last executing test programs: 4m2.397200234s ago: executing program 0 (id=513): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x55}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000500ffffffff0000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x34}}, 0xc080) 4m2.034582966s ago: executing program 0 (id=515): socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x7, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x20, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x58, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x4a, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@timestamp={0x44, 0x4, 0x7f, 0x0, 0x9}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5, "5c1bda64d9bbb795506667f359c477398e7a5ec5cb38489b4507e009453d7b60d6205bb4b302121f78a6"}}}}}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 4m1.441022609s ago: executing program 0 (id=519): openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x80800, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfe}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xb, "0441b6ccdc81dda50a"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)={0xfffffff0, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x3, @mcast1, 0x1}}, {{0xa, 0x4e22, 0x3, @private0, 0x4}}, {{0xa, 0x4e25, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x70}}]}, 0x20c) 4m0.24588654s ago: executing program 0 (id=527): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0)={0x4}, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x200000b45, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x20040800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) openat$kvm(0xffffffffffffff9c, 0x0, 0x658140, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00') unshare(0x24020400) socket(0x1000000000000010, 0x80802, 0x0) 3m57.679584223s ago: executing program 0 (id=535): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES8, @ANYBLOB="64269c078ecf07cf606ead008752ff8cb905655839261340b02fdfea038e1e07aa18e7dbce6657012a432e6f8535"]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000280)={0xc, &(0x7f0000000180)={0x40, 0x22, 0x8e, {0x8e, 0xa, "f8442feb56d888cacb417978fbab1018982cbf19562b1fbe31cdaeaead266d163a056128b500a4c70a829c0aa81aefb410db8e9303ed3d9cc85646685e45413b71cc1848c1cefd76627ed5417fa9d7e84802ec11ea89231bb45848a68432ba2a609f4d782fa0d9068689018c795bb2cb970f0262cecbd10ee9e52d2ef56bce136de08dbcf709f6f3202b8e7c"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x24, &(0x7f00000002c0)={0x40, 0x16, 0xfb, "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"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x200, 0x800, 0x37a2, 0x6, 0x98b1, 0x7, 0x14, 0x2f, 0x0, 0xd2d8, 0x9, 0xb3}}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x87, 0x2, 0xb33}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) brk(0x7fffffffffffffff) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect$cdc_ecm(0x7, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0x100, 0xfb, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xff, 0xb, 0x2, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0xf, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x6, 0x5}}}}}]}}]}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000100)=[0xb, 0x2ff]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3m52.384204624s ago: executing program 0 (id=550): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x224300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) writev(r5, &(0x7f0000001380)=[{&(0x7f0000000180)="b1ff5cc982d34010b7cd6e11c50b9bd27a09463daa6ac62502efcdab89674523220df660aec36c3da20cdf63882deea50aab4ae728b88be047e9c1de4d3428835edfece01a907acbebb734022a8738c0733177cf2bc7d61a3a791ad3e0972faf52b29d3476b8aff7e79275ad61b36971c0d2d8e1e242261dc50464a134b1a2e36243c3b5bb93a2e7a7087c254e0b5089100624eb5b273a62e5798cb0a4b96845ef45e0238d22062a8d5f43c3875d773c45e426dc162914e26ae112c5dfdef60f2f274ac96a6c77b37799cd03dc1c8ad69d1fcad1be379ad212ea51e0f272a3ec7bf0bdda2c7a15b3fb018cb2ce53c99b0af09b5c874cf4d79e13c7580d4ebc0669bb048863f28e8f00ea67d87e92c6fc4bc31a4a06b7344519d72e9662309dd51a02a7d295972dd1f63431968d9f5212daa47d49d85bf08190aef758e842da69375269c5f33bb0e60bb98abb2a51e8a89d7b4680185b9665d5da6254cb15392332b0e850169d90ac1374cf5346092b47f682c2f22c8cdcf98718bfa0ca4c5b50ebf8d6c53afa3830233a3e486a0d73fed67851403f72492feec1528cac329dd11f82cf149ec049e71b979ad055053dcf654f470f780f32b22dd6567401f94a94c592265a2dbdd3c5c88cfde1a6cc112231a5797e092a5040be19bde03dc2d9dc0078b42f27e168810770cd5b4c0f2073037e9a57e8148392a3063ee55ad9449fa6265189337777d7a605bb7cf51d682ac7823207343fa7328ce207029e7e9818d7fcff9b9e7ac731dc502ce7471cab17108e5614fdec649d35a6638928931f110d4608a9cf22868dd3bf764d5b09a5325bcf987546e3edf1df9f1866fa89fb99a7f945c853586b4e3344eb286067e7b42d79ed93baddc3e5bd47ca613d654d4d54ece371b699ca7f05677c48cdb8f265fb35e0ff7ec5da801ae4198c7d9290d2ddc3586bd1ba3e34e722c47c14e4f310029751fbdc75da8461356b7a6784b490810284bdc727061944a283b7276b6a0b679d74089c54db98c92c2e329248b07365f45b3511ac11f8483a3f0bec8e4ceae324640f5762444efa94207115b5550fb8e4a1277aee3f11f2e6cac543d2168a83cd0367b24859e1b8b9cb9a5beb2d9851124b9c74acf21ecb5ae5e31e29543638a1cebdd2384dda1b2d301e59ea092707cd68838f12a05f9ec25832ddf22e2a01a8a28ff5c4f925a09b18849c180f0fed6057fc68d473eddb467796f8c086475dc1444c7f879d842662da4e59fd3c02b6d54c822ae8aeb91aefde57008f7728f1d236bbcda61a5b2dfdc0648ba72229b764fbd43a2eabe639a49f44de663b2e4e244370c7681f130e4a7790924e0826c0ebe768996d22edf83088b18492ccaa1344f5b14aa4218e3204434e0483bb56043e63ae02d584fed308759840064686ebb7349aa85adc00ba9ac6ec3e895f6b6cb33902cfa04a5fe6946475775284ba5f00f31a37aca06ce7485acbbf8e66db1daa273025860d216eb69a71666c0e5e3dcb9054c7c5edb138893b22a6f80655aeecd0f59f3bba544ae9897d2e795d0ca5a124519712a54366dca8b20c2191d5515231d5066c9c9f2b5b180da10542d7911f688c3b0f07ffcfe249161590d95d445c5ce2c647b97ad45249226a04144d900de9496f8f85e4607e7907eb20a1856efa7b06de5334ed1ba34b1c6e30da7df850da42b728208b85510b9acdd9ffe22894ec97c832b65257fa72d7f77a02359fad7ea2465c53df34c391c617d2e02197f6b5ab4a152327f6ae4d1107f6e8b68ce43de174dd559fe3ec95f32bd1d9244943230654e68fc3237e17dbd131996202beaf1578a925ab94510fccfa2be306bce3bdbb413ec6e50e6b0081362999ce7991b2c384001fd74e9de82dba16df74529800a201d8bd35eb789527b1f2e2ea7a12fb2858e389b4e96b5a9e32838916f147c99e3fd723972930a2eb8422ac15a254bae41e604e5459f6f573f9ce9d94e9dcbcdd392e2ed35ab5c6673f69c711ff121a2f1b1421d4a70571a20c732b1c1af990795c10ee23a6b8b056f91a4aa32d118a71cad879d5883327e7347d3fc7de504d42162a16fcd2fde8035a54205da46ce06c1f66b6ddb43248cbd5347cb80aec30a88af4166dcf131b92568ffad2f3cdb2835264705025b612d8b82920a01b87b9781020c38f438330735966ff27488db4ea6e74fa9d0e9a0fa929d9585a4de92648839a971edb1d03945fc7d6f64bb194085f63ccf8ea52b90505f2809d0ddc40b59909fff3e0c3362934019dca2b8733a8fdddd978d0b264d4b0105d4f9db315cbc8a2426f494de1d2f1b73de816e561004be0430be083fc6179ebfdc9bfca85df6b2c81bc0bf4685cdf072ddb5f7a3183a226df665c95d86c6046be75fdd008b96ad5696cbd3182a01c6a80d1bd3f4a288c015355004e6bbc788aef9bf65fe691dd6777a531a040c9ec7754d0e746dd89521d2ae6df1b13fd9433b164ba014fa7b3d8e08b30fe54b3d0ea810cc5f436a0370fd976eb481a07b3f81469cd6ed490d687528bf470d3800893a718f1f6c970a130ab49e04e1dfe4d594927bb34247d1c25c75197807206242b0ff807cb8c6ca4d67acce16de41a663fe86eec015dde1d828ac3a63763c0fbeda90c824abeb593efa9e2df76b761fa0d25e70e4e8d888f8ca1fcf7e88d35064a73600d4cc98e75ed4dd7c05919dcfdd4bdfaccd4a0a33e11c55276e105338b13ba765b728d0ae08a03cf59f3212373be7c7f74601c325c605ccbdff2bd895f43303888f9f8609df38a52d718cfb423a580711886de8affaf997d85a23af0de249f92f0b04305f12cbbd19c271339988a0c3eada32416b880f1859ba58353675b45b177d4306bbbd4ad8890a1a06126fb069b06566d92b026337f2f9c9f1321fd9b427a57df9e68505cdbbe1c5807fe485a85693e39e09bb72c7e46c95277526db6ee949ba143e4d3027c84df4c483aa0e419e438741661bb4349dffd003baa6112db3c9f84b0438ed3af79b90f1cea1b8ec4943bc3ced5567eec6510e910c8f9346e74c338fcfc892aaf970691b60f5ea4c04a33954c280c0c28f5c4ed79a3d4cb09ac60dc00060b09afa42fe60a250bb0c7529b282714df7de4938f1c56241189a707a7091a1035d82c7d43c66e9abd92ceec9ec5c102df63d4a0b8eac16b618e97567a87296a42bb7a018204b3dcdcee5e5c758faf3172e8c6c50483f341c5656cb8df27c63c98e74d1b7312e49926d143817f8e9b4125406ab91242bdcba7ccc3db507ff994047b33ce9a59179d119991a161e8bd06e0f58d7bffe6457f531942cc46c88bfec69e0b995ac7e7ab04d270efe443541bc55f327ad8921c32bcadaa0e1ad8ac263a312f92f904b333becbdf4a102f5b379619c8204c3a18af91347fbb5eab64ff81a05f3b830f36691121f0a398405521c3dac1300a0db6e21e56ac8bd6a03923a3d8ed96d9df54b98b42b70a0a3ffa8291ceb0e607f0e2f8ce1832111051bb16bdc25d5a4af117634af898f5952f98a7b132cf140a79ccb80d1d9f1bb52c3aaf50b7232dba94e896295c5a6bf71ec63a2f95315b06b590c6965249d1ea7f7039344242bae628f7b1bd45d9ccd51183279863c640d8fd7127ca5e593d7ae02b8ecc77188389c766634b18e54ab9da7ea92e8101d6088a373c3da38941e566dae9c1b191b48f387ecf8b91c6e6f05c800cef4c39b11dad2e42f1b54a44204ffe29c84defd41a3ab9173957b3007cad89d259ba60cb320d26b1ce00453629af98ab9371d8e47854396009169ebef43f471c2b00e7298dfb61a42000b68c44dc2429233f5fa17c524856c6383ae4ffed02f566edb7eb961489b5cb677e568eba83885641486af623dafe8693ac6dd5df261294a9286e445bb91098b96d5b2e912c21d161c9d6a6c0882a5ccd68d3b0025546bb79ace81b3338bc613209bb48f725d144df39604111da9c775da5e5f911934fb719d5d2d73c4d083b644d81d5ef22b900c5e00a0646972fb9984bf8023be30af1a018d16e4a33c8f1e26f5fd1e344c164a88283dbbc66142b9cfffed194984dd288779638827a4435f749a50db79918f33d67adc4014754133437c9d2bb90246a33070216d80560e4fc33047f75418d4e8d88fb244aab374b60a2a71fe7b579a121edd7cabdd38c794ce3e486803d0eba379a41f074a7667790ef9acf99f7ea8856b9383498850404704655bdac133d26967fb1ef4a484780aab18e86e9f119a11e6195a40ed26b32054e0a1939dea8b2f3e5ab7d7bc5cb32895c069b84b2f0fc9291d4e35ca2a78108593e74ea25f81fa90f86c76fecc3fe193c13fb427ab6a0f5c540512309a9b4a96fb636b4275012157420c3efa09701d35ae2b06e96d4ebcfdaeb83d3ffa44c59b301243ceb33c115ced26656e15c244b4e677e981e7456950489396b83fd66746de97e41cecc8f14435ebe2f3437890fc31eb790df327cba7d40aa352911b36d71b2aafe495c9b82b790c97d3b5179ca47eddffe1f700f506491865c86e8dad4a2870efad0772b32d67d10498d5f1d4032d341078d2d5af3e9b7ef1fb7981cc1d50fe9cec2c037782ad472edb0be5cb870c203477e6df78762b1be15fb1648c6e1da3d1f95858b7a03dae9dd6fdc82d0c4434961550aa8991c73a6df1fe5cbe815a1e2c0add62f5b340e262bb369dfbced592b77df8ce5d694a59a5125b72a7d70cbcd7fcad1f8e85fbc632c21903c611744955dc7bcfa3a83b87c7dff38516e2e8974dd8f6835b5a681ab0cfe5b72b42d63047983a6ac6efeea069e12428f2d07965ea369635390f6459b1407fa5a0c5967fb119186e665e71b9b0b386f9cd690990eda4adff85cc484874265e2a9ff6573ee8d083bfdb45325dbfc452c33e92a19d024c0841892d43f4dec71b185dad3731ca647a2ffa2c80e008a8dc25667e63f8bda20806bc1a1adb93674cbcc548ba8ca7af22df43f7a41ad774e95bb8fbcf03845d5cdfb808387fc6a4d4676ea6e01c2f39836a77852ce97bd69e92865b54bc4876f0f4243db0de84d469676bb82e43bdaaa362ce99368a7ab30b8d92611ab053fb40523658884efe299a562dc0cf6b5bf996cf05a7e03ca369754968b6c317e740679b0dfe60133414932c1ae75ca0d26cd8cfbc78989de4eb37f64cbf3a14d2a72a24fbcf4c559f261115ccb4002d8d9590a5819d04869a5bebca4cac2901c2262a49b5a86ab0a3ba33942f7b94107a5ae35afd247485786e7b23c5d008ab0d9c1ca51cc86ba7bbc596a788251a8b1ef9817191c1c0dabd1e9d826f3c451b5ea73d6b74300873e34c216d21a869ed06a0d9c3be9024be3e24828393e0635a614d78eb0abcf44bfe8c8c860027c9cee58b5e41d5f1209e48253281b18727dfb926ac3687df56217241c872a5a39f65251b5ca032bfaca2c9fe662584bcb6cb3fe9be2ae57be0655586a8c704ae915f284adac8d85174799ebf9e16c43b74a154a4524e6f33467e13a121a255acfb592d47eaf13cd538de15327151ad74f578bbbfdfde82fd6afb592b7933b52241f182cb65778e3628f177eaa8c8ecc970e82a2aa52f3b7d534748b35fa1dbc0f58ede3df5ddf1f1202290a74f4a871802d1f970de3ea5553f35456e2596669c00404337f6d394fb68c588effe8987f18b04b1b52eca71062b722b2cc44e4805abf6347715a3c9e5e9b9376a45fed63b494781a4905f9ff6d898e48c5f1279fb2f4c3af50d54204d0ab410415fcb28a1b4dc0afdcce76f19f60f65534d802ee8c", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x43, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x140, 0x2, 0x2}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001180)=0x0) timer_create(0x1, &(0x7f00000011c0)={0x0, 0x3f, 0x4, @tid=r6}, &(0x7f0000001200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r2, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000280)=0x8000) ioctl$SYNC_IOC_MERGE(r7, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r7}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {}, {0x0, 0x4000}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1}) 3m37.277553931s ago: executing program 32 (id=550): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x224300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) writev(r5, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x43, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x140, 0x2, 0x2}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001180)=0x0) timer_create(0x1, &(0x7f00000011c0)={0x0, 0x3f, 0x4, @tid=r6}, &(0x7f0000001200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r2, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000280)=0x8000) ioctl$SYNC_IOC_MERGE(r7, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r7}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {}, {0x0, 0x4000}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1}) 10.786905707s ago: executing program 4 (id=1249): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x44, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40905}, 0x0) (fail_nth: 7) 9.857480637s ago: executing program 4 (id=1252): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f00000013c0)) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6003000000142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="400000009078000039895632c2be458a0bd4595051605eacc622f205b6ea3718a31e24a650b68eaa24e617a14d1491105e296f7c00de447b41113c1043cd1dbbaeaaebe2ace7a2c28c2035245ecbd0a6463ec656a7b12529ff057f7eff8d6ed1f41a8a180dece327fcbeb142714745b765caf0b8a0bf078b83797d20e30e90a828577493c9f1ddc2ec2eb159808b67a8f76887550f1c57cd423d8e0222d7e56b298c05c6"], 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="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", 0xfe}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000540)="ed3520", 0x3}], 0x1, &(0x7f0000003180)=ANY=[@ANYBLOB="dc"], 0xdc}}], 0x2, 0x81) r4 = io_uring_setup(0x4d66, &(0x7f0000001300)={0x0, 0x83be, 0x1046, 0x4, 0x1ce}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x101, 0x4) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r6, 0x0) linkat(r7, &(0x7f0000000000)='./file1/file4/file7/file6\x00', 0xffffffffffffff9c, 0x0, 0x1400) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000680)=""/226, &(0x7f0000000000)=0xe2) 9.619260433s ago: executing program 2 (id=1253): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x41c202) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4111, &(0x7f0000000140)={0x921, [[0x1, 0x81, 0x3, 0x42, 0x800, 0x3ff, 0x2, 0xffff], [0x1006, 0x7, 0x8, 0x9, 0x8, 0x8569, 0x0, 0x5], [0x4, 0x1, 0x40, 0x7d, 0xbf, 0x3, 0x1, 0x800]], '\x00', [{0x4, 0x2, 0x1, 0x1}, {0x5, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1, 0x1}, {0xfffffffd, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x7, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x4, 0x0, 0x1}, {0x7, 0x35, 0x0, 0x0, 0x1}, {0x3, 0x40, 0x0, 0x1}, {0x4, 0xfffffffd, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x1}, {0xffff, 0x0, 0x0, 0x0, 0x0, 0x1}], '\x00', 0xfffffff7}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) openat$dir(0xffffff9c, &(0x7f0000000400)='./file0\x00', 0x80000, 0x42) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) bind$can_raw(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000038c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001bc0)=[{{&(0x7f0000000440)=@x25, 0x80, &(0x7f0000001840)=[{&(0x7f0000000780)=""/4091, 0xffb}, {&(0x7f0000001780)=""/179, 0xb3}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000100)}], 0x4, &(0x7f0000001880)=""/183, 0xb7}, 0x1000}, {{&(0x7f0000001940)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000019c0)=""/62, 0x3e}, {0x0}], 0x2, &(0x7f0000001ac0)=""/139, 0x8b}, 0x1}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000004c0)={0x80000000, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x20000850) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{}], 0x1, 0x140, 0x0) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, &(0x7f0000000500)=0x18) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@deltaction={0x84, 0x31, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xeb7}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4f}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x404a091}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="380000000908010200000000000000000000000006000240000000001400048008000440000000000800034000000000050003008400000032f3e94f0c4ed316c15716430f67dd31ae3b35929ed348d6de9a0ce325f8314b31adb4cdf2c7e09a9afb7b42835d6cb4bbe15f6bd64d4253b8dc4e6d3f382152b081703a9ae7aee73ce0bda6155e6336620df9202760a4c24e04677a0af4ef53c533bf8043dfa98d7103c92b6651a5eff9"], 0x38}}, 0x0) 9.168990541s ago: executing program 5 (id=1256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x5) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x1, 0x38c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x0, 0x20004815}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050200000008ac059f020000000000010902240001498e3ecf4259c158c1160aeb3f000000000904000d0103000000092100001c"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "d4cc55a4"}, @global=@item_012={0x1, 0x1, 0x6, 'R'}]}}, 0x0}, 0x0) tee(r7, 0xffffffffffffffff, 0x1476, 0x2) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RSTATu(r7, &(0x7f0000002340)=ANY=[@ANYBLOB="540000407d020000003f00030009000000000100000004000000000000000000114104000000d6000000060000000000000003007d5c2e06005b24fc3a262902002b2701002d0000e8fdc50927e13decf4a8d9e437c28f50edb3e808041420769faddb44a9ce741e734821f37518806e6a9d84286dfcc67945e22230c1b326e674466f81e3c33e89259db980c1b310f38955d4212b4ed58d41d82cdd17eed0824235471f34174ad0fe1b20dd73ea115c1aebab97e9ade2922d94ac55f0de04e576515dc95afc2b04a6572b68b980641c1b6103000090c449c45dd37c2ec87825a80727184144f3a921e4d6534f6a8b43fc538e29b6ee1e18a3c2178183d7ceb34fcf3778bb4de0acb119ce5290ee2bcaefeeb3", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32], 0x54) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002480)=ANY=[@ANYBLOB="4c00000010000108feffffff000000000000d5c608794500006f9357ba920f6308cec9b631bd673526744a846ee7640c93b1ba1c82bbee585ee760d9bcf8326c82f9a4f689fb21be3ccca6528d86a44ee64e9e8879d9d45c9de515adb7e925a9cb3ef52679b22b93c375605ae7db15bf20898c7e742576cb95070c4a598e9b1c20fa9107a5723482dc16eaa1bf05056488eb622db80ce1a62ab9392491a9ac0136819bafe2dc562ce725b0d86424be53d0cdbd95eb277ea0c9f280626c89987f8a398d86096014bc988bf78b6b720612a021553f1104fc91431f864ae599", @ANYRES32=0x0, @ANYRES16=r3], 0x4c}}, 0x0) 9.103896118s ago: executing program 1 (id=1257): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect(0x2, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x76, 0x4d, 0x79, 0x8, 0x129b, 0x160c, 0x2fc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x18, 0x7, 0x10, 0x2, [{{0x9, 0x4, 0xdb, 0x40, 0x2, 0x84, 0xe5, 0x9d, 0xf4, [], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0x5, 0x6}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x9, 0x7}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f00000000c0)=""/79, 0x4f}], 0x2, &(0x7f0000000640)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000240)=@x25, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/232, 0xe8}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000002740)=""/185, 0xb9}, {&(0x7f00000002c0)=""/12, 0xc}], 0x6, &(0x7f0000002800)=""/215, 0xd7}, 0x3}, {{&(0x7f0000002900)=@isdn, 0x80, &(0x7f0000002b80)=[{&(0x7f00000005c0)=""/42, 0x2a}, {&(0x7f0000002980)=""/36, 0x24}, {&(0x7f00000029c0)=""/148, 0x94}, {&(0x7f0000002a80)=""/64, 0x40}, {&(0x7f0000002ac0)=""/13, 0xd}, {&(0x7f0000002b00)=""/127, 0x7f}], 0x6, &(0x7f0000002bc0)=""/55, 0x37}, 0x8000}, {{&(0x7f0000002c00)=@ax25={{0x3, @default}, [@remote, @remote, @bcast, @default, @netrom, @rose, @default, @null]}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002c80)=""/50, 0x32}, {&(0x7f0000002cc0)=""/214, 0xd6}, {&(0x7f0000002dc0)=""/135, 0x87}], 0x3, &(0x7f0000002ec0)=""/127, 0x7f}, 0xb}], 0x4, 0x2001, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004240)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@tclass={{0x10, 0x29, 0x43, 0x861}}], 0x10}}], 0x1, 0x0) 8.758730675s ago: executing program 2 (id=1258): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d0002080910030904180202b41d3f0109050e0300000207010905850320"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) lstat64(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)=@deltclass={0x440, 0x29, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xfff2}, {0xfff3, 0xfffa}, {0x5, 0x9}}, [@tclass_kind_options=@c_htb={{0x8}, {0x414, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xcee, 0x7f, 0xbb, 0x6, 0xb61, 0x5, 0x8, 0x7, 0x7, 0x6, 0x6151d5c2, 0x1, 0x6, 0x2, 0x80000000, 0x1, 0x3, 0x7, 0x88c, 0xb, 0x0, 0x5, 0xfffffff1, 0xfff, 0x8, 0x6, 0x80000000, 0x4, 0xfff, 0xff, 0x1000000, 0x2, 0xa0, 0x7, 0x5baa, 0x9, 0xf399, 0x4, 0x4, 0x3, 0x3ff, 0x6, 0xfffffeff, 0xc196, 0x5, 0x5, 0x9733, 0x5, 0xfffffffd, 0x9, 0x10, 0x8, 0x7, 0x24, 0x1ff, 0x2, 0x1ff, 0xb8, 0x5, 0x8865, 0x2, 0x9, 0x4, 0x5, 0xf0100034, 0x6, 0x1ff, 0x80000000, 0x4, 0x4, 0x64, 0x98d, 0x4, 0xd9, 0x6, 0x2, 0x1000, 0xf, 0x60e1, 0x79, 0x3678, 0x6, 0x101, 0xffff0000, 0x19, 0x4, 0x2, 0x1, 0x2, 0x7, 0x0, 0x6, 0x0, 0x0, 0xff, 0x1000, 0x7, 0x8, 0x2, 0xf835, 0x6, 0xfffffff2, 0x7, 0x4, 0x0, 0x4, 0x2, 0x2, 0x101, 0xff, 0x5, 0x6, 0x0, 0x4, 0x80000001, 0x1b, 0x0, 0x1, 0x5, 0x7, 0x7, 0x1, 0x8, 0x1, 0x5, 0x3, 0x9, 0xfffffff7, 0xffffc7a8, 0x7a7, 0xa8, 0x80, 0x5, 0x5, 0x4bab, 0x7ff, 0xfffff800, 0x1, 0x0, 0x7, 0xfffffff8, 0x6a, 0x3, 0x6359, 0x6, 0x169, 0x8, 0x8, 0x8001, 0x2, 