [ 331.956825][ T9149] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 331.956853][ T9149] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 331.956877][ T9149] ? rep_movs_alternative+0x4a/0x90 [ 331.956903][ T9149] ? __mutex_lock+0x380/0x10c0 [ 331.956941][ T9149] alloc_pages_mpol+0x339/0x690 [ 331.956976][ T9149] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 331.957011][ T9149] ? page_copy_sane+0x46/0x260 [ 331.957041][ T9149] alloc_pages_noprof+0x121/0x190 [ 331.957073][ T9149] anon_pipe_write+0xc55/0x14f0 [ 331.957104][ T9149] ? __pfx_aa_file_perm+0x10/0x10 [ 331.957155][ T9149] ? __pfx_anon_pipe_write+0x10/0x10 [ 331.957184][ T9149] ? end_current_label_crit_section+0x151/0x180 [ 331.957214][ T9149] ? common_file_perm+0x1a6/0x210 [ 331.957251][ T9149] fifo_pipe_write+0x28/0x490 [ 331.957285][ T9149] vfs_write+0x70f/0xd10 [ 331.957316][ T9149] ? __pfx_fifo_pipe_write+0x10/0x10 [ 331.957347][ T9149] ? __pfx_vfs_write+0x10/0x10 [ 331.957374][ T9149] ? __fget_files+0x2a/0x420 [ 331.957396][ T9149] ? __fget_files+0x2a/0x420 [ 331.957426][ T9149] ksys_write+0x19d/0x2d0 [ 331.957453][ T9149] ? __pfx_ksys_write+0x10/0x10 [ 331.957483][ T9149] ? do_syscall_64+0xb6/0x230 [ 331.957510][ T9149] do_syscall_64+0xf3/0x230 [ 331.957535][ T9149] ? clear_bhb_loop+0x45/0xa0 [ 331.957558][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.957578][ T9149] RIP: 0033:0x7ff1db18d169 [ 331.957596][ T9149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.957624][ T9149] RSP: 002b:00007ff1dbfbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 331.957646][ T9149] RAX: ffffffffffffffda RBX: 00007ff1db3a6080 RCX: 00007ff1db18d169 [ 331.957661][ T9149] RDX: 00000000fffffec2 RSI: 0000200000000200 RDI: 0000000000000003 [ 331.957674][ T9149] RBP: 00007ff1dbfbd090 R08: 0000000000000000 R09: 0000000000000000 [ 331.957687][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.957699][ T9149] R13: 0000000000000001 R14: 00007ff1db3a6080 R15: 00007ff1db4cfa28 [ 331.957731][ T9149] [ 332.501480][ T9157] FAULT_INJECTION: forcing a failure. [ 332.501480][ T9157] name failslab, interval 1, probability 0, space 0, times 0 [ 332.524705][ T9157] CPU: 0 UID: 0 PID: 9157 Comm: syz.3.1055 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 332.524735][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.524748][ T9157] Call Trace: [ 332.524757][ T9157] [ 332.524766][ T9157] dump_stack_lvl+0x241/0x360 [ 332.524806][ T9157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.524837][ T9157] ? __pfx__printk+0x10/0x10 [ 332.524866][ T9157] ? __lock_acquire+0xad5/0xd80 [ 332.524901][ T9157] should_fail_ex+0x424/0x570 [ 332.524930][ T9157] should_failslab+0xac/0x100 [ 332.524962][ T9157] kmem_cache_alloc_noprof+0x78/0x390 [ 332.524990][ T9157] ? skb_clone+0x20c/0x390 [ 332.525020][ T9157] skb_clone+0x20c/0x390 [ 332.525049][ T9157] __netlink_deliver_tap+0x3c4/0x7f0 [ 332.525092][ T9157] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.525122][ T9157] netlink_deliver_tap+0x19d/0x1b0 [ 332.525154][ T9157] netlink_unicast+0x7c6/0x9a0 [ 332.525191][ T9157] ? __pfx_netlink_unicast+0x10/0x10 [ 332.525222][ T9157] ? skb_put+0x114/0x1f0 [ 332.525248][ T9157] netlink_sendmsg+0x8c3/0xcd0 [ 332.525293][ T9157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.525329][ T9157] ? aa_sock_msg_perm+0x91/0x160 [ 332.525365][ T9157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.525394][ T9157] __sock_sendmsg+0x221/0x270 [ 332.525427][ T9157] ____sys_sendmsg+0x523/0x860 [ 332.525460][ T9157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.525481][ T9157] ? __fget_files+0x2a/0x420 [ 332.525505][ T9157] ? __fget_files+0x2a/0x420 [ 332.525535][ T9157] __sys_sendmsg+0x271/0x360 [ 332.525564][ T9157] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.525647][ T9157] ? do_syscall_64+0xb6/0x230 [ 332.525685][ T9157] do_syscall_64+0xf3/0x230 [ 332.525712][ T9157] ? clear_bhb_loop+0x45/0xa0 [ 332.525738][ T9157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.525757][ T9157] RIP: 0033:0x7f677cd8d169 [ 332.525775][ T9157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.525792][ T9157] RSP: 002b:00007f677dc25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.525813][ T9157] RAX: ffffffffffffffda RBX: 00007f677cfa5fa0 RCX: 00007f677cd8d169 [ 332.525828][ T9157] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 332.525842][ T9157] RBP: 00007f677dc25090 R08: 0000000000000000 R09: 0000000000000000 [ 332.525856][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.525869][ T9157] R13: 0000000000000000 R14: 00007f677cfa5fa0 R15: 00007f677d0cfa28 [ 332.525900][ T9157] [ 333.041635][ T9164] FAULT_INJECTION: forcing a failure. [ 333.041635][ T9164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 333.061992][ T9164] CPU: 0 UID: 0 PID: 9164 Comm: syz.3.1057 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 333.062024][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.062037][ T9164] Call Trace: [ 333.062045][ T9164] [ 333.062055][ T9164] dump_stack_lvl+0x241/0x360 [ 333.062093][ T9164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.062124][ T9164] ? __pfx__printk+0x10/0x10 [ 333.062165][ T9164] should_fail_ex+0x424/0x570 [ 333.062194][ T9164] prepare_alloc_pages+0x220/0x610 [ 333.062226][ T9164] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 333.062254][ T9164] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 333.062284][ T9164] ? is_bpf_text_address+0x26/0x2a0 [ 333.062319][ T9164] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 333.062357][ T9164] alloc_pages_mpol+0x339/0x690 [ 333.062393][ T9164] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 333.062432][ T9164] alloc_pages_noprof+0x121/0x190 [ 333.062466][ T9164] pte_alloc_one+0x1e/0x160 [ 333.062494][ T9164] __pte_alloc+0x7b/0x240 [ 333.062521][ T9164] ? __pfx___pte_alloc+0x10/0x10 [ 333.062545][ T9164] ? kasan_save_track+0x51/0x80 [ 333.062569][ T9164] ? __kasan_slab_alloc+0x66/0x80 [ 333.062592][ T9164] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 333.062626][ T9164] ? __pmd_alloc+0x118/0x440 [ 333.062660][ T9164] handle_pte_fault+0x4ede/0x61c0 [ 333.062692][ T9164] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 333.062736][ T9164] ? __pfx_handle_pte_fault+0x10/0x10 [ 333.062758][ T9164] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 333.062795][ T9164] ? __lock_acquire+0xad5/0xd80 [ 333.062823][ T9164] ? do_raw_spin_lock+0x151/0x370 [ 333.062862][ T9164] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.062900][ T9164] ? _raw_spin_unlock+0x28/0x50 [ 333.062922][ T9164] ? __pmd_alloc+0x37f/0x440 [ 333.062954][ T9164] ? __pfx___pmd_alloc+0x10/0x10 [ 333.062996][ T9164] handle_mm_fault+0x1129/0x1bf0 [ 333.063026][ T9164] ? mt_find+0x28a/0x8f0 [ 333.063081][ T9164] ? __pfx_handle_mm_fault+0x10/0x10 [ 333.063137][ T9164] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 333.063170][ T9164] exc_page_fault+0x2bb/0x920 [ 333.063204][ T9164] asm_exc_page_fault+0x26/0x30 [ 333.063224][ T9164] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 333.063245][ T9164] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 333.063263][ T9164] RSP: 0018:ffffc90004bafc90 EFLAGS: 00050202 [ 333.063283][ T9164] RAX: ffffffff850507ff RBX: 0000200000000002 RCX: 0000000000000002 [ 333.063298][ T9164] RDX: 0000000000000000 RSI: ffffffff8c9a8740 RDI: 0000200000000000 [ 333.063313][ T9164] RBP: ffffffffffffffb7 R08: 0000000000000001 R09: fffffbfff19350e8 [ 333.063328][ T9164] R10: dffffc0000000000 R11: fffffbfff19350e8 R12: 0000000000000002 [ 333.063344][ T9164] R13: 00007ffffffff000 R14: ffffffff8c9a8740 R15: 0000200000000000 [ 333.063369][ T9164] ? check_zeroed_user+0xf/0x190 [ 333.063408][ T9164] _copy_to_user+0x8b/0xb0 [ 333.063442][ T9164] keyctl_capabilities+0x52/0x170 [ 333.063473][ T9164] __se_sys_keyctl+0x413/0x940 [ 333.063503][ T9164] ? __pfx___se_sys_keyctl+0x10/0x10 [ 333.063535][ T9164] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.063561][ T9164] ? __fget_files+0x2a/0x420 [ 333.063585][ T9164] ? __fget_files+0x2a/0x420 [ 333.063617][ T9164] ? fput+0x9b/0xd0 [ 333.063637][ T9164] ? ksys_write+0x275/0x2d0 [ 333.063674][ T9164] ? __x64_sys_keyctl+0x20/0xc0 [ 333.063703][ T9164] do_syscall_64+0xf3/0x230 [ 333.063731][ T9164] ? clear_bhb_loop+0x45/0xa0 [ 333.063756][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.063776][ T9164] RIP: 0033:0x7f677cd8d169 [ 333.063795][ T9164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.063813][ T9164] RSP: 002b:00007f677dc25038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 333.063834][ T9164] RAX: ffffffffffffffda RBX: 00007f677cfa5fa0 RCX: 00007f677cd8d169 [ 333.063850][ T9164] RDX: ffffffffffffffb7 RSI: 0000200000000000 RDI: 000000000000001f [ 333.063864][ T9164] RBP: 00007f677dc25090 R08: 0000000000000000 R09: 0000000000000000 [ 333.063877][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.063889][ T9164] R13: 0000000000000001 R14: 00007f677cfa5fa0 R15: 00007f677d0cfa28 [ 333.063921][ T9164] [ 333.548522][ T5893] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 333.629196][ T5894] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 333.677863][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 333.693699][ T9168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'. [ 333.703247][ T9168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'. [ 333.715725][ T9168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'. [ 333.724832][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 333.732194][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.743261][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.751454][ T9174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'. [ 333.753308][ T5893] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 333.772293][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.788390][ T9175] delete_channel: no stack [ 333.792427][ T5893] usb 5-1: config 0 descriptor?? [ 333.809510][ T9174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'. [ 333.810240][ T5894] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.834061][ T5894] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 333.843243][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 333.851411][ T5894] usb 3-1: Product: syz [ 333.855620][ T5894] usb 3-1: Manufacturer: syz [ 333.860300][ T5894] usb 3-1: SerialNumber: syz [ 333.867621][ T5894] usb 3-1: config 0 descriptor?? [ 333.877196][ T5894] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 333.885235][ T5894] pctv452e: pctv452e_power_ctrl: 1 [ 333.885235][ T5894] [ 333.892664][ T5894] usb 3-1: selecting invalid altsetting 3 [ 333.898493][ T5894] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 333.898493][ T5894] [ 333.908879][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 333.918732][ T5894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 333.933611][ T5894] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 334.018677][ T9174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'. [ 334.116603][ T9168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'. [ 334.125880][ T9168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'. [ 334.149410][ T5895] usb 3-1: USB disconnect, device number 75 [ 334.198296][ T9168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'. [ 334.250185][ T975] usb 2-1: USB disconnect, device number 62 [ 334.295633][ T5893] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0011/input/input32 [ 334.338209][ T5894] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 334.438794][ T5893] appleir 0003:05AC:8241.