last executing test programs: 14m7.827067576s ago: executing program 1 (id=3767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911077000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x1, 0x0, 0x0, {[@md5sig={0x13, 0x12, "473ecfd2106a00"}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000008c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) r7 = socket(0x10, 0x2, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x80000000, 0x0, 0x0, 0x3, 0x0, 0x10, 0x6, 0x0, 0x2, 0x0, 0xa, 0x0, 0x4}, {0xa, 0x0, 0x0, 0x0, 0x40, 0x1, 0x8, 0xff, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffff7}, {0x200000, 0xc, 0x21, 0x53, 0x0, 0x2, 0x0, 0x0, 0x58, 0xb, 0x0, 0x0, 0x8080}], 0x3fb}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="2ea8d2811b2a246ba8a8a78787aee7bb20c96807b6d8761f859ec6fa331e777591ed11248a94c0cfc19c61fe7c081ddaf685d4d5b414a01ac8d511cfb5d75e8878514da879142e585b1f9213b0f04d67baae20dd2e742f1286afc7a9bb0ad44aa05e2e3db382651792f2945409e7c6dda83d14fef1fb50a3cb8d0a189d28277f501a04c5d4414479db27bd23c1fbdf28124c317129fe42ebf9", @ANYRES8, @ANYRES64, @ANYRESOCT=r2, @ANYRES32, @ANYRESDEC=r5], 0x30}, 0x1, 0x0, 0x0, 0xc885}, 0x4000880) 14m5.687132415s ago: executing program 1 (id=3772): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) fdatasync(r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x803, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14m3.039692428s ago: executing program 1 (id=3776): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) 14m2.582153689s ago: executing program 1 (id=3779): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 14m2.473995421s ago: executing program 1 (id=3780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000014000100"], 0x2c}, 0x1, 0x0, 0x0, 0x20006054}, 0x24005040) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%6b\xaa\xe3\x8fa\x8e\xdc\xcc\xb5\x05\x83?3\xf1\x9c\'\x84J\xd8\x04\x12\x9f\x05\x00\x00\x00\x83\xd8\xaa\xb4\xaa\x871Ojc\\Ox\xcc\xa0e\xb3\x86\v\x83\x84\x9c\v\xb9\x92\f\xb9\x82\xeb\x1bXA7y\xb4\x18g\xec\xe7\xd9h\xf2U\x83e\xba\xfe\x80\xbe\x92\xb5\xe2 !@\v\xe8\xc0\x9f\xaf\xcc\xc6\\\xa3^#\xccZ\x19\'OPH&s\x94\x91\x03\xf6\xd6\xa3$\x02\xf8^f\f`', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x1ffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r2, 0x4068aea3, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0xe0fd}, 0x0, 0x2, 0x0, 0xc, &(0x7f0000000380)="e378aa62443b7fd1abf0e38dfa83979c380d38b06d6c93ffd0470d6389f572ef4828329383", 0x6}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) pipe2$watch_queue(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r7, r4, 0x0, 0x7ffffffd) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x10}) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'dvmrp1\x00'}) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x28, &(0x7f0000000200)=[@dstype0, @dstype0={0x6, 0x4}], 0x2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000400)=ANY=[@ANYBLOB="0500"]) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x8b) syz_open_dev$dmmidi(&(0x7f0000000340), 0x7f, 0x501042) 14m2.297790486s ago: executing program 1 (id=3781): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 13m47.230300562s ago: executing program 32 (id=3781): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 13m2.304400129s ago: executing program 0 (id=3965): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22842, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000200)={'\x00', 0xfffffe01, 0x0, 0xfffffff9}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000080)=ANY=[]) 13m1.056667663s ago: executing program 0 (id=3967): syz_open_dev$sg(0x0, 0x0, 0x8400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r0, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20000080, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x5c}}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000900)={0x7, @win={{0x0, 0xb, 0x9, 0x8001}, 0x2, 0x5, 0x0, 0xfffc, 0x0, 0xe1}}) syz_usb_connect(0x0, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000072389020b822972d645101020301090242000102000000090401000000068f000a2401020001020102052404"], 0x0) 12m57.534065054s ago: executing program 0 (id=3980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 12m57.454474018s ago: executing program 0 (id=3981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x50}, @in6=@remote}, 0x0, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}]}]}, 0xa0}}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x1c) getdents(0xffffffffffffffff, 0x0, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') clock_nanosleep(0xfffffff3, 0x0, 0x0, 0xfffffffffffffffe) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r2, 0x0) unlink(&(0x7f0000000100)='./file1\x00') syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x20, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x80000002, 0x1000014}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 12m57.221150561s ago: executing program 0 (id=3984): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000012c0)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/57, 0x39}], 0x4}, 0x9}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/198, 0xc6}], 0x3, &(0x7f0000000580)=""/51, 0x33}, 0xe5}, {{&(0x7f0000000640)=@nfc, 0x80, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/11, 0xb}, {&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/69, 0x45}, {&(0x7f00000008c0)=""/159, 0x9f}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/179, 0xb3}], 0x7, &(0x7f0000000b00)=""/36, 0x24}, 0x6}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/174, 0xae}], 0x1, &(0x7f0000000c40)=""/59, 0x3b}, 0x1}, {{&(0x7f0000000c80)=@ieee802154, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/251, 0xfb}], 0x1, &(0x7f0000000e40)=""/68, 0x44}, 0x2}, {{&(0x7f0000000ec0)=@nfc, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/177, 0xb1}], 0x1, &(0x7f0000001040)=""/38, 0x26}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001080)=""/104, 0x68}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000001100)=""/186, 0xba}, {&(0x7f00000011c0)=""/164, 0xa4}], 0x4}, 0xca}], 0x7, 0x100, &(0x7f0000001480)={0x77359400}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000007780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x4000}}], 0x1, 0x40000) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000280)={&(0x7f0000000600)=[{0x7, 0x211, 0x0, 0x0}, {0x8, 0x4000, 0x0, 0x0}], 0x2}) 12m56.949366838s ago: executing program 0 (id=3987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x3, 0x3, 0x5, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 12m56.312873338s ago: executing program 33 (id=3987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x3, 0x3, 0x5, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m26.496375577s ago: executing program 6 (id=6092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = epoll_create(0x689) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, &(0x7f0000000480)={0x10000018}) 3m26.177309655s ago: executing program 6 (id=6095): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_data=&(0x7f0000000140)="6e99dd3acc6118622f0dfaece7f4112ae437eed14ffe2e620bda065df35bdea2"}) 3m25.801099023s ago: executing program 6 (id=6098): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 3m23.829051696s ago: executing program 6 (id=6104): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=r2, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = io_uring_setup(0x3eac, &(0x7f0000000300)={0x0, 0xc95e, 0x400, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x28040085) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) timerfd_create(0x7, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0x44}}, 0x0) 3m21.552764555s ago: executing program 6 (id=6112): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x9273, 0x2, 0x7, 0x3, 0x9, 0x3, 0x1948, 0x1f33, 0xfffffffffffffff7, 0xef, 0x1, 0x3, 0x3, 0x3, 0x8000000000000000], 0xffff1000, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 3m21.459681058s ago: executing program 6 (id=6113): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000004000000000000000080000000a6000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x3, 'vlan1\x00', {0x4}, 0x9e41}) 3m6.417533041s ago: executing program 34 (id=6113): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000004000000000000000080000000a6000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x3, 'vlan1\x00', {0x4}, 0x9e41}) 12.461661985s ago: executing program 5 (id=6899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x4, 0x10000, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8001, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x6, 0x5, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x409, 0xa4, 0x3, 0xc11a, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfff, 0xd2b0, 0x80000000, 0x200}}, @NETEM_LOSS_GI={0x2c, 0x1, {0x2, 0x30, 0xffffffff, 0x200, 0xfffffffa}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ffd, 0x4, 0x3, 0x8, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40000000, 0x1, 0x3, 0x2}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x108}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r1) 11.727415552s ago: executing program 5 (id=6901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)=0x2) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="100025bd7000ffdbdf2506000000140003800800030003000000080003000000000024000280060002004e220000060002004e220000080007004e42000008000800f68200001c000380060007004e230000050008000b000000060007004e240000"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x880) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x48080) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10.981018868s ago: executing program 5 (id=6902): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x48, 0x118, 0x3ff, "8d618dd0ffc7e8f123e954eed124b4c1138791b3fe330a322fdff59a74c9f817ee44e703cc4cb5cfab2d5de92f1fe38e62ee460e4a"}], 0x48}, 0x40) socket$kcm(0x29, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x40004) 10.788958629s ago: executing program 5 (id=6904): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (fail_nth: 4) 10.284775896s ago: executing program 7 (id=6905): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000100070000000900020073797a3100000000140056a57400be98716d316386d25c1d2b0780080013000000000008001240000000000500040000000000050005000200000016000300686173683a"], 0x64}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) fallocate(r3, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000002b80)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400000000000000000000000700000094040020070f6e0a0101010a010102ac14141988040c08440c9eb0000000000000000300000000001400000000000000000000003400000084"], 0x50}}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000002ac0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000003680)={0x2380, 0x12, 0x14, 0x70bd2b, 0x25dfdbfe, {0x25, 0x6, 0x2, 0x7d, {0x4e23, 0x4e22, [0x901, 0x4, 0x2], [0x3, 0x1, 0x7, 0x16], 0x0, [0x401, 0x20000d55]}, 0x3, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x12, 0x1, "59b4e57f6aeaa97dbea6e4884fdd"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "72d78b186660bb70682dee41f6e6b0454883cb7253fc83365368f57b2551b9a25dacc5528d556af90b039829236712d785e61620f69fb48879d1c3d6b78b6d534fe0a1d43baa62ab0a758932cd54843876e4658042c4795706102bf52655a782a0cf25e71856d1beb28977eb93604ab1f5733fcea216596b9263bde472fc073d767c16440774b9973f0169d00f43bad719494d03643ef38e0c9966c18705299a18412b56e63b02539a83b6d23472bd40513083aad1c6a80b8b3db0344a1ae6d493363f6b183f9be96525840326a16a30dc539e964c6f18cae20a37af056ae0dca4c5e18a09a6eb8709c62d2aacf97c200b418e69"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "22adb5697986289a54c9b31f14cca2c7053f09c412ac7e82c9809685c625205c78"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1d3, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "732b3c9397c0cf6cdac7833d1f8d897e49e4b089bb6bbabd2a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x2380}, 0x1, 0x0, 0x0, 0x887d749bcef5fc4f}, 0x10011) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x101, 0x0, r8, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[r8, r2, r0, r10]}, 0x4) 10.039585932s ago: executing program 3 (id=6907): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100", @ANYRES32, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xe4ff) 10.023596394s ago: executing program 7 (id=6908): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}]}}]}, 0x134}}, 0x4000010) 9.861207172s ago: executing program 3 (id=6909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002800), 0x20000, 0x0) modify_ldt$write(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r6) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x44000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, r2, 0xd55319eec59dfa33, 0xfff7fffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x75}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 9.85972758s ago: executing program 4 (id=6910): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x2d, 0xff, 0x0, 0xffeffffd}]}) write$ppp(r0, &(0x7f00000000c0)="81a4c9e993fa076bf422189c7e3108d355a70c4dd0a870b356d347", 0x1b) 9.831581881s ago: executing program 5 (id=6911): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0x5}, 0x1c, 0x0}}], 0x1, 0x8c1) r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000040)={0x0, 0x0, 0x5, "bc14aeda40bf0077cbe19aaf0d01000003000000000000000000001800"}) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x1000430f, 0x8) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}}}, 0x108) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000340)=0x3, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) unshare(0x400) r6 = epoll_create(0x2) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x1]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000000180)) r8 = signalfd4(r7, &(0x7f0000000000), 0x8, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x4c, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r8) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.774629808s ago: executing program 7 (id=6913): socket$pppoe(0x18, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109020096d1ca00"], 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 9.09862315s ago: executing program 4 (id=6914): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x8, &(0x7f0000000100)={r2, r3+10000000}, 0x1, 0x4}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r4, &(0x7f0000000300)=""/86, 0xfffffffffffffc56, 0x4000000000000f3) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 8.966715969s ago: executing program 4 (id=6915): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x44, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x44}}, 0x4) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRES8=r0], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0xa, 0xc, {0xc, 0x6, "0a5d9e6d6c149bbe536b"}}, 0x0, 0x0, 0x0}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) 8.237027771s ago: executing program 2 (id=6917): syz_usb_connect(0x0, 0x3f, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905058f000000000009058b6e"], 0x0) r0 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000001880)={&(0x7f0000001640)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000001700)=[{&(0x7f00000016c0)="2a31b99360c9c5b02e3dc4417260963c3ce3f704b4a0cf2b44c2109b6d23dee0141da34abf5405a5170415afd81dee2658865e1bfd2a5094cb6e8675", 0x3c}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x128}, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xe4, 0xfc, 0xea, 0x8, 0xa257, 0x2013, 0x5448, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4c, 0x96, 0x78}}]}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0xa, @private0={0xfc, 0x0, '\x00', 0x81}, 0x1c2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={r3, 0xc8, "e9c1de19219330a9c6b75a5c4cf45ce95234b4c0e82032e669f1d611ee273831cd05684053806c142d060d0cf41dfd2291d46b30df772b667061c4dd9bc41c201d6cc1de5b3358c66cde06827f634c991c8ed2126b29543d30868e53c5da0b7b93cfe70afb6e4f302b6aa8501a3e27ac01ea9581fac571c7c7d57f217287e47663ef4698aed2d2314e0e08bab8bd204d26f104f3a036bef3b2fb58e7c00f8f483c029016d3648d06bf56d0bd1901bb6a1e6266c904b01f1e1d035b53b59e1f93a70bfee48912b508"}, &(0x7f0000000200)=0xd0) socket$packet(0x11, 0x2, 0x300) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0xfff}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x60}, 0x1, 0x0, 0x0, 0xc084}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b"]) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 7.606251259s ago: executing program 5 (id=6918): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r2, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001440), 0x49001, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r3, 0x0, 0x201, 0xe00, &(0x7f0000003080)="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", 0x4}) (fail_nth: 9) 6.42716054s ago: executing program 3 (id=6920): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) 6.245108351s ago: executing program 3 (id=6921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r1 = socket(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x8000, 0x1, 0x0, "1774d2a45f2b661f8efe34fff774d44b0ba98c7b153a056b0501278b440b3567", 0x34324d59}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000240)='rxrpc\x00', 0x0, &(0x7f00000003c0)="0000000000000004ff6943b80000000800030028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d0000009c238532dd4c6ee9eddd58a599264432dc88941a476f8674c3b25a20e8d25504d773dd523add126ab51ca15c9d0436b3d0164bda8d", 0x74, r4) r5 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x9c, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xae0}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb9}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x9c}}, 0x4008000) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x284902, 0x0) 6.120338233s ago: executing program 3 (id=6922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x541b, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x268}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0xf404, 0x0, 0x0, 0x0) (fail_nth: 7) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 5.814515815s ago: executing program 4 (id=6923): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x4000010) 5.710340079s ago: executing program 7 (id=6924): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4004, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x20, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000580)=""/32, &(0x7f0000000080)=0x20) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'rootmode'}}, 0x29) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) sendfile(r3, r3, 0x0, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000001c0), &(0x7f0000000240)=r1}, 0x20) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0xfffffffffffffffc}, 0x18) bind$can_j1939(r1, &(0x7f00000003c0)={0x1d, r5, 0x1, {0x0, 0x0, 0x2}, 0xfe}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x40, {0xa, 0x50, 0x14, 0x80, 0xd, 0x0, 0x0, 0x3, 0x16}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) unshare(0x10020100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f00000002c0)=@raw=[@generic={0x5, 