0xd, 0x2, 0x4, 0x99, 0x1000, 0x3, 0x6, 0x100, 0x5, 0x10001, 0x8, 0x195, 0x4, 0x9, 0x120000, 0x1, 0x10001, 0x9, 0x10, 0x23, 0x2, 0x3, 0x1, 0x6, 0x8c23, 0xfffffffa, 0x2, 0x84, 0x3ff, 0x8, 0x7, 0x40d, 0x6, 0x5, 0xfffeffff, 0x1, 0x7fffffff, 0x1ff, 0xfffffc00, 0x5, 0xffffffff, 0x8, 0x8, 0x0, 0x3, 0xfff, 0xfe, 0x400, 0xc, 0x800, 0xfffffff4, 0x80, 0x29f, 0xfffffff8, 0x3, 0x1, 0x9, 0x9, 0x200, 0xe, 0x5000000, 0x2780000, 0x3, 0x0, 0x0, 0x3, 0x3, 0x5a3, 0x6, 0x355, 0x3, 0x7ff, 0x0, 0x10001, 0x10001, 0x0, 0x644c, 0xffff, 0x0, 0xd36, 0x1, 0x1, 0x9, 0xc, 0x1, 0xe5, 0x5, 0xf5f0, 0x0, 0x2, 0x6ce1, 0xd237, 0x4, 0x2, 0x0, 0x85, 0x2, 0x1, 0x4c, 0xf, 0x4, 0xffff3d95, 0x80, 0x401, 0x5, 0x5]}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x4}, 0x20000084) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="509f0912", @ANYRES16=r0, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r1, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080026006c090000"], 0x3c}}, 0x0) 8.599707782s ago: executing program 4 (id=1260): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x1, 0x38c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x0, 0x20004815}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.837779667s ago: executing program 4 (id=1263): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x7, 0xe, 0x1009, 0x5, 0xc, 0x1, 0x3, 0xdd2fcb245114ab72}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x13, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f0000004580), 0x654, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc040ff0b, &(0x7f0000000180)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.174682139s ago: executing program 2 (id=1264): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) getegid() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000980)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x80, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_usb_connect(0x1, 0x9b9, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x51, 0x93, 0x6e, 0x10, 0xeb0, 0x3457, 0xc2b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a7, 0x3, 0x3, 0x8, 0x10, 0xc7, [{{0x9, 0x4, 0xc2, 0xcb, 0x6, 0x74, 0x31, 0xa8, 0x3, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x7, 0x35, 0x7, [@generic={0x4c, 0x6, "8ea1857b6e41a725870eedcbc89cbc638cf641f232f0a6cda48403aab32dffd6dc457477f1586d67e93ed364146c32cd29de67d49acaf4624581c7456250fe8812f7c9c5128c9d3d8a8b"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x92c}]}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x9, 0x8, 0x7f, [@generic={0x34, 0x7, "e49de12491f56c0b0d5dd2133e265363786fd7c0be9f6ec1871498a145e978a85976fc4ffb7feb60f9f01399511d8cfb7fe1"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x64, 0xb5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x6}]}}, {{0x9, 0x5, 0x0, 0x19, 0x8, 0x3, 0x6, 0x1}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x5, 0x1, 0x64, [@generic={0xdf, 0x8, "43c24ddbfc3fb14041aefa336d9f4492d99216c9603f6cedb77a4ba73d7b39306dfa963eb17e8e87556703c9ecc268c115800e267bd313ee182596ca904eedb005180dc8f89fe9c5a35dd87f0dfcaef88ec274c3b7b6010a2cefba83c92cebc78d12b0d0af43e04fcf0a4235e91bb0b68c88ac8c6a74c98926a388c5a249f22befdda02bcf6f964cdc41cdfc23702f08027a11d255a718622fdad53d90b7e0f84b40cc53c33d7c665cf28c188b02696fd39610880e46d9917839187313317fff8e3c38bb141daf106094836a40b9f44910076815a303aeb4b66d9bdf19"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0xf7, 0x1, 0x2}}]}}, {{0x9, 0x4, 0x8d, 0x2, 0xb, 0x69, 0x3d, 0xe, 0x7, [], [{{0x9, 0x5, 0xa, 0x1e, 0x400, 0x2, 0x7, 0x6}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x5, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x800}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x7, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xa}, @generic={0x5c, 0x5, "9b5d51295925e1c4e926cac08d77e6485285099f9bba8c5f92906a40be4c4560a507e21fb29f640477393ad9a037ca94e39fad4004a04711e16483a7672cea90837bc274fed863d748ad1ce8341acf28cd0b933bc68088d6a368"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x81, 0x5, 0xfc, [@generic={0x70, 0xf, "b6334e8827eb3e4fdb5b5b855111887ea767d6c61248b6601b68b8dddfbd097eb7e6dc640250d311a731346f20c284109b259b8a8d6b1a1bc2f5aad95e06d61e214bce64b6a2cd06bd04f6a81c5a3385955695a5074db5e3ce37da9d61458545003d4d0df03dcb8f616d1f12b052"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xb2, 0x73, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x14fc}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x81}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x4, 0x2, 0x1e}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0xb, 0x0, 0xf1}}, {{0x9, 0x5, 0xb, 0x3, 0x1cf, 0x6, 0x2, 0x1d, [@generic={0xa4, 0xe, "8d59a8300b7efbe73e3e865905e9d4129eb4d2b536ce9906a24dad150dbc8ed150496f5daf48bd9671794a47e400b1c77dc23e254c9b0e9e8eb9735620424db1af296aa540b9556be259632cc640bf70bc48bc4c6ecc55832d7fce6b0cb6171082e6ab415a98a7893b17937845fd6ad33e0226c8d17c3126940433db40788108db0e5e42822e4835eb0010928325744c965a4348e0a35652451a9ab422d9162be067"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x6, 0x8, 0x8}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x5, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5d, 0x3}, @generic={0xb4, 0x0, "1d7a9151336812ec9065096532cdd5dc6470b03e3693dc0cc1737758d8898e2305be0f2fa85158d83e1f3099634c78d1acc0426ddc3253f9898b6849baa8a298a0c4e7c085263b319b04f5589b243589cd084fb17bc79fc238a8120c168067b398b97e947f1d9f2ec6c774324b3158d40091759c412638d206f74766f62234f45632556eefd6c8d9142048149fe0e7c9610af1df36219e620e94f39818d35082a1e4deca5dc2d6911ca044862db0478f10a9"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x0, 0xf9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2379}]}}]}}, {{0x9, 0x4, 0xb7, 0x4, 0xa, 0xff, 0x99, 0xab, 0x88, [], [{{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x2, 0x4d, 0x8, [@generic={0x3f, 0xd, "ca4f744f70b3466b038acdd634f63571a055f96a68b39008febfa53af1bf686892bb54007bfd42cb52d3a681159e322a1276814264a690248d94ae3f9d"}, @generic={0x30, 0x4, "6de3223e6fa03db82a332de8d1c8cdb3d5adee84b5aae5cdab1e8ace7f1f4e680f10dcb1dec65e7bb6b239526fad"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x7, 0x3, [@generic={0xc2, 0x5, "67118bf2a86cc0f72754ef301be223b636b4a9e09d9d02f4d4861087963b9edba62a6bf990e9355ca8bcc666ec174a76eb0dadbebe2c4f818dcd5acde721015c0de652838d4297bc8a375d0ef7878f2bdfb4e329414305987ed2594c6e61ccd10c232a045ed5cae29816ce7afa7434531d00a593def674314b5462b7e0d958d6e61441dfee3d87722dc94ead176ce2c18c1a9722c463492167bac16afa743014618e44238067c4837a657e0c000dabae6138c7253572265e9c7d5be8ef8f0d92"}, @generic={0x93, 0x23, "a6fbccab0970dfbfec2d55374e6464612a3c29fc45e6c29a5a423585de57d418f8d8712576a4705a33266c754948471f6ece078328d01a4be4dc9c7f16591aa51d153de277c7bb76a23b610e938d4b8a55e92b804dbc26aae4e7fb39f047992436c14d8e3978a62fd25e2ac932c8e30a337e6b71d55f96ce060b58a2a965a76df91cf1c468ee5acab3158eaeb20243785f"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x4, 0x4a, 0xf, [@generic={0xea, 0x6, "9acf14df2b876a038b5f67b5c811ac074522092c14ba299cc668db6f47c40869edb55bbdb122f06239f2b0c2ba789a5137d705058b1bbec5d8d303392b463d246f904f68fa4407168912ad67ccd038604254fe0b92269d71a0c2db4750c516722370c8eaecfb724023cdcabcf87dfdc1e40466ad15db07f4f606430b4ef368da4b017fc0bb1ab4e75e9e3f2522929b623efe6e224b3dbdce844dd206e705af2b9c686427f10cf460386a1423694acfb5cb378696c5c2976cfd4b5e8930fbb82cb4ab67525240bbe447db49dd931b430da39183bcc0a8cb6f4c9b0c7885248b4678c2db3e07361b73"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x5, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x41}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x5, 0xe7, 0x1, [@generic={0xc3, 0x1, "6425e4cd8b2af46732f834af8a5f0db05fbc618b878b26f2f12ed54593abd09642cb77716bc1174e001389ac3a46e5f08ddb45fb1b9a0e1121a9f54606c7e988e74a382b499fb1f0758feb8895ba5f3f7058c262a63e20af3191502679bb1ba41a6b85f523d0aea6a02987e7d1d3c79c890204b6a95161bbec5e58886d203cd701e6146ab14a5bfdec46bd1bfd3d4d9bc366fd4f54f8d0a2d006b768389e654b1a1e9e3ed34a1de50f3ad66e028ca6ca4a06f1f27725e742119a75279135654650"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x2, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x70, 0x3}, @generic={0x49, 0x22, "d054418c6bbb7c65dcc6dbae8a2f21cbb4efb340557dfa141d2b8dbf3dd2effdd120ae8f6d3c82fd1398ae114e4203c0432905db4a1ec68f5c1a9f7baa970754726fa3d814348a"}]}}, {{0x9, 0x5, 0xa, 0x17, 0x8, 0x8, 0x8, 0x67}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x2, 0x7, 0x77, [@generic={0x60, 0xd, "34e770984f0b2888af2142ee4941fcfcd01273be439f589b3d3efefd61fdb81869fcc70445d512c4e53dc054cc61af92e13bcf0a402b50b42cf8e452dd30b59cf734f6bb431132174f535670ce26d69fab0608cbac14748fb72944a174a9"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x4, 0x2, 0x5, [@generic={0x98, 0x21, "61e008700ddf54791843bc9c061ff6d6767c2df7bb113b9667ec18cd542fe8f40e50721b5d6bde27676d010b5408b818048b884d5ebcc1c6eafc33ce100dc5694eec5403809515d8a88d66333c1951acde55983e670197bf97498a128032158ee120ad174590ad4c475b2962a426d9ee1081de8917c0c32b0a98644d8d7e7b57c9e3bcdeeadc05a61370628e94424544deb17d862289"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x10, 0x2, 0x81}, 0x77, &(0x7f0000000f40)={0x5, 0xf, 0x77, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xd5, "9f3cdf2284b8f293bb4f147f8a19e440"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf4, 0xe8, 0x3cd4}, @generic={0x3a, 0x10, 0xb, "774680126dc8846b53692f3db9b10f3043b8fbb6a2588bf306b22c9d36351467679572a25b78aba831b29d827ba8ff0460051128a3eac1"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c61d8858ff55df6eac788afc1910bffb"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1404}}, {0xef, &(0x7f0000000b00)=@string={0xef, 0x3, "33baf2b2358c61862d387c7554b5c4fb50ed740f54f99e5d03370d6f8d16087767ef4a76ea8c44fd7684254b49058be8e3e32d51377d3a9d926b2e65d2b76e27b6c6947e45ad3cf26ef01b06d4d75222a648283382f38d8c2c76906c3333cee3ac99d87a859244bc45a449314e69a407c2fa7c1c3ccd51f22416ebe9ed5e9bc785c79173ae4ec04a7d160db1df8ac75f9547903e3b8bdb050eff908d2bd1299f5344ff05743d05f72455702ee557e670e753771acf664bb17841ce5de1b80811753cdae5088e5de662bf4279c7185769f7ed28a6a5a83172138ef9f9813013d3b4d05879f44b73cdccbda6e077"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44c}}, {0x51, &(0x7f0000000c40)=@string={0x51, 0x3, "d5d26a082d953045861c22ce4064e21638be714096ad5945c3d52f9b8a4242ca8db7957034da2fc46dca5cffb05f34de2ae899d0277ff126c671947a964b6d4d6e846479c562484885e9022428aef9"}}, {0x2b, &(0x7f0000000f00)=@string={0x2b, 0x3, "fb39a487f40af67d7354feaf0ecb5bfa2d3c45532dfb50e14c867f16da8a3352331e2f02b1bda79ee4"}}, {0xf4, &(0x7f0000000d00)=@string={0xf4, 0x3, "3a5e0af6f70a3aff14cec91b22ea308c1883a985a725d906f9a7018f6f6e62c2a7bbfd26e5f1c1396d6a2d4b0cba8e26c054b836698eece1c27a5c3d21c1d50f3275d4f9c848fe7c95bd5fad18c8379acb93f8f4ca4ded176a957fc6ecd438f52db6aa6fda0f63128fa30fe2b6bf408938dff81adccae43dc1addea893fe59fd83d36a2064233e1fe911fbcf9a2bfa278a9a611dc87dd62a28b45b1453e316122cee5bc2a5490d6dc2be63ff8ecc7eb127019ecacdab4f85101591435ce644e0100b2e55995e797ac08a05dd2a8374657fe25ab793f39c2d53c75b38deeb2cc26f9a0b17b9d841e7bd2b09d4db2ce88a40af"}}, {0x41, &(0x7f0000000e00)=@string={0x41, 0x3, "a10aa4daeae3824ee7fac0683b9597f2fc33912a29d1f61ee512846495dfdaed67514b4b03b8b4555ef1ea3a18ac5eec6e853f553e82dd5e7ec87b9250488b"}}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup(r3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x2, r5, 0x0}]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000090000009c000040"]) 6.072318834s ago: executing program 5 (id=1265): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010027bd7800fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="892e0a0011620500340012c0110001006272546467655f736c617665000000001c0005800500200001000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) 5.701104482s ago: executing program 1 (id=1266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl_fd$Q_SYNC(r0, 0x80000305, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d89024", 0x4}], 0x1}, 0x0) syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'veth1_vlan\x00', 0x400}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r7 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r7, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 5.614811721s ago: executing program 5 (id=1267): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0xc8, 0x8, 0x1f0, 0x5803, 0x344, 0x2e8, 0x2e8, 0x344, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x21, 0x2}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x81, 0x8, 0x6, 'syz0\x00', 'syz1\x00', {0x33}}}}, {{@ipv6={@private0, @local, [0x0, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffff00], 'nr0\x00', 'macvlan0\x00', {0xff}, {}, 0x6, 0x6, 0x4, 0x4}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}, {0xc2}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x40080) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x3, @dev, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.54031824s ago: executing program 1 (id=1268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysctl(0xffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r1, 0x0, 0x0) (async) write$sysctl(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x11, 0x2, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x400}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xd, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0xffff}}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20008800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xd, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0xffff}}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20008800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="49643f87a37536f1f18931434db9b532a228fb3f6397cf1d9a056d2ff2240f5437595c1f7a2b4db49888a402763531b35caf77103c96349d286408185c33e9fb3c151c0adc3d17a6c8c1907762b312e9ce9038b76a8b66ca0bdf6230ca9598e115c2587878f8af6a186c067f8af9aed0e7bbfeece82c5d240f1240d4c90abcfe41e3e920cb", 0x85}, {&(0x7f00000003c0)="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", 0xfe}, {&(0x7f00000001c0)="672f1c5220119ad36a4c3cd03143a530e5478376c2f3ec706a6ea64fff0ece0eec5663d594b623fcb23f008a83fef339336a241e97a050d1b09d56131aaeabea5e81efeaf35052", 0x47}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000600)="09012d8ab157dda14697ebc068d844fe17833440c6c4a76113ff1c124d9a3bc8789c2bc5876d7de3e6687b721df69bb5ab380aef870dfb692a63b5c3e0a29233d9c43b3637548b373efd016b5f336e9add38c762994f0db40db4be337651d492c406f3632dab657c257bda5e318bba12d5c08b5b56cf4fcfa6ae0cca755040eb532ffa00b7a89d05fb4fed54578fa1527fe3cb3f4376f894befc20dae9caf7462cba0e656f62a79f9856cacf00c1e93f536ffc8e192fd83040bc920eb80c5d190f3d29cbce073aa20f378c58e0e39fcc76f9a33d034a053d55f28733b292d0271d0e046f3f1a6d1f6b139ce7ff5f", 0xee}, {&(0x7f00000004c0)="760e96c6f1b81dc62a26d14c3b55deaa82d41817f654c2d8d78ba87141c9d5cb045cb4f9ae98afaea15821de604ec4406e03c2b59789c81bc796e9842a14b78e5fbc1bb2e713e6ef598fa2fa475046c01653d1bfa4687642c12c6898e3e77102d09da7290d6280e53c4e814864f87f9d9d9810bc23acf694e96cdb773710ea8743e50fd18711f9f2cc69f122866c6ab32dc971be927da2e17d771a5561c9fa05160f3a303c68c4d64a3c3918a7485f85ed973e82077da2fa7bc64ca42764fc40", 0xc0}, {&(0x7f0000000700)="2f917c6ed3d74f5a3e504bc44fd1d195ce45cf50ecdf64ff14df6d596a0cda6d0bb9dffc112b8e1e99185d53cacde1e52094449aed731220fc31d11a281ddd50e38cf47caa62428c5ba2027c39075742565f63635677f1d65ae4e4e9562643a2b0d9889785688324d2ec9a8b98dc404535e6d9eaaaba507cfe0970b92b10f7f72ba8d03a9b5d646be1f5f60d5c0cb1ebe5c0deab60b12abc125154f1b55969ab935bc2", 0xa3}, {&(0x7f00000007c0)="9a6bf47bd2f0722f5b4efe07afa917d1fcb75a8d620f03d1dd5fd46485bff6b1fbba76b2ff8987b3086c7c4f6af7616e3f87e7be3c17a3bd1c507eb9fca705974057bde895a2be414d478fbc74a7c2d7b69b6c874125984d4f318d90bb8a57b8af3c9d78ba290233eafb4f940ea2eaae3681e5f9632085da2c27641d1475fff9aada4f54cbc188640c9215a9bedb4bfe7fe5ae3a6bdd37960d245c192803970d4efceaf377fed436834db38b2c8cd27431424d44e256ec35", 0xb8}], 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="2c0000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r10, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r11, @ANYBLOB="104000002300000001000000", @ANYRES32=r0], 0x54, 0x4000000}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a40)="69b5491a2bbf5a3e3031c2d662c0d12ddc18ebba86cf624b5cf48b898bafde2be4b9e8288f01bdd6a16ec1c77fa138b2d57e614284ddd2a2bbf978b70be71f7ffdf0553ef5d0830a47c2eaeb6df9b7a0fd61c9b87e555419bdb71339b4144d5fcf36b3fb6d4405878541de7f51c193785c6c3abb411a226011cdd1535d52106bb55bea606759e72d03b939fa2ca942cb2d5f1c7af76ba0126ff32b6a3ab14e0c6c85", 0xa2}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="280000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="200000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="140000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="14001fa79043040001000000", @ANYRES32, @ANYRES32=r0], 0x70, 0x4000000}}], 0x2, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) 5.321725271s ago: executing program 4 (id=1269): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES8, @ANYBLOB="64269c078ecf07cf606ead008752ff8cb905655839261340b02fdfea038e1e07aa18e7dbce6657012a432e6f8535"]) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000005c0)={0x24, &(0x7f00000002c0)={0x40, 0x16, 0xfb, "eaf62cbe9095752fb3392f1cc68561fe8a9b5a2dcc068edf533cbe7529e156c56bb8b955009640b8906495fe7a651b99efe1150b42bec74742f9bace7ac4520d04d86a85f68804d9c7f064eec31ed89f21de5244d0f47960883027a7cd9e8d473c591cc29cded6b94b202d5e610139ba378dfdf848d3742a895ebd7ce494a8b01b8d2f5401a6b5d146b35481f6ad6729841bdd9982f8fbb8b78b5dff8c439d3d9113489f295480a05e6a1560cc56977a0bd28cdef91d1d5e378a7ee602fdbf97cb31bd938552c5b9695df841f26c65def0e30cabd67639e35859c58c4b4fb2ee9c1804801632ce3c9bb24267c60fc496ca3582404858de26638633"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x87, 0x2, 0xb33}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) brk(0x7fffffffffffffff) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect$cdc_ecm(0x7, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0x100, 0xfb, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xff, 0xb, 0x2, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0xf, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x6, 0x5}}}}}]}}]}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000100)=[0xb, 0x2ff]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5.150878088s ago: executing program 5 (id=1270): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x2}) 5.10598467s ago: executing program 5 (id=1271): r0 = syz_open_dev$loop(&(0x7f000000d940), 0x4, 0x40) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000074c7b4206d04f6088a81000900010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r6 = socket(0x2, 0x3, 0xffffffff) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x5, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1000, 0x1}}]}, 0x20}}, 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 4.180596763s ago: executing program 1 (id=1274): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x200) (fail_nth: 7) 3.807945987s ago: executing program 1 (id=1276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x5) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x0, 0x20004815}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050200000008ac059f020000000000010902240001498e3ecf4259c158c1160aeb3f000000000904000d0103000000092100001c"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "d4cc55a4"}, @global=@item_012={0x1, 0x1, 0x6, 'R'}]}}, 0x0}, 0x0) tee(r7, 0xffffffffffffffff, 0x1476, 0x2) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RSTATu(r7, &(0x7f0000002340)=ANY=[@ANYBLOB="540000407d020000003f00030009000000000100000004000000000000000000114104000000d6000000060000000000000003007d5c2e06005b24fc3a262902002b2701002d0000e8fdc50927e13decf4a8d9e437c28f50edb3e808041420769faddb44a9ce741e734821f37518806e6a9d84286dfcc67945e22230c1b326e674466f81e3c33e89259db980c1b310f38955d4212b4ed58d41d82cdd17eed0824235471f34174ad0fe1b20dd73ea115c1aebab97e9ade2922d94ac55f0de04e576515dc95afc2b04a6572b68b980641c1b6103000090c449c45dd37c2ec87825a80727184144f3a921e4d6534f6a8b43fc538e29b6ee1e18a3c2178183d7ceb34fcf3778bb4de0acb119ce5290ee2bcaefeeb3", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32], 0x54) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002480)=ANY=[@ANYBLOB="4c00000010000108feffffff000000000000d5c608794500006f9357ba920f6308cec9b631bd673526744a846ee7640c93b1ba1c82bbee585ee760d9bcf8326c82f9a4f689fb21be3ccca6528d86a44ee64e9e8879d9d45c9de515adb7e925a9cb3ef52679b22b93c375605ae7db15bf20898c7e742576cb95070c4a598e9b1c20fa9107a5723482dc16eaa1bf05056488eb622db80ce1a62ab9392491a9ac0136819bafe2dc562ce725b0d86424be53d0cdbd95eb277ea0c9f280626c89987f8a398d86096014bc988bf78b6b720612a021553f1104fc91431f864ae599", @ANYRES32=0x0, @ANYRES16=r3], 0x4c}}, 0x0) 3.664003586s ago: executing program 3 (id=1277): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050027bd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000020000160800"], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x40014) (fail_nth: 7) 3.05778609s ago: executing program 3 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl_fd$Q_SYNC(r0, 0x80000305, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d89024", 0x4}], 0x1}, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x1000}, 0x0, &(0x7f0000000000)=0x0) r4 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'veth1_vlan\x00', 0x400}) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 2.687827294s ago: executing program 2 (id=1279): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x7, 0xe, 0x1009, 0x5, 0xc, 0x1, 0x3, 0xdd2fcb245114ab72}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x13, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f0000004580), 0x654, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_pidfd_open(r4, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x14004090) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.456247709s