last executing test programs: 17.887756151s ago: executing program 3 (id=8793): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 17.608253316s ago: executing program 3 (id=8795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) open$dir(0x0, 0x800, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_pidfd_open(0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)) waitid(0x2, 0x0, 0x0, 0x8, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) 14.493870811s ago: executing program 3 (id=8805): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4040004) 14.334243448s ago: executing program 3 (id=8808): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000002143ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c97783b615850d488b7f0c4a80715bed3cf1adb2dafbb7672328e2300fa2623704da7b9889a57e231be318f5eb6d294a302e753e75b741b63e898748f228e6752d15bf99e02c3d366fa091326029d899c493df701ad6c37c55598f3a19e748f58475398fda5f6153cb11a4ffde399dc21f96bed56d31", 0x155}, {&(0x7f0000001280)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292034a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8e35c0245b618452612d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46789df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c61fae925f3147ee3e72c8aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce2925a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacacc78cb5c8b4f26222883707b61fa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4b97b219628be8cdba7e54d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353dc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e", 0x6db}], 0x2}, 0x800) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r5, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000280)="46a3864e29bf22939044d846d352770b", 0x10, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000402d00090027bd700000000001040000000400181e"], 0x18}}, 0x84) msgget$private(0x0, 0x40) 12.288362146s ago: executing program 3 (id=8811): r0 = gettid() syz_usb_connect(0x4, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x0) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0x0, 0x31, 0x9, 0x872, 0x3ffa}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000002c0)={0x0, 0x0, 0x6, "5c0ff63a33e8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="00eb20"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000001c0)={0x7, 'vlan1\x00', {0x2}, 0x8}) 10.575670889s ago: executing program 4 (id=8818): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4040004) 10.430442173s ago: executing program 1 (id=8819): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x1) socket$inet6(0xa, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = eventfd2(0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f0000000440)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000500)=0x90) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x30, r10, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}]}, {0x2b}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x94, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x9, 0x4, "42feec3290"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f9833773d74adfc1c174023979"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "34465cfbbe60b6086300"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x8090}, 0x14) mq_notify(r5, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mq_notify(r5, &(0x7f00000001c0)={0x0, 0xf, 0x1, @thr={0x0, 0x0}}) epoll_pwait2(r2, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, r12, 0x1, 0x70bd29, 0x25dfdbfb, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0xffffff75, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}]}]}, 0x34}}, 0x200040e0) r13 = socket$l2tp(0x2, 0x2, 0x73) pwritev2(r13, &(0x7f0000000000), 0x0, 0x2, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000b80)) 10.268134985s ago: executing program 4 (id=8820): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) r4 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000100)={0x100, @time={0x8, 0x1da65bb}, 0xfa, {0x7, 0x4b}, 0xa0, 0x1, 0x7}) r5 = syz_usb_connect(0x0, 0x63d, &(0x7f0000001880)={{0x12, 0x1, 0x310, 0x90, 0x5, 0x1, 0xef, 0xdf6, 0x48, 0xab5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62b, 0x3, 0x6c, 0x35, 0x40, 0x7, [{{0x9, 0x4, 0x2d, 0x81, 0x5, 0xc9, 0x87, 0xd3, 0x1, [@hid_hid={0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xdb1}}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "4401bc64"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x9dc7}]}], [{{0x9, 0x5, 0xb, 0x8, 0x8, 0x3, 0xbb, 0xb, [@generic={0xbb, 