0x5, 0x2, 0x1c0, 0x7518}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000540)={'vcan0\x00'}) syz_usb_control_io(r7, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = gettid() sendmmsg$unix(r10, &(0x7f000000d7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r11}}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c}}], 0x58, 0x488d1}}], 0x1, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070097ac7e9b4e"], 0x0}, 0x0) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "f016a30467a1bf40928dbefbd56d9c2999871bda6a234c67d3b264dc4e0d181df6bacfa2a8dc07cf817033aef06253c5deb97c68918ee808924c9e25899bbc86", 0x29}, 0x48, 0xfffffffffffffffd) 5.501814586s ago: executing program 4 (id=6925): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d1a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={0x0, 0x20}}, 0x81) connect$unix(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = dup(r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905849d"], 0x0) r5 = open(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1850c2, 0x159) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 4.711970325s ago: executing program 2 (id=6926): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0xfeb, 0xd160, 0x26, &(0x7f0000000000)={[0xf5ca]}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01001600"/28], 0x48) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000040000000000000000000001811000003ae2ea4e495560587cbea0ab3c64ae113b35825cd691347570fd8bd32301e413bc33a814e26fcd5f6638bdefa565609fa14d9392bfac944757f2d3bc957a485b24b9d789d8d8ed51858a9d7e66ce7d51171d655a0c503177a236ca91b05a0e763db6933f3e1fa6893ece3b3ecf1031a1c66191ac98b7b819fa8e0e656f58d2f429f01be8edfdfa1034e0c4ce17a0a4980e06c3f0973fae498ea806b083cb51febd1951c312a559717a4632a762cae724c959df2a352d9f89f96fd843c8a6ed833488af7026fadab43993741e1d93076d9971d254392c1a3e8d00a2e13", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000001f00)=""/4111, 0x100f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) syz_emit_ethernet(0x1026, &(0x7f0000002f40)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@mpls_uc={0x8847, {[{0x3, 0x0, 0x1}, {0x49f}, {0x7ff, 0x0, 0x1}, {0x4d3}, {0xff7e9, 0x0, 0x1}, {0x6, 0x0, 0x1}], @generic="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"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.639299558s ago: executing program 3 (id=6927): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x28440, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000200)={r6}) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) 4.265291882s ago: executing program 2 (id=6928): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xb) unshare(0x20040600) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r2, 0x0) copy_file_range(r2, &(0x7f0000000080)=0x204, r1, &(0x7f0000000100)=0x1, 0x206a2e2c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newroute={0x44, 0x18, 0x20, 0x70bd25, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x7, 0x0, 0x4, 0xc8, 0xb, 0x1f00}, [@RTA_ENCAP_TYPE={0x6}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @LWT_BPF_IN={0x1c, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x16, 0x2, '/dev/snd/pcmC#D#c\x00'}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x48004) 2.565339053s ago: executing program 4 (id=6929): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xfffffffd, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @private=0xa010100}}}}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x300}, 0x0) 2.467733545s ago: executing program 7 (id=6930): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x8, &(0x7f0000000100)={r2, r3+10000000}, 0x1, 0x4}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r4, &(0x7f0000000300)=""/86, 0xfffffffffffffc56, 0x4000000000000f3) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 2.214966512s ago: executing program 7 (id=6931): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x7e, 0xc00) unshare(0x6a040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008001480040005"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$qrtr(0x2a, 0x2, 0x0) socket$inet(0x2, 0x2, 0xffffffff) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xe688, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r6, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 677.180943ms ago: executing program 2 (id=6932): openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_uring_setup(0x1ef3, &(0x7f0000000100)={0x0, 0xfc0c, 0x40, 0x3, 0x1a3}) socket$l2tp(0x2, 0x2, 0x73) socket$netlink(0x10, 0x3, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$vsock(0xffffffffffffff9c, 0x0, 0x80401, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x22ed81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRES16=r4]) 77.503421ms ago: executing program 2 (id=6933): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 0s ago: executing program 2 (id=6934): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x4}}]}}]}, 0x3c}}, 0x4000010) kernel console output (not intermixed with test programs): : 32 [ 1598.024706][T25649] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1598.035845][T25649] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1598.057958][T25649] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1598.067107][ T5881] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1598.074837][T25649] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.093940][T25649] usb 8-1: config 0 descriptor?? [ 1598.109914][T25649] hub 8-1:0.0: USB hub found [ 1598.294271][ T5881] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1598.308776][T25649] hub 8-1:0.0: 1 port detected [ 1598.326392][ T5881] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 1598.343291][ T5881] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 1598.365480][ T5881] usb 4-1: config 129 descriptor has 1 excess byte, ignoring [ 1598.377237][T28577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6633'. [ 1598.386342][ T5881] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1598.402029][ T5881] usb 4-1: config 129 has no interface number 0 [ 1598.409055][ T5881] usb 4-1: config 129 has no interface number 1 [ 1598.415398][ T5881] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1598.429564][ T5881] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1598.442520][ T5881] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1598.464219][ T5881] usb 4-1: config 129 interface 135 has no altsetting 0 [ 1598.471525][ T5881] usb 4-1: config 129 interface 5 has no altsetting 0 [ 1598.485141][ T5881] usb 4-1: string descriptor 0 read error: -22 [ 1598.492799][ T5881] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 1598.533859][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.587489][ T5881] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1598.590335][T28586] program syz.4.6637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1598.599883][ T5881] usb 4-1: MIDIStreaming interface descriptor not found [ 1598.804458][T25649] usb 8-1: USB disconnect, device number 17 [ 1598.841565][T12141] usb 4-1: USB disconnect, device number 85 [ 1599.057942][ T5881] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1599.163493][T28602] SET target dimension over the limit! [ 1599.251107][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.262219][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1599.296947][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1599.362899][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1599.487227][ T5881] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1599.500363][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.526337][T28609] FAULT_INJECTION: forcing a failure. [ 1599.526337][T28609] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.554566][T28609] CPU: 1 UID: 0 PID: 28609 Comm: syz.4.6644 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1599.554593][T28609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1599.554605][T28609] Call Trace: [ 1599.554613][T28609] [ 1599.554622][T28609] dump_stack_lvl+0x189/0x250 [ 1599.554673][T28609] ? __pfx____ratelimit+0x10/0x10 [ 1599.554700][T28609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1599.554731][T28609] ? __pfx__printk+0x10/0x10 [ 1599.554759][T28609] ? __pfx___might_resched+0x10/0x10 [ 1599.554795][T28609] ? fs_reclaim_acquire+0x7d/0x100 [ 1599.554820][T28609] should_fail_ex+0x414/0x560 [ 1599.554850][T28609] should_failslab+0xa8/0x100 [ 1599.554880][T28609] __kmalloc_cache_noprof+0x70/0x3d0 [ 1599.554907][T28609] ? __se_sys_fspick+0x206/0x3d0 [ 1599.554933][T28609] __se_sys_fspick+0x206/0x3d0 [ 1599.554957][T28609] ? __pfx___se_sys_fspick+0x10/0x10 [ 1599.554976][T28609] ? rcu_is_watching+0x15/0xb0 [ 1599.555006][T28609] ? do_syscall_64+0xbe/0x3b0 [ 1599.555034][T28609] do_syscall_64+0xfa/0x3b0 [ 1599.555057][T28609] ? lockdep_hardirqs_on+0x9c/0x150 [ 1599.555088][T28609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.555107][T28609] ? clear_bhb_loop+0x60/0xb0 [ 1599.555130][T28609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.555148][T28609] RIP: 0033:0x7f817318e969 [ 1599.555164][T28609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1599.555181][T28609] RSP: 002b:00007f81740a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 1599.555200][T28609] RAX: ffffffffffffffda RBX: 00007f81733b5fa0 RCX: 00007f817318e969 [ 1599.555215][T28609] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1599.555227][T28609] RBP: 00007f81740a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.555239][T28609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.555250][T28609] R13: 0000000000000000 R14: 00007f81733b5fa0 R15: 00007f81734dfa28 [ 1599.555279][T28609] [ 1599.755015][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.762019][ T5881] usb 3-1: Product: syz [ 1599.766302][ T5881] usb 3-1: Manufacturer: syz [ 1599.771124][ T5881] usb 3-1: SerialNumber: syz [ 1599.783235][ T5881] usb 3-1: config 0 descriptor?? [ 1599.816200][ T5881] xbox_remote_probe: Unexpected endpoint_in [ 1599.976894][ T5913] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1600.037466][T28593] usb usb8: usbfs: process 28593 (syz.2.6638) did not claim interface 0 before use [ 1600.051530][T28593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.060778][T28593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.167004][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 1600.174966][T28618] binder: 28612:28618 ioctl c0306201 2000000003c0 returned -14 [ 1600.183968][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.205363][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.226039][ T5913] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1600.371498][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.398832][ T5913] usb 6-1: config 0 descriptor?? [ 1600.826655][ T5913] appleir 0003:05AC:8241.0042: unknown main item tag 0x0 [ 1600.869153][ T5913] appleir 0003:05AC:8241.0042: unknown main item tag 0x0 [ 1600.890569][ T5913] appleir 0003:05AC:8241.0042: unknown main item tag 0x0 [ 1600.909145][ T5913] appleir 0003:05AC:8241.0042: unknown main item tag 0x0 [ 1600.930463][ T5913] appleir 0003:05AC:8241.0042: No inputs registered, leaving [ 1600.980567][ T5913] appleir 0003:05AC:8241.0042: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 1601.027604][T28629] SET target dimension over the limit! [ 1601.194712][ T5913] usb 6-1: USB disconnect, device number 21 [ 1601.312001][T28631] fido_id[28631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1601.337733][T20800] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1601.499241][T20800] usb 8-1: Using ep0 maxpacket: 8 [ 1601.505021][T28634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6653'. [ 1601.527108][T20800] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1601.538399][T20800] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.552415][T20800] usb 8-1: Product: syz [ 1601.559312][T20800] usb 8-1: Manufacturer: syz [ 1601.577009][T20800] usb 8-1: SerialNumber: syz [ 1601.604204][T20800] usb 8-1: config 0 descriptor?? [ 1602.044611][T20800] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1602.806457][T28647] input: syz1 as /devices/virtual/input/input138 [ 1602.870790][T28649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6659'. [ 1602.883935][T28649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6659'. [ 1602.894254][T28649] netlink: 'syz.4.6659': attribute type 11 has an invalid length. [ 1602.903487][T28649] netlink: 'syz.4.6659': attribute type 12 has an invalid length. [ 1603.068544][T28656] program syz.4.6662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1604.373840][T28686] FAULT_INJECTION: forcing a failure. [ 1604.373840][T28686] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.400752][T28686] CPU: 1 UID: 0 PID: 28686 Comm: syz.3.6669 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1604.400793][T28686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1604.400806][T28686] Call Trace: [ 1604.400816][T28686] [ 1604.400825][T28686] dump_stack_lvl+0x189/0x250 [ 1604.400859][T28686] ? __pfx____ratelimit+0x10/0x10 [ 1604.400883][T28686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1604.400912][T28686] ? __pfx__printk+0x10/0x10 [ 1604.400929][T28686] ? __pfx___might_resched+0x10/0x10 [ 1604.400948][T28686] ? fs_reclaim_acquire+0x7d/0x100 [ 1604.400973][T28686] should_fail_ex+0x414/0x560 [ 1604.401003][T28686] should_failslab+0xa8/0x100 [ 1604.401043][T28686] __kmalloc_cache_noprof+0x70/0x3d0 [ 1604.401077][T28686] ? device_add+0xbe/0xb50 [ 1604.401099][T28686] device_add+0xbe/0xb50 [ 1604.401123][T28686] input_register_device+0x9ca/0x10b0 [ 1604.401164][T28686] uinput_create_device+0x422/0x670 [ 1604.401185][T28686] ? __lock_acquire+0xab9/0xd20 [ 1604.401212][T28686] uinput_ioctl_handler+0x3f0/0x1570 [ 1604.401235][T28686] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1604.401259][T28686] ? __fget_files+0x2a/0x420 [ 1604.401272][T28686] ? __fget_files+0x3a0/0x420 [ 1604.401294][T28686] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1604.401319][T28686] ? __pfx_uinput_ioctl+0x10/0x10 [ 1604.401341][T28686] __se_sys_ioctl+0xfc/0x170 [ 1604.401367][T28686] do_syscall_64+0xfa/0x3b0 [ 1604.401387][T28686] ? lockdep_hardirqs_on+0x9c/0x150 [ 1604.401403][T28686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.401416][T28686] ? clear_bhb_loop+0x60/0xb0 [ 1604.401436][T28686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.401455][T28686] RIP: 0033:0x7fe7b658e969 [ 1604.401473][T28686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1604.401488][T28686] RSP: 002b:00007fe7b43f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1604.401507][T28686] RAX: ffffffffffffffda RBX: 00007fe7b67b5fa0 RCX: 00007fe7b658e969 [ 1604.401522][T28686] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1604.401531][T28686] RBP: 00007fe7b43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.401540][T28686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1604.401548][T28686] R13: 0000000000000000 R14: 00007fe7b67b5fa0 R15: 00007fe7b68dfa28 [ 1604.401568][T28686] [ 1604.762289][T28688] x_tables: duplicate underflow at hook 1 [ 1604.833542][T28690] x_tables: duplicate underflow at hook 1 [ 1604.863482][T20800] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1604.905368][T20800] usb 8-1: USB disconnect, device number 18 [ 1605.157709][T12141] usb 3-1: USB disconnect, device number 96 [ 1605.275882][T28694] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6673'. [ 1605.473950][T28701] FAULT_INJECTION: forcing a failure. [ 1605.473950][T28701] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.489317][T28701] CPU: 1 UID: 0 PID: 28701 Comm: syz.3.6676 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1605.489341][T28701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1605.489351][T28701] Call Trace: [ 1605.489357][T28701] [ 1605.489363][T28701] dump_stack_lvl+0x189/0x250 [ 1605.489391][T28701] ? __pfx____ratelimit+0x10/0x10 [ 1605.489410][T28701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1605.489433][T28701] ? __pfx__printk+0x10/0x10 [ 1605.489453][T28701] ? ref_tracker_alloc+0x318/0x460 [ 1605.489476][T28701] should_fail_ex+0x414/0x560 [ 1605.489499][T28701] should_failslab+0xa8/0x100 [ 1605.489523][T28701] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1605.489544][T28701] ? skb_clone+0x212/0x3a0 [ 1605.489573][T28701] skb_clone+0x212/0x3a0 [ 1605.489591][T28701] __netlink_deliver_tap+0x404/0x850 [ 1605.489622][T28701] ? netlink_deliver_tap+0x2e/0x1b0 [ 1605.489646][T28701] netlink_deliver_tap+0x19c/0x1b0 [ 1605.489668][T28701] netlink_unicast+0x72f/0x8d0 [ 1605.489697][T28701] netlink_sendmsg+0x805/0xb30 [ 1605.489717][T28701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1605.489733][T28701] ? aa_sock_msg_perm+0x94/0x160 [ 1605.489753][T28701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1605.489770][T28701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1605.489784][T28701] __sock_sendmsg+0x219/0x270 [ 1605.489805][T28701] ____sys_sendmsg+0x505/0x830 [ 1605.489828][T28701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1605.489850][T28701] ? import_iovec+0x74/0xa0 [ 1605.489868][T28701] ___sys_sendmsg+0x21f/0x2a0 [ 1605.489884][T28701] ? __pfx____sys_sendmsg+0x10/0x10 [ 1605.489924][T28701] ? __fget_files+0x2a/0x420 [ 1605.489938][T28701] ? __fget_files+0x3a0/0x420 [ 1605.489958][T28701] __x64_sys_sendmsg+0x19b/0x260 [ 1605.489976][T28701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1605.489997][T28701] ? __pfx_ksys_write+0x10/0x10 [ 1605.490016][T28701] ? rcu_is_watching+0x15/0xb0 [ 1605.490039][T28701] ? do_syscall_64+0xbe/0x3b0 [ 1605.490061][T28701] do_syscall_64+0xfa/0x3b0 [ 1605.490079][T28701] ? lockdep_hardirqs_on+0x9c/0x150 [ 1605.490096][T28701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.490110][T28701] ? clear_bhb_loop+0x60/0xb0 [ 1605.490128][T28701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.490142][T28701] RIP: 0033:0x7fe7b658e969 [ 1605.490154][T28701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1605.490167][T28701] RSP: 002b:00007fe7b43f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1605.490182][T28701] RAX: ffffffffffffffda RBX: 00007fe7b67b5fa0 RCX: 00007fe7b658e969 [ 1605.490193][T28701] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1605.490202][T28701] RBP: 00007fe7b43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1605.490211][T28701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.490220][T28701] R13: 0000000000000000 R14: 00007fe7b67b5fa0 R15: 00007fe7b68dfa28 [ 1605.490242][T28701] [ 1606.043735][T28712] x_tables: duplicate underflow at hook 1 [ 1606.093268][T28715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1606.281250][T28722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6682'. [ 1606.290663][T28722] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 1606.475645][T28727] fuse: Bad value for 'user_id' [ 1606.517161][T28727] fuse: Bad value for 'user_id' [ 1606.607944][T20800] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1606.642537][T28731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6685'. [ 1606.674786][T28733] FAULT_INJECTION: forcing