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 334.486052][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.512473][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.696708][ T5894] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.758245][ T5894] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 334.774808][ T5894] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.832251][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.878671][ T9178] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 334.911461][ T5894] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.988205][ T5893] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 335.145569][ T5894] usb 5-1: USB disconnect, device number 64 [ 335.167767][ T5893] usb 2-1: config 0 has no interfaces? [ 335.328754][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 335.374693][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.396173][ T5893] usb 2-1: Product: syz [ 335.461299][ T5893] usb 2-1: Manufacturer: syz [ 335.493983][ T5893] usb 2-1: SerialNumber: syz [ 335.540226][ T5893] usb 2-1: config 0 descriptor?? [ 335.552953][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.716200][ T9196] team0: Device gtp0 is up. Set it down before adding it as a team port [ 335.739100][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.518441][ T9] vhci_hcd: vhci_device speed not set [ 336.868287][ T5893] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 337.018236][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 337.026734][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.037925][ T5894] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 337.056676][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.096839][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 337.131789][ T975] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 337.223784][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 337.301300][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 337.312833][ T5894] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 337.327337][ T5894] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 337.340130][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.354561][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 337.417966][ T5894] usb 5-1: Product: syz [ 337.436553][ T5894] usb 5-1: Manufacturer: syz [ 337.449220][ T5893] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 337.470736][ T5894] usb 5-1: SerialNumber: syz [ 337.475495][ T5893] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 337.508212][ T975] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 337.527737][ T5894] usb 5-1: config 0 descriptor?? [ 337.555253][ T5893] usb 3-1: Manufacturer: syz [ 337.565364][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.580001][ T9209] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 337.613957][ T5893] usb 3-1: config 0 descriptor?? [ 337.622395][ T5894] hub 5-1:0.0: bad descriptor, ignoring hub [ 337.632816][ T24] usb 1-1: USB disconnect, device number 56 [ 337.639609][ T975] usb 4-1: Product: syz [ 337.646416][ T5894] hub 5-1:0.0: probe with driver hub failed with error -5 [ 337.671197][ T975] usb 4-1: Manufacturer: syz [ 337.723826][ T975] usb 4-1: SerialNumber: syz [ 337.779042][ T975] usb 4-1: config 0 descriptor?? [ 337.847626][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 337.847642][ T30] audit: type=1326 audit(1744598469.705:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.1068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1db18d169 code=0x0 [ 337.951022][ T975] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 338.069216][ T5894] usb 5-1: USB disconnect, device number 65 [ 338.118669][ T50] usb 2-1: USB disconnect, device number 63 [ 338.178233][ T5893] rc_core: IR keymap rc-hauppauge not found [ 338.184502][ T5893] Registered IR keymap rc-empty [ 338.204954][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.248313][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.323336][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 338.422848][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 338.468304][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 338.480924][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.518907][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.554552][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.668665][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.672002][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 