0x9, "ccf84f34d28e95d98212ea11be65aeca186874febb6c0339f7c851141ce489ae2bb947c382ee0d5ab8934c4287af562c585c16b67f927ac76a4bbc381e9dbbf758fa930998ffad9a66d27c1fe0e27136966927e427f160c772d7fe5673be605cd6ca8fd66c9dc5b1d86255c7c8e9c59fc0990fcda377afbd9aae514899937b071b4560ca0c6686592dd2c4ec3da02320356f3f3acffa2c7af7e4f0b20079bb1ee666eed32375b1b1fb44dbd3788513e46c7816ffc4ff7ee0da"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x2, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xa8f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x4, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0xb}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xf8, 0x4, 0x4, [@generic={0xa3, 0x10, "f6a7e90b29b5847f27b434ed8fafa1bab23fc01b845a3272956425ad76c7a6c8bdb1789cb31c38c8bd9803697eeee662558828b04a76c4a0f4ffaf032bbf32556504fb2453abc031c7ba6b2665a740ac694e9977d85122009be827c09033f92f852a2c4103322a85ffab50e39279b943b3ebdcb46c4449b5827a961cff30d46e81c489491ed71e1a7164e4e0f33a71f16acf013dc1fa557249358eff8a739bc812"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfffa}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x0, 0x15, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x62, 0x9}]}}]}}, {{0x9, 0x4, 0xf2, 0x4, 0x2, 0xcf, 0x63, 0x8c, 0xe7, [@generic={0x1b, 0x9, "e836dae5f2563b6df53add84f58f95881ca9530a71c992487b"}], [{{0x9, 0x5, 0xb, 0x8, 0x20, 0x2, 0x10, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x80, 0x0, 0x10, [@generic={0x63, 0x1, "e29ef06e7e4f6800f9dc72cc6bb9fd785cfa55b65135db68c31a28273735732f22aba90b074db3e61a3dd1bfaacca8cdd474a119d918a8ab112151b7272f13ab6b11cab3694bc04974049e6cdf144f373e01ab5be7b4a241a2a5857b00e50a7b02"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x5}]}}]}}, {{0x9, 0x4, 0x49, 0x7, 0x5, 0x89, 0x98, 0x72, 0x81, [@uac_control={{0xa, 0x24, 0x1, 0x400, 0xfe}, [@selector_unit={0x7, 0x24, 0x5, 0x4, 0x2, "20d9"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x5, 0x6, 0xe}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x0, "42239a3dc022"}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0x2, 0x6, "8714cf06053b"}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x4179, 0x7f, "55727974bb"}]}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0xfa}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x1, 0x5, [0x7, 0x4, 0x4, 0x4, 0x3], 0x5}]}], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0x8, 0x5, [@generic={0x79, 0x30, "c6b3208c1a8bfdddb992aa478276ed859b5230ee8fb5acddc629aeae022312fb79297eb16899780ad991a9000be37930518c450fe12f4f7e42e996ad9d2a26f73e5672d6da85c3c07d5b1fe4a1e012bd9c0f28a7faefb4a41e2a48e42f440606719456bb741f96727b922be5bc355fcded4732eb7fb134"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x7, 0x6, 0x1e, [@generic={0x9c, 0x9, "96ac483219a6c758a36071f60613d5c2c5fc3a60e0c2c01fd6e632ec83d32672db977ed86a28ca2c7e329988522f82be4645278a09f42a97108bde5d3145330c06e11d743e2eb1cdaefd9be0f38ebb945f8ac9ce3c513ec765444c0652b57e641f4f0323be074098a972597a72578d1a5c17935ced608e2d17b7d13b5558a4c8a5accb66dc59a17f5f4612e9f82307c17edb8d79b5ef6a44d4f2"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x63, 0xf8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7, 0xce4}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x2, 0x2, 0x4, [@generic={0xe5, 0xd, "3fb02bf177f48f748b9a24376a42572d7d7eeb4a250fe4325c3196f964cd802730c8decffb1081e5bade6567d9b798a3493670ff861e27c99945d7d151e7c157762a0bc03539e7183c0159b39202a08d8d091521e0cce729071f7b3d1c8718ff2283f21db29b6ae37d43a62321760f9ba047c9cfe761aa315cede5866b2ff9ba0c9c99282faef92721231bc7dfa7e7318b9c50ebc712439734ee46821c6e9e5045b27b9cd66b1779b99920cbd739a6c819b625d14f9f82bc279e5d5bffdc8098279ac936a5c01c2cb0aff034faaccdc94f0bbd9ce6e33f35cf1ea9b264dfacf0b64d5f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x84, 0x4, 0x3ff, 0xa, 0x1, 0xf6, [@generic={0xf7, 0x24, "52cbf5055050e1fa059c54d9a8035d47b80aa77bce62f969de37012047c74db4b266ac98eee925f513b7477fdde3c3562e3b9af51de976fc339a1047421a9e65e5b510aad6e70794187d2271620dc50947416cf17bc4ccb957b3cde17e7831a6081822f24da24d6167f917b349e39612521c38c2ccfed16079a0e48351b95dba4ba9462b87471e67b72d3483ae16af9b1ddcd3fbef04a2a7052e36178cb9183ac97f246c4858638d741e24566967d42f42d0a0c3fc356084a03504957ff30c8783d57ba3b524a943f5aea8138c68be0cb57358b1c98d49aba1aa4559273e8c49d0c8f345952fe46e652e525bca996b1d632dec36f3"}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x2, 0xf7, 0x8, 0xff, 0xff}, 0x69, &(0x7f0000000200)={0x5, 0xf, 0x69, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x1, 0xff}, @generic={0x5d, 0x10, 0x2, "1115afe6ca6fef103dc0be2dbcc659e16293e43111dbb1c94c15b37aaf2af7ec3fae6b8e2055234c00344f02f48720c96ac362fa7b23573d091b597979c268766f6bf9242f268ad1aa69947753cd7c4c7dfd11454e38c1e07670"}]}, 0x8, [{0xb8, &(0x7f0000000280)=ANY=[@ANYBLOB="b803b0b4e8c734f1a0488810380a75a5a9c1a75413e773d9058e097f52ce22f17ab7111cca779ffd8f15c481fce2eabdc85e395db75e8f729bf60e248c252b39d2df225ee44d66fd78a236ca29913b2e7d5d18667f4e5c98fd0ae0a68670b1f180d532e978fdddcf0393c6bdfe95123a1f737cf185cb6f87c1c69766972526409fb5daab8ecc11e664b3b3f4bf1c12e19ddc59b582280dae2141a25ebadd8f454ec602f18156891883a8a2413afaf52dc701a87675687bdc"]}, {0x3d, &(0x7f0000000340)=@string={0x3d, 