ago: executing program 3 (id=1280): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0xc8, 0x8, 0x1f0, 0x5803, 0x344, 0x2e8, 0x2e8, 0x344, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x21, 0x2}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x81, 0x8, 0x6, 'syz0\x00', 'syz1\x00', {0x33}}}}, {{@ipv6={@private0, @local, [0x0, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffff00], 'nr0\x00', 'macvlan0\x00', {0xff}, {}, 0x6, 0x6, 0x4, 0x4}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}, {0xc2}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x40080) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.357417167s ago: executing program 5 (id=1281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x880, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x8, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0x7, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x481, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x6, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x1, 0xa5, 0x40000080, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x31, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0xa, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd98, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x800, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x4, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x14) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x14) openat$6lowpan_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r8 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000440)={0x8, 0x200, 0x8, 0x0, 0x0, [{{r5}, 0x6}, {{r4}, 0x2}, {{r5}, 0x1}, {{r8}, 0x1b}, {{r4}, 0x9}, {{r3}, 0x9}, {{r0}, 0xffffffffffffffff}, {{r5}, 0x9}]}) (async) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000440)={0x8, 0x200, 0x8, 0x0, 0x0, [{{r5}, 0x6}, {{r4}, 0x2}, {{r5}, 0x1}, {{r8}, 0x1b}, {{r4}, 0x9}, {{r3}, 0x9}, {{r0}, 0xffffffffffffffff}, {{r5}, 0x9}]}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001540)=@newtfilter={0x30, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r9, {0xfffd, 0x2}, {0x2, 0x1}, {0xfff2, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x40840) syz_usb_connect(0x6, 0xbcf, &(0x7f0000000c40)={{0x12, 0x1, 0x300, 0xfb, 0x54, 0x90, 0x20, 0x12d1, 0x5841, 0x930d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbbd, 0x3, 0x7d, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0xfd, 0x0, 0x5, 0xff, 0x5, 0x33, 0xe7, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "c3e31b4d3d15"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xdaf, 0x59, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0x9, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x29, 0x5, [0x6, 0x200, 0xffff, 0x800, 0x86, 0x9636]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xfa}, @country_functional={0xa, 0x24, 0x7, 0x3, 0x7, [0x40, 0x3]}, @mdlm_detail={0x9f, 0x24, 0x13, 0x3, "e2f7a94e50e0c50a217439e760d7966596dc6751b71890f999e873042cb0188d4fc6757f7dc6ba31225746d7d64d22b87c4168855fbad47ea42ba1b1ade9de059a8f42e570e590a708fca1aea5ca3501d27a310120b24f0ff89e129b1fa79bc64152f02155523ece1ec2c93f71d24bf3363245e2ec6367fecb3f227d33d3168f5a4b8514c7e5ab9bb9768828770edc3e4fc113129b72a568cb1533"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x410, 0xfa, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x21, 0xff}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x14, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3c3a771942e6844b, 0x96, 0x81, 0x6, [@generic={0xaf, 0x8, "d4af34a64014199e80d4c0dd3c645112ed6952a383965ab7aa67063b43ecb122c3899e9f2576cc482aac52bef27828a00c863227ccecf34e82146b87a3a39cd01157fa0c7165fefa64e18cd62d1b7927d21622ced8a9ecc414c76a748c23266cfeb25a4a8158abe77975e7409b1d0328cc13c332e1eb681ab83de6e886223abe663cd5eb14cfc16a24ca1daea0ed458599e71a7ca82dc69f92c325e1f327c5136850dcd6bc6d4255b4d258f690"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x6, 0x9, 0x9c}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x9, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xb15}]}}]}}, {{0x9, 0x4, 0x46, 0x3, 0x2, 0x89, 0x6c, 0xf0, 0x9, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xe, 0x5, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0x8, 'T', "d97fff"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x81, 0x1, 0x2, 0x8}]}, @hid_hid={0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0xd24}}], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0x9, 0x0, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x1, 0x38, 0x6, [@generic={0xf8, 0x3, "99a9417356b70b7c2f23a05679fefaede67c5c4fd83595c6af28765e88f3603f59351b1388c2305fc7c4203f554870fdbc96063e39cb7a97493501db4307e6018fc9aa54d2b1981e25715e439414fe9674498a2d582be50dbde5e0b72e90ec61fd8b02096f069d1f5ebc387abb0e4e2cf66fd6f71d4a394d14b9e71fae7ed3cd61bee59e814a56d092dc8fe432de8d273c40a1d9c6a6e434852b2383982e2be497b0c0f0e6cdb7e351b843a106189cfd8a3a591aaf7835c79cf713874bec71c06ea89534c85376f65af8e48086de4566e7d9e75ba02794ff7d259b94dbf8c78d131ecf35f4a3199d00972be011c1f2a8cb4f90e01b62"}]}}]}}, {{0x9, 0x4, 0x33, 0x6, 0xf, 0x6e, 0xcc, 0xa1, 0x4, [@generic={0xb5, 0x0, "8414eb3cf9440ae2b657e1619c3ca4634a9f48843f9e8db00c5d50779d49fd178cff33cccb481411b22cab878d66033a78ae7dfd03fb5be436e5861b112df7a7aa7f775f749e2edf2a6293aed2e8de41af36e1831e74b95271b668a4d4b262165b3f499c90441b712136c508a2dd0707435f49e6be4446c781481a641396a15ff67167a8321eaae172ef7caa9cf986f42ad0e903c5f1abbf31c8c329811af680364171e9263131dfdf7c075547b7c107b3ed48"}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "de501e11a6"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x59e, 0xcf31, 0xc4, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x12}, [@country_functional={0x8, 0x24, 0x7, 0xf, 0x4, [0xfff]}, @mbim={0xc, 0x24, 0x1b, 0x45, 0x5, 0x6, 0x7, 0x8, 0x3}, @country_functional={0xe, 0x24, 0x7, 0x5, 0x1000, [0xd, 0x6, 0x8, 0x100]}]}], [{{0x9, 0x5, 0xd, 0x8, 0x400, 0x6, 0x9, 0x1, [@generic={0x10, 0x1, "e07d0b5b35afc08e9e399b628a8d"}, @generic={0x50, 0x2, "35be883901a5cb2882b59257bc01dccdc082e6dfabe0d760d1b46f8e33ae738bc6c22d42ba1ef7536e65fd025c66f5495f21ee0e8ed7dc60ee6f01d6882fbce2e8ec0df267167d3f2ea957ab8542"}]}}, {{0x9, 0x5, 0x80, 0x11, 0x10, 0x68, 0x6, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x3, 0x8, 0x8, [@generic={0xe8, 0x0, "e76a036bdb2ce28f81640cb357a3128a9e70b78fd07e16b2eb1d085657d531a3edfff537cced8b6514ac923b143cb940e24e1dc7420c261c2560356953b0954f6fee3002ff56875eb262a12a8aef7f0abc679300372be837b2ee8ac086928411e14f7d38bc4cef3c3c1d7aa580b98eb3a137c254db9413d6538a56d730290dbd13d9d61f74951620fcce2e35f18372bbaed7abb203f6a170a5331baa8aff46f1f951f2a8f18eebf96f59dd8914689bf24cc4eecfad4ff281bd1e054f9b236520ad29ee2292ec92d689f4cc57e70e7aa714b3ce8f8681fd079bfeda14e9e5ce63d89e9ed90547"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x0, 0x93, 0x0, [@generic={0xe7, 0x5, "2683e7f9de1dc1d03a1bf122df4b1fae39f3860b1df274dbd294c75ed98e6cb427f9e888e314c00725c88090241fa17370db8b3734b8306fe449e55589faa0fb4ce972b316f0209b8665fd9c7ffdfae27d0a37c8585836e84e467bad1b382e4123095ca97364c4783d0867c04da99c00df831056dd8990b7fb01855f3255db1309540ac93783dbe81db5964434467a628731f0d09e84c0cf3978693669b3ec582e1664f66de6423d2179c74e39d8f18f7f4c4fe01736d4259baec987d39d2f24cccd8ffad8616c59c29ca3f5b4e4f92750ac42ee08026a2d536264fbc8da68b869dea9062f"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x5, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0xf7, 0x3c00}, @generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x9, 0xdf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2a}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x7, 0x78, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}]}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x7, 0x9, 0x8, [@generic={0x62, 0x23, "6dfe20bb868be7f7ae87c13e9d8224270b1fae75c36f0995a6941788db7665ab7ad3c3a9f62f071ee25f6c40f204a3a2ae9b469cc9a521a8dd37e8b1ff4918ed6489a56e0e885ddbdda435778672105b1d9d2281f0be2e56437b16fcaec033d5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x8, 0x80, 0x2, [@generic={0xb4, 0x3, "4381c102f7ed846f8f99faa52bf16137502c3af4bebec62534c53677e6f18d9790c4085fce95794c35855ecf64397443f285f275756b98b132bfbe43fe2067ccae3f3d5c4cab20c5d5906e6005c9624d5daff520e3cce76bed6b58644666f5a37efc1354b5c7a519b8471016e51f06b509ffa5774a5cb1674f12647819d2f11ee19ec8b2eac01958e39c4570bffc1763b31cd8769acacb28fcb1cb881b99f46c543998da121e49c24f142b50261eb07836c3"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x6, 0x6c, 0x5, [@generic={0xe7, 0x23, "640f5b22e6206403df3333b88b165c070335ad83c8d1832cdab5593fa0ba0aad77ca4d00fad55ef269d09e09c7e73c0b83bb411c705c9fda4553ed1099890e50f19fc39ce3ecc409125656da866ee531a55efb870640b85d686e117de649666c6379f45c1c7ba7896c2623f1f72aa00fe932c8fe0f12b755529cfa71a0d9ec9cf938af3aa517b9591ffebd1e969a127d9f64fcc2932a94188153db29c34595977750816153762202e7f7e18cfe193ff4eed6c495a3aa63b7b6bd31e41f0f5de872680dfbfcb9ce7081a2d797a0f2df6062ec621c5dc24ac349b66bedc47c00e6206204aae5"}, @generic={0x92, 0x31, "f9aecf2f0b7e56e01ab1916929040c1153dcc5383cac2ff16c3f117f8de9225e855a3e6340c980d144d237d75b3ab2a3a3ccdacf2ca6086cdddaff712d0544b01c8553aadcd77a9469f042af65e4855f8c73797072b3d8b6d6f31420e572e03f3d46384d9015bd3b21258854f6bd0675a090645cbb241ce33beda30104f862a816098fe1711b7c33a7ebb296221ccbd5"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x2, 0x8, 0x5}}, {{0x9, 0x5, 0x8, 0xc, 0x7ef, 0x3, 0x9, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x6, 0xff, 0x8, [@generic={0x16, 0x1, "b46995b82e3078e9c9ececfd931a9a57385b0534"}, @generic={0x44, 0x9, "7fe3637c29425cefae984c8434530fe20e44b6ac4a59121f0f51e35afc3535d40adcac4af6a5fc01b7cf1d01eedc1e3e2fa3c42f587e436bf464992279fbb38ea3ae"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x7, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfc, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x401}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x5, 0x4, 0xc, [@generic={0xd7, 0x24, "7e2b93ef0799f224a9f54411323b614151273babcb658199a6b4a47cab29d56d60c9adf166ba577cdbce6b281b6d2a7eb9262add945a547505fd31c97de4d3176ce71c9b86cd6549000c09af91cc60eceed3f575a79971784ff30b48f3ca9365b353f5b1c7828b862acf58bc94493e03c49185e5db569e29ba740c726d411c47f87f8b75ca70c6f68b1d64bc790338e27193623d7f6dcc3df03d19c494a4a0d0dcce4035171b3fa8db157a7af4552b393e037c6371636b93ded49f8dfca8e8edc55e6ea72c394e1df769d6851d40d336ab2fd09805"}, @generic={0xe5, 0x23, "e760316477d645f45b5d03beb4c20b2de821f31ef37362e509ab5bacb381534522d7842b3187e8312b37f1372ff60a9b1907404fba1836f00c9254cdbfffd3f2a457de75f813ed42ee814d6e220da23a746c0f6837dd4de3c5dfa0f810c348024774798840801d5971b714bc48d30dac3105953c4a71cf44440af7141de329952b941b0176ad62cd9f313cea03a1250ba9d50b77aa480e2f57c260b9a3b121cf59a8462fe40748a03edefcf6862e5d1bf0958210b8dc96967eda5bafb94ddda543ef24df05adfc95b8c9d172759a40ad96a13d085bb1a4b1405e9c988aaec6ff29a93b"}]}}]}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) 2.006559693s ago: executing program 3 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}}}, 0x24}}, 0x0) (fail_nth: 7) 1.223177798s ago: executing program 3 (id=1283): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd4(r0, &(0x7f00000002c0)={[0x5, 0x1]}, 0x8, 0x80000) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000380)) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) recvmmsg(r0, &(0x7f0000005e80)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/8, 0xb}], 0x1, &(0x7f0000000180)}, 0xb65}, {{&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000002880), 0x2000000000000238, &(0x7f0000002900)=""/127, 0x7f}, 0x3}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000002980)=""/236, 0xec}, {&(0x7f0000005f00)=""/4099, 0x1000}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000000280)=""/36, 0x1d}, {&(0x7f0000000180)=""/26, 0x5a}, {&(0x7f0000004b00)=""/214, 0xd6}, {&(0x7f0000004c00)=""/196, 0xc4}, {&(0x7f0000004d00)=""/124, 0x86}, {&(0x7f0000004dc0)=""/4096, 0x1000}], 0x9, &(0x7f0000005e40)=""/44, 0x2c}, 0x9}], 0x3, 0x23, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000003c0)='1\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x191c) 801.348875ms ago: executing program 2 (id=1284): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000002940)={&(0x7f00000011c0)=@l2tp6={0xa, 0x0, 0xfffff001, @empty, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000100000024"], 0x10}, 0x8000) (fail_nth: 7) 117.768109ms ago: executing program 1 (id=1285): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x1, 0x38c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x0, 0x20004815}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 117.491283ms ago: executing program 3 (id=1286): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024969a01f352426ffa35cdf2922221ee503559afab0d6a3333b437c9f006321eefcb5a25e950ee20c9f0a8f22c300459f0b916a13e95535034cbfc412ab4361c3c1fd19b4761a411b1446253aadf66f5fff876fcacd124e0b5969c55160b13d89053364d99e5037083d19906be77241b117ef22a234edc4354d6ce3287dc0720118a5f3"], 0x0) pipe2$watch_queue(0x0, 0x80) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) write$UHID_INPUT(r3, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) 41.717423ms ago: executing program 2 (id=1287): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000200)=0x15) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000040)="e94f", 0x2}], 0x1) syz_usb_disconnect(r0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0xe, 0xae, {0xae, 0x30, "9ee705c14708731b8b288041e1b53e4ab628084e5118aa6bf0a05fcad669fe3dbbe8167ae91b394ec91060394c076fe1b87de0ad5b8132b0bcfef1cc22b1712ac55c2b79c1104e25855fd8adfd52ee9905f1cf7317471504afcdd5ec24c00d4a875d35df1771e3c7a16aed6562da14c8b3131ed8a64ca6e4e96b3460eba8c4a5da824a0b707c1380f2587aad155edc7258156fad9a2da9c61885d52195d228ac64fad78220c40ad8fd13896a"}}, &(0x7f0000000480)={0x0, 0x3, 0x25, @string={0x25, 0x3, "6882c0388c9a4d2a4debe922e0b5e585e627e7938d8c3a51f2531d421e9a97b04896d5"}}}, &(0x7f0000000440)={0x1c, &(0x7f0000000180)={0x40, 0x30, 0x57, "420b64d71e78d8ee6ad1570b2f329d55c9267f16710773b7637e7623269b145726144ae9a4782f75aff189b338a1e597ab9947266b2a5940b909171c60e5fd95b34ec25aaaf720b40cc9017d0965ea88ea3fef86be0d11"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x0, 0xf8, {0xf6, "22726248a466cb493997d953a211cae7948873ef3f1ea055fb63baaaed8f71375cb24c653ceca9511b196fd527d8880510696ce32f4f039ea07960179c4ed2dd5f0bc9b1abe75095053f87ce92984b2dea8200030c0ca34ccfd19966a9ba3d8fbff1dd88ece3aa5bb587b8c70bab76e23abfbd7f00b500fc5f4c126a027e8097cdb1c2011a137a7b1c39a1facd2d11b8ff6c324e99495befe3f53fa575b0846c2edc1928904f78ff3a7f8108997e6936b96b4661bbdd7ed0dfb2f6f1bec5d55902d09d16a202ebe4e0cc2b2ad7b23173315d02da95e41c49d90afb3c82843295afb1bec9d0e7355c844d990b3d0ad7df44765911be02"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0x1}}) 0s ago: executing program 4 (id=1288): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') io_setup(0x3, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) syz_clone(0x4010800, &(0x7f0000000380)="94e375e8313e93e0e2bd06e0f0ae282874517462af4eefda78bfc3e97ce7dc565c854ce3d17c41bb2382e144d3fd2823e3c0e4c24f5399858100050eb88d88f0dc92d1fc959e1066d8ca698b23d577ee8191718b8409a9db4d515dad1235d8c320243c05d0b0aadd30c22c946396db8b6fef33267ed1008d6a90ab9b0fd613c348a3fb109f549cdad6da684431f6341b25d5510537419b12c07b99358650aadffea4a7b5dddcdc21e0b30d9c89cbb7ca0894160d0d69da", 0xb7, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000004c0)="c6ab6d70df6de5040260018ceafb8d4cb594f6730d072041833f7270b7746b641b52e14a6ae8ad29cb2668ff0e5a31a67391e95b9134783713f6cd730cf92b05dc103bd59b9366df51997573d429726c3fb7912517806cc39e697719a6da946fcf7f5ff8b58f5729a853be31d3f428122c11549e50483d698dbf26e559dc773fe2116d34dd58aac70fc500cfee3fbe82925052af5f4bc560f373513a198d14a4d1547f3d55cade9f2b28b27aa88573b01e80d67dfa335ab5ab64e097b7aa5a22b89a") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) io_pgetevents(r1, 0x3, 0x5, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], &(0x7f0000000200), 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00') r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) kernel console output (not intermixed with test programs): kvm_vm_compat_ioctl+0x265/0x330 [ 427.612827][T10189] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 427.612853][T10189] ? vfs_write+0x8d8/0xa90 [ 427.612884][T10189] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 427.612915][T10189] __ia32_compat_sys_ioctl+0x554/0x840 [ 427.612942][T10189] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 427.612980][T10189] ? ksys_write+0x1e1/0x250 [ 427.613012][T10189] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 427.613041][T10189] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.613069][T10189] __do_fast_syscall_32+0xb4/0x110 [ 427.613099][T10189] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.613135][T10189] do_fast_syscall_32+0x34/0x80 [ 427.613164][T10189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.613188][T10189] RIP: 0023:0xf7f33539 [ 427.613206][T10189] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 427.613223][T10189] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 427.613244][T10189] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004018aebd [ 427.613257][T10189] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.613270][T10189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.613282][T10189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 427.613295][T10189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.613324][T10189] [ 427.818346][ T5931] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 428.329671][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 428.338952][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 428.507020][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 428.567777][T10217] tap0: tun_chr_ioctl cmd 1074025678 [ 428.582622][T10216] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1116'. [ 428.594546][T10217] tap0: group set to 0 [ 428.607406][T10216] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1116'. [ 428.740984][ T5931] usb 2-1: device descriptor read/64, error -71 [ 428.871308][ T5823] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 429.005581][ T5931] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 429.028506][ T5834] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 429.049693][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 429.058358][ T1554] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 429.075951][ T5823] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 429.084438][ T5823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.110398][ T5823] usb 5-1: config 0 has no interface number 0 [ 429.116562][ T5823] usb 5-1: config 0 interface 194 has no altsetting 0 [ 429.138427][ T5931] usb 2-1: device descriptor read/64, error -71 [ 429.162720][ T5823] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 429.172114][ T5823] usb 5-1: New USB device strings: Mfr=49, Product=0, SerialNumber=0 [ 429.195436][ T5823] usb 5-1: Manufacturer: syz [ 429.195770][ T5834] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.214122][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 429.228447][ T1554] usb 4-1: Using ep0 maxpacket: 32 [ 429.240083][ T1554] usb 4-1: config 8 has an invalid interface number: 72 but max is 0 [ 429.248957][ T5931] usb usb2-port1: attempt power cycle [ 429.259896][ T1554] usb 4-1: config 8 has an invalid descriptor of length 94, skipping remainder of the config [ 429.274225][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 429.284987][ T5823] usb 5-1: config 0 descriptor?? [ 429.287380][ T1554] usb 4-1: config 8 has no interface number 0 [ 429.298416][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 429.321212][ T1554] usb 4-1: config 8 interface 72 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 429.344330][ T1554] usb 4-1: config 8 interface 72 has no altsetting 0 [ 429.353659][ T5834] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 429.363282][ T5834] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 429.371544][ T5834] usb 6-1: Manufacturer: syz [ 429.379159][ T1554] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=b7.98 [ 429.388762][ T1554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.396781][ T1554] usb 4-1: Product: syz [ 429.405894][ T5834] usb 6-1: config 0 descriptor?? [ 429.420452][ T1554] usb 4-1: Manufacturer: syz [ 429.441514][ T1554] usb 4-1: SerialNumber: syz [ 429.598352][ T5931] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 429.660414][ T5931] usb 2-1: device descriptor read/8, error -71 [ 429.868362][ T5834] rc_core: IR keymap rc-hauppauge not found [ 429.874987][ T5834] Registered IR keymap rc-empty [ 429.881223][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 429.918453][ T5931] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 429.930098][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 429.969460][ T5931] usb 2-1: device descriptor read/8, error -71 [ 430.113535][ T5834] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 430.126745][ T5931] usb usb2-port1: unable to enumerate USB device [ 430.173125][ T5834] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input52 [ 430.199093][T10236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.212154][T10236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.245054][T10236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.254423][T10236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.290721][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 430.301070][ T49] usb 5-1: USB disconnect, device number 51 [ 430.328555][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 430.348501][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 430.398442][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 