a failure. [ 1606.674786][T28733] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.688898][T28733] CPU: 1 UID: 0 PID: 28733 Comm: syz.3.6687 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1606.688928][T28733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1606.688941][T28733] Call Trace: [ 1606.688950][T28733] [ 1606.688961][T28733] dump_stack_lvl+0x189/0x250 [ 1606.688989][T28733] ? __pfx____ratelimit+0x10/0x10 [ 1606.689009][T28733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1606.689032][T28733] ? __pfx__printk+0x10/0x10 [ 1606.689053][T28733] ? __pfx___might_resched+0x10/0x10 [ 1606.689072][T28733] ? fs_reclaim_acquire+0x7d/0x100 [ 1606.689091][T28733] should_fail_ex+0x414/0x560 [ 1606.689113][T28733] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1606.689133][T28733] should_failslab+0xa8/0x100 [ 1606.689156][T28733] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1606.689173][T28733] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1606.689207][T28733] ? sock_alloc_inode+0x28/0xc0 [ 1606.689227][T28733] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1606.689244][T28733] sock_alloc_inode+0x28/0xc0 [ 1606.689262][T28733] alloc_inode+0x6a/0x1b0 [ 1606.689285][T28733] __sock_create+0x12d/0x9f0 [ 1606.689306][T28733] ? look_up_lock_class+0x74/0x170 [ 1606.689328][T28733] mptcp_subflow_create_socket+0xfd/0xb40 [ 1606.689353][T28733] ? __lock_acquire+0xab9/0xd20 [ 1606.689375][T28733] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1606.689404][T28733] __mptcp_nmpc_sk+0x148/0x750 [ 1606.689427][T28733] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1606.689446][T28733] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1606.689475][T28733] mptcp_setsockopt+0xe2e/0x3460 [ 1606.689488][T28733] ? vfs_write+0x8d8/0xa90 [ 1606.689517][T28733] ? aa_sk_perm+0x81e/0x950 [ 1606.689533][T28733] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1606.689550][T28733] ? __pfx_aa_sk_perm+0x10/0x10 [ 1606.689565][T28733] ? __lock_acquire+0xab9/0xd20 [ 1606.689585][T28733] ? aa_sock_opt_perm+0x74/0x110 [ 1606.689603][T28733] ? sock_common_setsockopt+0x36/0xc0 [ 1606.689623][T28733] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1606.689644][T28733] do_sock_setsockopt+0x25a/0x3e0 [ 1606.689661][T28733] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1606.689678][T28733] ? __fget_files+0x2a/0x420 [ 1606.689698][T28733] __x64_sys_setsockopt+0x18b/0x220 [ 1606.689716][T28733] do_syscall_64+0xfa/0x3b0 [ 1606.689734][T28733] ? lockdep_hardirqs_on+0x9c/0x150 [ 1606.689751][T28733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.689765][T28733] ? clear_bhb_loop+0x60/0xb0 [ 1606.689783][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.689797][T28733] RIP: 0033:0x7fe7b658e969 [ 1606.689809][T28733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1606.689822][T28733] RSP: 002b:00007fe7b43f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1606.689838][T28733] RAX: ffffffffffffffda RBX: 00007fe7b67b5fa0 RCX: 00007fe7b658e969 [ 1606.689849][T28733] RDX: 000000000000001a RSI: 0000000000000029 RDI: 0000000000000003 [ 1606.689858][T28733] RBP: 00007fe7b43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.689867][T28733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.689875][T28733] R13: 0000000000000000 R14: 00007fe7b67b5fa0 R15: 00007fe7b68dfa28 [ 1606.689897][T28733] [ 1606.690171][T28733] socket: no more sockets [ 1607.026191][T20800] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1607.087944][T20800] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1607.194582][T20800] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1607.265570][T20800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.333784][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.342092][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.399942][T28722] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1607.471078][T20800] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1607.758272][T28755] x_tables: duplicate underflow at hook 1 [ 1607.850303][ T5913] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1608.047679][ T5913] usb 8-1: Using ep0 maxpacket: 8 [ 1608.055526][ T5913] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1608.065075][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.138393][ T5913] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1608.160255][ T5913] pvrusb2: ********** [ 1608.168386][ T5913] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1608.197026][ T5913] pvrusb2: Important functionality might not be entirely working. [ 1608.205218][ T5913] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1608.217517][ T5913] pvrusb2: ********** [ 1608.310056][T20800] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1608.321313][ T2344] pvrusb2: Invalid write control endpoint [ 1608.326637][ T5913] usb 8-1: USB disconnect, device number 19 [ 1608.427056][T20804] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1608.428045][ T2344] pvrusb2: Invalid write control endpoint [ 1608.445315][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1608.609228][T20804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1608.620951][T20804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.630716][T20800] usb 5-1: Using ep0 maxpacket: 8 [ 1608.676674][T20804] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1608.681938][T20800] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1608.686479][T20804] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1608.705654][T20804] usb 4-1: Manufacturer: syz [ 1608.708718][T20800] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1608.721641][T20804] usb 4-1: config 0 descriptor?? [ 1608.722626][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1608.737030][T20804] hub 4-1:0.0: USB hub found [ 1608.742509][T20800] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1608.752787][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1608.851053][T20800] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1608.864665][ T2344] pvrusb2: Device being rendered inoperable [ 1608.870717][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1608.877901][T20800] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1608.887064][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1608.906529][T20800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.916485][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1608.948712][T20804] hub 4-1:0.0: 1 port detected [ 1608.956078][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1609.094272][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1609.267042][T20800] usb 5-1: usb_control_msg returned -32 [ 1609.277530][T20800] usbtmc 5-1:16.0: can't read capabilities [ 1609.479091][ T5913] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1609.588348][T20804] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 1609.659465][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1609.678680][T20800] usb 3-1: USB disconnect, device number 97 [ 1609.705341][ T5913] usb 8-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1609.744553][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.767655][ T5913] usb 8-1: config 0 descriptor?? [ 1609.850340][T28773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.867308][T28773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.988434][T28770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.011194][T28770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.098906][T20800] usb 5-1: USB disconnect, device number 85 [ 1610.234894][ T5913] kye 0003:0458:5019.0043: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1610.250272][ T5913] kye 0003:0458:5019.0043: item fetching failed at offset 5/7 [ 1610.273636][ T5913] kye 0003:0458:5019.0043: parse failed [ 1610.294218][ T5913] kye 0003:0458:5019.0043: probe with driver kye failed with error -22 [ 1610.438200][T12141] usb 8-1: USB disconnect, device number 20 [ 1610.756955][T20800] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1611.038374][T20800] usb 3-1: config 0 has no interfaces? [ 1611.092938][T20800] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1611.130576][T20800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.156932][T20800] usb 3-1: Product: syz [ 1611.169957][T20800] usb 3-1: Manufacturer: syz [ 1611.199029][T20800] usb 3-1: SerialNumber: syz [ 1611.212633][T20800] usb 3-1: config 0 descriptor?? [ 1611.397320][T20800] usb 4-1: USB disconnect, device number 86 [ 1611.950181][T28809] IPv6: Can't replace route, no match found [ 1611.967654][T28809] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6712'. [ 1611.989975][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6712'. [ 1612.046972][T20800] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1612.054822][T28809] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6712'. [ 1612.260762][T20800] usb 4-1: too many configurations: 135, using maximum allowed: 8 [ 1612.303397][T20800] usb 4-1: config index 0 descriptor too short (expected 9413, got 240) [ 1612.322108][T20800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.337423][T20800] usb 4-1: config index 1 descriptor too short (expected 9413, got 240) [ 1612.351138][T20800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.374513][T20800] usb 4-1: config index 2 descriptor too short (expected 9413, got 240) [ 1612.383376][T20800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.401022][T20800] usb 4-1: config index 3 descriptor too short (expected 9413, got 240) [ 1612.413061][T20800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.425020][T20800] usb 4-1: config index 4 descriptor too short (expected 9413, got 240) [ 1612.436454][T20800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.450766][T28817] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6716'. [ 1612.496034][T20800] usb 4-1: config index 5 descriptor too short (expected 9413, got 240) [ 1612.509399][T20800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.541287][T20800] usb 4-1: config index 6 descriptor too short (expected 9413, got 240) [ 1612.552289][T20800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.583855][T20800] usb 4-1: config index 7 descriptor too short (expected 9413, got 240) [ 1612.595359][T20800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.625332][T20800] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1612.638998][T20800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.647973][T20800] usb 4-1: Product: syz [ 1612.653544][T20800] usb 4-1: Manufacturer: syz [ 1612.661010][T20800] usb 4-1: SerialNumber: syz [ 1612.695275][T20800] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1612.742847][ T5881] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1613.273826][T28804] binder: 28803:28804 ioctl c0306201 2000000003c0 returned -14 [ 1613.434555][T16384] usb 3-1: USB disconnect, device number 98 [ 1613.498934][T20800] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1613.514331][ T5913] usb 4-1: USB disconnect, device number 87 [ 1613.596903][T20804] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1613.753766][T20800] usb 5-1: device descriptor read/64, error -71 [ 1613.791382][T20804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1613.800132][T20804] usb 6-1: not running at top speed; connect to a high speed hub [ 1613.807138][ T5881] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1613.817907][T20804] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 655, setting to 64 [ 1613.827022][ T5881] ath9k_htc: Failed to initialize the device [ 1613.852589][T20804] usb 6-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1613.871437][ T5913] usb 4-1: ath9k_htc: USB layer deinitialized [ 1613.907674][T20804] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1613.932803][T20804] usb 6-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 1613.946404][T20804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.993596][T20804] usb 6-1: Product: syz [ 1613.996952][T20800] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1614.008472][T20804] usb 6-1: Manufacturer: syz [ 1614.013124][T20804] usb 6-1: SerialNumber: syz [ 1614.063428][T25649] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1614.126418][T28833] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1614.136885][T20800] usb 5-1: device descriptor read/64, error -71 [ 1614.169559][T28847] FAULT_INJECTION: forcing a failure. [ 1614.169559][T28847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.183253][T28847] CPU: 0 UID: 0 PID: 28847 Comm: syz.3.6726 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1614.183282][T28847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1614.183297][T28847] Call Trace: [ 1614.183306][T28847] [ 1614.183316][T28847] dump_stack_lvl+0x189/0x250 [ 1614.183352][T28847] ? __pfx____ratelimit+0x10/0x10 [ 1614.183378][T28847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1614.183420][T28847] ? __pfx__printk+0x10/0x10 [ 1614.183444][T28847] ? __might_fault+0xb0/0x130 [ 1614.183494][T28847] should_fail_ex+0x414/0x560 [ 1614.183527][T28847] _copy_from_user+0x2d/0xb0 [ 1614.183551][T28847] ___sys_sendmsg+0x158/0x2a0 [ 1614.183577][T28847] ? __pfx____sys_sendmsg+0x10/0x10 [ 1614.183637][T28847] ? __fget_files+0x2a/0x420 [ 1614.183656][T28847] ? __fget_files+0x3a0/0x420 [ 1614.183686][T28847] __sys_sendmmsg+0x227/0x430 [ 1614.183715][T28847] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1614.183733][T28847] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1614.183796][T28847] ? ksys_write+0x22a/0x250 [ 1614.183827][T28847] ? __pfx_ksys_write+0x10/0x10 [ 1614.183852][T28847] ? rcu_is_watching+0x15/0xb0 [ 1614.183887][T28847] __x64_sys_sendmmsg+0xa0/0xc0 [ 1614.183918][T28847] do_syscall_64+0xfa/0x3b0 [ 1614.183943][T28847] ? lockdep_hardirqs_on+0x9c/0x150 [ 1614.183969][T28847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.183990][T28847] ? clear_bhb_loop+0x60/0xb0 [ 1614.184027][T28847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.184046][T28847] RIP: 0033:0x7fe7b658e969 [ 1614.184064][T28847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1614.184082][T28847] RSP: 002b:00007fe7b43f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1614.184105][T28847] RAX: ffffffffffffffda RBX: 00007fe7b67b5fa0 RCX: 00007fe7b658e969 [ 1614.184121][T28847] RDX: 0000000000000002 RSI: 0000200000006b80 RDI: 0000000000000003 [ 1614.184134][T28847] RBP: 00007fe7b43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.184147][T28847] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.184160][T28847] R13: 0000000000000000 R14: 00007fe7b67b5fa0 R15: 00007fe7b68dfa28 [ 1614.184191][T28847] [ 1614.512147][T25649] usb 3-1: device descriptor read/64, error -71 [ 1614.519514][T20800] usb usb5-port1: attempt power cycle [ 1614.552721][T20804] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input140 [ 1614.566871][T12141] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 1614.580753][ T5184] bcm5974 6-1:1.0: could not read from device [ 1614.591745][ T5184] bcm5974 6-1:1.0: could not read from device [ 1614.599879][ T5184] bcm5974 6-1:1.0: could not read from device [ 1614.610464][ T5184] bcm5974 6-1:1.0: could not read from device [ 1614.619575][T20804] usb 6-1: USB disconnect, device number 22 [ 1614.698947][T12141] usb 8-1: device descriptor read/64, error -71 [ 1614.757519][T25649] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1614.857081][T20800] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1614.887001][T25649] usb 3-1: device descriptor read/64, error -71 [ 1614.893809][T20800] usb 5-1: device descriptor read/8, error -71 [ 1614.906928][T16384] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1614.936889][T12141] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 1614.997167][T25649] usb usb3-port1: attempt power cycle [ 1615.067003][T12141] usb 8-1: device descriptor read/64, error -71 [ 1615.086063][T16384] usb 4-1: config 127 has an invalid interface number: 32 but max is 0 [ 1615.095958][T16384] usb 4-1: config 127 has no interface number 0 [ 1615.102515][T16384] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 1615.112661][T16384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.130341][T16384] ums-freecom 4-1:127.32: USB Mass Storage device detected [ 1615.137641][T20800] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1615.164724][T20800] usb 5-1: device descriptor read/8, error -71 [ 1615.176063][T28851] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6728'. [ 1615.186948][T12141] usb usb8-port1: attempt power cycle [ 1615.277894][T20800] usb usb5-port1: unable to enumerate USB device [ 1615.336869][T25649] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1615.345916][T28849] syzkaller1: entered promiscuous mode [ 1615.351647][T28849] syzkaller1: entered allmulticast mode [ 1615.359498][T25649] usb 3-1: device descriptor read/8, error -71 [ 1615.374357][T28856] netlink: 'syz.5.6729': attribute type 21 has an invalid length. [ 1615.536941][T12141] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 1615.557509][T12141] usb 8-1: device descriptor read/8, error -71 [ 1615.607097][T25649] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1615.637728][T25649] usb 3-1: device descriptor read/8, error -71 [ 1615.758745][T25649] usb usb3-port1: unable to enumerate USB device [ 1615.796923][T12141] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 1615.837946][T12141] usb 8-1: device descriptor read/8, error -71 [ 1615.947222][T12141] usb usb8-port1: unable to enumerate USB device [ 1616.146865][T20800] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1616.298553][T20800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1616.309850][T20800] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1616.323668][T20800] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1616.333049][T20800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.341656][T20800] usb 5-1: Product: syz [ 1616.345986][T20800] usb 5-1: Manufacturer: syz [ 1616.350695][T20800] usb 5-1: SerialNumber: syz [ 1616.358634][T20800] usb 5-1: config 0 descriptor?? [ 1616.365175][T28862] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1616.374412][T20800] usb 5-1: ucan: probing device on interface #0 [ 1616.380802][T20800] usb 5-1: ucan: invalid EP count (1) [ 1616.386241][T20800] usb 5-1: ucan: probe failed; try to update the device firmware [ 1616.679552][T28862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.691299][T28862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.636063][T20804] usb 4-1: USB disconnect, device number 88 [ 1617.842978][T28878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6735'. [ 1617.883210][T28878] binder: BINDER_SET_CONTEXT_MGR already set [ 1617.891822][T28878] binder: 28877:28878 ioctl 4018620d 200000000040 returned -16 [ 1618.592094][T28895] x_tables: duplicate underflow at hook 1 [ 1618.722845][T28899] FAULT_INJECTION: forcing a failure. [ 1618.722845][T28899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1618.754456][T28899] CPU: 0 UID: 0 PID: 28899 Comm: syz.2.6742 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1618.754488][T28899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1618.754501][T28899] Call