0x3, "37c65a81956f5c3eaa4beed88ca914c2b6f4ea7ccf71bf3af460d23ab9440d72f54807497464048cc0f19e95704040b4064ff389c0058214d550ae"}}, {0x1b, &(0x7f0000000380)=@string={0x1b, 0x3, "d93f81119ac4308911874553b140b385ac2fc7856ea1b94be1"}}, {0x9d, &(0x7f0000000500)=@string={0x9d, 0x3, "e3edead6729f048d58f2a43d678103ab9bd28ddbdfcb6e0675cc706ed61520e529165de2e9b40f1f407775e8f8d53a636e8afbb1cb925362505e983b99adcd8a69c1fb99579eaf6085e6c5ec96c11ffc5cfa40402a26a5b687ffc83f70fcd35872b9b87000f344ba4dabdc3bfe3b3ec7388a53e11138cf6b9ac6f467f55f95042cf9e39862244b643c6775c5d2e556f9e514623363bba716197c21"}}, {0x63, &(0x7f00000005c0)=@string={0x63, 0x3, "587c109b81ce684f7fc5394bb67db6a5871c18eca676cfa6c7002fc4226ed042a5c7a37b08f28d9d602e1babfe7d3887c482766b60da43893d0fde8c0c5efa533661fc578ef884aabd63e61698c3bc1a1d24ea3a32976c3dd8f3a6931df5b8572e"}}, {0xf5, &(0x7f0000000880)=@string={0xf5, 0x3, "60aa77af668ef8f94de911367a2fed1f2674948cae215d68a062fd2602d9dca8345844316eeb3cdb68fb44476ffbc0c6766007dd9b8cf472f93e2472244e006b846d538e3401138103cd9e6dd2f2d233a4cd4459212c3bf5d4099b258b6679920f4d171f6d991c92b60ffa626d373bb452eab00d19860994998daed9be47afe0063d72a24abd25d8b45b5c0da762c30d299d53c8c255cef4132f7e5404c5bbe9a315ad27eb4c669a048a1c27ec43cd9916e0a26ff3412bd182ec3d664db47f83cc9c0f467ddada53ef7fb7a6597a973a25046e3a3d88d02d278ae7a90625d4253e6988d80312d00d62e813d6de033e9289eeb1"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x180a}}]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) unshare(0x60480) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x21, 0x0, 0x4) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000680)={0x20, 0x5}, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 9.987799386s ago: executing program 3 (id=8821): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)="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", 0x155}, {&(0x7f0000001280)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292034a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8e35c0245b618452612d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46789df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c61fae925f3147ee3e72c8aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce2925a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacacc78cb5c8b4f26222883707b61fa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4b97b219628be8cdba7e54d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353dc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e", 0x6db}], 0x2}, 0x800) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r4, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xfdef) sendto$inet6(r4, &(0x7f0000000280)="46a3864e29bf22939044d846d352770b", 0x10, 0x0, 0x0, 0x0) 7.155828126s ago: executing program 1 (id=8824): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x40010, r0, 0x411df000) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[], 0x40}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = getpid() sched_setattr(r5, 0x0, 0x0) setrlimit(0xf, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="2b72646d61202d6370757365742000006a3844fc26bd7b90af3408ce48174355c84f492b135f17cc77cea685"], 0xe) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) 6.844391849s ago: executing program 0 (id=8827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/151, 0x97, 0x1, 0x0}, &(0x7f0000000180)=0x3b) 6.808365052s ago: executing program 0 (id=8828): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}}, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x5, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x5, 0x7fff, 0x9, 0xfffff4f1, 0x4}) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r3, 0x8010aa02, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464d0, &(0x7f0000000080)=r9) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000180)={&(0x7f00000001c0)=[{0xd1df, 0x4e10, 0x39, &(0x7f0000000280)="cf0a7f0e22b4c71f34f2249a0b9711e91f70ea7a7f62001010c57929a63a8444d94bbe0fe41371ead1777e4ec7f424ca0358009132403f4e6a"}], 0x1}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d56006ff88c419da9bba0f4", @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) 5.776494785s ago: executing program 4 (id=8830): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4040004) 5.474359733s ago: executing program 4 (id=8832): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x18, 0x0, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xc8}, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000000000000000000000000000e0994800"/31], 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00220100400084"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.800436412s ago: executing program 2 (id=8834): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) fgetxattr(r1, &(0x7f0000001a80)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080)=0x6, 0x4) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"22dd3fb97497021fa99774a26900a452"}}}}, 0xa0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @ib={0x1b, 0x4, 0x1, {"3cf8bd0f2c6c19a71a5c357ad66cbdd7"}, 0x4, 0x8000, 0x3}}}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a142000001100010000000000000000000100000e"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.630837494s ago: executing program 2 (id=8835): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000002143ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c97783b615850d488b7f0c4a80715bed3cf1adb2dafbb7672328e2300fa2623704da7b9889a57e231be318f5eb6d294a302e753e75b741b63e898748f228e6752d15bf99e02c3d366fa091326029d899c493df701ad6c37c55598f3a19e748f58475398fda5f6153cb11a4ffde399dc21f96bed56d31", 0x155}, {&(0x7f0000001280)="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", 0x6db}], 0x2}, 0x800) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r5, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000280)="46a3864e29bf22939044d846d352770b", 0x10, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000402d00090027bd700000000001040000000400181e"], 0x18}}, 0x84) msgget$private(0x0, 0x40) 4.455606099s ago: executing program 0 (id=8836): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x3, @loopback}, 0x1c) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x1, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000380)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x500411, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8, 0xffffffff, r6}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = syz_open_dev$swradio(&(0x7f0000000480), 0x1, 0x2) pread64(r9, &(0x7f00000000c0)=""/97, 0x61, 0x5) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5411, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) 3.066644086s ago: executing program 1 (id=8837): fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', 0x0, 0xffffffffffffff9c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = memfd_create(&(0x7f0000000040)='\'\\.\x00', 0x7) prctl$PR_GET_NO_NEW_PRIVS(0x27) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) socket$isdn(0x22, 0x2, 0x25) close_range(r3, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x60000005}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r7 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x100002) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x23, 0x0, "32df3d070384c0f7b586a56c51c022886b66c20cc8a56df0bbafe9914784243744c11f1c4366a36b9a766e53e64c45929b548a97e2486108edd47f378cdbcf4651222184c5f668eaa5772082c6bc81ca"}, 0xd8) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x20, 0x3, 0x375}, &(0x7f0000000140), 0x0) r9 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r11 = syz_io_uring_setup(0x3fef, &(0x7f0000000480)={0x0, 0x2cab, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6(0xa, 0x2, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) ioctl$FS_IOC_SETVERSION(r6, 0x40047602, &(0x7f00000001c0)=0x800) io_uring_enter(r11, 0x4ed9, 0x5a21, 0x8, 0x0, 0x0) ioctl$I2C_SLAVE(r7, 0x703, 0xc) syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) 2.595981562s ago: executing program 0 (id=8838): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xa) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d14, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0xdaac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000004c0), 0x0, &(0x7f00000016c0)="307006fd42fa361d0322d0422a96f816aa80afa2cbde9a87d70b63424a8241a18dc8b8b75332fbb1b1ef7809c5df38768ceff839d68a075d4e8e7d639339e30467468cd215c79dfc26879a23f5e0616c5cee33e120c379ad408bff33d1bf559f90095384fd5403508056945f08a9c4", 0x6f, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) 2.396198195s ago: executing program 2 (id=8839): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xa) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d14, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0xdaac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000004c0), 0x0, &(0x7f00000016c0)="307006fd42fa361d0322d0422a96f816aa80afa2cbde9a87d70b63424a8241a18dc8b8b75332fbb1b1ef7809c5df38768ceff839d68a075d4e8e7d639339e30467468cd215c79dfc26879a23f5e0616c5cee33e120c379ad408bff33d1bf559f90095384fd5403508056945f08a9c4", 0x6f, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 2.252749099s ago: executing program 4 (id=8840): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)="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", 0x155}, {&(0x7f0000001280)="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", 0x6db}], 0x2}, 0x800) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r5, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r5, 0x0, 0xfdef) sendto$inet6(r5, &(0x7f0000000280)="46a3864e29bf22939044d846d352770b", 