430.438514][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 430.588434][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 430.618470][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 430.638478][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 430.932073][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 430.952780][T10243] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1123'. [ 430.965452][T10244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.974143][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 430.987201][T10244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.031511][T10243] FAULT_INJECTION: forcing a failure. [ 431.031511][T10243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.050669][ T5834] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 431.129696][T10243] CPU: 1 UID: 0 PID: 10243 Comm: syz.1.1123 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 431.129725][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.129739][T10243] Call Trace: [ 431.129745][T10243] [ 431.129753][T10243] dump_stack_lvl+0x189/0x250 [ 431.129788][T10243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.129819][T10243] ? __pfx__printk+0x10/0x10 [ 431.129853][T10243] should_fail_ex+0x414/0x560 [ 431.129879][T10243] _copy_to_user+0x31/0xb0 [ 431.129907][T10243] simple_read_from_buffer+0xe1/0x170 [ 431.129930][T10243] proc_fail_nth_read+0x1df/0x250 [ 431.129967][T10243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.129999][T10243] ? rw_verify_area+0x258/0x650 [ 431.130021][T10243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.130048][T10243] vfs_read+0x1fd/0x980 [ 431.130069][T10243] ? __pfx___mutex_lock+0x10/0x10 [ 431.130093][T10243] ? __pfx_vfs_read+0x10/0x10 [ 431.130119][T10243] ? __fget_files+0x2a/0x420 [ 431.130151][T10243] ? __fget_files+0x3a0/0x420 [ 431.130175][T10243] ? __fget_files+0x2a/0x420 [ 431.130206][T10243] ksys_read+0x145/0x250 [ 431.130222][T10243] ? rcu_is_watching+0x15/0xb0 [ 431.130237][T10243] ? __pfx_ksys_read+0x10/0x10 [ 431.130265][T10243] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 431.130294][T10243] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.130320][T10243] __do_fast_syscall_32+0xb4/0x110 [ 431.130347][T10243] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.130369][T10243] do_fast_syscall_32+0x34/0x80 [ 431.130389][T10243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.130415][T10243] RIP: 0023:0xf706e539 [ 431.130434][T10243] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 431.130450][T10243] RSP: 002b:00000000f505e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 431.130471][T10243] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f505e620 [ 431.130484][T10243] RDX: 000000000000000f RSI: 00000000f73d2ff4 RDI: 0000000000000000 [ 431.130497][T10243] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 431.130505][T10243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 431.130513][T10243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.130534][T10243] [ 431.364632][ T5834] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 431.876286][ T1554] smsc75xx v1.0.0 [ 431.880220][ T1554] smsc75xx 4-1:8.72 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 431.908168][ T1554] smsc75xx 4-1:8.72: probe with driver smsc75xx failed with error -22 [ 431.938673][ T1554] usb 4-1: USB disconnect, device number 64 [ 432.738605][ T5823] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 432.913508][ T5823] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 432.934300][ T5823] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 432.998366][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.035602][ T5823] usb 5-1: Product: syz [ 433.038093][T10266] netlink: 'syz.3.1130': attribute type 10 has an invalid length. [ 433.053880][T10266] veth0_vlan: entered allmulticast mode [ 433.093728][ T5823] usb 5-1: Manufacturer: syz [ 433.113922][ T5823] usb 5-1: SerialNumber: syz [ 433.146079][ T5823] usb 5-1: config 0 descriptor?? [ 433.153543][T10266] veth0_vlan: left promiscuous mode [ 433.182476][T10266] veth0_vlan: entered promiscuous mode [ 433.207002][T10266] team0: Device veth0_vlan failed to register rx_handler [ 433.692459][ T1554] usb 6-1: USB disconnect, device number 29 [ 433.881609][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 433.881629][ T30] audit: type=1800 audit(1748320484.165:643): pid=10273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1133" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 434.019082][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1134'. [ 434.457691][T10279] input: syz0 as /devices/virtual/input/input53 [ 434.768522][ T5894] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 434.951709][ T5894] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 434.965471][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.971540][T10287] fuse: Bad value for 'user_id' [ 434.980385][ T5894] usb 6-1: Product: syz [ 434.984819][ T5894] usb 6-1: Manufacturer: syz [ 434.988684][T10287] fuse: Bad value for 'user_id' [ 434.989902][ T5894] usb 6-1: SerialNumber: syz [ 435.004427][ T5894] usb 6-1: config 0 descriptor?? [ 435.066448][ T5894] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 435.587781][ T5823] usb 5-1: USB disconnect, device number 52 [ 435.635460][ T5894] usb 6-1: USB disconnect, device number 30 [ 436.528709][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 436.538323][ T5890] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 436.581701][ T5890] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 437.088576][ T1554] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 437.283700][ T1554] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.314153][ T1554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 437.395535][ T1554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 437.438318][ T5834] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 437.458592][ T1554] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 437.568068][ T1554] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 437.591283][ T1554] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 437.610691][ T1554] usb 2-1: Manufacturer: syz [ 437.629585][ T1554] usb 2-1: config 0 descriptor?? [ 437.638359][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 437.878514][ T5931] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 438.030462][ T1554] rc_core: IR keymap rc-hauppauge not found [ 438.043983][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 438.054661][ T1554] Registered IR keymap rc-empty [ 438.169914][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.219682][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.238833][T10341] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002 [ 438.253107][ T1554] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 438.277430][ T1554] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input54 [ 438.308657][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.328628][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.348728][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.368581][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.388521][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.418535][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.448787][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.488743][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.508441][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.548947][ T1554] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 438.576328][ T1554] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 438.586139][ T1554] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 438.904719][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.916443][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.310840][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 439.463631][T10359] loop2: detected capacity change from 0 to 7 [ 439.475123][T10359] Dev loop2: unable to read RDB block 7 [ 439.483885][T10354] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 439.490509][T10354] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 439.502718][T10359] loop2: unable to read partition table [ 439.572910][T10359] loop2: partition table beyond EOD, truncated [ 439.598962][T10354] vhci_hcd vhci_hcd.0: Device attached [ 439.627040][T10359] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 439.675567][T10360] vhci_hcd: connection closed [ 439.676146][ T3002] vhci_hcd: stop threads [ 439.772778][ T3002] vhci_hcd: release socket [ 439.829913][ T3002] vhci_hcd: disconnect device [ 439.858754][ T1554] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 439.946598][ T1554] usb 39-1: enqueue for inactive port 0 [ 440.044017][ T5834] usb 6-1: unable to get BOS descriptor or descriptor too short [ 440.066782][ T1554] vhci_hcd: vhci_device speed not set [ 440.090727][ T5834] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 440.123699][ T5834] usb 6-1: can't read configurations, error -71 [ 440.136164][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.142754][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.296018][T10368] FAULT_INJECTION: forcing a failure. [ 440.296018][T10368] name failslab, interval 1, probability 0, space 0, times 0 [ 440.310140][T10368] CPU: 0 UID: 0 PID: 10368 Comm: syz.4.1154 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 440.310167][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.310184][T10368] Call Trace: [ 440.310192][T10368] [ 440.310201][T10368] dump_stack_lvl+0x189/0x250 [ 440.310240][T10368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.310270][T10368] ? __pfx__printk+0x10/0x10 [ 440.310297][T10368] ? __pfx___might_resched+0x10/0x10 [ 440.310316][T10368] ? fs_reclaim_acquire+0x7d/0x100 [ 440.310352][T10368] should_fail_ex+0x414/0x560 [ 440.310381][T10368] should_failslab+0xa8/0x100 [ 440.310411][T10368] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 440.310438][T10368] ? __alloc_skb+0x112/0x2d0 [ 440.310469][T10368] __alloc_skb+0x112/0x2d0 [ 440.310500][T10368] netlink_ack+0x146/0xa50 [ 440.310521][T10368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.310557][T10368] ? ref_tracker_free+0x63a/0x7d0 [ 440.310578][T10368] ? __copy_skb_header+0xa7/0x550 [ 440.310618][T10368] netlink_rcv_skb+0x2a0/0x490 [ 440.310644][T10368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.310676][T10368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.310726][T10368] ? down_read+0x1ad/0x2e0 [ 440.310758][T10368] genl_rcv+0x28/0x40 [ 440.310786][T10368] netlink_unicast+0x75b/0x8d0 [ 440.310820][T10368] netlink_sendmsg+0x805/0xb30 [ 440.310856][T10368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.310892][T10368] ? __import_iovec+0x5d4/0x7f0 [ 440.310918][T10368] ? aa_sock_msg_perm+0x94/0x160 [ 440.310944][T10368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.310968][T10368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.310994][T10368] __sock_sendmsg+0x21c/0x270 [ 440.311019][T10368] ____sys_sendmsg+0x505/0x830 [ 440.311054][T10368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.311102][T10368] ___sys_sendmsg+0x21f/0x2a0 [ 440.311134][T10368] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.311203][T10368] ? __fget_files+0x2a/0x420 [ 440.311231][T10368] ? __fget_files+0x3a0/0x420 [ 440.311268][T10368] __sys_sendmsg+0x164/0x220 [ 440.311300][T10368] ? __pfx___sys_sendmsg+0x10/0x10 [ 440.311345][T10368] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 440.311372][T10368] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.311399][T10368] __do_fast_syscall_32+0xb4/0x110 [ 440.311436][T10368] do_fast_syscall_32+0x34/0x80 [ 440.311464][T10368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.311511][T10368] RIP: 0023:0xf7ff1539 [ 440.311529][T10368] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 440.311546][T10368] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 440.311567][T10368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 440.311581][T10368] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.311593][T10368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.311605][T10368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 440.311617][T10368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.311646][T10368] [ 440.684426][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1153'. [ 440.806251][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 440.815069][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 440.823194][ T5931] usb 3-1: can't read configurations, error -71 [ 441.028979][ T5939] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 441.071428][ T5913] usb 2-1: USB disconnect, device number 39 [ 441.128312][ T5834] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 441.342440][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 441.428401][ T5834] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 441.475967][ T5939] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 441.488549][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.505409][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 441.563843][ T5834] usb 6-1: config 0 descriptor?? [ 441.583050][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 441.620027][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.644659][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 441.658586][ T5939] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 441.667913][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.676201][ T5939] usb 4-1: Product: syz [ 441.680559][ T5939] usb 4-1: Manufacturer: syz [ 441.685188][ T5939] usb 4-1: SerialNumber: syz [ 441.693209][ T5939] usb 4-1: config 0 descriptor?? [ 441.698296][ T5931] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 441.708618][T10373] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 441.774202][ T5939] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 441.794403][ T5939] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 441.962267][ T5931] usb 3-1: config index 0 descriptor too short (expected 26953, got 77) [ 441.971496][ T5931] usb 3-1: config 31 has too many interfaces: 160, using maximum allowed: 32 [ 441.985062][T10392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.040338][ T5931] usb 3-1: config 31 has an invalid descriptor of length 255, skipping remainder of the config [ 442.069654][T10392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.125991][ T5931] usb 3-1: config 31 has 0 interfaces, different from the descriptor's value: 160 [ 442.208138][ T5834] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 442.224772][ T5834] asix 6-1:0.0: probe with driver asix failed with error -71 [ 442.233487][ T5939] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 442.247226][ T5931] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 442.266776][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.281966][ T5834] usb 6-1: USB disconnect, device number 32 [ 442.292696][ T5931] usb 3-1: Product: syz [ 442.296884][ T5931] usb 3-1: Manufacturer: syz [ 442.329597][ T5931] usb 3-1: SerialNumber: syz [ 442.458377][T10394] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1155'. [ 442.739486][T10386] [U]  [ 442.742317][T10386] [U] K{‘ [ 442.745453][T10386] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 442.753379][T10386] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 442.806328][T10386] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 442.825862][T10386] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 442.868706][ T8281] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 442.885529][T10386] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 442.918521][T10386] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 442.934341][T10386] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 442.955654][T10386] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 443.162862][ T8281] usb 2-1: config 0 interface 0 has no altsetting 0 [ 443.171641][ T8281] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 443.181026][ T8281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.189748][T10386] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 443.202080][ T8281] usb 2-1: config 0 descriptor?? [ 443.207830][T10386] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 443.208603][T10395] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 443.237597][T10404] vxcan0: tx address claim with dlc 0 [ 443.254645][T10386] [U] 22½“Æ©Ðû©x?0;3u± [ 443.274276][T10386] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 443.300768][T10386] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 443.346938][T10386] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 443.360975][T10386] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 443.369156][T10386] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 443.382935][T10386] [U] ¹ ec [ 443.386084][T10386] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 443.647039][ T49] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 443.737809][ T8281] lenovo 0003:17EF:60B5.0008: item fetching failed at offset 10/11 [ 443.749552][ T8281] lenovo 0003:17EF:60B5.0008: hid_parse failed [ 443.756051][ T8281] lenovo 0003:17EF:60B5.0008: probe with driver lenovo failed with error -22 [ 443.805144][ T5834] usb 4-1: USB disconnect, device number 65 [ 443.818794][ T49] usb 6-1: Using ep0 maxpacket: 8 [ 443.936521][ T1554] usb 2-1: USB disconnect, device number 40 [ 444.211430][T10415] team_slave_1: entered promiscuous mode [ 444.217829][T10415] vlan2: entered promiscuous mode [ 444.799311][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 444.839159][T10381] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 444.868848][ T5931] usb 3-1: USB disconnect, device number 61 [ 445.018597][ T8281] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 445.026438][ T5894] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 445.191179][ T8281] usb 5-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 445.216067][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.239106][ T8281] usb 5-1: config 9 has no interfaces? [ 445.247231][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 445.264881][ T8281] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 445.276388][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.288403][ T8281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.298912][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 445.337888][ T5894] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 445.362705][ T5894] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.390568][ T5894] usb 4-1: Manufacturer: syz [ 445.404477][ T5894] usb 4-1: config 0 descriptor?? [ 445.481178][T10438] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1169'. [ 445.730921][ T5894] rc_core: IR keymap rc-hauppauge not found [ 445.744331][ T5894] Registered IR keymap rc-empty [ 445.754184][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 445.788582][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 445.813429][ T5894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 445.841000][ T5894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input55 [ 445.912598][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 445.968601][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 445.998696][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.069565][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.136659][ T49] usb 6-1: unable to get BOS descriptor or descriptor too short [ 446.147226][ T49] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 446.158779][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.217642][ T49] usb 6-1: can't read configurations, error -71 [ 446.303719][T10451] [U]  [ 446.306558][T10451] [U] K{‘ [ 446.309855][T10451] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 446.317025][T10451] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 446.348350][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.364791][T10451] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 446.385547][T10452] FAULT_INJECTION: forcing a failure. [ 446.385547][T10452] name failslab, interval 1, probability 0, space 0, times 0 [ 446.426716][T10451] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 446.468877][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.477954][T10452] CPU: 0 UID: 0 PID: 10452 Comm: syz.5.1173 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 446.477983][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.477998][T10452] Call Trace: [ 446.478007][T10452] [ 446.478018][T10452] dump_stack_lvl+0x189/0x250 [ 446.478059][T10452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.478098][T10452] ? __pfx__printk+0x10/0x10 [ 446.478127][T10452] ? __pfx___might_resched+0x10/0x10 [ 446.478148][T10452] ? fs_reclaim_acquire+0x7d/0x100 [ 446.478184][T10452] should_fail_ex+0x414/0x560 [ 446.478217][T10452] should_failslab+0xa8/0x100 [ 446.478249][T10452] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 446.478278][T10452] ? __alloc_skb+0x112/0x2d0 [ 446.478308][T10452] __alloc_skb+0x112/0x2d0 [ 446.478340][T10452] netlink_ack+0x146/0xa50 [ 446.478363][T10452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.478393][T10452] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 446.478418][T10452] ? __pfx_nl80211_post_doit+0x10/0x10 [ 446.478444][T10452] ? ref_tracker_free+0x63a/0x7d0 [ 446.478467][T10452] ? __copy_skb_header+0xa7/0x550 [ 446.478507][T10452] netlink_rcv_skb+0x2a0/0x490 [ 446.478535][T10452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.478568][T10452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.478620][T10452] ? down_read+0x1ad/0x2e0 [ 446.478654][T10452] genl_rcv+0x28/0x40 [ 