Trace: [ 1618.754510][T28899] [ 1618.754520][T28899] dump_stack_lvl+0x189/0x250 [ 1618.754558][T28899] ? __pfx____ratelimit+0x10/0x10 [ 1618.754584][T28899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1618.754620][T28899] ? __pfx__printk+0x10/0x10 [ 1618.754644][T28899] ? __might_fault+0xb0/0x130 [ 1618.754687][T28899] should_fail_ex+0x414/0x560 [ 1618.754720][T28899] _copy_to_iter+0x1db/0x16f0 [ 1618.754763][T28899] ? __pfx__copy_to_iter+0x10/0x10 [ 1618.754799][T28899] ? tipc_wait_for_rcvmsg+0x4ef/0x630 [ 1618.754838][T28899] __skb_datagram_iter+0xf8/0x990 [ 1618.754862][T28899] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 1618.754889][T28899] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1618.754923][T28899] skb_copy_datagram_iter+0xc5/0x230 [ 1618.754952][T28899] tipc_recvstream+0x72d/0xe70 [ 1618.754996][T28899] ? __pfx_tipc_recvstream+0x10/0x10 [ 1618.755020][T28899] sock_recvmsg+0x229/0x270 [ 1618.755052][T28899] ____sys_recvmsg+0x1c9/0x460 [ 1618.755085][T28899] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1618.755125][T28899] ? import_iovec+0x74/0xa0 [ 1618.755151][T28899] ___sys_recvmsg+0x1b5/0x510 [ 1618.755181][T28899] ? __pfx____sys_recvmsg+0x10/0x10 [ 1618.755231][T28899] ? __fget_files+0x3a0/0x420 [ 1618.755265][T28899] do_recvmmsg+0x307/0x770 [ 1618.755296][T28899] ? __pfx_do_recvmmsg+0x10/0x10 [ 1618.755333][T28899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1618.755370][T28899] __x64_sys_recvmmsg+0x190/0x240 [ 1618.755391][T28899] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1618.755429][T28899] ? do_syscall_64+0xbe/0x3b0 [ 1618.755460][T28899] do_syscall_64+0xfa/0x3b0 [ 1618.755486][T28899] ? lockdep_hardirqs_on+0x9c/0x150 [ 1618.755511][T28899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.755531][T28899] ? clear_bhb_loop+0x60/0xb0 [ 1618.755557][T28899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.755578][T28899] RIP: 0033:0x7fe6ae18e969 [ 1618.755597][T28899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1618.755616][T28899] RSP: 002b:00007fe6aefba038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1618.755638][T28899] RAX: ffffffffffffffda RBX: 00007fe6ae3b6080 RCX: 00007fe6ae18e969 [ 1618.755654][T28899] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 1618.755667][T28899] RBP: 00007fe6aefba090 R08: 0000000000000000 R09: 0000000000000000 [ 1618.755680][T28899] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.755693][T28899] R13: 0000000000000001 R14: 00007fe6ae3b6080 R15: 00007fe6ae4dfa28 [ 1618.755726][T28899] [ 1619.027396][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.084988][T20800] usb 5-1: USB disconnect, device number 90 [ 1619.135169][T16384] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1619.408918][T16384] usb 4-1: Using ep0 maxpacket: 32 [ 1619.478586][T28909] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6744'. [ 1619.505940][T16384] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.569122][T28914] Unknown options in mask 5 [ 1619.581111][T28914] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.6745'. [ 1619.590715][T28914] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.6745'. [ 1619.726407][T16384] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1619.946593][T16384] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 1619.955860][T16384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.964105][T16384] usb 4-1: Product: syz [ 1619.968893][T16384] usb 4-1: Manufacturer: syz [ 1619.978584][T16384] usb 4-1: SerialNumber: syz [ 1622.313845][T12141] usb 4-1: USB disconnect, device number 89 [ 1622.521608][T28943] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6754'. [ 1622.570834][T28947] FAULT_INJECTION: forcing a failure. [ 1622.570834][T28947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1622.604269][T28947] CPU: 0 UID: 0 PID: 28947 Comm: syz.7.6755 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1622.604300][T28947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1622.604313][T28947] Call Trace: [ 1622.604322][T28947] [ 1622.604332][T28947] dump_stack_lvl+0x189/0x250 [ 1622.604369][T28947] ? __pfx____ratelimit+0x10/0x10 [ 1622.604396][T28947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1622.604426][T28947] ? __pfx__printk+0x10/0x10 [ 1622.604449][T28947] ? __might_fault+0xb0/0x130 [ 1622.604487][T28947] should_fail_ex+0x414/0x560 [ 1622.604519][T28947] _copy_from_user+0x2d/0xb0 [ 1622.604541][T28947] ___sys_sendmsg+0x158/0x2a0 [ 1622.604564][T28947] ? __pfx____sys_sendmsg+0x10/0x10 [ 1622.604620][T28947] ? __fget_files+0x2a/0x420 [ 1622.604637][T28947] ? __fget_files+0x3a0/0x420 [ 1622.604666][T28947] __x64_sys_sendmsg+0x19b/0x260 [ 1622.604690][T28947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1622.604720][T28947] ? __pfx_ksys_write+0x10/0x10 [ 1622.604744][T28947] ? rcu_is_watching+0x15/0xb0 [ 1622.604776][T28947] ? do_syscall_64+0xbe/0x3b0 [ 1622.604804][T28947] do_syscall_64+0xfa/0x3b0 [ 1622.604828][T28947] ? lockdep_hardirqs_on+0x9c/0x150 [ 1622.604850][T28947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.604868][T28947] ? clear_bhb_loop+0x60/0xb0 [ 1622.604892][T28947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.604910][T28947] RIP: 0033:0x7f6ca958e969 [ 1622.604928][T28947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.604945][T28947] RSP: 002b:00007f6caa4e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.604966][T28947] RAX: ffffffffffffffda RBX: 00007f6ca97b5fa0 RCX: 00007f6ca958e969 [ 1622.604981][T28947] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1622.604994][T28947] RBP: 00007f6caa4e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.605006][T28947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.605019][T28947] R13: 0000000000000000 R14: 00007f6ca97b5fa0 R15: 00007f6ca98dfa28 [ 1622.605064][T28947] [ 1622.813560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1622.957098][T20804] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1623.058407][T28949] openvswitch: netlink: EtherType 0 is less than min 600 [ 1623.116936][T20804] usb 6-1: device descriptor read/64, error -71 [ 1623.407087][T20804] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1623.441030][T16384] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1623.557014][T20804] usb 6-1: device descriptor read/64, error -71 [ 1623.610459][T16384] usb 4-1: device descriptor read/64, error -71 [ 1623.719069][T20804] usb usb6-port1: attempt power cycle [ 1623.856914][T16384] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1624.087014][T20804] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1624.128217][T20804] usb 6-1: device descriptor read/8, error -71 [ 1624.146958][T16384] usb 4-1: device descriptor read/64, error -71 [ 1624.257335][T16384] usb usb4-port1: attempt power cycle [ 1624.387231][T20804] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1624.417618][T20804] usb 6-1: device descriptor read/8, error -71 [ 1624.467923][T28977] IPVS: set_ctl: invalid protocol: 50 172.20.20.47:20001 [ 1624.476234][T28977] binder: 28976:28977 ioctl c0286405 200000001c40 returned -22 [ 1624.550415][T20804] usb usb6-port1: unable to enumerate USB device [ 1624.607218][T16384] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1624.628732][T16384] usb 4-1: device descriptor read/8, error -71 [ 1624.647025][ T5913] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1624.776269][T28984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6768'. [ 1624.817384][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 1624.827391][T28984] binder: BINDER_SET_CONTEXT_MGR already set [ 1624.833475][T28984] binder: 28983:28984 ioctl 4018620d 200000000040 returned -16 [ 1624.855753][ T5913] usb 3-1: config 0 has no interfaces? [ 1624.871251][ T5913] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.aa [ 1624.882277][T16384] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1624.892512][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1624.929383][ T5913] usb 3-1: SerialNumber: syz [ 1624.942281][T16384] usb 4-1: device descriptor read/8, error -71 [ 1624.988602][ T5913] usb 3-1: config 0 descriptor?? [ 1625.077398][T16384] usb usb4-port1: unable to enumerate USB device [ 1625.260248][T28974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.277298][T28974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.369724][T25649] usb 3-1: USB disconnect, device number 103 [ 1625.506941][ T5913] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1625.646984][ T5913] usb 5-1: device descriptor read/64, error -71 [ 1625.730121][T25649] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1625.747152][T25649] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1625.897193][ T5913] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1626.026935][ T5913] usb 5-1: device descriptor read/64, error -71 [ 1626.142434][ T5913] usb usb5-port1: attempt power cycle [ 1626.182546][T29001] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6774'. [ 1626.503448][T29012] FAULT_INJECTION: forcing a failure. [ 1626.503448][T29012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1626.527239][ T5913] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1626.564343][ T5913] usb 5-1: device descriptor read/8, error -71 [ 1626.776908][T29012] CPU: 0 UID: 0 PID: 29012 Comm: syz.2.6777 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1626.776938][T29012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1626.776952][T29012] Call Trace: [ 1626.776961][T29012] [ 1626.776972][T29012] dump_stack_lvl+0x189/0x250 [ 1626.777009][T29012] ? __pfx____ratelimit+0x10/0x10 [ 1626.777036][T29012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1626.777067][T29012] ? __pfx__printk+0x10/0x10 [ 1626.777092][T29012] ? __might_fault+0xb0/0x130 [ 1626.777122][T29012] should_fail_ex+0x414/0x560 [ 1626.777146][T29012] _copy_from_user+0x2d/0xb0 [ 1626.777163][T29012] sk_setsockopt+0x276/0x2d30 [ 1626.777187][T29012] ? __pfx___might_resched+0x10/0x10 [ 1626.777210][T29012] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1626.777232][T29012] ? __pfx_sk_setsockopt+0x10/0x10 [ 1626.777254][T29012] ? vfs_write+0x8d8/0xa90 [ 1626.777278][T29012] ? aa_sk_perm+0x81e/0x950 [ 1626.777299][T29012] ? __pfx_aa_sk_perm+0x10/0x10 [ 1626.777315][T29012] ? __lock_acquire+0xab9/0xd20 [ 1626.777336][T29012] ? aa_sock_opt_perm+0x74/0x110 [ 1626.777357][T29012] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1626.777378][T29012] do_sock_setsockopt+0x201/0x3e0 [ 1626.777394][T29012] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1626.777412][T29012] ? __fget_files+0x2a/0x420 [ 1626.777432][T29012] __x64_sys_setsockopt+0x18b/0x220 [ 1626.777451][T29012] do_syscall_64+0xfa/0x3b0 [ 1626.777470][T29012] ? lockdep_hardirqs_on+0x9c/0x150 [ 1626.777488][T29012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.777503][T29012] ? clear_bhb_loop+0x60/0xb0 [ 1626.777521][T29012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.777536][T29012] RIP: 0033:0x7fe6ae18e969 [ 1626.777550][T29012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1626.777563][T29012] RSP: 002b:00007fe6aefba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1626.777579][T29012] RAX: ffffffffffffffda RBX: 00007fe6ae3b6080 RCX: 00007fe6ae18e969 [ 1626.777591][T29012] RDX: 0000000000000029 RSI: 0000000000000001 RDI: 0000000000000003 [ 1626.777599][T29012] RBP: 00007fe6aefba090 R08: 0000000000000004 R09: 0000000000000000 [ 1626.777609][T29012] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1626.777619][T29012] R13: 0000000000000001 R14: 00007fe6ae3b6080 R15: 00007fe6ae4dfa28 [ 1626.777640][T29012] [ 1626.847188][ T5913] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1627.152567][ T5913] usb 5-1: device descriptor read/8, error -71 [ 1627.277238][ T5913] usb usb5-port1: unable to enumerate USB device [ 1627.291890][T29019] FAULT_INJECTION: forcing a failure. [ 1627.291890][T29019] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.299066][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1627.299088][ T30] audit: type=1326 audit(1748795523.574:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29016 comm="syz.3.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b658e969 code=0x7ffc0000 [ 1627.334261][T29019] CPU: 1 UID: 0 PID: 29019 Comm: syz.5.6780 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1627.334291][T29019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1627.334305][T29019] Call Trace: [ 1627.334314][T29019] [ 1627.334323][T29019] dump_stack_lvl+0x189/0x250 [ 1627.334359][T29019] ? __pfx____ratelimit+0x10/0x10 [ 1627.334386][T29019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1627.334418][T29019] ? __pfx__printk+0x10/0x10 [ 1627.334446][T29019] ? __pfx___might_resched+0x10/0x10 [ 1627.334473][T29019] ? fs_reclaim_acquire+0x7d/0x100 [ 1627.334499][T29019] should_fail_ex+0x414/0x560 [ 1627.334532][T29019] should_failslab+0xa8/0x100 [ 1627.334570][T29019] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1627.334599][T29019] ? skb_clone+0x212/0x3a0 [ 1627.334626][T29019] skb_clone+0x212/0x3a0 [ 1627.334647][T29019] ? nfnetlink_rcv+0x486/0x2520 [ 1627.334684][T29019] nfnetlink_rcv+0x4b4/0x2520 [ 1627.334711][T29019] ? unwind_get_return_address+0x4d/0x90 [ 1627.334738][T29019] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1627.334786][T29019] ? stack_trace_save+0x9c/0xe0 [ 1627.334818][T29019] ? stack_depot_save_flags+0x40/0x900 [ 1627.334850][T29019] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1627.334888][T29019] ? __lock_acquire+0xab9/0xd20 [ 1627.334937][T29019] ? __lock_acquire+0xab9/0xd20 [ 1627.334971][T29019] ? netlink_deliver_tap+0x2e/0x1b0 [ 1627.335010][T29019] ? netlink_deliver_tap+0x2e/0x1b0 [ 1627.335040][T29019] ? netlink_deliver_tap+0x2e/0x1b0 [ 1627.335077][T29019] netlink_unicast+0x758/0x8d0 [ 1627.335117][T29019] netlink_sendmsg+0x805/0xb30 [ 1627.335148][T29019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1627.335171][T29019] ? aa_sock_msg_perm+0x94/0x160 [ 1627.335199][T29019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1627.335223][T29019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1627.335243][T29019] __sock_sendmsg+0x219/0x270 [ 1627.335273][T29019] ____sys_sendmsg+0x505/0x830 [ 1627.335300][T29019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1627.335332][T29019] ? import_iovec+0x74/0xa0 [ 1627.335358][T29019] ___sys_sendmsg+0x21f/0x2a0 [ 1627.335382][T29019] ? __pfx____sys_sendmsg+0x10/0x10 [ 1627.335441][T29019] ? __fget_files+0x2a/0x420 [ 1627.335460][T29019] ? __fget_files+0x3a0/0x420 [ 1627.335491][T29019] __x64_sys_sendmsg+0x19b/0x260 [ 1627.335515][T29019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1627.335547][T29019] ? __pfx_ksys_write+0x10/0x10 [ 1627.335573][T29019] ? rcu_is_watching+0x15/0xb0 [ 1627.335605][T29019] ? do_syscall_64+0xbe/0x3b0 [ 1627.335653][T29019] do_syscall_64+0xfa/0x3b0 [ 1627.335683][T29019] ? lockdep_hardirqs_on+0x9c/0x150 [ 1627.335708][T29019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.335729][T29019] ? clear_bhb_loop+0x60/0xb0 [ 1627.335754][T29019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.335773][T29019] RIP: 0033:0x7f0b63f8e969 [ 1627.335792][T29019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1627.335810][T29019] RSP: 002b:00007f0b64e93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1627.335831][T29019] RAX: ffffffffffffffda RBX: 00007f0b641b5fa0 RCX: 00007f0b63f8e969 [ 1627.335847][T29019] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1627.335860][T29019] RBP: 00007f0b64e93090 R08: 0000000000000000 R09: 0000000000000000 [ 1627.335874][T29019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1627.335886][T29019] R13: 0000000000000000 R14: 00007f0b641b5fa0 R15: 00007f0b642dfa28 [ 1627.335918][T29019] [ 1627.752673][ T30] audit: type=1326 audit(1748795523.624:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29016 comm="syz.3.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe7b658e969 code=0x7ffc0000 [ 1627.776567][ T30] audit: type=1326 audit(1748795523.624:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29016 comm="syz.3.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b658e969 code=0x7ffc0000 [ 1627.800181][ T30] audit: type=1326 audit(1748795523.624:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29016 comm="syz.3.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b658e969 code=0x7ffc0000 [ 1627.825965][ T30] audit: type=1326 audit(1748795523.964:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29016 comm="syz.3.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7b658e969 code=0x7ffc0000 [ 1627.849257][ T30] audit: type=1326 audit(1748795523.964:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29016 comm="syz.3.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b658e969 code=0x7ffc0000 [ 1627.872385][ T30] audit: type=1326 audit(1748795523.974:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29016 comm="syz.3.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b658e969 code=0x7ffc0000 [ 1627.895141][ T30] audit: type=1326 audit(1748795523.984:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29016 comm="syz.3.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe7b658e969 code=0x7ffc0000 [ 1627.918476][ T30] audit: type=1326 audit(1748795523.984:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29016 comm="syz.3.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b658e969 code=0x7ffc0000 [ 1627.941196][ T30] audit: type=1326 audit(1748795523.984:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29016 comm="syz.3.