0x10, 0x0, 0x0, 0x0) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000402d00090027bd700000000001040000000400181e"], 0x18}}, 0x84) msgget$private(0x0, 0x40) 1.912473975s ago: executing program 1 (id=8841): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 1.651094968s ago: executing program 1 (id=8842): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x184, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4080}, 0x4090) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x140) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INIT(r4, &(0x7f0000000100)={0x78}, 0xfeb1) write$UHID_INPUT(r4, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x4) sendto$inet6(r0, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcf}, "60001764f6208597ddfb495ce2991d35dd921f0961f2e361fd56ce4ea0ed1061183367abf7cf06fdbdbb259f886157aa581040e0d2d3bbb8b6b6c5826642d60be82cc8ac126d7c4ff5925663539a116784112039c72c886bf844c814e06b516b80d3a7094c6fa7ea10f2a26488ec5f9c0ca86619a6fe378c895fa8df43d3a83c68587506dea888abf3198e7b684091089e73f2ba8dd3428b58e9fb7778e885ef7c80218b9aea2c2b5d5ed96fc517ab2aeab3e3a41dd4d9b2daf68c0d85c71471938c929a09c493e0a9e503bbfb3ef8"}, 0xd3) poll(&(0x7f0000000080)=[{r0, 0x46a8}], 0x1, 0x400) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/4071, 0xfe7}, {&(0x7f0000001f40)=""/4091, 0xffb}], 0x2}, 0x2) sendmsg$inet(r5, &(0x7f0000001880)={0x0, 0xfffffffffffffc4e, &(0x7f00000018c0), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000020603000000000000000007800800080000000044050005000a00000005000400080000000900020073797a3200000000050001000600000004000780"], 0x48}}, 0x80) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r9, 0x5, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f00000017c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x54, r9, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x60}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x20008011) 1.293654478s ago: executing program 2 (id=8843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x0, 0x2000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}, {'+'}}}}}}, 0x0) 744.07152ms ago: executing program 2 (id=8844): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0xee04c000) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRESHEX=r5, @ANYRESOCT=r3, @ANYBLOB="00ffffffffffff0802110000005050505050506800090025030138022d1a00400b0300000000000000450001001c0000000800060000000404006c00c18d35bf00"/100, @ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x240408c4}, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x4) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) (async) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) socket$inet(0x2, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0xee04c000) (async) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x10) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRESHEX=r5, @ANYRESOCT=r3, @ANYBLOB="00ffffffffffff0802110000005050505050506800090025030138022d1a00400b0300000000000000450001001c0000000800060000000404006c00c18d35bf00"/100, @ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x240408c4}, 0x1000) (async) 548.103987ms ago: executing program 1 (id=8845): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}}, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x101080, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x4000, 0x80000000, 0xfefffffd}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000300)={0x10000008}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e6576653000000000000000000014000100"], 0x104}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x30}}, 0xc010) 513.113802ms ago: executing program 2 (id=8846): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x40010, r0, 0x411df000) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[], 0x40}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = getpid() sched_setattr(r5, 0x0, 0x0) setrlimit(0xf, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="2b72646d61202d6370757365742000006a3844fc26bd7b90af3408ce48174355c84f492b135f17cc77cea685"], 0xe) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x18, 0x80007, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) 427.80812ms ago: executing program 0 (id=8847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x20, 0xe, 0x2, 0x0, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x5, 0x0}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f00000002c0)={0x2, 0x675efacd}, 0x0) write$sysctl(r4, &(0x7f0000000080)='0\x00', 0x2) recvmmsg$unix(r4, &(0x7f00000021c0)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000980)=""/118, 0x76}], 0x3, &(0x7f0000000a40)=[@cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}, {{&(0x7f0000001080), 0x6e, &(0x7f0000002100)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1}}], 0x2, 