446.478683][T10452] netlink_unicast+0x75b/0x8d0 [ 446.478719][T10452] netlink_sendmsg+0x805/0xb30 [ 446.478757][T10452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.478786][T10452] ? __import_iovec+0x5d4/0x7f0 [ 446.478813][T10452] ? aa_sock_msg_perm+0x94/0x160 [ 446.478841][T10452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.478866][T10452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.478894][T10452] __sock_sendmsg+0x21c/0x270 [ 446.478921][T10452] ____sys_sendmsg+0x505/0x830 [ 446.478957][T10452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.479005][T10452] ___sys_sendmsg+0x21f/0x2a0 [ 446.479039][T10452] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.479116][T10452] ? __fget_files+0x2a/0x420 [ 446.479145][T10452] ? __fget_files+0x3a0/0x420 [ 446.479185][T10452] __sys_sendmsg+0x164/0x220 [ 446.479219][T10452] ? __pfx___sys_sendmsg+0x10/0x10 [ 446.479266][T10452] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 446.479295][T10452] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.479325][T10452] __do_fast_syscall_32+0xb4/0x110 [ 446.479356][T10452] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.479387][T10452] do_fast_syscall_32+0x34/0x80 [ 446.479415][T10452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.479441][T10452] RIP: 0023:0xf7f93539 [ 446.479460][T10452] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 446.479480][T10452] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 446.479502][T10452] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 446.479518][T10452] RDX: 0000000000040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.479531][T10452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.479544][T10452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 446.479557][T10452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.479588][T10452] [ 446.538905][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.839060][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.857432][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.868404][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.878884][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.907743][ T5894] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 446.931153][ T5894] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 446.978619][T10451] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 447.032053][T10451] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 447.073706][T10451] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 447.094016][T10451] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 447.186756][T10451] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 447.195410][T10451] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 447.209152][T10451] [U] 22½“Æ©Ðû©x?0;3u± [ 447.213412][T10451] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 447.238541][T10451] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 447.247901][T10451] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 447.729117][ T8281] usb 5-1: string descriptor 0 read error: -71 [ 447.810374][T10451] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 447.816624][T10451] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 447.844406][ T8281] usb 5-1: USB disconnect, device number 53 [ 447.894216][T10451] [U] ¹ ec [ 447.897422][T10451] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 447.931552][T10451] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 448.488827][T10463] xt_CT: No such helper "netbios-ns" [ 449.620069][ T1554] usb 4-1: USB disconnect, device number 66 [ 449.672896][ T5931] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 449.838042][ T5931] usb 2-1: config 0 has no interfaces? [ 449.859595][ T5931] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 449.869681][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.890783][ T5931] usb 2-1: Product: syz [ 449.895011][ T5931] usb 2-1: Manufacturer: syz [ 449.911121][ T5931] usb 2-1: SerialNumber: syz [ 449.939607][ T5931] usb 2-1: config 0 descriptor?? [ 450.108388][ T1554] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 450.258658][ T8281] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 450.269813][ T1554] usb 4-1: device descriptor read/64, error -71 [ 450.538000][ T8281] usb 6-1: Using ep0 maxpacket: 8 [ 450.568376][ T1554] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 450.632496][T10506] FAULT_INJECTION: forcing a failure. [ 450.632496][T10506] name failslab, interval 1, probability 0, space 0, times 0 [ 450.656521][T10506] CPU: 1 UID: 0 PID: 10506 Comm: syz.2.1185 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 450.656553][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.656563][T10506] Call Trace: [ 450.656570][T10506] [ 450.656577][T10506] dump_stack_lvl+0x189/0x250 [ 450.656605][T10506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.656627][T10506] ? __pfx__printk+0x10/0x10 [ 450.656647][T10506] ? __pfx___might_resched+0x10/0x10 [ 450.656663][T10506] ? fs_reclaim_acquire+0x7d/0x100 [ 450.656690][T10506] should_fail_ex+0x414/0x560 [ 450.656710][T10506] should_failslab+0xa8/0x100 [ 450.656732][T10506] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 450.656753][T10506] ? __alloc_skb+0x112/0x2d0 [ 450.656775][T10506] __alloc_skb+0x112/0x2d0 [ 450.656798][T10506] netlink_ack+0x146/0xa50 [ 450.656814][T10506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.656835][T10506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 450.656852][T10506] ? __pfx_nl80211_post_doit+0x10/0x10 [ 450.656871][T10506] ? ref_tracker_free+0x63a/0x7d0 [ 450.656887][T10506] ? __copy_skb_header+0xa7/0x550 [ 450.656921][T10506] netlink_rcv_skb+0x2a0/0x490 [ 450.656940][T10506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.656964][T10506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.657000][T10506] ? down_read+0x1ad/0x2e0 [ 450.657023][T10506] genl_rcv+0x28/0x40 [ 450.657044][T10506] netlink_unicast+0x75b/0x8d0 [ 450.657069][T10506] netlink_sendmsg+0x805/0xb30 [ 450.657095][T10506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.657117][T10506] ? __import_iovec+0x5d4/0x7f0 [ 450.657146][T10506] ? aa_sock_msg_perm+0x94/0x160 [ 450.657175][T10506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.657194][T10506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.657214][T10506] __sock_sendmsg+0x21c/0x270 [ 450.657234][T10506] ____sys_sendmsg+0x505/0x830 [ 450.657260][T10506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.657294][T10506] ___sys_sendmsg+0x21f/0x2a0 [ 450.657317][T10506] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.657366][T10506] ? __fget_files+0x2a/0x420 [ 450.657385][T10506] ? __fget_files+0x3a0/0x420 [ 450.657425][T10506] __sys_sendmsg+0x164/0x220 [ 450.657457][T10506] ? __pfx___sys_sendmsg+0x10/0x10 [ 450.657505][T10506] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 450.657527][T10506] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.657547][T10506] __do_fast_syscall_32+0xb4/0x110 [ 450.657573][T10506] do_fast_syscall_32+0x34/0x80 [ 450.657592][T10506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.657610][T10506] RIP: 0023:0xf7f33539 [ 450.657623][T10506] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 450.657636][T10506] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 450.657653][T10506] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 450.657665][T10506] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.657674][T10506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.657683][T10506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 450.657691][T10506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.657713][T10506] [ 451.341888][ T1554] usb 4-1: device descriptor read/64, error -71 [ 451.478725][ T1554] usb usb4-port1: attempt power cycle [ 451.848307][ T1554] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 451.918777][ T1554] usb 4-1: device descriptor read/8, error -71 [ 452.108929][ T49] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 452.178341][ T1554] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 452.203015][ T1554] usb 4-1: device descriptor read/8, error -71 [ 452.270507][ T49] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.281555][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.294054][ T49] usb 3-1: config 0 has no interface number 0 [ 452.304244][ T49] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 452.314764][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.323033][ T49] usb 3-1: Product: syz [ 452.327494][ T49] usb 3-1: Manufacturer: syz [ 452.330259][ T1554] usb usb4-port1: unable to enumerate USB device [ 452.332902][ T49] usb 3-1: SerialNumber: syz [ 452.353038][ T49] usb 3-1: config 0 descriptor?? [ 452.370046][ T49] cx231xx 3-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 452.379300][ T49] cx231xx 3-1:0.1: Not found matching IAD interface [ 452.408466][ T5931] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 452.572072][ T5931] usb 5-1: unable to get BOS descriptor or descriptor too short [ 452.585864][ T5931] usb 5-1: config 7 has an invalid interface number: 175 but max is 0 [ 452.597562][ T5931] usb 5-1: config 7 has no interface number 0 [ 452.607331][ T5931] usb 5-1: config 7 interface 175 has no altsetting 0 [ 452.616557][T10513] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1187'. [ 452.626238][T10513] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 452.637393][ T5931] usb 5-1: string descriptor 0 read error: -22 [ 452.643925][ T5931] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=33.dd [ 452.653766][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.678625][ T1554] usb 3-1: USB disconnect, device number 62 [ 452.699203][ T5931] usbserial_generic 5-1:7.175: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 452.723030][ T5931] usbserial_generic 5-1:7.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 452.735928][ T5931] usbserial_generic 5-1:7.175: device has no bulk endpoints [ 452.764858][ T5931] usbhid 5-1:7.175: couldn't find an input interrupt endpoint [ 452.807596][ T8281] usb 6-1: unable to get BOS descriptor or descriptor too short [ 452.838753][ T8281] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 452.872195][ T8281] usb 6-1: can't read configurations, error -71 [ 452.897726][ T49] usb 5-1: USB disconnect, device number 54 [ 452.957880][T10518] FAULT_INJECTION: forcing a failure. [ 452.957880][T10518] name failslab, interval 1, probability 0, space 0, times 0 [ 452.977017][T10518] CPU: 1 UID: 0 PID: 10518 Comm: syz.5.1190 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 452.977045][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.977059][T10518] Call Trace: [ 452.977067][T10518] [ 452.977077][T10518] dump_stack_lvl+0x189/0x250 [ 452.977114][T10518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.977143][T10518] ? __pfx__printk+0x10/0x10 [ 452.977182][T10518] ? __pfx___might_resched+0x10/0x10 [ 452.977201][T10518] ? fs_reclaim_acquire+0x7d/0x100 [ 452.977237][T10518] should_fail_ex+0x414/0x560 [ 452.977266][T10518] should_failslab+0xa8/0x100 [ 452.977297][T10518] __kmalloc_cache_noprof+0x70/0x3d0 [ 452.977324][T10518] ? nf_tables_newtable+0x435/0x1890 [ 452.977364][T10518] nf_tables_newtable+0x435/0x1890 [ 452.977390][T10518] ? nfnetlink_has_listeners+0x11/0x50 [ 452.977441][T10518] nfnetlink_rcv+0x113f/0x2530 [ 452.977508][T10518] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 452.977536][T10518] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 452.977577][T10518] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 452.977644][T10518] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 452.977669][T10518] ? skb_clone+0x246/0x3a0 [ 452.977714][T10518] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.977748][T10518] netlink_unicast+0x75b/0x8d0 [ 452.977789][T10518] netlink_sendmsg+0x805/0xb30 [ 452.977825][T10518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.977853][T10518] ? __import_iovec+0x5d4/0x7f0 [ 452.977880][T10518] ? aa_sock_msg_perm+0x94/0x160 [ 452.977904][T10518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.977928][T10518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.977954][T10518] __sock_sendmsg+0x21c/0x270 [ 452.977979][T10518] ____sys_sendmsg+0x505/0x830 [ 452.978015][T10518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.978060][T10518] ___sys_sendmsg+0x21f/0x2a0 [ 452.978091][T10518] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.978159][T10518] ? __fget_files+0x2a/0x420 [ 452.978186][T10518] ? __fget_files+0x3a0/0x420 [ 452.978225][T10518] __sys_sendmsg+0x164/0x220 [ 452.978256][T10518] ? __pfx___sys_sendmsg+0x10/0x10 [ 452.978301][T10518] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 452.978330][T10518] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.978368][T10518] __do_fast_syscall_32+0xb4/0x110 [ 452.978398][T10518] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.978429][T10518] do_fast_syscall_32+0x34/0x80 [ 452.978457][T10518] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.978482][T10518] RIP: 0023:0xf7f93539 [ 452.978501][T10518] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 452.978519][T10518] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 452.978541][T10518] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 452.978557][T10518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.978569][T10518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.978582][T10518] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 452.978594][T10518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.978625][T10518] [ 453.543200][ T5834] usb 2-1: USB disconnect, device number 41 [ 454.158050][T10523] IPv6: sit1: Disabled Multicast RS [ 454.175024][T10523] sit1: entered allmulticast mode [ 454.320193][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 454.330429][T10536] FAULT_INJECTION: forcing a failure. [ 454.330429][T10536] name failslab, interval 1, probability 0, space 0, times 0 [ 454.347989][T10536] CPU: 0 UID: 0 PID: 10536 Comm: syz.4.1196 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 454.348018][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.348033][T10536] Call Trace: [ 454.348042][T10536] [ 454.348052][T10536] dump_stack_lvl+0x189/0x250 [ 454.348092][T10536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.348122][T10536] ? __pfx__printk+0x10/0x10 [ 454.348149][T10536] ? __pfx___might_resched+0x10/0x10 [ 454.348170][T10536] ? fs_reclaim_acquire+0x7d/0x100 [ 454.348209][T10536] should_fail_ex+0x414/0x560 [ 454.348237][T10536] should_failslab+0xa8/0x100 [ 454.348268][T10536] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 454.348295][T10536] ? __alloc_skb+0x112/0x2d0 [ 454.348328][T10536] __alloc_skb+0x112/0x2d0 [ 454.348359][T10536] netlink_ack+0x146/0xa50 [ 454.348381][T10536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.348411][T10536] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 454.348435][T10536] ? __pfx_nl80211_post_doit+0x10/0x10 [ 454.348461][T10536] ? ref_tracker_free+0x63a/0x7d0 [ 454.348484][T10536] ? __copy_skb_header+0xa7/0x550 [ 454.348525][T10536] netlink_rcv_skb+0x2a0/0x490 [ 454.348551][T10536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.348591][T10536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.348643][T10536] ? down_read+0x1ad/0x2e0 [ 454.348675][T10536] genl_rcv+0x28/0x40 [ 454.348704][T10536] netlink_unicast+0x75b/0x8d0 [ 454.348739][T10536] netlink_sendmsg+0x805/0xb30 [ 454.348775][T10536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.348804][T10536] ? __import_iovec+0x5d4/0x7f0 [ 454.348832][T10536] ? aa_sock_msg_perm+0x94/0x160 [ 454.348859][T10536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.348883][T10536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.348910][T10536] __sock_sendmsg+0x21c/0x270 [ 454.348937][T10536] ____sys_sendmsg+0x505/0x830 [ 454.348974][T10536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.349022][T10536] ___sys_sendmsg+0x21f/0x2a0 [ 454.349055][T10536] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.349125][T10536] ? __fget_files+0x2a/0x420 [ 454.349153][T10536] ? __fget_files+0x3a0/0x420 [ 454.349193][T10536] __sys_sendmsg+0x164/0x220 [ 454.349225][T10536] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.349271][T10536] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 454.349299][T10536] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.349328][T10536] __do_fast_syscall_32+0xb4/0x110 [ 454.349357][T10536] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.349388][T10536] do_fast_syscall_32+0x34/0x80 [ 454.349417][T10536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 454.349443][T10536] RIP: 0023:0xf7ff1539 [ 454.349461][T10536] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 454.349495][T10536] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 454.349518][T10536] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 454.349532][T10536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.349545][T10536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.349562][T10536] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 454.349575][T10536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.349606][T10536] [ 454.738510][ T8281] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 454.746268][ T49] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 454.892358][ T49] usb 3-1: device descriptor read/64, error -71 [ 454.933317][ T8281] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.996899][T10540] input: syz0 as /devices/virtual/input/input56 [ 455.003826][ T8281] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 455.042675][ T8281] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 455.071179][ T8281] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 455.098479][ T8281] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 455.107790][ T8281] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 455.116614][ T8281] usb 6-1: Manufacturer: syz [ 455.140982][ T8281] usb 6-1: config 0 descriptor?? [ 455.231344][ T49] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 455.389697][ T49] usb 3-1: device descriptor read/64, error -71 [ 455.519680][T10564] netlink: 'syz.4.1202': attribute type 6 has an invalid length. [ 455.530551][ T49] usb usb3-port1: attempt power cycle [ 455.538826][T10564] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1202'. [ 455.580473][T10564] netlink: 'syz.4.1202': attribute type 3 has an invalid length. [ 455.658641][ T1554] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 455.700067][ T8281] rc_core: IR keymap rc-hauppauge not found [ 455.705999][ T8281] Registered IR keymap rc-empty [ 455.711232][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 455.768335][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 455.809817][ T8281] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 455.860515][ T8281] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input57 [ 455.936586][ T49] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 456.049795][ T1554] usb 2-1: Using ep0 maxpacket: 8 [ 456.082698][ T5894] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 456.128937][ T49] usb 3-1: device descriptor read/8, error -71 [ 456.155663][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 456.218629][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 456.249801][ T5894] usb 5-1: device descriptor read/64, error -71 [ 456.262494][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 456.329179][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 456.401140][ T49] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 456.410052][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 456.468344][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 456.474353][T10571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.502381][ T49] usb 3-1: device descriptor read/8, error -71 [ 456.538376][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 456.558801][ T5894] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 456.585736][T10571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.597557][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 456.642513][ T49] usb usb3-port1: unable to enumerate USB device [ 456.668416][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 456.708487][ T5894] usb 5-1: device descriptor read/64, error -71 [ 456.724092][ T8281] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 456.793497][ T8281] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 456.834097][ T8281] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 456.891159][ T5894] usb usb5-port1: attempt power cycle [ 457.288673][ T5894] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 457.329353][ T5894] usb 5-1: device descriptor read/8, error -71 [ 457.578303][ T5894] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 457.609015][ T5894] usb 5-1: device descriptor read/8, error -71 [ 457.676243][T10576] xt_CT: No such helper "netbios-ns" [ 457.718414][ T5931] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 457.730852][ T5894] usb usb5-port1: unable to enumerate USB device [ 457.889156][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 457.914766][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 457.974690][ T5931] usb 3-1: config 253 has an invalid interface number: 202 but max is 0 [ 458.022933][ T5931] usb 3-1: config 253 has no interface number 0 [ 458.063230][ T5931] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 458.167604][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.203291][ T1554] usb 2-1: unable to get BOS descriptor or descriptor too short [ 458.213572][ T1554] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 458.228486][ T5931] usb 3-1: Product: 