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b658e969 code=0x7ffc0000 [ 1628.478866][T25649] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1628.637341][T25649] usb 4-1: Using ep0 maxpacket: 32 [ 1628.644289][T25649] usb 4-1: config 0 has no interfaces? [ 1628.797394][T25649] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.aa [ 1628.816022][T29048] FAULT_INJECTION: forcing a failure. [ 1628.816022][T29048] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.916856][T25649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1628.924919][T25649] usb 4-1: SerialNumber: syz [ 1628.940680][T29048] CPU: 0 UID: 0 PID: 29048 Comm: syz.2.6788 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1628.940709][T29048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1628.940729][T29048] Call Trace: [ 1628.940738][T29048] [ 1628.940752][T29048] dump_stack_lvl+0x189/0x250 [ 1628.940789][T29048] ? __pfx____ratelimit+0x10/0x10 [ 1628.940816][T29048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1628.940848][T29048] ? __pfx__printk+0x10/0x10 [ 1628.940874][T29048] ? __pfx___might_resched+0x10/0x10 [ 1628.940903][T29048] ? fs_reclaim_acquire+0x7d/0x100 [ 1628.940930][T29048] should_fail_ex+0x414/0x560 [ 1628.940964][T29048] should_failslab+0xa8/0x100 [ 1628.940998][T29048] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1628.941029][T29048] ? __alloc_skb+0x112/0x2d0 [ 1628.941066][T29048] __alloc_skb+0x112/0x2d0 [ 1628.941101][T29048] alloc_skb_with_frags+0xca/0x890 [ 1628.941124][T29048] ? __lock_acquire+0xab9/0xd20 [ 1628.941160][T29048] sock_alloc_send_pskb+0x857/0x990 [ 1628.941182][T29048] ? ipv6_addr_label+0x31/0x1e0 [ 1628.941228][T29048] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1628.941252][T29048] ? ipv6_get_saddr_eval+0xb85/0xee0 [ 1628.941291][T29048] ? ipv6_dev_get_saddr+0x143/0xb70 [ 1628.941323][T29048] __ip6_append_data+0x2ab5/0x3de0 [ 1628.941361][T29048] ? __lock_acquire+0xab9/0xd20 [ 1628.941387][T29048] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1628.941430][T29048] ? ip6_mtu+0x7d/0x3f0 [ 1628.941454][T29048] ? __pfx___ip6_append_data+0x10/0x10 [ 1628.941474][T29048] ? __pfx_ip6_mtu+0x10/0x10 [ 1628.941504][T29048] ip6_append_data+0x1c4/0x380 [ 1628.941532][T29048] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1628.941560][T29048] l2tp_ip6_sendmsg+0x1282/0x17c0 [ 1628.941609][T29048] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 1628.941665][T29048] ? __pfx_aa_sk_perm+0x10/0x10 [ 1628.941687][T29048] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 1628.941736][T29048] ? inet_sendmsg+0x2f4/0x370 [ 1628.941761][T29048] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1628.941790][T29048] __sock_sendmsg+0x19c/0x270 [ 1628.941820][T29048] ____sys_sendmsg+0x52d/0x830 [ 1628.941848][T29048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1628.941881][T29048] ? import_iovec+0x74/0xa0 [ 1628.941907][T29048] ___sys_sendmsg+0x21f/0x2a0 [ 1628.941931][T29048] ? __pfx____sys_sendmsg+0x10/0x10 [ 1628.941992][T29048] ? __fget_files+0x2a/0x420 [ 1628.942012][T29048] ? __fget_files+0x3a0/0x420 [ 1628.942044][T29048] __sys_sendmmsg+0x227/0x430 [ 1628.942073][T29048] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1628.942092][T29048] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1628.942149][T29048] ? ksys_write+0x22a/0x250 [ 1628.942182][T29048] ? __pfx_ksys_write+0x10/0x10 [ 1628.942208][T29048] ? rcu_is_watching+0x15/0xb0 [ 1628.942244][T29048] __x64_sys_sendmmsg+0xa0/0xc0 [ 1628.942269][T29048] do_syscall_64+0xfa/0x3b0 [ 1628.942295][T29048] ? lockdep_hardirqs_on+0x9c/0x150 [ 1628.942320][T29048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.942342][T29048] ? clear_bhb_loop+0x60/0xb0 [ 1628.942368][T29048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.942389][T29048] RIP: 0033:0x7fe6ae18e969 [ 1628.942408][T29048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1628.942426][T29048] RSP: 002b:00007fe6aefdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1628.942449][T29048] RAX: ffffffffffffffda RBX: 00007fe6ae3b5fa0 RCX: 00007fe6ae18e969 [ 1628.942465][T29048] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000003 [ 1628.942479][T29048] RBP: 00007fe6aefdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.942493][T29048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1628.942505][T29048] R13: 0000000000000000 R14: 00007fe6ae3b5fa0 R15: 00007fe6ae4dfa28 [ 1628.942538][T29048] [ 1628.943778][T25649] usb 4-1: config 0 descriptor?? [ 1629.822169][T29052] FAULT_INJECTION: forcing a failure. [ 1629.822169][T29052] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.866873][T29052] CPU: 0 UID: 0 PID: 29052 Comm: syz.4.6790 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1629.866896][T29052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1629.866905][T29052] Call Trace: [ 1629.866911][T29052] [ 1629.866918][T29052] dump_stack_lvl+0x189/0x250 [ 1629.866946][T29052] ? __pfx____ratelimit+0x10/0x10 [ 1629.866965][T29052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1629.866988][T29052] ? __pfx__printk+0x10/0x10 [ 1629.867009][T29052] ? __pfx___might_resched+0x10/0x10 [ 1629.867028][T29052] ? fs_reclaim_acquire+0x7d/0x100 [ 1629.867047][T29052] should_fail_ex+0x414/0x560 [ 1629.867071][T29052] should_failslab+0xa8/0x100 [ 1629.867095][T29052] __kmalloc_cache_noprof+0x70/0x3d0 [ 1629.867117][T29052] ? rtnl_newlink+0xed/0x1c70 [ 1629.867138][T29052] ? __lock_acquire+0xab9/0xd20 [ 1629.867157][T29052] rtnl_newlink+0xed/0x1c70 [ 1629.867188][T29052] ? __pfx_rtnl_newlink+0x10/0x10 [ 1629.867208][T29052] ? is_bpf_text_address+0x26/0x2b0 [ 1629.867233][T29052] ? __lock_acquire+0xab9/0xd20 [ 1629.867258][T29052] ? __lock_acquire+0xab9/0xd20 [ 1629.867301][T29052] ? is_bpf_text_address+0x26/0x2b0 [ 1629.867323][T29052] ? is_bpf_text_address+0x292/0x2b0 [ 1629.867341][T29052] ? is_bpf_text_address+0x26/0x2b0 [ 1629.867361][T29052] ? kernel_text_address+0xa5/0xe0 [ 1629.867386][T29052] ? __lock_acquire+0xab9/0xd20 [ 1629.867423][T29052] ? __pfx_rtnl_newlink+0x10/0x10 [ 1629.867444][T29052] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1629.867468][T29052] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1629.867487][T29052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1629.867519][T29052] netlink_rcv_skb+0x205/0x470 [ 1629.867544][T29052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1629.867565][T29052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1629.867596][T29052] ? netlink_deliver_tap+0x2e/0x1b0 [ 1629.867618][T29052] ? netlink_deliver_tap+0x2e/0x1b0 [ 1629.867644][T29052] netlink_unicast+0x758/0x8d0 [ 1629.867689][T29052] netlink_sendmsg+0x805/0xb30 [ 1629.867720][T29052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1629.867755][T29052] ? aa_sock_msg_perm+0x94/0x160 [ 1629.867776][T29052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1629.867793][T29052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1629.867809][T29052] __sock_sendmsg+0x219/0x270 [ 1629.867833][T29052] ____sys_sendmsg+0x505/0x830 [ 1629.867853][T29052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1629.867875][T29052] ? import_iovec+0x74/0xa0 [ 1629.867893][T29052] ___sys_sendmsg+0x21f/0x2a0 [ 1629.867910][T29052] ? __pfx____sys_sendmsg+0x10/0x10 [ 1629.867951][T29052] ? __fget_files+0x2a/0x420 [ 1629.867964][T29052] ? __fget_files+0x3a0/0x420 [ 1629.867986][T29052] __x64_sys_sendmsg+0x19b/0x260 [ 1629.868003][T29052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1629.868026][T29052] ? __pfx_ksys_write+0x10/0x10 [ 1629.868050][T29052] ? do_syscall_64+0xbe/0x3b0 [ 1629.868072][T29052] do_syscall_64+0xfa/0x3b0 [ 1629.868091][T29052] ? lockdep_hardirqs_on+0x9c/0x150 [ 1629.868109][T29052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.868123][T29052] ? clear_bhb_loop+0x60/0xb0 [ 1629.868142][T29052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.868156][T29052] RIP: 0033:0x7f817318e969 [ 1629.868170][T29052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1629.868183][T29052] RSP: 002b:00007f81740a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1629.868199][T29052] RAX: ffffffffffffffda RBX: 00007f81733b5fa0 RCX: 00007f817318e969 [ 1629.868210][T29052] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1629.868219][T29052] RBP: 00007f81740a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.868229][T29052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.868238][T29052] R13: 0000000000000000 R14: 00007f81733b5fa0 R15: 00007f81734dfa28 [ 1629.868260][T29052] [ 1630.007001][T20804] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1630.300150][T29032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.315666][T29032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.405485][T25649] usb 4-1: USB disconnect, device number 94 [ 1630.610279][T20804] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1630.632634][T20804] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 56623, setting to 1024 [ 1630.662945][T20804] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1630.691751][T20804] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1630.692783][T29059] openvswitch: netlink: Message has 4 unknown bytes. [ 1630.724271][T20804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.772315][T29050] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1630.796134][T20804] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1631.266972][T20804] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1631.412873][T20804] usb 6-1: device descriptor read/64, error -71 [ 1631.477006][T12141] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1631.516864][ T5913] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1631.738028][T20804] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1631.778280][T12141] usb 4-1: config 0 has no interfaces? [ 1631.786004][ T5913] usb 5-1: config 0 has no interfaces? [ 1631.820078][ T5913] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1631.829557][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.838319][ T5913] usb 5-1: Product: syz [ 1631.842574][ T5913] usb 5-1: Manufacturer: syz [ 1631.847275][ T5913] usb 5-1: SerialNumber: syz [ 1631.863413][ T5913] usb 5-1: config 0 descriptor?? [ 1631.906817][T20804] usb 6-1: device descriptor read/64, error -71 [ 1631.933230][T12141] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1631.955556][T12141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.973999][T12141] usb 4-1: Product: syz [ 1632.023915][T12141] usb 4-1: Manufacturer: syz [ 1632.037835][T20804] usb usb6-port1: attempt power cycle [ 1632.135109][T12141] usb 4-1: SerialNumber: syz [ 1632.183760][T12141] usb 4-1: config 0 descriptor?? [ 1632.412533][T12141] usb 3-1: USB disconnect, device number 104 [ 1632.416914][T20804] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1632.451742][T20804] usb 6-1: device descriptor read/8, error -71 [ 1632.754832][T20804] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1632.779592][T20804] usb 6-1: device descriptor read/8, error -71 [ 1632.894322][T20804] usb usb6-port1: unable to enumerate USB device [ 1633.056893][T20804] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1633.236874][T20804] usb 8-1: Using ep0 maxpacket: 8 [ 1633.253623][T20804] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1633.263671][T20804] usb 8-1: config 179 has no interface number 0 [ 1633.277611][T20804] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1633.306291][T20804] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1633.342212][T20804] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1633.374508][T20804] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1633.402688][T20804] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1633.443407][T20804] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1633.469625][T20804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.508805][T29076] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1633.724315][T29076] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6796'. [ 1633.885226][T29086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1633.896953][ T5913] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1633.918621][T29086] netlink: 'syz.5.6801': attribute type 1 has an invalid length. [ 1633.979691][T16384] usb 8-1: USB disconnect, device number 25 [ 1633.979791][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1633.979846][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1634.086803][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 1634.112526][ T5913] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1634.125329][ T5913] usb 3-1: config 0 has no interface number 0 [ 1634.141189][ T5913] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1634.141344][T29086] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1634.157932][ T5913] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1634.185196][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.198113][T20804] usb 4-1: USB disconnect, device number 95 [ 1634.231030][ T5913] usb 3-1: Product: syz [ 1634.235221][ T5913] usb 3-1: Manufacturer: syz [ 1634.246488][ T5913] usb 3-1: SerialNumber: syz [ 1634.269029][ T5913] usb 3-1: config 0 descriptor?? [ 1634.341671][T12141] usb 5-1: USB disconnect, device number 95 [ 1634.367093][ T5881] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1634.455592][T29096] FAULT_INJECTION: forcing a failure. [ 1634.455592][T29096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1634.470623][T29096] CPU: 0 UID: 0 PID: 29096 Comm: syz.3.6804 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1634.470652][T29096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1634.470665][T29096] Call Trace: [ 1634.470674][T29096] [ 1634.470682][T29096] dump_stack_lvl+0x189/0x250 [ 1634.470714][T29096] ? __pfx____ratelimit+0x10/0x10 [ 1634.470740][T29096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1634.470771][T29096] ? __pfx__printk+0x10/0x10 [ 1634.470804][T29096] should_fail_ex+0x414/0x560 [ 1634.470834][T29096] _copy_to_user+0x31/0xb0 [ 1634.470860][T29096] simple_read_from_buffer+0xe1/0x170 [ 1634.470896][T29096] proc_fail_nth_read+0x1df/0x250 [ 1634.470923][T29096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1634.470949][T29096] ? rw_verify_area+0x258/0x650 [ 1634.470984][T29096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1634.471016][T29096] vfs_read+0x200/0x980 [ 1634.471049][T29096] ? __pfx___mutex_lock+0x10/0x10 [ 1634.471077][T29096] ? __pfx_vfs_read+0x10/0x10 [ 1634.471106][T29096] ? __fget_files+0x2a/0x420 [ 1634.471130][T29096] ? __fget_files+0x3a0/0x420 [ 1634.471148][T29096] ? __fget_files+0x2a/0x420 [ 1634.471177][T29096] ksys_read+0x145/0x250 [ 1634.471207][T29096] ? __pfx_ksys_read+0x10/0x10 [ 1634.471239][T29096] ? do_syscall_64+0xbe/0x3b0 [ 1634.471268][T29096] do_syscall_64+0xfa/0x3b0 [ 1634.471293][T29096] ? lockdep_hardirqs_on+0x9c/0x150 [ 1634.471318][T29096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.471338][T29096] ? clear_bhb_loop+0x60/0xb0 [ 1634.471363][T29096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.471383][T29096] RIP: 0033:0x7fe7b658d37c [ 1634.471402][T29096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1634.471420][T29096] RSP: 002b:00007fe7b43f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1634.471442][T29096] RAX: ffffffffffffffda RBX: 00007fe7b67b5fa0 RCX: 00007fe7b658d37c [ 1634.471457][T29096] RDX: 000000000000000f RSI: 00007fe7b43f60a0 RDI: 0000000000000005 [ 1634.471470][T29096] RBP: 00007fe7b43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.471482][T29096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.471495][T29096] R13: 0000000000000000 R14: 00007fe7b67b5fa0 R15: 00007fe7b68dfa28 [ 1634.471527][T29096] [ 1634.799140][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1634.808341][ T5881] usb 6-1: config 1 has an invalid interface number: 43 but max is 1 [ 1634.816518][ T5881] usb 6-1: config 1 has no interface number 1 [ 1634.835579][ T5881] usb 6-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 1634.846551][ T5881] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1634.869493][ T5881] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 1634.879756][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.887844][ T5881] usb 6-1: Product: syz [ 1634.892023][ T5881] usb 6-1: Manufacturer: syz [ 1634.896621][ T5881] usb 6-1: SerialNumber: syz [ 1635.043377][T29102] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6806'. [ 1635.070189][T29102] binder: BINDER_SET_CONTEXT_MGR already set [ 1635.091115][T29102] binder: 29101:29102 ioctl 4018620d 200000000040 returned -16 [ 1635.106880][T12141] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1635.313484][T12141] usb 5-1: config 0 has no interfaces? [ 1635.327007][T25649] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1635.337951][T12141] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1635.356926][T12141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.368245][T12141] usb 5-1: Product: syz [ 1635.373668][T12141] usb 5-1: Manufacturer: syz [ 1635.381796][T12141] usb 5-1: SerialNumber: syz [ 1635.441389][T12141] usb 5-1: config 0 descriptor?? [ 1635.517080][T25649] usb 4-1: Using ep0 maxpacket: 32 [ 1635.534809][T25649] usb 4-1: config 0 has no interfaces? [ 1635.544187][T25649] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.aa [ 1635.559393][T25649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1635.638961][T25649] usb 4-1: SerialNumber: syz [ 1635.674405][T25649] usb 4-1: config 0 descriptor?? [ 1635.830141][T29098] pimreg: entered allmulticast mode [ 1635.843518][T29098] pimreg: left allmulticast mode [ 1635.908141][T29100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.918169][T29100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.007436][T12141] usb 4-1: USB disconnect, device number 96 [ 1636.494602][T29084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.503687][T29084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.932662][ T5881] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1636.945016][T29121] fuse: Bad value for 'fd' [ 1636.960774][ T5881] gspca_spca501: reg write: error -71 [ 1636.974121][ T5881] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1636.991792][ T5881] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 1637.045297][ T5881] usb 6-1: USB disconnect, device number 31 [ 1637.060602][ T5913] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 1637.069213][ T5913] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1637.122109][ T5913] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1637.297907][ T5913] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1637.333244][ T5913] usb 3-1: USB disconnect, device number 105 [ 1637.386887][T12141] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1637.556833][T12141] usb 4-1: Using ep0 maxpacket: 16 [ 1637.582544][T20800] usb 5-1: USB disconnect, device number 96 [ 1637.588756][ T5881] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1637.612773][T12141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1637.672957][T12141] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1637.688731][T12141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.716785][T12141] usb 4-1: Product: syz [ 1637.727288][T12141] usb 4-1: Manufacturer: syz [ 1637.758010][T12141] usb 4-1: SerialNumber: syz [ 1637.773762][T12141] usb 4-1: config 0 descriptor?? [ 1637.793993][ T5881] usb 6-1: config 0 has no interfaces? [ 1637.911469][ T5881] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1637.942645][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.996842][ T5881] usb 6-1: Product: syz [ 1638.014191][ T5881] usb 6-1: Manufacturer: syz [ 1638.031196][ T5881] usb 6-1: SerialNumber: syz [ 1638.095461][ T5881] usb 6-1: config 0 descriptor?? [ 1638.232059][T29133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6817'. [ 1638.360256][T29133] binder: BINDER_SET_CONTEXT_MGR already set [ 1638.367281][T29133] binder: 29132:29133 ioctl 4018620d 200000000040 returned -16 [ 1638.629401][T20804] usb 4-1: USB disconnect, device number 97 [ 1639.168330][ T5881] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1639.393990][ T5881] usb 3-1: config 0 has an invalid interface number: 114 but max is 0 [ 1639.417249][ T5881] usb 3-1: config 0 has no interface number 0 [ 1639.433648][ T5881] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 1639.445301][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.463695][ T5881] usb 3-1: Product: syz [ 1639.471669][ T5881] usb 3-1: Manufacturer: syz [ 1639.519841][ T5881] usb 3-1: SerialNumber: syz [ 1639.540512][ T5881] usb 3-1: config 