0x2000, &(0x7f0000002240)) lseek(r4, 0xfffffffffffffffd, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x2c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x57d7, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x2, 0x1, 0x1, 0x7, 0x9, 0x100, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x0, 0x7fff, 0x8000}, 0x10, r1, r2, 0x0, &(0x7f0000000580)=[r0, r0, r0, r4, r0, r0, r0, r0, r0], &(0x7f00000006c0), 0x10, 0x6}, 0x94) 107.719745ms ago: executing program 4 (id=8848): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)="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", 0x155}, {&(0x7f0000001280)="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", 0x6db}], 0x2}, 0x800) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) write$binfmt_aout(r5, 0x0, 0xfdef) sendto$inet6(r5, &(0x7f0000000280)="46a3864e29bf22939044d846d352770b", 0x10, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000402d00090027bd700000000001040000000400181e"], 0x18}}, 0x84) msgget$private(0x0, 0x40) 0s ago: executing program 0 (id=8849): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a431"], 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @remote, 0x0}, &(0x7f0000000100)=0xc) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x1c14, 0x30, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{0x17cc, 0x1, [@m_tunnel_key={0x140, 0xe, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000, 0x8, 0x8, 0x23, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x10001, 0x8, 0x3, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1ff}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x100}]}, {0xa3, 0x6, "9252ee5bc5dcfc5eefa97a14fd58e9b00f21b069f888cd1560ddde832884a8b6a81ce6514da1a581c7b847d84604868eb33c4bedda48139c75f782a1f78031a1dadb0d2fbb49cc2b79739fb8b91b8d633f7f43de7995e5f83093c7c8824bd8c7b66e888cfdb42a94d584ffbe2e289d2d33ef9ab146cec8574db17aa81af4a81ef014c791fe13d42461baea5f12d238538bc6e6f3b16003075eb8571ba3ed72"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0xd4, 0xe, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x9f, 0x6, "86b3bf756046a8af76857a36afb264ee285a7e29bb03e51d4293d76ac08076e8a42d44bbf95056971a98ce1a81dc7f0906f7580554f8013a7b79d6d49612020e009dcecd29d8d75c67bdd3105c124bfe6dffc9d5d44615b5a5c733d092423bddcd4719525fa123b7b1a0f20f0c87a97c032e712ab91b811b5ec2b36834dcb726f97642ea7740d72ee852e7381b388ae8804b6352d3bab6543e9b92"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x168, 0x12, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x7, 0x4, 0x2, 0x7, 0x2}, 0xc}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x1, 0x10001, 0x10000000, 0x5, 0xb}, 0x8}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa}]}, {0xb3, 0x6, "253e47a30e4030598e2494d9c2199e691b2472bf3447fcf1f2f41213777def6efb30239001875bdbc83c3285564a817d95b996aa22fbeaa11f5dbd7f36f48db9e2f1d2c0c650eae086f6024119e4a6cb62042395c4d9fb997b2ea87b3c697bbed3a9e8cc3448b597a4bda33a657c1caa1f2c127c54d5b69ddd564ae68c736253d00c5143b524280e7059beefc12df811ba411abc5d6b2374e3e2627fa96744221840cde42fcadc49145877f9b54509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_skbmod={0x110, 0x2, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x4, 0x0, 0x10000000, 0x9, 0x1467}, 0x7}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="07131367a121"}]}, {0xb5, 0x6, "2dda1fdf04c99f03ef404d48890eaae192fecbed05361be907dc53dc03b7ab5c2be09380a3ba3478ef24c3787cc47b534650a005e15ed1899c2530f53c9bc975e976e9073fd26aaf16389cbd33e0486d4b75026750ad173d5e01d019c01b65edceb1f862462589bf3f4cf6740c3e9dcec48f9bddb98c9ca607f7e2c4c4985982f01a05b2ae0e7386550d760f2f63812e3cc17a6b2cbbf90b632f1aaa70445e2f6735a11f198652cbd528297ae18cec1ed8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xe4, 0x3, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ae36fdef98c2f2baaf1ad53919686741"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x81}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0x0, 0x8000000, 0xffffffff, 0x4}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x62, 0x6, "e21453910d79ff07b2ac082a91cf4758c55cb971338be0ae9e9839c90d4b4571b06e4c46b2f9f04784aae06c54328c75915b7e728caf7a52ec90e87ed9c706b13e28bc7c0ad544d24c81ef89a5b7ab9feaa9fb952354f8ef42c0fad3d74e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xf4, 0x18, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xac, 0x6, "3fdf848a445aac85064a9e9fdf075981c349122c355ddeec6492a6cd6db3e73535a85b3d17ff2f5d8760d505d57ceb45e144d462de19fb30c3b337c4c0ea7e86cc4361d4fbdfba3d987ec361823bc3ef990173452eb0098946eea5a40ced345fbcb1c68bbd343295d71903f6f2fa50b49f7a28eac428a7766aa7c9b57aec16cdc4f6a29c9002cdea6c2d6837a96d58e918addfbbe2fb8454eb8004ee11c1ddba75907c9bb412c3bc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x10f0, 0x1b, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1d, 0x20000000, 0x89, 