橛딹醔ᢚ웊鎰≿ë›å¨“軬ꔧ趪п㪌ݓี橅৽岙㴶á±ï’’㔚䑞疟ï˜â‰»è…½æ¦…ᬷ敯ﻳ⎕赻㨟身㓢死듄ç¬æ²¤ì½¹í’­ã¾³ë‘…쥌ᶜ䂰㨴칖Ộ [ 458.247093][ T1554] usb 2-1: can't read configurations, error -71 [ 458.300167][ T5931] usb 3-1: Manufacturer: 㙷ệ骠곿ë¨ê¾ƒë£žæ”‘î€å¦­äŒ½ç§®èƒî¿Ôžê´½ç¬ƒî‚žå¢ˆæ£†æ¹‰î¦ºì‰©ê•ˆç®¬î€¥á²±è´€ìµ’ꨗ廵ﮩ旒멗ﴞ벩央䊓啜嗄꩸矡뼵ï‘垞颼좥꯰ë”⛴랦ꯛæŠâ™ìŠ³ë¤µê†ºé›à¡ê½‚춑꾎䦯䟤顛◢러洹歆鹜ᛨᎋᅕ⎽윷뎋匙鷱ê…Ж홥ì‘삥窵鬬며ጂ⤚뾣蹗ᩆ൤斣븣⫭줳éŠê¥¥â—® [ 458.685730][T10574] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000 [ 458.795356][ T30] audit: type=1326 audit(1748320509.085:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 458.853731][ T30] audit: type=1326 audit(1748320509.085:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 459.000100][ T30] audit: type=1326 audit(1748320509.255:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 459.153531][ T30] audit: type=1326 audit(1748320509.255:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 459.220420][ T5834] usb 6-1: USB disconnect, device number 37 [ 459.236380][ T30] audit: type=1326 audit(1748320509.265:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 459.329934][ T30] audit: type=1326 audit(1748320509.265:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 459.333164][ T5931] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 459.365480][ T53] usb 3-1: Failed to submit usb control message: -71 [ 459.426086][ T5931] usb 3-1: USB disconnect, device number 67 [ 459.448291][ T53] usb 3-1: unable to send the bmi data to the device: -71 [ 459.488399][ T1554] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 459.493393][ T53] usb 3-1: unable to get target info from device [ 459.517585][ T30] audit: type=1326 audit(1748320509.265:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 459.552797][T10598] FAULT_INJECTION: forcing a failure. [ 459.552797][T10598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 459.573590][ T53] usb 3-1: could not get target info (-71) [ 459.594106][ T53] usb 3-1: could not probe fw (-71) [ 459.604195][ T30] audit: type=1326 audit(1748320509.265:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 459.633978][T10598] CPU: 1 UID: 0 PID: 10598 Comm: syz.5.1210 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 459.634007][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 459.634021][T10598] Call Trace: [ 459.634030][T10598] [ 459.634047][T10598] dump_stack_lvl+0x189/0x250 [ 459.634086][T10598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.634115][T10598] ? __pfx__printk+0x10/0x10 [ 459.634138][T10598] ? fs_reclaim_acquire+0x7d/0x100 [ 459.634179][T10598] should_fail_ex+0x414/0x560 [ 459.634206][T10598] prepare_alloc_pages+0x213/0x610 [ 459.634246][T10598] __alloc_frozen_pages_noprof+0x123/0x370 [ 459.634271][T10598] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 459.634295][T10598] ? __lock_acquire+0xaac/0xd20 [ 459.634336][T10598] ? policy_nodemask+0x27c/0x720 [ 459.634369][T10598] alloc_pages_mpol+0x232/0x4a0 [ 459.634403][T10598] alloc_pages_noprof+0xa9/0x190 [ 459.634433][T10598] get_free_pages_noprof+0xc/0x30 [ 459.634452][T10598] __pollwait+0x27b/0x460 [ 459.634478][T10598] ? __pfx___pollwait+0x10/0x10 [ 459.634502][T10598] pipe_poll+0x16c/0x470 [ 459.634531][T10598] ? __pfx_pipe_poll+0x10/0x10 [ 459.634558][T10598] do_sys_poll+0x8be/0x1050 [ 459.634592][T10598] ? do_sys_poll+0x381/0x1050 [ 459.634626][T10598] ? __pfx_do_sys_poll+0x10/0x10 [ 459.634661][T10598] ? __pfx___pollwait+0x10/0x10 [ 459.634691][T10598] ? __pfx_pollwake+0x10/0x10 [ 459.634721][T10598] ? __pfx_pollwake+0x10/0x10 [ 459.634751][T10598] ? __pfx_pollwake+0x10/0x10 [ 459.634780][T10598] ? __pfx_pollwake+0x10/0x10 [ 459.634811][T10598] ? __pfx_pollwake+0x10/0x10 [ 459.634840][T10598] ? __pfx_pollwake+0x10/0x10 [ 459.634869][T10598] ? __pfx_pollwake+0x10/0x10 [ 459.634899][T10598] ? __pfx_pollwake+0x10/0x10 [ 459.634929][T10598] ? __pfx_pollwake+0x10/0x10 [ 459.634960][T10598] ? rcu_read_lock_any_held+0xb3/0x120 [ 459.634982][T10598] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 459.635006][T10598] ? vfs_write+0x8d8/0xa90 [ 459.635062][T10598] ? set_compat_user_sigmask+0xc1/0x1b0 [ 459.635084][T10598] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 459.635117][T10598] __ia32_compat_sys_ppoll_time32+0x299/0x300 [ 459.635147][T10598] ? fput+0xa0/0xd0 [ 459.635168][T10598] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 459.635204][T10598] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 459.635234][T10598] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.635262][T10598] __do_fast_syscall_32+0xb4/0x110 [ 459.635291][T10598] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.635321][T10598] do_fast_syscall_32+0x34/0x80 [ 459.635350][T10598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 459.635374][T10598] RIP: 0023:0xf7f93539 [ 459.635392][T10598] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 459.635410][T10598] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 459.635432][T10598] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 459.635447][T10598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.635459][T10598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.635471][T10598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 459.635483][T10598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.635513][T10598] [ 459.659302][ T1554] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 459.728370][ T30] audit: type=1326 audit(1748320509.265:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 459.959045][ T1554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.016893][ T30] audit: type=1326 audit(1748320509.265:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 460.146220][ T1554] usb 2-1: config 0 descriptor?? [ 460.199086][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1212'. [ 460.216774][T10605] FAULT_INJECTION: forcing a failure. [ 460.216774][T10605] name failslab, interval 1, probability 0, space 0, times 0 [ 460.244053][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 460.261115][T10607] FAULT_INJECTION: forcing a failure. [ 460.261115][T10607] name failslab, interval 1, probability 0, space 0, times 0 [ 460.275040][T10605] CPU: 0 UID: 0 PID: 10605 Comm: syz.5.1212 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 460.275068][T10605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.275082][T10605] Call Trace: [ 460.275091][T10605] [ 460.275101][T10605] dump_stack_lvl+0x189/0x250 [ 460.275143][T10605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.275174][T10605] ? __pfx__printk+0x10/0x10 [ 460.275202][T10605] ? __pfx___might_resched+0x10/0x10 [ 460.275222][T10605] ? fs_reclaim_acquire+0x7d/0x100 [ 460.275259][T10605] should_fail_ex+0x414/0x560 [ 460.275288][T10605] should_failslab+0xa8/0x100 [ 460.275319][T10605] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 460.275347][T10605] ? __alloc_skb+0x112/0x2d0 [ 460.275378][T10605] __alloc_skb+0x112/0x2d0 [ 460.275409][T10605] netlink_ack+0x146/0xa50 [ 460.275431][T10605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.275461][T10605] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 460.275485][T10605] ? __pfx_nl80211_post_doit+0x10/0x10 [ 460.275510][T10605] ? ref_tracker_free+0x63a/0x7d0 [ 460.275533][T10605] ? __copy_skb_header+0xa7/0x550 [ 460.275573][T10605] netlink_rcv_skb+0x2a0/0x490 [ 460.275599][T10605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.275631][T10605] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.275682][T10605] ? down_read+0x1ad/0x2e0 [ 460.275714][T10605] genl_rcv+0x28/0x40 [ 460.275743][T10605] netlink_unicast+0x75b/0x8d0 [ 460.275778][T10605] netlink_sendmsg+0x805/0xb30 [ 460.275814][T10605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.275842][T10605] ? __import_iovec+0x5d4/0x7f0 [ 460.275869][T10605] ? aa_sock_msg_perm+0x94/0x160 [ 460.275895][T10605] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.275920][T10605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.275954][T10605] __sock_sendmsg+0x21c/0x270 [ 460.275980][T10605] ____sys_sendmsg+0x505/0x830 [ 460.276016][T10605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.276064][T10605] ___sys_sendmsg+0x21f/0x2a0 [ 460.276096][T10605] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.276166][T10605] ? __fget_files+0x2a/0x420 [ 460.276192][T10605] ? __fget_files+0x3a0/0x420 [ 460.276232][T10605] __sys_sendmsg+0x164/0x220 [ 460.276263][T10605] ? __pfx___sys_sendmsg+0x10/0x10 [ 460.276309][T10605] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 460.276337][T10605] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.276365][T10605] __do_fast_syscall_32+0xb4/0x110 [ 460.276394][T10605] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.276424][T10605] do_fast_syscall_32+0x34/0x80 [ 460.276452][T10605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 460.276477][T10605] RIP: 0023:0xf7f93539 [ 460.276494][T10605] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 460.276513][T10605] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 460.276535][T10605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 460.276550][T10605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.276562][T10605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.276574][T10605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 460.276587][T10605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 460.276618][T10605] [ 460.276962][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.3.1213 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 460.276986][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.276999][T10607] Call Trace: [ 460.277007][T10607] [ 460.277016][T10607] dump_stack_lvl+0x189/0x250 [ 460.277050][T10607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.277083][T10607] ? __pfx__printk+0x10/0x10 [ 460.277112][T10607] ? __pfx___might_resched+0x10/0x10 [ 460.277131][T10607] ? fs_reclaim_acquire+0x7d/0x100 [ 460.277167][T10607] should_fail_ex+0x414/0x560 [ 460.277195][T10607] should_failslab+0xa8/0x100 [ 460.277224][T10607] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 460.277252][T10607] ? __alloc_skb+0x112/0x2d0 [ 460.277283][T10607] __alloc_skb+0x112/0x2d0 [ 460.277314][T10607] netlink_ack+0x146/0xa50 [ 460.277336][T10607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.277365][T10607] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 460.277389][T10607] ? __pfx_nl80211_post_doit+0x10/0x10 [ 460.277415][T10607] ? ref_tracker_free+0x63a/0x7d0 [ 460.277438][T10607] ? __copy_skb_header+0xa7/0x550 [ 460.277478][T10607] netlink_rcv_skb+0x2a0/0x490 [ 460.277504][T10607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.277536][T10607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.277588][T10607] ? down_read+0x1ad/0x2e0 [ 460.277620][T10607] genl_rcv+0x28/0x40 [ 460.277648][T10607] netlink_unicast+0x75b/0x8d0 [ 460.277682][T10607] netlink_sendmsg+0x805/0xb30 [ 460.277719][T10607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.277748][T10607] ? __import_iovec+0x5d4/0x7f0 [ 460.277775][T10607] ? aa_sock_msg_perm+0x94/0x160 [ 460.277801][T10607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.277824][T10607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.277850][T10607] __sock_sendmsg+0x21c/0x270 [ 460.277876][T10607] ____sys_sendmsg+0x505/0x830 [ 460.277912][T10607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.277966][T10607] ___sys_sendmsg+0x21f/0x2a0 [ 460.277999][T10607] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.278068][T10607] ? __fget_files+0x2a/0x420 [ 460.278095][T10607] ? __fget_files+0x3a0/0x420 [ 460.278135][T10607] __sys_sendmsg+0x164/0x220 [ 460.278166][T10607] ? __pfx___sys_sendmsg+0x10/0x10 [ 460.278211][T10607] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 460.278240][T10607] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.278267][T10607] __do_fast_syscall_32+0xb4/0x110 [ 460.278304][T10607] do_fast_syscall_32+0x34/0x80 [ 460.278333][T10607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 460.278357][T10607] RIP: 0023:0xf7fe4539 [ 460.278375][T10607] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 460.278393][T10607] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 460.278414][T10607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003700 [ 460.278429][T10607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.278442][T10607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.278455][T10607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 460.278467][T10607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 460.278498][T10607] [ 461.265379][T10613] xt_CT: No such helper "netbios-ns" [ 461.926984][ T5931] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 462.048466][ T5894] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 462.128637][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 462.206307][ T5894] usb 3-1: config 0 has no interfaces? [ 462.216720][ T5894] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 462.233335][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.241692][ T49] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 462.259056][ T5894] usb 3-1: Product: syz [ 462.263553][ T5894] usb 3-1: Manufacturer: syz [ 462.272666][ T5894] usb 3-1: SerialNumber: syz [ 462.283408][ T5894] usb 3-1: config 0 descriptor?? [ 462.388632][ T5823] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 462.400771][ T49] usb 6-1: Using ep0 maxpacket: 16 [ 462.413399][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.425178][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.462437][ T49] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 462.489978][ T49] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 462.559036][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.755735][ T5823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.787694][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 462.799168][ T49] usb 6-1: config 0 descriptor?? [ 462.830091][ T1554] [drm:udl_init] *ERROR* Selecting channel failed [ 462.876249][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 462.877936][ T1554] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 462.924519][ T1554] [drm] Initialized udl on minor 2 [ 462.949224][ T5823] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 462.965311][ T1554] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 463.005177][ T1554] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 463.024016][ T5823] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 463.046529][ T5913] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 463.076843][ T5823] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 463.089793][ T5913] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 463.098393][ T1554] usb 2-1: USB disconnect, device number 44 [ 463.164931][ T5823] usb 5-1: Manufacturer: syz [ 463.236951][ T49] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 463.294489][ T5823] usb 5-1: config 0 descriptor?? [ 463.523665][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.543025][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.545886][ T49] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input58 [ 463.890655][ T49] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 463.910265][ T5823] rc_core: IR keymap rc-hauppauge not found [ 463.916532][ T5823] Registered IR keymap rc-empty [ 463.972857][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 463.982932][ T49] usb 6-1: USB disconnect, device number 38 [ 464.018512][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.216843][ T5823] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 464.429856][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 464.470316][ T5823] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input59 [ 464.470529][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 464.569284][ T5931] usb 4-1: can't read configurations, error -71 [ 464.624063][T10647] fido_id[10647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 464.643735][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.694620][T10658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.710723][T10658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.730210][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.758421][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.779737][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.799869][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.818615][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.864956][ T1554] usb 3-1: USB disconnect, device number 68 [ 464.918359][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.958379][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.978356][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.996287][ T5931] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 465.018377][ T5823] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 465.041332][ T5823] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 465.050631][ T5823] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 465.356331][ T5931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.366877][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 465.390517][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.452946][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 465.540069][ T5931] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 465.565580][ T5931] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 465.583837][ T5931] usb 4-1: Manufacturer: syz [ 465.606249][ T5931] usb 4-1: config 0 descriptor?? [ 465.662185][T10673] netlink: 'syz.2.1225': attribute type 10 has an invalid length. [ 465.702613][T10673] team0: Port device dummy0 added [ 465.792415][T10673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1225'. [ 465.829151][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1226'. [ 465.868555][T10674] FAULT_INJECTION: forcing a failure. [ 465.868555][T10674] name failslab, interval 1, probability 0, space 0, times 0 [ 466.230011][T10674] CPU: 0 UID: 0 PID: 10674 Comm: syz.5.1226 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 466.230034][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.230046][T10674] Call Trace: [ 466.230057][T10674] [ 466.230067][T10674] dump_stack_lvl+0x189/0x250 [ 466.230113][T10674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.230143][T10674] ? __pfx__printk+0x10/0x10 [ 466.230163][T10674] ? __pfx___might_resched+0x10/0x10 [ 466.230179][T10674] ? fs_reclaim_acquire+0x7d/0x100 [ 466.230206][T10674] should_fail_ex+0x414/0x560 [ 466.230238][T10674] should_failslab+0xa8/0x100 [ 466.230268][T10674] __kmalloc_noprof+0xcb/0x4f0 [ 466.230293][T10674] ? l2tp_session_create+0x44/0xd60 [ 466.230316][T10674] l2tp_session_create+0x44/0xd60 [ 466.230332][T10674] ? preempt_schedule_irq+0xde/0x150 [ 466.230349][T10674] ? l2tp_eth_create+0x153/0xbd0 [ 466.230384][T10674] l2tp_eth_create+0x172/0xbd0 [ 466.230411][T10674] ? irqentry_exit+0x74/0x90 [ 466.230435][T10674] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.230463][T10674] ? __pfx_l2tp_eth_create+0x10/0x10 [ 466.230492][T10674] l2tp_nl_cmd_session_create+0x730/0xc20 [ 466.230528][T10674] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 466.230565][T10674] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 466.230607][T10674] genl_family_rcv_msg_doit+0x215/0x300 [ 466.230635][T10674] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 466.230676][T10674] ? bpf_lsm_capable+0x9/0x20 [ 466.230706][T10674] ? security_capable+0x7e/0x2e0 [ 466.230737][T10674] genl_rcv_msg+0x60e/0x790 [ 466.230770][T10674] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.230792][T10674] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 466.230819][T10674] ? ref_tracker_free+0x63a/0x7d0 [ 466.230842][T10674] ? __copy_skb_header+0xa7/0x550 [ 466.230885][T10674] netlink_rcv_skb+0x219/0x490 [ 466.230911][T10674] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.230934][T10674] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.230977][T10674] ? down_read+0x1ad/0x2e0 [ 466.231011][T10674] genl_rcv+0x28/0x40 [ 466.231038][T10674] netlink_unicast+0x75b/0x8d0 [ 466.231069][T10674] netlink_sendmsg+0x805/0xb30 [ 466.231177][T10674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.231205][T10674] ? __import_iovec+0x5d4/0x7f0 [ 466.231225][T10674] ? aa_sock_msg_perm+0x94/0x160 [ 466.231244][T10674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.231261][T10674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.231291][T10674] __sock_sendmsg+0x21c/0x270 [ 466.231316][T10674] ____sys_sendmsg+0x505/0x830 [ 466.231349][T10674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.231385][T10674] ___sys_sendmsg+0x21f/0x2a0 [ 466.231408][T10674] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.231476][T10674] ? __fget_files+0x2a/0x420 [ 466.231503][T10674] ? __fget_files+0x3a0/0x420 [ 466.231531][T10674] __sys_sendmsg+0x164/0x220 [ 466.231553][T10674] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.231599][T10674] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 466.231625][T10674] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.231671][T10674] __do_fast_syscall_32+0xb4/0x110 [ 466.231698][T10674] do_fast_syscall_32+0x34/0x80 [ 466.231724][T10674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 466.231751][T10674] RIP: 0023:0xf7f93539 [ 466.231768][T10674] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 466.231785][T10674] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 466.231808][T10674] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 466.231819][T10674] RDX: 0000000000004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.231828][T10674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.231837][T10674] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 466.231845][T10674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.231871][T10674] [ 