338.728356][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.757999][ T24] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 338.790452][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 338.791503][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.820543][ T24] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 338.878225][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.879145][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 338.922161][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.953102][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 338.970723][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 339.009218][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 339.027836][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 339.043560][ T5893] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 339.064343][ T5893] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 339.065166][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 339.094990][ T5893] usb 3-1: USB disconnect, device number 76 [ 339.129111][ T24] usb 5-1: Product: syz [ 339.164918][ T24] usb 5-1: Manufacturer: syz [ 339.191350][ T975] gspca_sunplus: reg_r err -71 [ 339.197597][ T975] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 339.203012][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 339.232133][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 339.250813][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 339.272051][ T975] usb 4-1: USB disconnect, device number 60 [ 339.360576][ T9233] netlink: 'syz.0.1075': attribute type 16 has an invalid length. [ 339.382020][ T9233] __nla_validate_parse: 6 callbacks suppressed [ 339.382040][ T9233] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1075'. [ 340.068248][ T975] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 340.240288][ T975] usb 4-1: config 0 has no interfaces? [ 340.256114][ T975] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 340.553593][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.575987][ T975] usb 4-1: config 0 descriptor?? [ 340.789066][ T5893] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 340.978131][ T5893] usb 2-1: config 0 has no interfaces? [ 341.004409][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 341.025863][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.047338][ T5893] usb 2-1: Product: syz [ 341.051608][ T5893] usb 2-1: Manufacturer: syz [ 341.066182][ T5893] usb 2-1: SerialNumber: syz [ 341.113283][ T5893] usb 2-1: config 0 descriptor?? [ 341.291723][ T24] usb 5-1: USB disconnect, device number 66 [ 342.607031][ T5893] usb 4-1: USB disconnect, device number 61 [ 343.223943][ T5896] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 343.279335][ T9285] FAULT_INJECTION: forcing a failure. [ 343.279335][ T9285] name failslab, interval 1, probability 0, space 0, times 0 [ 343.298135][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.3.1089 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 343.298165][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.298178][ T9285] Call Trace: [ 343.298188][ T9285] [ 343.298197][ T9285] dump_stack_lvl+0x241/0x360 [ 343.298235][ T9285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.298266][ T9285] ? __pfx__printk+0x10/0x10 [ 343.298294][ T9285] ? __lock_acquire+0xad5/0xd80 [ 343.298328][ T9285] should_fail_ex+0x424/0x570 [ 343.298356][ T9285] should_failslab+0xac/0x100 [ 343.298388][ T9285] kmem_cache_alloc_noprof+0x78/0x390 [ 343.298427][ T9285] ? skb_clone+0x20c/0x390 [ 343.298457][ T9285] skb_clone+0x20c/0x390 [ 343.298485][ T9285] __netlink_deliver_tap+0x3c4/0x7f0 [ 343.298529][ T9285] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.298557][ T9285] netlink_deliver_tap+0x19d/0x1b0 [ 343.298590][ T9285] netlink_unicast+0x7c6/0x9a0 [ 343.298628][ T9285] ? __pfx_netlink_unicast+0x10/0x10 [ 343.298659][ T9285] ? skb_put+0x114/0x1f0 [ 