0x4}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x200, 0x5, 0xff, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x25, 0xffffffffffffffff, 0x1}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x3, 0x4, 0x5, 0x5}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x14, 0x10001, 0x4, 0x1ff, 0x10001}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x8, 0x1, 0xc242}, 0x4, r5}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x74, 0x9, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x32, 0x6, "b6945c3e13b43c0bfdf601807733737d479223e6bdb9f2161ff287906efebea58440f7e83eb74881a1513d9f9cb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x434, 0x1, [@m_tunnel_key={0xcc, 0x12, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x200, 0x5, 0x2, 0x8, 0x8}, 0x1}}]}, {0x7d, 0x6, "1f462d5b4ba8e91cd7617972b73c7ed9680ceb9cbbf8e22290177e71843a2039d3d8205a073b4066e0784dbb2de74ccb946d26f8a05754e450543b9b73e536bc48d2dd94c478eda59fd38527dc6098a0201b551279de57ec49347dbc261707300e209ced4dc12738efd2d4f1aa72f3213552dd41831da6a5eb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ct={0x84, 0x0, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x54, 0x6, "902badcfec78114c545253bf6f4a3ad2572984f69ec0118675c002c85035fb5bd8231a6003cf342edd2f6e8556193eaba945261639c7dcd70de6b2cb7e57169c281dc9369f803549b4d8384c498405c1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x1bc, 0xf, 0x0, 0x0, {{0xf}, {0xac, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x366, 0x4, 0x5, 0x1}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x101, 0x163b, 0x3, 0x6, 0xfffffffe}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1ff}]}, {0xe4, 0x6, "07da46fed89cf170b66d8208e81bae5eef0f62277bf71e3745f9f30895eb37f2b44eee430ce7933e33ec83b3af7d3f57f6f42ae77754d96490371e67160895663945a3d78348a4e9aa2ec45015257cf1aa44cbca7e745b276269ed4fadaea933921df7c79f6e8fe3ecab6bb52064c4aa31a7b02bde10486e84d1d33d70cead32d61ba8c9beda6aea1e79d59ef097d51dbfaf128b9b68bb1b35dc926e0e3132672af58ab3a7c6fb002bf98c92d0b94a6c67eebed2b4562f0f6c7f81e6abe8063e5c241e5450a0f122336bd507c2e12a06d38478261c04b96da5a4a7d2f53b3107"}, {0xc, 0x7, {0xc7aafb3e664f1d30}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x124, 0x15, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x11}]}, {0xe4, 0x6, "603ce2ffc1b0504d2acea871aabf87b69b4ebae6f765f373c3fc59f13efc8283c060604f48d3c8c1683e86e19d236bb69fe3a9040bb63758ca6ea3bdc01b19f10b3aa26f5376cdc665a6ed207c6b839fbbc8e4495af3e5df693f10b49ff6b222e8749d9769ef530d59223d3e3d2be5c4dc9d0e13edcc915747b993ab1a870c6df98114c56278a00016c372a75c6f062c78690d2502c486350c2fb1a075c91dd83a317adc65ae9ef286633e4f15000cd8cee246e0639c62e93222cca264ca5421b9d35716c0006ea136768dcb37352db1c25a2c70626c4d7f1c2a9ad32d038aaf"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1c14}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r5, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', r2, 0x40, 0x7, 0x5, 0x800, {{0x33, 0x4, 0x3, 0x15, 0xcc, 0x66, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0x5f, 0x3, 0x7, [{@broadcast, 0x2}, {@private=0xa010101, 0x30}, {@loopback, 0x6}, {@multicast2, 0xa8e8}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp_addr={0x44, 0x2c, 0xa1, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x7233}, {@empty, 0x5}, {@empty, 0x2}, {@remote, 0xe44}, {@broadcast, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0x7c, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}]}, @timestamp_prespec={0x44, 0x34, 0x92, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x7ff}, {@remote, 0x4}, {@remote, 0x3}, {@multicast1, 0x200}, {@multicast2, 0x7}]}, @end, @generic={0x82, 0xe, "f18fd0bf8602687b46f5492f"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x9}, &(0x7f0000000000)=0x90) socket(0x2b, 0x80801, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5f, 0xfc, 0x70, 0x20, 0x711, 0x210, 0xfdd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0xbe, 0x44, 0x8f, 0xff}}]}}]}}, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000040)=@multiplanar_fd={0x6, 0xa, 0x4, 0x70000, 0x8, {0x77359400}, {0x1, 0x1, 0x4, 0x5, 0x7, 0x7}, 0x9, 0x4, {0x0}, 0x2}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x492, &(0x7f00000000c0)={0x0, 0xe811, 0x3180, 0x2, 0x40024e, 0x0, r8}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4004, @fd=r8, 0x7, 0x0, 0x0, 0x2}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0xfffffffffffffeb3) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r6], 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffc, 0x6, 0x0, 0x3, 0x102d, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xc3], 0xeeee8000, 0x45544}) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = socket(0x10, 0x3, 0x0) write(r15, &(0x7f0000000240)="2600000011003f20000000bf8a9d719797efcee3130000000d39036892f3f77156c2aea30a4b", 0x26) kernel console output (not intermixed with test