0 descriptor?? [ 1639.563348][T29167] FAULT_INJECTION: forcing a failure. [ 1639.563348][T29167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1639.580900][T29167] CPU: 1 UID: 0 PID: 29167 Comm: syz.4.6827 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1639.580929][T29167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1639.580943][T29167] Call Trace: [ 1639.580951][T29167] [ 1639.580961][T29167] dump_stack_lvl+0x189/0x250 [ 1639.580997][T29167] ? __pfx____ratelimit+0x10/0x10 [ 1639.581024][T29167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1639.581055][T29167] ? __pfx__printk+0x10/0x10 [ 1639.581094][T29167] should_fail_ex+0x414/0x560 [ 1639.581125][T29167] _copy_to_user+0x31/0xb0 [ 1639.581148][T29167] simple_read_from_buffer+0xe1/0x170 [ 1639.581183][T29167] proc_fail_nth_read+0x1df/0x250 [ 1639.581208][T29167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1639.581232][T29167] ? rw_verify_area+0x258/0x650 [ 1639.581259][T29167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1639.581283][T29167] vfs_read+0x200/0x980 [ 1639.581315][T29167] ? __pfx___mutex_lock+0x10/0x10 [ 1639.581342][T29167] ? __pfx_vfs_read+0x10/0x10 [ 1639.581371][T29167] ? __fget_files+0x2a/0x420 [ 1639.581395][T29167] ? __fget_files+0x3a0/0x420 [ 1639.581412][T29167] ? __fget_files+0x2a/0x420 [ 1639.581440][T29167] ksys_read+0x145/0x250 [ 1639.581470][T29167] ? __pfx_ksys_read+0x10/0x10 [ 1639.581494][T29167] ? rcu_is_watching+0x15/0xb0 [ 1639.581526][T29167] ? do_syscall_64+0xbe/0x3b0 [ 1639.581558][T29167] do_syscall_64+0xfa/0x3b0 [ 1639.581582][T29167] ? lockdep_hardirqs_on+0x9c/0x150 [ 1639.581605][T29167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.581625][T29167] ? clear_bhb_loop+0x60/0xb0 [ 1639.581648][T29167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.581666][T29167] RIP: 0033:0x7f817318d37c [ 1639.581684][T29167] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1639.581700][T29167] RSP: 002b:00007f81740a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1639.581720][T29167] RAX: ffffffffffffffda RBX: 00007f81733b5fa0 RCX: 00007f817318d37c [ 1639.581735][T29167] RDX: 000000000000000f RSI: 00007f81740a30a0 RDI: 0000000000000005 [ 1639.581747][T29167] RBP: 00007f81740a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.581759][T29167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.581770][T29167] R13: 0000000000000000 R14: 00007f81733b5fa0 R15: 00007f81734dfa28 [ 1639.581801][T29167] [ 1640.692282][T12141] usb 6-1: USB disconnect, device number 32 [ 1641.296981][ T5913] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1641.374520][T29181] batadv1: entered promiscuous mode [ 1641.458965][T20804] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1641.470895][ T5913] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.504707][ T5913] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1641.553548][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1641.595180][ T5913] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1641.657372][ T5881] cdc_subset 3-1:0.114: probe with driver cdc_subset failed with error -71 [ 1641.667373][T20804] usb 6-1: Using ep0 maxpacket: 8 [ 1641.683606][T20804] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 1641.710934][ T5881] usb 3-1: USB disconnect, device number 106 [ 1641.728046][T20804] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.764085][ T5913] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1641.781012][T29188] FAULT_INJECTION: forcing a failure. [ 1641.781012][T29188] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.811548][T29188] CPU: 0 UID: 0 PID: 29188 Comm: syz.2.6834 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1641.811577][T29188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1641.811587][T29188] Call Trace: [ 1641.811594][T29188] [ 1641.811601][T29188] dump_stack_lvl+0x189/0x250 [ 1641.811628][T29188] ? __pfx____ratelimit+0x10/0x10 [ 1641.811648][T29188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1641.811677][T29188] ? __pfx__printk+0x10/0x10 [ 1641.811698][T29188] ? ref_tracker_alloc+0x318/0x460 [ 1641.811722][T29188] should_fail_ex+0x414/0x560 [ 1641.811746][T29188] should_failslab+0xa8/0x100 [ 1641.811770][T29188] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1641.811791][T29188] ? skb_clone+0x212/0x3a0 [ 1641.811811][T29188] skb_clone+0x212/0x3a0 [ 1641.811830][T29188] __netlink_deliver_tap+0x404/0x850 [ 1641.811863][T29188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1641.811887][T29188] netlink_deliver_tap+0x19c/0x1b0 [ 1641.811911][T29188] netlink_unicast+0x72f/0x8d0 [ 1641.811940][T29188] netlink_sendmsg+0x805/0xb30 [ 1641.811961][T29188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1641.811978][T29188] ? aa_sock_msg_perm+0x94/0x160 [ 1641.811999][T29188] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1641.812016][T29188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1641.812031][T29188] __sock_sendmsg+0x219/0x270 [ 1641.812054][T29188] ____sys_sendmsg+0x505/0x830 [ 1641.812073][T29188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1641.812095][T29188] ? import_iovec+0x74/0xa0 [ 1641.812114][T29188] ___sys_sendmsg+0x21f/0x2a0 [ 1641.812131][T29188] ? __pfx____sys_sendmsg+0x10/0x10 [ 1641.812173][T29188] ? __fget_files+0x2a/0x420 [ 1641.812187][T29188] ? __fget_files+0x3a0/0x420 [ 1641.812208][T29188] __x64_sys_sendmsg+0x19b/0x260 [ 1641.812226][T29188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1641.812249][T29188] ? __pfx_ksys_write+0x10/0x10 [ 1641.812268][T29188] ? rcu_is_watching+0x15/0xb0 [ 1641.812292][T29188] ? do_syscall_64+0xbe/0x3b0 [ 1641.812315][T29188] do_syscall_64+0xfa/0x3b0 [ 1641.812333][T29188] ? lockdep_hardirqs_on+0x9c/0x150 [ 1641.812351][T29188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.812366][T29188] ? clear_bhb_loop+0x60/0xb0 [ 1641.812384][T29188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.812398][T29188] RIP: 0033:0x7fe6ae18e969 [ 1641.812412][T29188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.812425][T29188] RSP: 002b:00007fe6aefdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1641.812440][T29188] RAX: ffffffffffffffda RBX: 00007fe6ae3b5fa0 RCX: 00007fe6ae18e969 [ 1641.812451][T29188] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1641.812461][T29188] RBP: 00007fe6aefdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.812470][T29188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.812479][T29188] R13: 0000000000000000 R14: 00007fe6ae3b5fa0 R15: 00007fe6ae4dfa28 [ 1641.812501][T29188] [ 1642.103118][T20804] usb 6-1: config 135 has no interface number 0 [ 1642.109523][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.117657][T20804] usb 6-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1642.129282][ T5913] usb 8-1: Product: syz [ 1642.133478][ T5913] usb 8-1: Manufacturer: syz [ 1642.138197][T20804] usb 6-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1642.152083][ T5913] usb 8-1: SerialNumber: syz [ 1642.157068][T20804] usb 6-1: config 135 interface 230 has no altsetting 0 [ 1642.373866][T20804] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1642.403824][ T5913] usb 8-1: config 0 descriptor?? [ 1642.420824][ T5913] xbox_remote_probe: Unexpected endpoint_in [ 1642.438006][T20804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.446056][T20804] usb 6-1: Product: syz [ 1642.497968][T20804] usb 6-1: Manufacturer: syz [ 1642.502698][T20804] usb 6-1: SerialNumber: syz [ 1642.645269][T29178] usb usb8: usbfs: process 29178 (syz.7.6829) did not claim interface 0 before use [ 1642.666008][T29178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.677055][T29178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.821004][T29179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.842626][T29179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1643.985802][T12141] usb 6-1: USB disconnect, device number 33 [ 1644.349048][ T5881] usb 8-1: USB disconnect, device number 26 [ 1644.369002][T12141] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1644.530849][T12141] usb 6-1: Using ep0 maxpacket: 8 [ 1644.580671][T12141] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1644.624280][T12141] usb 6-1: config 3 has an invalid interface number: 153 but max is 0 [ 1644.632708][T12141] usb 6-1: config 3 has no interface number 0 [ 1644.639017][T12141] usb 6-1: config 3 interface 153 altsetting 8 endpoint 0xA has an invalid bInterval 96, changing to 10 [ 1644.654801][T12141] usb 6-1: config 3 interface 153 altsetting 8 endpoint 0xA has invalid maxpacket 50000, setting to 1024 [ 1644.666448][T12141] usb 6-1: config 3 interface 153 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1644.682861][T12141] usb 6-1: config 3 interface 153 has no altsetting 0 [ 1644.695680][T12141] usb 6-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice=be.07 [ 1644.710643][T12141] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.719056][T12141] usb 6-1: Product: syz [ 1644.723717][T12141] usb 6-1: Manufacturer: syz [ 1644.730615][T12141] usb 6-1: SerialNumber: syz [ 1644.817826][T20804] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1644.840092][T29239] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6851'. [ 1644.978126][T12141] ftdi_sio 6-1:3.153: FTDI USB Serial Device converter detected [ 1644.998756][T20804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1645.010670][T20804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.037650][T20804] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1645.047146][T20804] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1645.058608][T12141] ftdi_sio ttyUSB0: unknown device type: 0xbe07 [ 1645.062523][T20804] usb 5-1: Manufacturer: syz [ 1645.093197][T20804] usb 5-1: config 0 descriptor?? [ 1645.117923][T12141] usb 6-1: USB disconnect, device number 34 [ 1645.164971][T12141] ftdi_sio 6-1:3.153: device disconnected [ 1645.337009][T20804] cougar 0003:060B:700A.0045: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1645.526429][T20804] usb 5-1: USB disconnect, device number 97 [ 1645.692008][T29243] fido_id[29243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1646.297516][T29257] FAULT_INJECTION: forcing a failure. [ 1646.297516][T29257] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.329267][T29257] CPU: 0 UID: 0 PID: 29257 Comm: syz.5.6857 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1646.329297][T29257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1646.329314][T29257] Call Trace: [ 1646.329322][T29257] [ 1646.329332][T29257] dump_stack_lvl+0x189/0x250 [ 1646.329367][T29257] ? __pfx____ratelimit+0x10/0x10 [ 1646.329393][T29257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1646.329424][T29257] ? __pfx__printk+0x10/0x10 [ 1646.329448][T29257] ? __pfx___might_resched+0x10/0x10 [ 1646.329475][T29257] ? fs_reclaim_acquire+0x7d/0x100 [ 1646.329500][T29257] should_fail_ex+0x414/0x560 [ 1646.329532][T29257] should_failslab+0xa8/0x100 [ 1646.329564][T29257] __kmalloc_noprof+0xcb/0x4f0 [ 1646.329592][T29257] ? fib6_info_alloc+0x30/0xf0 [ 1646.329625][T29257] fib6_info_alloc+0x30/0xf0 [ 1646.329655][T29257] ip6_route_info_create+0x142/0x860 [ 1646.329704][T29257] ip6_route_add+0x28/0x190 [ 1646.329727][T29257] inet6_rtm_newroute+0x28c/0x18a0 [ 1646.329769][T29257] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1646.329800][T29257] ? is_bpf_text_address+0x26/0x2b0 [ 1646.329831][T29257] ? is_bpf_text_address+0x292/0x2b0 [ 1646.329855][T29257] ? is_bpf_text_address+0x26/0x2b0 [ 1646.329884][T29257] ? kernel_text_address+0xa5/0xe0 [ 1646.329955][T29257] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1646.329983][T29257] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1646.330017][T29257] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1646.330044][T29257] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1646.330089][T29257] netlink_rcv_skb+0x205/0x470 [ 1646.330121][T29257] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1646.330150][T29257] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1646.330194][T29257] ? netlink_deliver_tap+0x2e/0x1b0 [ 1646.330224][T29257] ? netlink_deliver_tap+0x2e/0x1b0 [ 1646.330260][T29257] netlink_unicast+0x758/0x8d0 [ 1646.330299][T29257] netlink_sendmsg+0x805/0xb30 [ 1646.330329][T29257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.330352][T29257] ? aa_sock_msg_perm+0x94/0x160 [ 1646.330380][T29257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1646.330402][T29257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.330422][T29257] __sock_sendmsg+0x219/0x270 [ 1646.330451][T29257] ____sys_sendmsg+0x505/0x830 [ 1646.330478][T29257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1646.330508][T29257] ? import_iovec+0x74/0xa0 [ 1646.330533][T29257] ___sys_sendmsg+0x21f/0x2a0 [ 1646.330575][T29257] ? __pfx____sys_sendmsg+0x10/0x10 [ 1646.330635][T29257] ? __fget_files+0x2a/0x420 [ 1646.330654][T29257] ? __fget_files+0x3a0/0x420 [ 1646.330686][T29257] __x64_sys_sendmsg+0x19b/0x260 [ 1646.330709][T29257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1646.330740][T29257] ? __pfx_ksys_write+0x10/0x10 [ 1646.330770][T29257] ? __secure_computing+0xe2/0x2a0 [ 1646.330806][T29257] do_syscall_64+0xfa/0x3b0 [ 1646.330824][T29257] ? lockdep_hardirqs_on+0x9c/0x150 [ 1646.330843][T29257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.330857][T29257] ? clear_bhb_loop+0x60/0xb0 [ 1646.330876][T29257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.330890][T29257] RIP: 0033:0x7f0b63f8e969 [ 1646.330904][T29257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1646.330918][T29257] RSP: 002b:00007f0b64e93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1646.330934][T29257] RAX: ffffffffffffffda RBX: 00007f0b641b5fa0 RCX: 00007f0b63f8e969 [ 1646.330951][T29257] RDX: 0000000000040004 RSI: 0000200000000680 RDI: 0000000000000002 [ 1646.330967][T29257] RBP: 00007f0b64e93090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.330976][T29257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.330985][T29257] R13: 0000000000000000 R14: 00007f0b641b5fa0 R15: 00007f0b642dfa28 [ 1646.331008][T29257] [ 1646.990393][T29263] SET target dimension over the limit! [ 1647.144114][T29276] misc userio: No port type given on /dev/userio [ 1647.183332][T29271] block device autoloading is deprecated and will be removed. [ 1647.706841][T12141] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 1647.746885][ T5881] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1647.797038][T20804] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1647.869167][T12141] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1647.879582][T12141] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1647.926926][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 1647.967277][T12141] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1647.986861][ T5881] usb 4-1: config index 0 descriptor too short (expected 38400, got 18) [ 1647.989565][T20804] usb 8-1: Using ep0 maxpacket: 16 [ 1648.015444][ T5881] usb 4-1: config 202 has too many interfaces: 209, using maximum allowed: 32 [ 1648.024790][T12141] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1648.048902][T20804] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1648.064489][ T5881] usb 4-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.088617][T12141] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1648.091239][T20804] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1648.125788][T20804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.153373][T20804] usb 8-1: Product: syz [ 1648.157160][T12141] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1648.169917][ T5881] usb 4-1: config 202 has 0 interfaces, different from the descriptor's value: 209 [ 1648.170823][T20804] usb 8-1: Manufacturer: syz [ 1648.193555][T20804] usb 8-1: SerialNumber: syz [ 1648.207217][T12141] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1648.239902][T12141] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1648.252822][T20804] usb 8-1: config 0 descriptor?? [ 1648.266534][T20804] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1648.278476][T20804] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1648.292963][T12141] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1648.309138][ T5881] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1648.318690][T12141] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1648.329490][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.344281][ T5881] usb 4-1: Product: syz [ 1648.349426][T12141] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1648.361600][ T5881] usb 4-1: Manufacturer: syz [ 1648.371372][ T5881] usb 4-1: SerialNumber: syz [ 1648.399405][T12141] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1648.426148][T12141] usb 5-1: string descriptor 0 read error: -22 [ 1648.435314][T12141] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1648.444685][T12141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.479496][T12141] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1648.714854][T12141] usb 5-1: USB disconnect, device number 98 [ 1648.899206][T20804] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1649.026844][ T5881] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1649.186824][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 1649.194679][ T5881] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1649.205565][ T5881] usb 3-1: config 0 has no interface number 0 [ 1649.213778][ T5881] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.254173][ T5881] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.285791][ T5881] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1649.297704][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.314468][ T5881] usb 3-1: config 0 descriptor?? [ 1649.333142][T20804] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1649.359151][T20804] em28xx 8-1:0.0: board has no eeprom [ 1649.546501][T29307] FAULT_INJECTION: forcing a failure. [ 1649.546501][T29307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.561117][T29307] CPU: 1 UID: 0 PID: 29307 Comm: syz.5.6876 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1649.561152][T29307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1649.561165][T29307] Call Trace: [ 1649.561175][T29307] [ 1649.561184][T29307] dump_stack_lvl+0x189/0x250 [ 1649.561222][T29307] ? __pfx____ratelimit+0x10/0x10 [ 1649.561249][T29307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1649.561282][T29307] ? __pfx__printk+0x10/0x10 [ 1649.561318][T29307] should_fail_ex+0x414/0x560 [ 1649.561351][T29307] _copy_to_user+0x31/0xb0 [ 1649.561376][T29307] simple_read_from_buffer+0xe1/0x170 [ 1649.561412][T29307] proc_fail_nth_read+0x1df/0x250 [ 1649.561440][T29307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1649.561466][T29307] ? rw_verify_area+0x258/0x650 [ 1649.561494][T29307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1649.561518][T29307] vfs_read+0x200/0x980 [ 1649.561552][T29307] ? __pfx___mutex_lock+0x10/0x10 [ 1649.561581][T29307] ? __pfx_vfs_read+0x10/0x10 [ 1649.561610][T29307] ? __fget_files+0x2a/0x420 [ 