343.298685][ T9285] netlink_sendmsg+0x8c3/0xcd0 [ 343.298731][ T9285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.298768][ T9285] ? aa_sock_msg_perm+0x91/0x160 [ 343.298803][ T9285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.298833][ T9285] __sock_sendmsg+0x221/0x270 [ 343.298866][ T9285] ____sys_sendmsg+0x523/0x860 [ 343.298899][ T9285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.298920][ T9285] ? __fget_files+0x2a/0x420 [ 343.298944][ T9285] ? __fget_files+0x2a/0x420 [ 343.298974][ T9285] __sys_sendmsg+0x271/0x360 [ 343.299003][ T9285] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.299086][ T9285] ? do_syscall_64+0xb6/0x230 [ 343.299117][ T9285] do_syscall_64+0xf3/0x230 [ 343.299143][ T9285] ? clear_bhb_loop+0x45/0xa0 [ 343.299169][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.299190][ T9285] RIP: 0033:0x7f677cd8d169 [ 343.299209][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.299227][ T9285] RSP: 002b:00007f677dc25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.299251][ T9285] RAX: ffffffffffffffda RBX: 00007f677cfa5fa0 RCX: 00007f677cd8d169 [ 343.299267][ T9285] RDX: 0000000000008000 RSI: 0000200000000380 RDI: 0000000000000003 [ 343.299281][ T9285] RBP: 00007f677dc25090 R08: 0000000000000000 R09: 0000000000000000 [ 343.299295][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.299308][ T9285] R13: 0000000000000000 R14: 00007f677cfa5fa0 R15: 00007f677d0cfa28 [ 343.299340][ T9285] [ 343.697663][ T5893] usb 2-1: USB disconnect, device number 64 [ 343.777446][ T5896] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 343.786767][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.794930][ T5896] usb 1-1: Product: syz [ 343.799208][ T5896] usb 1-1: Manufacturer: syz [ 343.805184][ T5896] usb 1-1: SerialNumber: syz [ 343.819225][ T5896] usb 1-1: config 0 descriptor?? [ 343.830709][ T5896] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 344.755145][ T9305] netlink: 'syz.3.1098': attribute type 16 has an invalid length. [ 344.770550][ T9305] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1098'. [ 345.018212][ T5945] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 345.026050][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 345.144866][ T5896] gspca_sunplus: reg_r err -71 [ 345.154532][ T5896] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 345.170507][ T5896] usb 1-1: USB disconnect, device number 57 [ 345.198449][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 345.203906][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 345.213851][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 345.226248][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 345.241132][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 345.252311][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 345.262446][ T24] usb 2-1: Product: syz [ 345.262622][ T5945] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 345.276444][ T24] usb 2-1: Manufacturer: syz [ 345.281412][ T24] usb 2-1: SerialNumber: syz [ 345.286525][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 345.297088][ T24] usb 2-1: config 0 descriptor?? [ 345.302841][ T5945] usb 5-1: Product: syz [ 345.307276][ T5945] usb 5-1: Manufacturer: syz [ 345.312493][ T9311] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 345.320528][ T5945] usb 5-1: SerialNumber: syz [ 345.326570][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 345.335976][ T5945] usb 5-1: config 0 descriptor?? [ 345.343972][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 345.352090][ T9309] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 345.365322][ T5945] hub 5-1:0.0: bad descriptor, ignoring hub [ 345.381618][ T5945] hub 5-1:0.0: probe with driver hub failed with error -5 [ 345.525685][ T5945] chaoskey 5-1:0.0: Unable to register with hwrng [ 345.760253][ T5893] usb 2-1: USB disconnect, device number 65 [ 345.766547][ T975] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 345.855532][ T9331] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1106'. [ 346.125483][ T9335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1105'. [ 346.162061][ T975] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 346.172499][ T975] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 346.197137][ T975] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.206556][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.398848][ T5945] usb 5-1: USB disconnect, device number 67 [ 346.458298][ T5893] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 346.622289][ T9340] team0: Device gtp0 is of different type [ 346.665894][ T975] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 346.674935][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 346.683949][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 346.698648][ T5893] usb 2-1: config 15 has no interfaces? [ 346.718163][ T5945] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 346.719045][ T5893] usb 2-1: string descriptor 0 read error: -22 [ 346.750442][ T975] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 346.766870][ T5893] usb 2-1: New USB device found, idVendor=17a8, idProduct=0102, bcdDevice=7e.93 [ 346.787013][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.896378][ T9321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.906300][ T9321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.947799][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.996825][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 347.004829][ T5945] usb 5-1: unable to get BOS descriptor or descriptor too short [ 347.014120][ T5945] usb 5-1: config 15 has no interfaces? [ 347.028540][ T5945] usb 5-1: string descriptor 0 read error: -22 [ 347.034989][ T5945] usb 5-1: New USB device found, idVendor=17a8, idProduct=0102, bcdDevice=7e.93 [ 347.056604][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.077146][ T5893] usb 2-1: USB disconnect, device number 66 [ 347.326065][ T5945] usb 5-1: USB disconnect, device number 68 [ 347.962471][ T12] ------------[ cut here ]------------ [ 347.968840][ T12] WARNING: CPU: 0 PID: 12 at net/mac80211/mlme.c:4306 ieee80211_mgd_probe_ap_send+0x4e3/0x5c0 [ 347.979796][ T12] Modules linked in: [ 347.984107][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 347.994667][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.005629][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 348.012563][ T12] RIP: 0010:ieee80211_mgd_probe_ap_send+0x4e3/0x5c0 [ 348.019323][ T12] Code: 5d 41 5e 41 5f 5d e9 3c 89 f9 f5 e8 67 f7 0c f6 90 0f 0b 90 eb b6 e8 5c f7 0c f6 90 0f 0b 90 e9 fc fb ff ff e8 4e f7 0c f6 90 <0f> 0b 90 e9 bf fc ff ff e8 40 f7 0c f6 90 0f 0b 90 e9 30 ff ff ff [ 348.039523][ T12] RSP: 0018:ffffc90000117a80 EFLAGS: 00010293 [ 348.045667][ T12] RAX: ffffffff8bb65de2 RBX: 0000000000000001 RCX: ffff88801d6c5a00 [ 348.053739][ T12] RDX: 0000000000000000 RSI: ffffffff8e4fde18 RDI: ffffffff8ca1b520 [ 348.061864][ T12] RBP: 1ffff1100641838e R08: ffffffff8b956885 R09: ffffffff85049ef9 [ 348.070062][ T12] R10: 000000000000000c R11: ffff88801d6c5a00 R12: ffff8880320c2a22 [ 348.078233][ T12] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff8880320c0d80 [ 348.086296][ T12] FS: 0000000000000000(0000) GS:ffff888124f93000(0000) knlGS:0000000000000000 [ 348.095356][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.102062][ T12] CR2: 00002000000fd030 CR3: 000000007b13a000 CR4: 00000000003526f0 [ 348.110693][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 348.119341][ T12] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 348.127451][ T12] Call Trace: [ 348.130883][ T12] [ 348.133954][ T12] ? ieee80211_mgd_probe_ap+0x2ed/0x420 [ 348.139631][ T12] cfg80211_wiphy_work+0x2f0/0x490 [ 348.144894][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 348.150705][ T12] process_scheduled_works+0xac3/0x18e0 [ 348.156331][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.162822][ T12] ? assign_work+0x367/0x3d0 [ 348.167469][ T12] worker_thread+0x870/0xd50 [ 348.172154][ T12] ? __kthread_parkme+0x1a8/0x200 [ 348.177215][ T12] ? __pfx_worker_thread+0x10/0x10 [ 348.182433][ T12] kthread+0x7b7/0x940 [ 348.186827][ T12] ? __pfx_worker_thread+0x10/0x10 [ 348.192126][ T12] ? __pfx_kthread+0x10/0x10 [ 348.196790][ T12] ? __pfx_kthread+0x10/0x10 [ 348.201478][ T12] ? __pfx_kthread+0x10/0x10 [ 348.206709][ T12] ? __pfx_kthread+0x10/0x10 [ 348.211817][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.217136][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 348.222479][ T12] ? __pfx_kthread+0x10/0x10 [ 348.227104][ T12] ret_from_fork+0x4b/0x80 [ 348.231579][ T12] ? __pfx_kthread+0x10/0x10 [ 348.236464][ T12] ret_from_fork_asm+0x1a/0x30 [ 348.241321][ T12] [ 348.244363][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 348.251648][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 348.261896][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.272573][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 348.279011][ T12] Call Trace: [ 348.282294][ T12] [ 348.285227][ T12] dump_stack_lvl+0x241/0x360 [ 348.289932][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.295161][ T12] ? __pfx__printk+0x10/0x10 [ 348.299782][ T12] ? vscnprintf+0x5d/0x90 [ 348.304118][ T12] panic+0x349/0x880 [ 348.308031][ T12] ? __warn+0x174/0x4d0 [ 348.312320][ T12] ? __pfx_panic+0x10/0x10 [ 348.316756][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 348.321710][ T12] __warn+0x344/0x4d0 [ 348.325734][ T12] ? ieee80211_mgd_probe_ap_send+0x4e3/0x5c0 [ 348.331781][ T12] report_bug+0x2b3/0x500 [ 348.336401][ T12] ? ieee80211_mgd_probe_ap_send+0x4e3/0x5c0 [ 348.342512][ T12] ? ieee80211_mgd_probe_ap_send+0x4e3/0x5c0 [ 348.348543][ T12] ? ieee80211_mgd_probe_ap_send+0x4e5/0x5c0 [ 348.354568][ T12] handle_bug+0x89/0x170 [ 348.358934][ T12] exc_invalid_op+0x1a/0x50 [ 348.363466][ T12] asm_exc_invalid_op+0x1a/0x20 [ 348.368322][ T12] RIP: 0010:ieee80211_mgd_probe_ap_send+0x4e3/0x5c0 [ 348.374954][ T12] Code: 5d 41 5e 41 5f 5d e9 3c 89 f9 f5 e8 67 f7 0c f6 90 0f 0b 90 eb b6 e8 5c f7 0c f6 90 0f 0b 90 e9 fc fb ff ff e8 4e f7 0c f6 90 <0f> 0b 90 e9 bf fc ff ff e8 40 f7 0c f6 90 0f 0b 90 e9 30 ff ff ff [ 348.394565][ T12] RSP: 0018:ffffc90000117a80 EFLAGS: 00010293 [ 348.400649][ T12] RAX: ffffffff8bb65de2 RBX: 0000000000000001 RCX: ffff88801d6c5a00 [ 348.408632][ T12] RDX: 0000000000000000 RSI: ffffffff8e4fde18 RDI: ffffffff8ca1b520 [ 348.416635][ T12] RBP: 1ffff1100641838e R08: ffffffff8b956885 R09: ffffffff85049ef9 [ 348.424621][ T12] R10: 000000000000000c R11: ffff88801d6c5a00 R12: ffff8880320c2a22 [ 348.432596][ T12] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff8880320c0d80 [ 348.440664][ T12] ? jhash+0x269/0x760 [ 348.444741][ T12] ? sta_info_get+0x1c5/0x2b0 [ 348.450016][ T12] ? ieee80211_mgd_probe_ap_send+0x4e2/0x5c0 [ 348.456048][ T12] ? ieee80211_mgd_probe_ap+0x2ed/0x420 [ 348.461618][ T12] cfg80211_wiphy_work+0x2f0/0x490 [ 348.466766][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 348.472501][ T12] process_scheduled_works+0xac3/0x18e0 [ 348.478093][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.484093][ T12] ? assign_work+0x367/0x3d0 [ 348.488695][ T12] worker_thread+0x870/0xd50 [ 348.493302][ T12] ? __kthread_parkme+0x1a8/0x200 [ 348.498345][ T12] ? __pfx_worker_thread+0x10/0x10 [ 348.503463][ T12] kthread+0x7b7/0x940 [ 348.507558][ T12] ? __pfx_worker_thread+0x10/0x10 [ 348.512689][ T12] ? __pfx_kthread+0x10/0x10 [ 348.517317][ T12] ? __pfx_kthread+0x10/0x10 [ 348.521986][ T12] ? __pfx_kthread+0x10/0x10 [ 348.526590][ T12] ? __pfx_kthread+0x10/0x10 [ 348.531195][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.536400][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 348.541696][ T12] ? __pfx_kthread+0x10/0x10 [ 348.546328][ T12] ret_from_fork+0x4b/0x80 [ 348.550763][ T12] ? __pfx_kthread+0x10/0x10 [ 348.555371][ T12] ret_from_fork_asm+0x1a/0x30 [ 348.560154][ T12] [ 348.563375][ T12] Kernel Offset: disabled [ 348.567714][ T12] Rebooting in 86400 seconds..