466.648871][ T5931] rc_core: IR keymap rc-hauppauge not found [ 466.654832][ T5931] Registered IR keymap rc-empty [ 466.659901][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.678364][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.699446][ T5931] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 466.713224][ T5931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input60 [ 466.728877][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.749082][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.770754][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.798417][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.823538][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.849065][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1227'. [ 466.851832][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.878361][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.898430][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.918683][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.938542][ T5931] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 466.961147][ T5931] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 466.971061][ T5931] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 467.333752][ T5931] usb 5-1: USB disconnect, device number 59 [ 467.559312][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.610684][T10683] xt_CT: No such helper "netbios-ns" [ 467.641077][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.118401][ T5823] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 468.363920][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 468.407006][ T5823] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 468.500566][ T5823] usb 3-1: config 0 has no interface number 0 [ 468.525726][ T5823] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 468.537423][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.562104][ T5823] usb 3-1: Product: syz [ 468.572028][ T5823] usb 3-1: Manufacturer: syz [ 468.587208][ T5823] usb 3-1: SerialNumber: syz [ 468.617880][ T5823] usb 3-1: config 0 descriptor?? [ 468.863369][ T5823] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 468.880172][ T5823] usb 3-1: Failed to initialize entity for entity 6 [ 468.902666][ T5823] usb 3-1: Failed to register entities (-22). [ 468.957058][ T5931] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 469.072041][ T5823] usb 3-1: USB disconnect, device number 69 [ 469.182922][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 469.387430][T10716] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 469.468775][T10716] Cannot find add_set index 3 as target [ 469.555579][ T1554] usb 4-1: USB disconnect, device number 72 [ 469.885392][T10725] FAULT_INJECTION: forcing a failure. [ 469.885392][T10725] name failslab, interval 1, probability 0, space 0, times 0 [ 469.912147][T10725] CPU: 1 UID: 0 PID: 10725 Comm: syz.2.1240 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 469.912177][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.912190][T10725] Call Trace: [ 469.912198][T10725] [ 469.912208][T10725] dump_stack_lvl+0x189/0x250 [ 469.912247][T10725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.912278][T10725] ? __pfx__printk+0x10/0x10 [ 469.912307][T10725] ? ref_tracker_alloc+0x318/0x460 [ 469.912336][T10725] should_fail_ex+0x414/0x560 [ 469.912363][T10725] should_failslab+0xa8/0x100 [ 469.912394][T10725] kmem_cache_alloc_noprof+0x73/0x3c0 [ 469.912426][T10725] ? skb_clone+0x212/0x3a0 [ 469.912462][T10725] skb_clone+0x212/0x3a0 [ 469.912498][T10725] __netlink_deliver_tap+0x404/0x850 [ 469.912538][T10725] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.912566][T10725] netlink_deliver_tap+0x19c/0x1b0 [ 469.912593][T10725] netlink_unicast+0x72f/0x8d0 [ 469.912629][T10725] netlink_sendmsg+0x805/0xb30 [ 469.912665][T10725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.912695][T10725] ? __import_iovec+0x5d4/0x7f0 [ 469.912730][T10725] ? aa_sock_msg_perm+0x94/0x160 [ 469.912757][T10725] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.912782][T10725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.912809][T10725] __sock_sendmsg+0x21c/0x270 [ 469.912836][T10725] ____sys_sendmsg+0x505/0x830 [ 469.912873][T10725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.912920][T10725] ___sys_sendmsg+0x21f/0x2a0 [ 469.912953][T10725] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.913025][T10725] ? __fget_files+0x2a/0x420 [ 469.913053][T10725] ? __fget_files+0x3a0/0x420 [ 469.913092][T10725] __sys_sendmsg+0x164/0x220 [ 469.913125][T10725] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.913172][T10725] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 469.913202][T10725] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.913230][T10725] __do_fast_syscall_32+0xb4/0x110 [ 469.913259][T10725] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.913290][T10725] do_fast_syscall_32+0x34/0x80 [ 469.913319][T10725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.913344][T10725] RIP: 0023:0xf7f33539 [ 469.913362][T10725] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 469.913382][T10725] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 469.913405][T10725] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 469.913420][T10725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.913433][T10725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.913445][T10725] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 469.913458][T10725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.913490][T10725] [ 470.234995][T10725] ip6gretap0: entered promiscuous mode [ 470.244893][T10725] macsec1: entered allmulticast mode [ 470.250297][T10725] ip6gretap0: entered allmulticast mode [ 470.259667][T10725] ip6gretap0: left allmulticast mode [ 470.265117][T10725] ip6gretap0: left promiscuous mode [ 470.440964][ T1554] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 470.500906][T10727] xt_CT: No such helper "netbios-ns" [ 470.616885][ T1554] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.636669][ T1554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 470.677366][ T1554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 470.697298][ T1554] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 470.723203][ T1554] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.735961][ T1554] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.769254][ T1554] usb 4-1: Manufacturer: syz [ 470.777740][ T1554] usb 4-1: config 0 descriptor?? [ 470.889534][T10740] FAULT_INJECTION: forcing a failure. [ 470.889534][T10740] name failslab, interval 1, probability 0, space 0, times 0 [ 470.922759][T10740] CPU: 0 UID: 0 PID: 10740 Comm: syz.5.1245 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 470.922794][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.922809][T10740] Call Trace: [ 470.922818][T10740] [ 470.922829][T10740] dump_stack_lvl+0x189/0x250 [ 470.922875][T10740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.922906][T10740] ? __pfx__printk+0x10/0x10 [ 470.922933][T10740] ? __pfx___might_resched+0x10/0x10 [ 470.922953][T10740] ? fs_reclaim_acquire+0x7d/0x100 [ 470.922991][T10740] should_fail_ex+0x414/0x560 [ 470.923020][T10740] should_failslab+0xa8/0x100 [ 470.923050][T10740] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 470.923078][T10740] ? __alloc_skb+0x112/0x2d0 [ 470.923102][T10740] ? __lock_acquire+0xaac/0xd20 [ 470.923136][T10740] __alloc_skb+0x112/0x2d0 [ 470.923167][T10740] netlink_ack+0x146/0xa50 [ 470.923191][T10740] ? __up_read+0x280/0x680 [ 470.923217][T10740] ? __pfx___up_read+0x10/0x10 [ 470.923251][T10740] rdma_nl_rcv+0x3dc/0x9a0 [ 470.923295][T10740] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 470.923353][T10740] ? netlink_deliver_tap+0x2e/0x1b0 [ 470.923378][T10740] ? netlink_deliver_tap+0x2e/0x1b0 [ 470.923408][T10740] netlink_unicast+0x75b/0x8d0 [ 470.923443][T10740] netlink_sendmsg+0x805/0xb30 [ 470.923478][T10740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.923507][T10740] ? __import_iovec+0x5d4/0x7f0 [ 470.923535][T10740] ? aa_sock_msg_perm+0x94/0x160 [ 470.923562][T10740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.923586][T10740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.923613][T10740] __sock_sendmsg+0x21c/0x270 [ 470.923639][T10740] ____sys_sendmsg+0x505/0x830 [ 470.923675][T10740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.923723][T10740] ___sys_sendmsg+0x21f/0x2a0 [ 470.923757][T10740] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.923824][T10740] ? __fget_files+0x2a/0x420 [ 470.923853][T10740] ? __fget_files+0x3a0/0x420 [ 470.923898][T10740] __sys_sendmsg+0x164/0x220 [ 470.923931][T10740] ? __pfx___sys_sendmsg+0x10/0x10 [ 470.923976][T10740] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 470.924006][T10740] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.924034][T10740] __do_fast_syscall_32+0xb4/0x110 [ 470.924063][T10740] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.924093][T10740] do_fast_syscall_32+0x34/0x80 [ 470.924122][T10740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 470.924147][T10740] RIP: 0023:0xf7f93539 [ 470.924166][T10740] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 470.924184][T10740] RSP: 002b:00000000f509555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 470.924208][T10740] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080002480 [ 470.924223][T10740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.924235][T10740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.924248][T10740] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 470.924260][T10740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.924291][T10740] [ 471.236057][ T5939] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 471.338920][ T1554] rc_core: IR keymap rc-hauppauge not found [ 471.344919][ T1554] Registered IR keymap rc-empty [ 471.349917][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.357429][ T5931] usb 5-1: unable to get BOS descriptor or descriptor too short [ 471.366564][ T5931] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 471.374230][ T5931] usb 5-1: can't read configurations, error -71 [ 471.381034][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.409594][ T1554] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 471.422768][ T1554] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input61 [ 471.439361][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.458990][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.478485][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.487935][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 471.499090][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 471.510090][ T5939] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 471.519234][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.529127][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.538151][ T5939] usb 2-1: config 0 descriptor?? [ 471.548384][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.549478][T10736] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 471.595608][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.674623][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.724315][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.758390][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.798457][ T1554] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.846836][T10746] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 471.857640][T10746] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 471.872398][ T1554] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 471.896584][ T1554] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.126187][ T5939] pantherlord 0003:0810:0001.000A: hidraw0: USB HID vff.fc Device [HID 0810:0001] on usb-dummy_hcd.1-1/input0 [ 472.158577][ T5939] pantherlord 0003:0810:0001.000A: no output reports found [ 472.293964][ T49] usb 2-1: USB disconnect, device number 45 [ 472.331054][T10753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.340662][T10753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.396142][T10750] fido_id[10750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 472.455758][T10755] FAULT_INJECTION: forcing a failure. [ 472.455758][T10755] name failslab, interval 1, probability 0, space 0, times 0 [ 472.559926][T10755] CPU: 1 UID: 0 PID: 10755 Comm: syz.4.1249 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 472.559958][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.559971][T10755] Call Trace: [ 472.559981][T10755] [ 472.559990][T10755] dump_stack_lvl+0x189/0x250 [ 472.560030][T10755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.560061][T10755] ? __pfx__printk+0x10/0x10 [ 472.560090][T10755] ? __pfx___might_resched+0x10/0x10 [ 472.560110][T10755] ? fs_reclaim_acquire+0x7d/0x100 [ 472.560148][T10755] should_fail_ex+0x414/0x560 [ 472.560178][T10755] should_failslab+0xa8/0x100 [ 472.560209][T10755] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 472.560239][T10755] ? __alloc_skb+0x112/0x2d0 [ 472.560271][T10755] __alloc_skb+0x112/0x2d0 [ 472.560304][T10755] netlink_ack+0x146/0xa50 [ 472.560328][T10755] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.560358][T10755] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 472.560383][T10755] ? __pfx_nl80211_post_doit+0x10/0x10 [ 472.560410][T10755] ? ref_tracker_free+0x63a/0x7d0 [ 472.560433][T10755] ? __copy_skb_header+0xa7/0x550 [ 472.560473][T10755] netlink_rcv_skb+0x2a0/0x490 [ 472.560511][T10755] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.560546][T10755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.560598][T10755] ? down_read+0x1ad/0x2e0 [ 472.560632][T10755] genl_rcv+0x28/0x40 [ 472.560662][T10755] netlink_unicast+0x75b/0x8d0 [ 472.560698][T10755] netlink_sendmsg+0x805/0xb30 [ 472.560735][T10755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.560766][T10755] ? __import_iovec+0x5d4/0x7f0 [ 472.560795][T10755] ? aa_sock_msg_perm+0x94/0x160 [ 472.560823][T10755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.560852][T10755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.560880][T10755] __sock_sendmsg+0x21c/0x270 [ 472.560908][T10755] ____sys_sendmsg+0x505/0x830 [ 472.560945][T10755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.560995][T10755] ___sys_sendmsg+0x21f/0x2a0 [ 472.561028][T10755] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.561099][T10755] ? __fget_files+0x2a/0x420 [ 472.561129][T10755] ? __fget_files+0x3a0/0x420 [ 472.561169][T10755] __sys_sendmsg+0x164/0x220 [ 472.561203][T10755] ? __pfx___sys_sendmsg+0x10/0x10 [ 472.561248][T10755] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 472.561279][T10755] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.561309][T10755] __do_fast_syscall_32+0xb4/0x110 [ 472.561339][T10755] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.561369][T10755] do_fast_syscall_32+0x34/0x80 [ 472.561399][T10755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.561425][T10755] RIP: 0023:0xf7ff1539 [ 472.561444][T10755] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 472.561462][T10755] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 472.561485][T10755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 472.561506][T10755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.561519][T10755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.561531][T10755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 472.561544][T10755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.561576][T10755] [ 473.834861][T10775] xt_CT: No such helper "netbios-ns" [ 474.383448][ T5894] usb 4-1: USB disconnect, device number 73 [ 474.513031][T10791] FAULT_INJECTION: forcing a failure. [ 474.513031][T10791] name failslab, interval 1, probability 0, space 0, times 0 [ 474.608502][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.3.1259 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 474.608533][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.608546][T10791] Call Trace: [ 474.608556][T10791] [ 474.608565][T10791] dump_stack_lvl+0x189/0x250 [ 474.608605][T10791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.608635][T10791] ? __pfx__printk+0x10/0x10 [ 474.608663][T10791] ? __pfx___might_resched+0x10/0x10 [ 474.608682][T10791] ? fs_reclaim_acquire+0x7d/0x100 [ 474.608720][T10791] should_fail_ex+0x414/0x560 [ 474.608748][T10791] ? alloc_netdev_mqs+0xa6/0x11e0 [ 474.608767][T10791] should_failslab+0xa8/0x100 [ 474.608797][T10791] __kvmalloc_node_noprof+0x168/0x5e0 [ 474.608826][T10791] ? alloc_netdev_mqs+0xa6/0x11e0 [ 474.608843][T10791] ? snprintf+0xda/0x120 [ 474.608866][T10791] ? __pfx_macvlan_setup+0x10/0x10 [ 474.608892][T10791] alloc_netdev_mqs+0xa6/0x11e0 [ 474.608910][T10791] ? __pfx_macvlan_setup+0x10/0x10 [ 474.608932][T10791] ? __pfx_snprintf+0x10/0x10 [ 474.608959][T10791] rtnl_create_link+0x31f/0xd10 [ 474.608987][T10791] rtnl_newlink_create+0x258/0xaf0 [ 474.609023][T10791] ? __pfx_aa_get_newest_label+0x10/0x10 [ 474.609051][T10791] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 474.609076][T10791] ? rtnl_newlink+0x8db/0x1c70 [ 474.609103][T10791] ? __pfx___mutex_lock+0x10/0x10 [ 474.609143][T10791] ? ns_capable+0x8a/0xf0 [ 474.609168][T10791] rtnl_newlink+0x16d6/0x1c70 [ 474.609195][T10791] ? kasan_save_track+0x3e/0x80 [ 474.609232][T10791] ? __pfx_rtnl_newlink+0x10/0x10 [ 474.609293][T10791] ? kasan_quarantine_put+0xdd/0x220 [ 474.609316][T10791] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.609350][T10791] ? nlmon_xmit+0xb0/0x100 [ 474.609378][T10791] ? kmem_cache_free+0x192/0x3f0 [ 474.609410][T10791] ? __local_bh_enable_ip+0x12d/0x1c0 [ 474.609430][T10791] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.609457][T10791] ? __local_bh_enable_ip+0x12d/0x1c0 [ 474.609483][T10791] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 474.609517][T10791] ? aa_get_newest_label+0xf7/0x5d0 [ 474.609546][T10791] ? __lock_acquire+0xaac/0xd20 [ 474.609602][T10791] ? __pfx_rtnl_newlink+0x10/0x10 [ 474.609626][T10791] rtnetlink_rcv_msg+0x7cc/0xb70 [ 474.609656][T10791] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 474.609680][T10791] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.609709][T10791] ? ref_tracker_free+0x63a/0x7d0 [ 474.609733][T10791] ? __copy_skb_header+0xa7/0x550 [ 474.609774][T10791] netlink_rcv_skb+0x219/0x490 [ 474.609802][T10791] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.609829][T10791] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.609876][T10791] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.609902][T10791] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.609934][T10791] netlink_unicast+0x75b/0x8d0 [ 474.609969][T10791] netlink_sendmsg+0x805/0xb30 [ 474.610008][T10791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.610037][T10791] ? __import_iovec+0x5d4/0x7f0 [ 474.610066][T10791] ? aa_sock_msg_perm+0x94/0x160 [ 474.610093][T10791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.610118][T10791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.610146][T10791] __sock_sendmsg+0x21c/0x270 [ 474.610173][T10791] ____sys_sendmsg+0x505/0x830 [ 474.610211][T10791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.610260][T10791] ___sys_sendmsg+0x21f/0x2a0 [ 474.610294][T10791] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.610363][T10791] ? __fget_files+0x2a/0x420 [ 474.610391][T10791] ? __fget_files+0x3a0/0x420 [ 474.610432][T10791] __sys_sendmsg+0x164/0x220 [ 474.610464][T10791] ? __pfx___sys_sendmsg+0x10/0x10 [ 474.610518][T10791] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 474.610547][T10791] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.610576][T10791] __do_fast_syscall_32+0xb4/0x110 [ 474.610606][T10791] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.610637][T10791] do_fast_syscall_32+0x34/0x80 [ 474.610666][T10791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.610692][T10791] RIP: 0023:0xf7fe4539 [ 474.610710][T10791] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 474.610729][T10791] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 474.610751][T10791] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 474.610766][T10791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.610779][T10791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.610791][T10791] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 474.610804][T10791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.610836][T10791] [ 475.069838][ T49] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 475.138295][ T5823] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 475.231601][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 475.238554][ T5931] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 475.256022][ T49] usb 2-1: not running at top speed; connect to a high speed hub [ 475.298613][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 475.306017][ T5823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 475.315469][ T5823] usb 3-1: config 8 has an invalid interface number: 24 but max is 1 [ 475.323981][ T5823] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 475.426228][ T49] usb 2-1: config 24 has an invalid interface number: 219 but max is 0 [ 475.530981][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 475.568300][ T5823] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 475.581046][ T49] usb 2-1: config 24 has no interface number 0 [ 475.587315][ T49] usb 2-1: config 24 interface 219 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 475.638054][ T5823] usb 3-1: config 8 has no interface number 0 [ 475.645668][ T5823] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 475.655817][ T49] usb 2-1: config 24 interface 219 has no altsetting 0 [ 475.664505][ T5823] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 475.685919][ T5823] usb 3-1: config 8 interface 24 has no altsetting 0 [ 475.718339][ T49] usb 2-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=2f.c7 [ 475.727801][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.738234][ T5823] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 475.747463][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.755717][ T49] usb 2-1: Product: syz [ 475.760067][ T49] usb 2-1: Manufacturer: syz [ 475.764709][ T49] usb 2-1: SerialNumber: syz [ 475.769505][ T5823] usb 3-1: Product: syz [ 475.775291][ T5823] usb 3-1: Manufacturer: syz [ 475.790852][T10787] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.794204][ T5823] usb 3-1: SerialNumber: syz [ 476.165670][ T5823] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 476.225241][ T5823] vmk80xx 3-1:8.24: probe with driver vmk80xx failed with error -22 [ 476.261272][ T5823] usb 3-1: USB disconnect, device number 70 [ 476.784042][ T49] usb 2-1: Could not find all expected endpoints [ 476.832417][ T49] usb 2-1: USB disconnect, device number 46 [ 476.993763][ T5931] usb 6-1: unable to get BOS descriptor or descriptor too short [ 477.048322][ T5931] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 477.055975][ T5931] usb 6-1: can't read configurations, error -71 [ 477.297063][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1265'. [ 477.548840][ T5823] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 477.708738][ T5823] usb 3-1: Invalid ep0 maxpacket: 16 [ 477.762757][T10824] xt_CT: No such helper "netbios-ns" [ 477.859805][ T5823] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 478.028560][ T5823] usb 3-1: Invalid ep0 maxpacket: 16 [ 478.034437][ T5823] usb usb3-port1: attempt power cycle [ 478.078432][T10382] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 478.205263][T10839] FAULT_INJECTION: forcing a failure. [ 478.205263][T10839] name failslab, interval 1, probability 0, space 0, times 0 [ 478.218640][T10839] CPU: 1 UID: 0 PID: 10839 Comm: syz.3.1272 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 478.218670][T10839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.218683][T10839] Call Trace: [ 478.218693][T10839] [ 478.218702][T10839] dump_stack_lvl+0x189/0x250 [ 478.218741][T10839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.218772][T10839] ? __pfx__printk+0x10/0x10 [ 478.218800][T10839] ? __pfx___might_resched+0x10/0x10 [ 478.218820][T10839] ? fs_reclaim_acquire+0x7d/0x100 [ 478.218857][T10839] should_fail_ex+0x414/0x560 [ 478.218886][T10839] should_failslab+0xa8/0x100 [ 478.218917][T10839] __kmalloc_noprof+0xcb/0x4f0 [ 478.218942][T10839] ? kfree+0x4d/0x440 [ 478.218964][T10839] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 478.218999][T10839] tomoyo_realpath_from_path+0xe3/0x5d0 [ 478.219028][T10839] ? tomoyo_domain+0xda/0x130 [ 478.219062][T10839] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 478.219096][T10839] tomoyo_path_number_perm+0x1e8/0x5a0 [ 478.219122][T10839] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 478.219192][T10839] ? __fget_files+0x2a/0x420 [ 478.219225][T10839] ? __fget_files+0x3a0/0x420 [ 478.219252][T10839] ? __fget_files+0x2a/0x420 [ 478.219282][T10839] security_file_ioctl_compat+0xcb/0x2d0 [ 478.219307][T10839] __ia32_compat_sys_ioctl+0x128/0x840 [ 478.219334][T10839] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 478.219359][T10839] ? __fget_files+0x3a0/0x420 [ 478.219393][T10839] ? fput+0xa0/0xd0 [ 478.219413][T10839] ? ksys_write+0x1f0/0x250 [ 478.219445][T10839] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 478.219474][T10839] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.219502][T10839] __do_fast_syscall_32+0xb4/0x110 [ 478.219531][T10839] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.219561][T10839] do_fast_syscall_32+0x34/0x80 [ 478.219590][T10839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.219615][T10839] RIP: 0023:0xf7fe4539 [ 478.219633][T10839] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 478.219651][T10839] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 478.219673][T10839] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008561c [ 478.219687][T10839] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.219700][T10839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.219712][T10839] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 478.219725][T10839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.219755][T10839] [ 478.219776][T10839] ERROR: Out of memory at tomoyo_realpath_from_path. [ 478.240871][T10382] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.443597][ T5823] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 478.452405][T10382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 478.514872][ T5931] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 478.523959][T10382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 478.535882][T10382] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 478.570204][T10382] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 478.579647][T10382] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 478.587696][T10382] usb 5-1: Manufacturer: syz [ 478.589285][ T5823] usb 3-1: Invalid ep0 maxpacket: 16 [ 478.603446][T10382] usb 5-1: config 0 descriptor?? [ 478.701133][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 478.715847][ T5931] usb 6-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 478.726730][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 478.737448][ T5931] usb 6-1: Product: syz [ 478.746361][ T5931] usb 6-1: config 0 descriptor?? [ 478.758475][ T5823] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 478.787463][ T5931] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 478.797783][ T5931] gspca_stv06xx: st6422 sensor detected [ 478.799120][ T5823] usb 3-1: Invalid ep0 maxpacket: 16 [ 478.812982][ T5823] usb usb3-port1: unable to enumerate USB device [ 478.901329][T10382] rc_core: IR keymap rc-hauppauge not found [ 478.907690][T10382] Registered IR keymap rc-empty [ 478.927817][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.964620][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.979586][T10847] FAULT_INJECTION: forcing a failure. [ 478.979586][T10847] name failslab, interval 1, probability 0, space 0, times 0 [ 478.997006][T10382] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 479.016673][T10847] CPU: 1 UID: 0 PID: 10847 Comm: syz.1.1274 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 479.016703][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.016715][T10847] Call Trace: [ 479.016725][T10847] [ 479.016742][T10847] dump_stack_lvl+0x189/0x250 [ 479.016793][T10847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.016841][T10847] ? __pfx__printk+0x10/0x10 [ 479.016869][T10847] ? __pfx___might_resched+0x10/0x10 [ 479.016889][T10847] ? fs_reclaim_acquire+0x7d/0x100 [ 479.016926][T10847] should_fail_ex+0x414/0x560 [ 479.016954][T10847] should_failslab+0xa8/0x100 [ 479.016985][T10847] __kmalloc_noprof+0xcb/0x4f0 [ 479.017011][T10847] ? kernfs_fop_write_iter+0x158/0x4f0 [ 479.017040][T10847] kernfs_fop_write_iter+0x158/0x4f0 [ 479.017072][T10847] iter_file_splice_write+0x937/0x1000 [ 479.017128][T10847] ? __pfx_iter_file_splice_write+0x10/0x10 [ 479.017160][T10847] ? rcu_read_lock_any_held+0xb3/0x120 [ 479.017196][T10847] ? __pfx_iter_file_splice_write+0x10/0x10 [ 479.017223][T10847] direct_splice_actor+0xfe/0x160 [ 479.017255][T10847] splice_direct_to_actor+0x5a8/0xcc0 [ 479.017303][T10847] ? __pfx_direct_splice_actor+0x10/0x10 [ 479.017330][T10847] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 479.017357][T10847] ? __pfx_aa_file_perm+0x10/0x10 [ 479.017392][T10847] do_splice_direct+0x181/0x270 [ 479.017421][T10847] ? __pfx_do_splice_direct+0x10/0x10 [ 479.017449][T10847] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 479.017485][T10847] ? rw_verify_area+0x258/0x650 [ 479.017514][T10847] do_sendfile+0x4da/0x7d0 [ 479.017555][T10847] ? __pfx_do_sendfile+0x10/0x10 [ 479.017591][T10847] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 479.017627][T10847] __do_fast_syscall_32+0xb4/0x110 [ 479.017656][T10847] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.017687][T10847] do_fast_syscall_32+0x34/0x80 [ 479.017715][T10847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.017749][T10847] RIP: 0023:0xf706e539 [ 479.017767][T10847] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 479.017786][T10847] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 479.017808][T10847] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 479.017822][T10847] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 479.017835][T10847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.017847][T10847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 479.017859][T10847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.017890][T10847] [ 479.045531][T10382] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input62 [ 479.395370][T10852] ip6gretap0: entered promiscuous mode [ 479.403971][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.412174][T10852] macsec1: entered allmulticast mode [ 479.419575][T10852] ip6gretap0: entered allmulticast mode [ 479.438521][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.446707][T10852] ip6gretap0: left allmulticast mode [ 479.458424][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.466110][T10852] ip6gretap0: left promiscuous mode [ 479.486046][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.591136][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.598769][T10857] FAULT_INJECTION: forcing a failure. [ 479.598769][T10857] name failslab, interval 1, probability 0, space 0, times 0 [ 479.628403][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.639226][T10857] CPU: 1 UID: 0 PID: 10857 Comm: syz.3.1277 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 479.639255][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.639268][T10857] Call Trace: [ 479.639277][T10857] [ 479.639287][T10857] dump_stack_lvl+0x189/0x250 [ 479.639327][T10857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.639358][T10857] ? __pfx__printk+0x10/0x10 [ 479.639385][T10857] ? __pfx___might_resched+0x10/0x10 [ 479.639405][T10857] ? fs_reclaim_acquire+0x7d/0x100 [ 479.639442][T10857] should_fail_ex+0x414/0x560 [ 479.639472][T10857] should_failslab+0xa8/0x100 [ 479.639502][T10857] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 479.639530][T10857] ? __alloc_skb+0x112/0x2d0 [ 479.639563][T10857] __alloc_skb+0x112/0x2d0 [ 479.639595][T10857] netlink_ack+0x146/0xa50 [ 479.639618][T10857] ? __pfx_genl_rcv_msg+0x10/0x10 [ 479.639647][T10857] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 479.639671][T10857] ? __pfx_nl80211_post_doit+0x10/0x10 [ 479.639703][T10857] ? ref_tracker_free+0x63a/0x7d0 [ 479.639726][T10857] ? __copy_skb_header+0xa7/0x550 [ 479.639766][T10857] netlink_rcv_skb+0x2a0/0x490 [ 479.639792][T10857] ? __pfx_genl_rcv_msg+0x10/0x10 [ 479.639825][T10857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.639877][T10857] ? down_read+0x1ad/0x2e0 [ 479.639909][T10857] genl_rcv+0x28/0x40 [ 479.639939][T10857] netlink_unicast+0x75b/0x8d0 [ 479.639974][T10857] netlink_sendmsg+0x805/0xb30 [ 479.640010][T10857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.640040][T10857] ? __import_iovec+0x5d4/0x7f0 [ 479.640066][T10857] ? aa_sock_msg_perm+0x94/0x160 [ 479.640092][T10857] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.640117][T10857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.640144][T10857] __sock_sendmsg+0x21c/0x270 [ 479.640172][T10857] ____sys_sendmsg+0x505/0x830 [ 479.640208][T10857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.640259][T10857] ___sys_sendmsg+0x21f/0x2a0 [ 479.640292][T10857] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.640362][T10857] ? __fget_files+0x2a/0x420 [ 479.640389][T10857] ? __fget_files+0x3a0/0x420 [ 479.640429][T10857] __sys_sendmsg+0x164/0x220 [ 479.640462][T10857] ? __pfx___sys_sendmsg+0x10/0x10 [ 479.640507][T10857] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 479.640535][T10857] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.640564][T10857] __do_fast_syscall_32+0xb4/0x110 [ 479.640594][T10857] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.640623][T10857] do_fast_syscall_32+0x34/0x80 [ 479.640651][T10857] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.640675][T10857] RIP: 0023:0xf7fe4539 [ 479.640699][T10857] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 479.640716][T10857] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 479.640738][T10857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 479.640753][T10857] RDX: 0000000000040014 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.640765][T10857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.640777][T10857] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 479.640790][T10857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.640821][T10857] [ 479.965247][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.988375][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 480.009831][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 480.046051][T10382] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 480.065575][ T5931] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 480.117980][T10382] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 480.157634][ T5931] usb 6-1: USB disconnect, device number 41 [ 480.239759][T10382] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 480.249831][T10863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.334508][T10863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.369530][ T5939] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 480.691850][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 481.036499][T10876] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1281'. [ 481.392785][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 481.500268][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1282'. [ 482.560674][T10891] FAULT_INJECTION: forcing a failure. [ 482.560674][T10891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.622000][T10891] CPU: 0 UID: 0 PID: 10891 Comm: syz.2.1284 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 482.622032][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.622045][T10891] Call Trace: [ 482.622055][T10891] [ 482.622065][T10891] dump_stack_lvl+0x189/0x250 [ 482.622103][T10891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.622129][T10891] ? __pfx__printk+0x10/0x10 [ 482.622162][T10891] should_fail_ex+0x414/0x560 [ 482.622189][T10891] _copy_to_user+0x31/0xb0 [ 482.622221][T10891] simple_read_from_buffer+0xe1/0x170 [ 482.622252][T10891] proc_fail_nth_read+0x1df/0x250 [ 482.622284][T10891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.622316][T10891] ? rw_verify_area+0x258/0x650 [ 482.622338][T10891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.622368][T10891] vfs_read+0x1fd/0x980 [ 482.622396][T10891] ? __pfx___mutex_lock+0x10/0x10 [ 482.622423][T10891] ? __pfx_vfs_read+0x10/0x10 [ 482.622448][T10891] ? __fget_files+0x2a/0x420 [ 482.622481][T10891] ? __fget_files+0x3a0/0x420 [ 482.622509][T10891] ? __fget_files+0x2a/0x420 [ 482.622549][T10891] ksys_read+0x145/0x250 [ 482.622578][T10891] ? __pfx_ksys_read+0x10/0x10 [ 482.622605][T10891] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 482.622635][T10891] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.622666][T10891] __do_fast_syscall_32+0xb4/0x110 [ 482.622705][T10891] do_fast_syscall_32+0x34/0x80 [ 482.622738][T10891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 482.622761][T10891] RIP: 0023:0xf7f33539 [ 482.622779][T10891] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 482.622796][T10891] RSP: 002b:00000000f5056590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 482.622816][T10891] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5056620 [ 482.622830][T10891] RDX: 000000000000000f RSI: 00000000f73c2ff4 RDI: 0000000000000000 [ 482.622842][T10891] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 482.622854][T10891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 482.622865][T10891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 482.622894][T10891] [ 482.920244][ T5939] usb 2-1: unable to get BOS descriptor or descriptor too short [ 482.939238][ T5939] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 482.947433][ T5939] usb 2-1: can't read configurations, error -71 [ 483.061368][ T5823] usb 5-1: USB disconnect, device number 62 [ 483.201717][T10900] VFS_BUG_ON_INODE(1) encountered for inode ffff888148c42d48 [ 483.202005][T10900] ------------[ cut here ]------------ [ 483.215041][T10900] kernel BUG at fs/namei.c:3467! [ 483.328623][T10900] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 483.334928][T10900] CPU: 1 UID: 0 PID: 10900 Comm: syz.4.1288 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 483.344941][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.355037][T10900] RIP: 0010:may_open+0x462/0x470 [ 483.360027][T10900] Code: 38 c1 0f 8c 9b fe ff ff 4c 89 ff e8 b8 6a ec ff e9 8e fe ff ff e8 fe 70 8a ff 4c 89 f7 48 c7 c6 80 1c 79 8b e8 5f 99 f2 fe 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 483.379679][T10900] RSP: 0018:ffffc90003d4f920 EFLAGS: 00010246 [ 483.385780][T10900] RAX: 000000000000003a RBX: dffffc0000000000 RCX: 7a2c79c78099af00 [ 483.393782][T10900] RDX: ffffc9000cb3c000 RSI: 000000000000078c RDI: 000000000000078d [ 483.401784][T10900] RBP: ffffffff8e09b960 R08: ffffc90003d4f607 R09: 1ffff920007a9ec0 [ 483.409789][T10900] R10: dffffc0000000000 R11: fffff520007a9ec1 R12: ffffc90003d4fc00 [ 483.417786][T10900] R13: 00000000000fffff R14: ffff888148c42d48 R15: 0000000000000006 [ 483.425793][T10900] FS: 0000000000000000(0000) GS:ffff8881261c2000(0063) knlGS:00000000f5116b40 [ 483.434761][T10900] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 483.441373][T10900] CR2: 0000000080005018 CR3: 000000007b444000 CR4: 00000000003526f0 [ 483.449374][T10900] DR0: 000000000000000d DR1: 00000000000000ff DR2: fffffffffffffff7 [ 483.457373][T10900] DR3: 3e00000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 483.465398][T10900] Call Trace: [ 483.468709][T10900] [ 483.471666][T10900] path_openat+0x2d91/0x3830 [ 483.476290][T10900] ? arch_stack_walk+0xfc/0x150 [ 483.481193][T10900] ? __pfx_path_openat+0x10/0x10 [ 483.486161][T10900] ? do_fast_syscall_32+0x34/0x80 [ 483.491232][T10900] do_filp_open+0x1fa/0x410 [ 483.495764][T10900] ? __pfx_do_filp_open+0x10/0x10 [ 483.500837][T10900] ? _raw_spin_unlock+0x28/0x50 [ 483.505719][T10900] ? alloc_fd+0x64c/0x6c0 [ 483.510089][T10900] do_sys_openat2+0x121/0x1c0 [ 483.514790][T10900] ? __pfx_do_sys_openat2+0x10/0x10 [ 483.520016][T10900] ? rcu_is_watching+0x15/0xb0 [ 483.524825][T10900] __ia32_compat_sys_openat+0x131/0x160 [ 483.530413][T10900] __do_fast_syscall_32+0xb4/0x110 [ 483.535570][T10900] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.540805][T10900] do_fast_syscall_32+0x34/0x80 [ 483.545693][T10900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 483.552055][T10900] RIP: 0023:0xf7ff1539 [ 483.556147][T10900] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 483.575800][T10900] RSP: 002b:00000000f5116490 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 483.584251][T10900] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f51164e0 [ 483.588440][T10382] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 483.592236][T10900] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7482ff4 [ 483.592254][T10900] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 483.592269][T10900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 483.623780][T10900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.631788][T10900] [ 483.634838][T10900] Modules linked in: [ 483.639333][T10900] ---[ end trace 0000000000000000 ]--- [ 483.808059][T10900] RIP: 0010:may_open+0x462/0x470 [ 483.855849][T10900] Code: 38 c1 0f 8c 9b fe ff ff 4c 89 ff e8 b8 6a ec ff e9 8e fe ff ff e8 fe 70 8a ff 4c 89 f7 48 c7 c6 80 1c 79 8b e8 5f 99 f2 fe 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 483.920184][T10382] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.936966][T10382] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 483.946393][T10382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.968236][T10382] usb 3-1: Product: syz [ 483.972454][T10382] usb 3-1: Manufacturer: syz [ 483.977050][T10382] usb 3-1: SerialNumber: syz [ 483.995636][T10900] RSP: 0018:ffffc90003d4f920 EFLAGS: 00010246 [ 484.017554][T10900] RAX: 000000000000003a RBX: dffffc0000000000 RCX: 7a2c79c78099af00 [ 484.034711][T10900] RDX: ffffc9000cb3c000 RSI: 000000000000078c RDI: 000000000000078d [ 484.043872][T10900] RBP: ffffffff8e09b960 R08: ffffc90003d4f607 R09: 1ffff920007a9ec0 [ 484.052516][ T5823] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 484.058962][T10900] R10: dffffc0000000000 R11: fffff520007a9ec1 R12: ffffc90003d4fc00 [ 484.074950][T10900] R13: 00000000000fffff R14: ffff888148c42d48 R15: 0000000000000006 [ 484.083097][T10900] FS: 0000000000000000(0000) GS:ffff8881260c2000(0063) knlGS:00000000f5116b40 [ 484.092281][T10900] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 484.099422][T10900] CR2: 00000000f73d6048 CR3: 000000007b444000 CR4: 00000000003526f0 [ 484.107446][T10900] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.115655][T10900] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.123849][T10900] Kernel panic - not syncing: Fatal exception [ 484.130273][T10900] Kernel Offset: disabled [ 484.134608][T10900] Rebooting in 86400 seconds..