1649.561635][T29307] ? __fget_files+0x3a0/0x420 [ 1649.561653][T29307] ? __fget_files+0x2a/0x420 [ 1649.561682][T29307] ksys_read+0x145/0x250 [ 1649.561720][T29307] ? __pfx_ksys_read+0x10/0x10 [ 1649.561755][T29307] ? do_syscall_64+0xbe/0x3b0 [ 1649.561786][T29307] do_syscall_64+0xfa/0x3b0 [ 1649.561811][T29307] ? lockdep_hardirqs_on+0x9c/0x150 [ 1649.561837][T29307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.561858][T29307] ? clear_bhb_loop+0x60/0xb0 [ 1649.561884][T29307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.561905][T29307] RIP: 0033:0x7f0b63f8d37c [ 1649.561925][T29307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1649.561942][T29307] RSP: 002b:00007f0b64e93030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1649.561964][T29307] RAX: ffffffffffffffda RBX: 00007f0b641b5fa0 RCX: 00007f0b63f8d37c [ 1649.561980][T29307] RDX: 000000000000000f RSI: 00007f0b64e930a0 RDI: 0000000000000006 [ 1649.561994][T29307] RBP: 00007f0b64e93090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.562007][T29307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.562020][T29307] R13: 0000000000000000 R14: 00007f0b641b5fa0 R15: 00007f0b642dfa28 [ 1649.562053][T29307] [ 1649.588279][ T5881] usbhid 3-1:0.1: can't add hid device: -71 [ 1649.710598][T29310] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6877'. [ 1649.711821][T12141] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1649.724530][T29310] netlink: 216 bytes leftover after parsing attributes in process `syz.5.6877'. [ 1649.733911][ T5881] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1649.822612][T29310] netlink: 216 bytes leftover after parsing attributes in process `syz.5.6877'. [ 1649.863054][T29310] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1649.891793][ T5881] usb 3-1: USB disconnect, device number 107 [ 1649.941793][T12141] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1649.952659][T12141] usb 5-1: config 0 has no interface number 0 [ 1650.000653][T12141] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1650.020702][T12141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.032886][T12141] usb 5-1: Product: syz [ 1650.047402][T12141] usb 5-1: Manufacturer: syz [ 1650.058117][T12141] usb 5-1: SerialNumber: syz [ 1650.082288][T12141] usb 5-1: config 0 descriptor?? [ 1650.368048][T12141] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1650.446115][T12141] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1650.452314][T29287] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1650.514090][T20804] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1650.532369][T12141] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1650.539748][T20804] em28xx 8-1:0.0: dvb set to bulk mode. [ 1650.565029][T16384] em28xx 8-1:0.0: Binding DVB extension [ 1650.584698][T29302] em28xx 8-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 1650.600505][ T5881] usb 4-1: USB disconnect, device number 98 [ 1650.641926][T12141] usb 5-1: media controller created [ 1650.664835][T20804] usb 8-1: USB disconnect, device number 27 [ 1650.738259][T20804] em28xx 8-1:0.0: Disconnecting em28xx [ 1650.781968][T12141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1650.886612][T16384] em28xx 8-1:0.0: Registering input extension [ 1650.894834][T20804] em28xx 8-1:0.0: Closing input extension [ 1650.913158][T12141] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 1650.922000][T20804] em28xx 8-1:0.0: Freeing device [ 1651.058823][T16384] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1651.116228][T29327] bridge_slave_0: left allmulticast mode [ 1651.147215][T12141] usb 5-1: USB disconnect, device number 99 [ 1651.204514][T29327] bridge_slave_0: left promiscuous mode [ 1651.264426][T16384] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1651.286398][T29327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.318778][T16384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.364008][T16384] usb 3-1: config 0 descriptor?? [ 1651.395329][T16384] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1651.550368][T20804] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1651.683500][T12141] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1651.696203][T29316] syz.5.6877 (29316): drop_caches: 2 [ 1651.914692][T16384] gp8psk: usb in 146 operation failed. [ 1651.920473][T16384] gp8psk: failed to get FW version [ 1651.942233][T16384] gp8psk: usb in 149 operation failed. [ 1651.987026][T20804] usb 4-1: device descriptor read/64, error -71 [ 1652.007710][T16384] gp8psk: failed to get FPGA version [ 1652.027554][T16384] gp8psk: usb out operation failed. [ 1652.034825][T16384] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1652.050947][T16384] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1652.086885][T12141] usb 5-1: Using ep0 maxpacket: 32 [ 1652.094254][T16384] usb 3-1: USB disconnect, device number 108 [ 1652.095397][T12141] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 1652.140624][T12141] usb 5-1: config 0 has no interface number 0 [ 1652.195081][T29311] syz.5.6877 (29311): drop_caches: 2 [ 1652.219307][T12141] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1652.252726][T12141] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1652.261658][T12141] usb 5-1: Product: syz [ 1652.266290][T12141] usb 5-1: Manufacturer: syz [ 1652.277450][T20804] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1652.287902][T12141] usb 5-1: config 0 descriptor?? [ 1652.631098][T29327] bridge_slave_1: left allmulticast mode [ 1652.644357][T29327] bridge_slave_1: left promiscuous mode [ 1652.656942][T20804] usb 4-1: device descriptor read/64, error -71 [ 1652.673995][T29327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.774852][T29327] bond0: (slave bond_slave_0): Releasing backup interface [ 1652.787329][T20804] usb usb4-port1: attempt power cycle [ 1652.810462][T29327] bond0: (slave bond_slave_1): Releasing backup interface [ 1652.909499][T29327] team0: Port device team_slave_0 removed [ 1652.954245][T29327] team0: Port device team_slave_1 removed [ 1653.146899][T20804] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1653.177756][T20804] usb 4-1: device descriptor read/8, error -71 [ 1653.243034][T29352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6888'. [ 1653.418847][T20804] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1653.469518][T20804] usb 4-1: device descriptor read/8, error -71 [ 1653.577255][T20804] usb usb4-port1: unable to enumerate USB device [ 1653.687978][T20801] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1653.696887][T12141] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1653.846914][T20801] usb 3-1: Using ep0 maxpacket: 16 [ 1653.872414][T12141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.874346][T20801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1653.903805][T12141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.909993][T20801] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1653.914443][T12141] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1653.924066][T20801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.934627][T12141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.944265][T20801] usb 3-1: Product: syz [ 1653.952244][T12141] usb 6-1: config 0 descriptor?? [ 1653.953703][T20801] usb 3-1: Manufacturer: syz [ 1653.965772][T20801] usb 3-1: SerialNumber: syz [ 1653.992235][T20801] usb 3-1: config 0 descriptor?? [ 1654.431282][T12141] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x0 [ 1654.474907][T12141] cp2112 0003:10C4:EA90.0046: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1654.486919][T20801] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1654.536135][T20804] usb 3-1: USB disconnect, device number 109 [ 1654.581386][T12141] cp2112 0003:10C4:EA90.0046: error requesting version [ 1654.633598][T12141] cp2112 0003:10C4:EA90.0046: probe with driver cp2112 failed with error -71 [ 1654.697139][T20801] usb 4-1: Using ep0 maxpacket: 32 [ 1654.716648][ T5881] usb 5-1: USB disconnect, device number 100 [ 1654.721602][T20801] usb 4-1: config index 0 descriptor too short (expected 38400, got 18) [ 1654.732392][T20801] usb 4-1: config 202 has too many interfaces: 209, using maximum allowed: 32 [ 1654.747795][T20801] usb 4-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.761203][T20801] usb 4-1: config 202 has 0 interfaces, different from the descriptor's value: 209 [ 1654.776608][T20801] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1654.807028][T20801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.812712][T12141] usb 6-1: USB disconnect, device number 35 [ 1654.825401][T20801] usb 4-1: Product: syz [ 1654.830046][T20801] usb 4-1: Manufacturer: syz [ 1654.834877][T20801] usb 4-1: SerialNumber: syz [ 1654.863414][T29372] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1654.869978][T29372] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1654.944858][T29372] vhci_hcd vhci_hcd.0: Device attached [ 1655.266902][T20801] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 1655.289092][T20804] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1655.428621][T12141] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1655.679388][T12141] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.700358][T12141] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1655.726852][T12141] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1655.762620][T12141] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1655.816600][T12141] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1655.826773][T12141] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.841099][T12141] usb 8-1: Product: syz [ 1655.845481][T12141] usb 8-1: Manufacturer: syz [ 1655.850677][T12141] usb 8-1: SerialNumber: syz [ 1655.861872][T29387] input: syz1 as /devices/virtual/input/input144 [ 1655.880505][T12141] usb 8-1: config 0 descriptor?? [ 1655.889370][T12141] xbox_remote_probe: Unexpected endpoint_in [ 1656.041117][T29373] usbip_core: unknown command [ 1656.052099][T29373] vhci_hcd: unknown pdu 0 [ 1656.138979][T29373] usbip_core: unknown command [ 1656.153621][ T78] vhci_hcd: stop threads [ 1656.486809][ T78] vhci_hcd: release socket [ 1656.524349][T29379] usb usb8: usbfs: process 29379 (syz.7.6895) did not claim interface 0 before use [ 1656.572880][ T78] vhci_hcd: disconnect device [ 1656.635121][T29379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.644808][T29379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.705668][T29394] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6899'. [ 1656.889925][T29397] netem: unknown loss type 0 [ 1656.895414][T29397] netem: change failed [ 1657.136006][T20806] usb 4-1: USB disconnect, device number 103 [ 1657.147607][T20804] usb 5-1: device descriptor read/64, error -71 [ 1657.386927][T20804] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1657.555027][T20804] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1657.582429][T20804] usb 5-1: config 0 has no interface number 0 [ 1657.641686][T20804] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1657.684722][T20804] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1657.803921][T20804] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1657.854441][T20804] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1657.900134][T20804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.977546][T20804] usb 5-1: config 0 descriptor?? [ 1658.112483][T29410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6904'. [ 1658.267084][T29396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6900'. [ 1658.281867][T20804] usb 5-1: string descriptor 0 read error: -71 [ 1658.306661][T20804] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1658.385218][T20804] usb 5-1: USB disconnect, device number 102 [ 1658.413325][T12141] usb 8-1: USB disconnect, device number 28 [ 1658.580867][T29414] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6905'. [ 1658.591678][T29417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1658.643426][T29414] binder: BINDER_SET_CONTEXT_MGR already set [ 1658.651644][T29414] binder: 29413:29414 ioctl 4018620d 200000000040 returned -16 [ 1659.112517][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1659.112536][ T30] audit: type=1326 audit(1748795555.394:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b63f8e969 code=0x7ffc0000 [ 1659.576994][ T30] audit: type=1326 audit(1748795555.394:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b63f2ab39 code=0x7ffc0000 [ 1659.628256][ T30] audit: type=1326 audit(1748795555.394:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b63f8e969 code=0x7ffc0000 [ 1659.696888][ T5913] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1659.744801][ T30] audit: type=1326 audit(1748795555.424:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b63f2ab39 code=0x7ffc0000 [ 1659.803915][T20804] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1659.823866][ T30] audit: type=1326 audit(1748795555.424:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b63f8e969 code=0x7ffc0000 [ 1659.896346][ T30] audit: type=1326 audit(1748795555.424:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b63f2ab39 code=0x7ffc0000 [ 1659.971079][ T5913] usb 8-1: Using ep0 maxpacket: 32 [ 1660.083412][ T30] audit: type=1326 audit(1748795555.424:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b63f2ab39 code=0x7ffc0000 [ 1660.143303][ T30] audit: type=1326 audit(1748795555.424:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b63f2ab39 code=0x7ffc0000 [ 1660.166888][T12141] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1660.246695][ T30] audit: type=1326 audit(1748795555.424:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b63f8e969 code=0x7ffc0000 [ 1660.308074][T20804] usb 4-1: config 0 has no interfaces? [ 1660.327068][T12141] usb 5-1: device descriptor read/64, error -71 [ 1660.396703][ T30] audit: type=1326 audit(1748795555.424:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29428 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b63f2ab39 code=0x7ffc0000 [ 1660.422068][ T5913] usb 8-1: config index 0 descriptor too short (expected 38400, got 18) [ 1660.470627][ T5913] usb 8-1: config 202 has too many interfaces: 209, using maximum allowed: 32 [ 1660.489480][T20801] vhci_hcd: vhci_device speed not set [ 1660.507108][T20804] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1660.530407][T20804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.576396][T12141] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1660.576801][ T5913] usb 8-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.602057][T20804] usb 4-1: Product: syz [ 1660.623127][T20804] usb 4-1: Manufacturer: syz [ 1660.645839][T20804] usb 4-1: SerialNumber: syz [ 1660.679286][ T5913] usb 8-1: config 202 has 0 interfaces, different from the descriptor's value: 209 [ 1660.697338][T20804] usb 4-1: config 0 descriptor?? [ 1660.726920][T12141] usb 5-1: device descriptor read/64, error -71 [ 1660.781822][ T5913] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1660.791404][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.800692][ T5913] usb 8-1: Product: syz [ 1660.805085][ T5913] usb 8-1: Manufacturer: syz [ 1660.821504][ T5913] usb 8-1: SerialNumber: syz [ 1660.883958][T12141] usb usb5-port1: attempt power cycle [ 1660.997157][ T5881] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1661.197289][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 1661.211498][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1661.245101][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1661.261975][T29453] FAULT_INJECTION: forcing a failure. [ 1661.261975][T29453] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 1661.285982][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1661.286943][T29453] CPU: 1 UID: 0 PID: 29453 Comm: syz.5.6918 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1661.286977][T29453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1661.286991][T29453] Call Trace: [ 1661.287002][T29453] [ 1661.287013][T29453] dump_stack_lvl+0x189/0x250 [ 1661.287053][T29453] ? __pfx____ratelimit+0x10/0x10 [ 1661.287082][T29453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1661.287116][T29453] ? __pfx__printk+0x10/0x10 [ 1661.287147][T29453] ? pfn_reader_user_pin+0x3ae/0x1180 [ 1661.287182][T29453] should_fail_ex+0x414/0x560 [ 1661.287218][T29453] pfn_reader_user_pin+0x69e/0x1180 [ 1661.287253][T29453] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 1661.287275][T29453] ? kasan_save_track+0x4f/0x80 [ 1661.287303][T29453] ? kasan_save_track+0x3e/0x80 [ 1661.287339][T29453] ? __kasan_kmalloc+0x93/0xb0 [ 1661.287368][T29453] ? __kmalloc_noprof+0x27a/0x4f0 [ 1661.287397][T29453] ? pfn_reader_first+0x2e7/0xa80 [ 1661.287416][T29453] ? iopt_pages_rw_access+0x1e6/0x880 [ 1661.287438][T29453] ? iommufd_access_rw+0x312/0x4b0 [ 1661.287459][T29453] ? iommufd_test+0x4094/0x5170 [ 1661.287483][T29453] ? iommufd_fops_ioctl+0x446/0x520 [ 1661.287520][T29453] pfn_reader_next+0x730/0x1f80 [ 1661.287588][T29453] ? __pfx_pfn_reader_next+0x10/0x10 [ 1661.287616][T29453] ? rcu_is_watching+0x15/0xb0 [ 1661.287645][T29453] ? interval_tree_span_iter_first+0xea/0xd70 [ 1661.287667][T29453] ? trace_kmalloc+0x1f/0xd0 [ 1661.287712][T29453] pfn_reader_first+0x6e1/0xa80 [ 1661.287742][T29453] iopt_pages_rw_slow+0xd4/0x570 [ 1661.287778][T29453] ? __pfx_iopt_pages_rw_slow+0x10/0x10 [ 1661.287845][T29453] ? __lock_acquire+0xab9/0xd20 [ 1661.287879][T29453] iopt_pages_rw_access+0x1e6/0x880 [ 1661.287916][T29453] ? __pfx_iopt_pages_rw_access+0x10/0x10 [ 1661.287939][T29453] ? interval_tree_iter_first+0x1d0/0x1f0 [ 1661.287966][T29453] ? iopt_area_contig_init+0x17c/0x220 [ 1661.287997][T29453] iommufd_access_rw+0x312/0x4b0 [ 1661.288033][T29453] ? __pfx_iommufd_access_rw+0x10/0x10 [ 1661.288058][T29453] ? iommufd_test+0x37da/0x5170 [ 1661.288082][T29453] ? trace_kmalloc+0x1f/0xd0 [ 1661.288109][T29453] ? __kvmalloc_node_noprof+0x338/0x600 [ 1661.288140][T29453] ? iommufd_test+0x37da/0x5170 [ 1661.288173][T29453] iommufd_test+0x4094/0x5170 [ 1661.288214][T29453] ? __pfx_iommufd_test+0x10/0x10 [ 1661.288245][T29453] ? __lock_acquire+0xab9/0xd20 [ 1661.288283][T29453] ? __might_fault+0xb0/0x130 [ 1661.288343][T29453] iommufd_fops_ioctl+0x446/0x520 [ 1661.288380][T29453] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1661.288428][T29453] ? __fget_files+0x3a0/0x420 [ 1661.288449][T29453] ? __fget_files+0x2a/0x420 [ 1661.288475][T29453] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1661.288504][T29453] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1661.288537][T29453] __se_sys_ioctl+0xfc/0x170 [ 1661.288569][T29453] do_syscall_64+0xfa/0x3b0 [ 1661.288596][T29453] ? lockdep_hardirqs_on+0x9c/0x150 [ 1661.288622][T29453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.288644][T29453] ? clear_bhb_loop+0x60/0xb0 [ 1661.288671][T29453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.288699][T29453] RIP: 0033:0x7f0b63f8e969 [ 1661.288720][T29453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1661.288739][T29453] RSP: 002b:00007f0b64e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1661.288763][T29453] RAX: ffffffffffffffda RBX: 00007f0b641b5fa0 RCX: 00007f0b63f8e969 [ 1661.288780][T29453] RDX: 0000200000000480 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 1661.288794][T29453] RBP: 00007f0b64e93090 R08: 0000000000000000 R09: 0000000000000000 [ 1661.288809][T29453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1661.288822][T29453] R13: 0000000000000000 R14: 00007f0b641b5fa0 R15: 00007f0b642dfa28 [ 1661.288857][T29453] [ 1661.678096][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1661.688070][ T5881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1661.720187][ T5881] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1661.732190][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.740614][T12141] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1661.767444][T12141] usb 5-1: device descriptor read/8, error -71 [ 1661.778171][ T5881] usb 3-1: config 0 descriptor?? [ 1662.009441][T29451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.030825][T29451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.047507][T12141] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1662.067907][T12141] usb 5-1: device descriptor read/8, error -71 [ 1662.177369][T12141] usb usb5-port1: unable to enumerate USB device [ 1662.296641][T20801] usb 4-1: USB disconnect, device number 104 [ 1662.339692][T29457] ip6gre1: entered promiscuous mode [ 1662.372481][T29457] ip6gre1: entered allmulticast mode [ 1662.734756][T27880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1662.749120][T27880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1662.776668][T27880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1662.796004][T27880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1662.805587][T27880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1662.842408][ T5913] usb 8-1: USB disconnect, device number 29 [ 1663.546845][ T5913] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1663.586887][T20801] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1663.696913][ T5913] usb 8-1: Using ep0 maxpacket: 16 [ 1663.704976][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.716990][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.727503][ T5913] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1663.737248][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.746809][T20801] usb 5-1: Using ep0 maxpacket: 16 [ 1663.760743][T20801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1663.773510][ T5913] usb 8-1: config 0 descriptor?? [ 1663.794706][T20801] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1663.807452][T20801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.819906][T20801] usb 5-1: Product: syz [ 1663.825988][T20801] usb 5-1: Manufacturer: syz [ 1663.831889][T20801] usb 5-1: SerialNumber: syz [ 1663.837768][T16032] dummy0: left allmulticast mode [ 1663.850781][T16032] dummy0: left promiscuous mode [ 1663.851917][T20801] usb 5-1: config 0 descriptor?? [ 1663.856006][T16032] bridge0: port 3(dummy0) entered disabled state [ 1663.965872][T20800] usb 3-1: USB disconnect, device number 110 [ 1664.000068][T16032] bridge_slave_1: left allmulticast mode [ 1664.005776][T16032] bridge_slave_1: left promiscuous mode [ 1664.029488][T16032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.169177][T16032] bridge_slave_0: left allmulticast mode [ 1664.174885][T16032] bridge_slave_0: left promiscuous mode [ 1664.245791][T16032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.908454][T27880] Bluetooth: hci1: command tx timeout [ 1665.288757][T25649] usb 5-1: USB disconnect, device number 107 [ 1666.259820][ T5913] usbhid 8-1:0.0: can't add hid device: -71 [ 1666.284828][ T5913] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1666.365695][ T5913] usb 8-1: USB disconnect, device number 30 [ 1666.754175][T29510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1667.006976][T27880] Bluetooth: hci1: command tx timeout [ 1667.862095][T16032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1667.872844][T16032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1667.885537][T16032] bond0 (unregistering): Released all slaves [ 1668.112065][T16032] bond1 (unregistering): Released all slaves [ 1668.337567][T16032] bond2 (unregistering): Released all slaves [ 1668.515060][T16032] bond3 (unregistering): Released all slaves [ 1668.613365][T29513] program syz.2.6932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1668.701478][T16032] bond4 (unregistering): Released all slaves [ 1668.777990][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.785428][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.884453][T16032] bond5 (unregistering): Released all slaves [ 1669.037482][T16032] bond6 (unregistering): Released all slaves [ 1669.092067][T27880] Bluetooth: hci1: command tx timeout [ 1669.186438][T16032] bond7 (unregistering): Released all slaves [ 1669.321654][T16032] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1669.332501][T16032] bond8 (unregistering): Released all slaves [ 1669.472185][T16032] bond9 (unregistering): Released all slaves [ 1669.492439][T29467] chnl_net:caif_netlink_parms(): no params data found [ 1669.513111][T29491] bridge1: entered promiscuous mode [ 1669.523983][T29491] ================================================================== [ 1669.532083][T29491] BUG: KASAN: global-out-of-bounds in fib6_clean_node+0x35d/0x590 [ 1669.539918][T29491] Read of size 8 at addr ffffffff99f83568 by task syz.3.6927/29491 [ 1669.547816][T29491] [ 1669.550141][T29491] CPU: 1 UID: 0 PID: 29491 Comm: syz.3.6927 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1669.550167][T29491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1669.550177][T29491] Call Trace: [ 1669.550185][T29491] [ 1669.550193][T29491] dump_stack_lvl+0x189/0x250 [ 1669.550228][T29491] ? __virt_addr_valid+0x1c8/0x5c0 [ 1669.550260][T29491] ? rcu_is_watching+0x15/0xb0 [ 1669.550284][T29491] ? __kasan_check_byte+0x12/0x40 [ 1669.550307][T29491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1669.550329][T29491] ? rcu_is_watching+0x15/0xb0 [ 1669.550348][T29491] ? lock_release+0x4b/0x3e0 [ 1669.550366][T29491] ? __virt_addr_valid+0x1c8/0x5c0 [ 1669.550387][T29491] ? __virt_addr_valid+0x4a5/0x5c0 [ 1669.550408][T29491] print_report+0xd2/0x2b0 [ 1669.550428][T29491] ? fib6_clean_node+0x35d/0x590 [ 1669.550444][T29491] kasan_report+0x118/0x150 [ 1669.550466][T29491] ? fib6_clean_node+0x35d/0x590 [ 1669.550483][T29491] fib6_clean_node+0x35d/0x590 [ 1669.550500][T29491] ? __pfx_fib6_clean_node+0x10/0x10 [ 1669.550514][T29491] ? __lock_acquire+0xab9/0xd20 [ 1669.550533][T29491] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1669.550554][T29491] fib6_walk_continue+0x678/0x910 [ 1669.550574][T29491] fib6_walk+0x149/0x290 [ 1669.550588][T29491] __fib6_clean_all+0x234/0x380 [ 1669.550602][T29491] ? __fib6_clean_all+0x9b/0x380 [ 1669.550616][T29491] ? __pfx_fib6_ifup+0x10/0x10 [ 1669.550630][T29491] ? __pfx___fib6_clean_all+0x10/0x10 [ 1669.550646][T29491] ? __pfx_fib6_clean_node+0x10/0x10 [ 1669.550660][T29491] ? __pfx_fib6_ifup+0x10/0x10 [ 1669.550680][T29491] rt6_sync_up+0x128/0x160 [ 1669.550695][T29491] ? __pfx_rt6_sync_up+0x10/0x10 [ 1669.550712][T29491] ? do_raw_read_unlock+0x3d/0x80 [ 1669.550726][T29491] addrconf_notify+0xb1c/0x1010 [ 1669.550744][T29491] notifier_call_chain+0x1b6/0x3e0 [ 1669.550766][T29491] __dev_notify_flags+0x18d/0x2e0 [ 1669.550782][T29491] ? __pfx___dev_notify_flags+0x10/0x10 [ 1669.550794][T29491] ? __dev_change_flags+0x4cc/0x6d0 [ 1669.550810][T29491] ? __pfx___dev_change_flags+0x10/0x10 [ 1669.550825][T29491] ? br_dev_newlink+0x12a/0x140 [ 1669.550842][T29491] ? rtnl_newlink_create+0x2fd/0xb00 [ 1669.550858][T29491] rtnl_newlink_create+0x61c/0xb00 [ 1669.550876][T29491] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1669.550889][T29491] ? rtnl_newlink+0x8db/0x1c70 [ 1669.550912][T29491] ? __pfx___mutex_lock+0x10/0x10 [ 1669.550935][T29491] ? ns_capable+0x8a/0xf0 [ 1669.550955][T29491] rtnl_newlink+0x16d6/0x1c70 [ 1669.550978][T29491] ? netlink_sendmsg+0x805/0xb30 [ 1669.551002][T29491] ? __pfx_rtnl_newlink+0x10/0x10 [ 1669.551041][T29491] ? kasan_quarantine_put+0xdd/0x220 [ 1669.551067][T29491] ? lockdep_hardirqs_on+0x9c/0x150 [ 1669.551095][T29491] ? nlmon_xmit+0xb0/0x100 [ 1669.551120][T29491] ? kmem_cache_free+0x18f/0x400 [ 1669.551144][T29491] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1669.551170][T29491] ? lockdep_hardirqs_on+0x9c/0x150 [ 1669.551188][T29491] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1669.551206][T29491] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1669.551226][T29491] ? __dev_queue_xmit+0x27e/0x3a70 [ 1669.551247][T29491] ? __lock_acquire+0xab9/0xd20 [ 1669.551274][T29491] ? __pfx_rtnl_newlink+0x10/0x10 [ 1669.551294][T29491] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1669.551323][T29491] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1669.551351][T29491] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1669.551380][T29491] ? ref_tracker_free+0x63a/0x7d0 [ 1669.551402][T29491] ? __copy_skb_header+0xa7/0x550 [ 1669.551419][T29491] ? __pfx_ref_tracker_free+0x10/0x10 [ 1669.551439][T29491] ? __skb_clone+0x63/0x7a0 [ 1669.551456][T29491] netlink_rcv_skb+0x205/0x470 [ 1669.551479][T29491] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1669.551500][T29491] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1669.551527][T29491] ? netlink_deliver_tap+0x2e/0x1b0 [ 1669.551549][T29491] ? netlink_deliver_tap+0x2e/0x1b0 [ 1669.551573][T29491] netlink_unicast+0x758/0x8d0 [ 1669.551597][T29491] netlink_sendmsg+0x805/0xb30 [ 1669.551614][T29491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1669.551629][T29491] ? aa_sock_msg_perm+0x94/0x160 [ 1669.551648][T29491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1669.551664][T29491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1669.551678][T29491] __sock_sendmsg+0x219/0x270 [ 1669.551698][T29491] ____sys_sendmsg+0x505/0x830 [ 1669.551714][T29491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1669.551732][T29491] ? import_iovec+0x74/0xa0 [ 1669.551748][T29491] ___sys_sendmsg+0x21f/0x2a0 [ 1669.551764][T29491] ? __pfx____sys_sendmsg+0x10/0x10 [ 1669.551791][T29491] ? __fget_files+0x2a/0x420 [ 1669.551804][T29491] ? __fget_files+0x3a0/0x420 [ 1669.551821][T29491] __x64_sys_sendmsg+0x19b/0x260 [ 1669.551837][T29491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1669.551855][T29491] ? rcu_is_watching+0x15/0xb0 [ 1669.551876][T29491] ? do_syscall_64+0xbe/0x3b0 [ 1669.551910][T29491] do_syscall_64+0xfa/0x3b0 [ 1669.551931][T29491] ? lockdep_hardirqs_on+0x9c/0x150 [ 1669.551948][T29491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.551963][T29491] ? clear_bhb_loop+0x60/0xb0 [ 1669.551979][T29491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.551994][T29491] RIP: 0033:0x7fe7b658e969 [ 1669.552009][T29491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1669.552022][T29491] RSP: 002b:00007fe7b370a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1669.552039][T29491] RAX: ffffffffffffffda RBX: 00007fe7b67b6400 RCX: 00007fe7b658e969 [ 1669.552050][T29491] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1669.552060][T29491] RBP: 00007fe7b6610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1669.552070][T29491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1669.552079][T29491] R13: 0000000000000000 R14: 00007fe7b67b6400 R15: 00007fe7b68dfa28 [ 1669.552095][T29491] [ 1669.552101][T29491] [ 1670.106884][T29491] The buggy address belongs to the variable: [ 1670.112873][T29491] binder_devices+0x8/0x20 [ 1670.117309][T29491] [ 1670.119631][T29491] The buggy address belongs to the physical page: [ 1670.126050][T29491] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19f83 [ 1670.134828][T29491] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1670.142744][T29491] raw: 00fff00000002000 ffffea000067e0c8 ffffea000067e0c8 0000000000000000 [ 1670.151355][T29491] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1670.159950][T29491] page dumped because: kasan: bad access detected [ 1670.166370][T29491] page_owner info is not present (never set?) [ 1670.172430][T29491] [ 1670.174756][T29491] Memory state around the buggy address: [ 1670.180386][T29491] ffffffff99f83400: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 1670.188459][T29491] ffffffff99f83480: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 1670.196524][T29491] >ffffffff99f83500: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 1670.204669][T29491] ^ [ 1670.212151][T29491] ffffffff99f83580: 00 00 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 1670.220214][T29491] ffffffff99f83600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1670.228271][T29491] ================================================================== [ 1670.236412][T29491] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1670.243632][T29491] CPU: 1 UID: 0 PID: 29491 Comm: syz.3.6927 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1670.255379][T29491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1670.265446][T29491] Call Trace: [ 1670.268730][T29491] [ 1670.271662][T29491] dump_stack_lvl+0x99/0x250 [ 1670.276269][T29491] ? __asan_memcpy+0x40/0x70 [ 1670.280874][T29491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1670.286088][T29491] ? __pfx__printk+0x10/0x10 [ 1670.290685][T29491] panic+0x2db/0x790 [ 1670.294596][T29491] ? __pfx_panic+0x10/0x10 [ 1670.299027][T29491] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1670.304936][T29491] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1670.310843][T29491] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1670.317192][T29491] ? print_memory_metadata+0x314/0x400 [ 1670.322659][T29491] ? fib6_clean_node+0x35d/0x590 [ 1670.327609][T29491] check_panic_on_warn+0x89/0xb0 [ 1670.332550][T29491] ? fib6_clean_node+0x35d/0x590 [ 1670.337497][T29491] end_report+0x78/0x160 [ 1670.341773][T29491] kasan_report+0x129/0x150 [ 1670.346290][T29491] ? fib6_clean_node+0x35d/0x590 [ 1670.351236][T29491] fib6_clean_node+0x35d/0x590 [ 1670.356012][T29491] ? __pfx_fib6_clean_node+0x10/0x10 [ 1670.361299][T29491] ? __lock_acquire+0xab9/0xd20 [ 1670.366157][T29491] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1670.371539][T29491] fib6_walk_continue+0x678/0x910 [ 1670.376574][T29491] fib6_walk+0x149/0x290 [ 1670.380826][T29491] __fib6_clean_all+0x234/0x380 [ 1670.385680][T29491] ? __fib6_clean_all+0x9b/0x380 [ 1670.390618][T29491] ? __pfx_fib6_ifup+0x10/0x10 [ 1670.395389][T29491] ? __pfx___fib6_clean_all+0x10/0x10 [ 1670.400768][T29491] ? __pfx_fib6_clean_node+0x10/0x10 [ 1670.406068][T29491] ? __pfx_fib6_ifup+0x10/0x10 [ 1670.410845][T29491] rt6_sync_up+0x128/0x160 [ 1670.415266][T29491] ? __pfx_rt6_sync_up+0x10/0x10 [ 1670.420212][T29491] ? do_raw_read_unlock+0x3d/0x80 [ 1670.425241][T29491] addrconf_notify+0xb1c/0x1010 [ 1670.430096][T29491] notifier_call_chain+0x1b6/0x3e0 [ 1670.435236][T29491] __dev_notify_flags+0x18d/0x2e0 [ 1670.440279][T29491] ? __pfx___dev_notify_flags+0x10/0x10 [ 1670.445838][T29491] ? __dev_change_flags+0x4cc/0x6d0 [ 1670.451057][T29491] ? __pfx___dev_change_flags+0x10/0x10 [ 1670.456624][T29491] ? br_dev_newlink+0x12a/0x140 [ 1670.461499][T29491] ? rtnl_newlink_create+0x2fd/0xb00 [ 1670.466803][T29491] rtnl_newlink_create+0x61c/0xb00 [ 1670.471924][T29491] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1670.477564][T29491] ? rtnl_newlink+0x8db/0x1c70 [ 1670.482344][T29491] ? __pfx___mutex_lock+0x10/0x10 [ 1670.487380][T29491] ? ns_capable+0x8a/0xf0 [ 1670.491726][T29491] rtnl_newlink+0x16d6/0x1c70 [ 1670.496432][T29491] ? netlink_sendmsg+0x805/0xb30 [ 1670.501379][T29491] ? __pfx_rtnl_newlink+0x10/0x10 [ 1670.506431][T29491] ? kasan_quarantine_put+0xdd/0x220 [ 1670.511731][T29491] ? lockdep_hardirqs_on+0x9c/0x150 [ 1670.516943][T29491] ? nlmon_xmit+0xb0/0x100 [ 1670.521371][T29491] ? kmem_cache_free+0x18f/0x400 [ 1670.526320][T29491] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1670.531698][T29491] ? lockdep_hardirqs_on+0x9c/0x150 [ 1670.536905][T29491] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1670.542281][T29491] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1670.548007][T29491] ? __dev_queue_xmit+0x27e/0x3a70 [ 1670.553126][T29491] ? __lock_acquire+0xab9/0xd20 [ 1670.557999][T29491] ? __pfx_rtnl_newlink+0x10/0x10 [ 1670.563033][T29491] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1670.567988][T29491] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1670.573116][T29491] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1670.578585][T29491] ? ref_tracker_free+0x63a/0x7d0 [ 1670.583617][T29491] ? __copy_skb_header+0xa7/0x550 [ 1670.588646][T29491] ? __pfx_ref_tracker_free+0x10/0x10 [ 1670.594026][T29491] ? __skb_clone+0x63/0x7a0 [ 1670.598536][T29491] netlink_rcv_skb+0x205/0x470 [ 1670.603314][T29491] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1670.608793][T29491] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1670.614103][T29491] ? netlink_deliver_tap+0x2e/0x1b0 [ 1670.619314][T29491] ? netlink_deliver_tap+0x2e/0x1b0 [ 1670.624529][T29491] netlink_unicast+0x758/0x8d0 [ 1670.629309][T29491] netlink_sendmsg+0x805/0xb30 [ 1670.634084][T29491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.639369][T29491] ? aa_sock_msg_perm+0x94/0x160 [ 1670.644312][T29491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1670.649601][T29491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.654887][T29491] __sock_sendmsg+0x219/0x270 [ 1670.659573][T29491] ____sys_sendmsg+0x505/0x830 [ 1670.664341][T29491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1670.669629][T29491] ? import_iovec+0x74/0xa0 [ 1670.674133][T29491] ___sys_sendmsg+0x21f/0x2a0 [ 1670.678817][T29491] ? __pfx____sys_sendmsg+0x10/0x10 [ 1670.684046][T29491] ? __fget_files+0x2a/0x420 [ 1670.688643][T29491] ? __fget_files+0x3a0/0x420 [ 1670.693324][T29491] __x64_sys_sendmsg+0x19b/0x260 [ 1670.698353][T29491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1670.703817][T29491] ? rcu_is_watching+0x15/0xb0 [ 1670.708589][T29491] ? do_syscall_64+0xbe/0x3b0 [ 1670.713279][T29491] do_syscall_64+0xfa/0x3b0 [ 1670.717795][T29491] ? lockdep_hardirqs_on+0x9c/0x150 [ 1670.723107][T29491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.729177][T29491] ? clear_bhb_loop+0x60/0xb0 [ 1670.733860][T29491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.739756][T29491] RIP: 0033:0x7fe7b658e969 [ 1670.744174][T29491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1670.763869][T29491] RSP: 002b:00007fe7b370a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1670.772292][T29491] RAX: ffffffffffffffda RBX: 00007fe7b67b6400 RCX: 00007fe7b658e969 [ 1670.780272][T29491] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1670.788255][T29491] RBP: 00007fe7b6610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1670.796229][T29491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1670.804203][T29491] R13: 0000000000000000 R14: 00007fe7b67b6400 R15: 00007fe7b68dfa28 [ 1670.812184][T29491] [ 1670.815519][T29491] Kernel Offset: disabled [ 1670.819854][T29491] Rebooting in 86400 seconds..