programs): ult -90 [ 2523.429002][ T715] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2523.465449][T19733] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2523.482893][ T5183] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2523.487619][T19733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2523.516025][T19733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2523.528363][ T5183] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2523.565186][ T5915] usb 5-1: USB disconnect, device number 23 [ 2523.638073][ T715] gspca_spca508: reg_read err -32 [ 2523.654732][ T5896] usb 2-1: USB disconnect, device number 56 [ 2523.661999][ T715] gspca_spca508: reg_read err -71 [ 2523.672869][ T715] gspca_spca508: reg_read err -71 [ 2523.679785][ T715] gspca_spca508: reg_read err -71 [ 2523.686084][ T715] gspca_spca508: reg_read err -71 [ 2523.708853][ T715] gspca_spca508: reg write: error -71 [ 2523.724311][ T715] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 2523.741046][ T715] usb 3-1: USB disconnect, device number 37 [ 2523.783118][T19828] netlink: 'syz.3.8410': attribute type 1 has an invalid length. [ 2523.830605][T19830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8411'. [ 2523.889037][T19828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2523.899605][T19867] fuse: Unknown parameter '' [ 2524.016003][T19861] bond4: (slave veth3): Enslaving as an active interface with a down link [ 2524.068217][T19828] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 2524.077552][T19828] bond4: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 2524.230461][T19901] syzkaller0: entered promiscuous mode [ 2524.236236][T19901] syzkaller0: entered allmulticast mode [ 2524.474398][T19917] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2524.516969][T11342] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 2524.574026][T19917] tipc: Enabled bearer , priority 20 [ 2524.877340][T11342] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2524.885636][T11342] usb 3-1: config 0 has no interface number 0 [ 2524.892926][T11342] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2524.956674][T11342] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2524.983145][T11342] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2525.026875][T11342] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 2525.076294][T11342] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2525.091800][T11342] usb 3-1: Product: syz [ 2525.096171][T11342] usb 3-1: SerialNumber: syz [ 2525.110994][T11342] usb 3-1: config 0 descriptor?? [ 2525.131473][T11342] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 2525.175422][T11342] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input235 [ 2525.330012][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2525.340722][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2525.347960][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2525.355135][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2525.363881][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2525.371334][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2525.378563][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2525.385706][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2525.392875][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2525.400116][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2525.408733][T11342] usb 3-1: USB disconnect, device number 38 [ 2525.414727][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2525.449022][T11342] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2525.484831][T19951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8423'. [ 2525.574721][T19951] batman_adv: batadv0: Removing interface: dummy0 [ 2525.620804][T19965] fuse: Unknown parameter '' [ 2525.942606][T19982] syzkaller0: entered promiscuous mode [ 2525.957470][T19982] syzkaller0: entered allmulticast mode [ 2525.979285][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8432'. [ 2526.043496][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8432'. [ 2526.074212][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8432'. [ 2526.093368][T19997] netlink: del zone limit has 8 unknown bytes [ 2526.806163][T20014] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2526.996804][ T5915] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 2527.150145][ T5915] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 2527.158747][ T5915] usb 4-1: config 0 has no interface number 0 [ 2527.173075][ T5915] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2527.423355][ T5915] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2527.433094][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2527.459618][ T5915] usb 4-1: Product: syz [ 2527.466599][ T5915] usb 4-1: Manufacturer: syz [ 2527.471244][ T5915] usb 4-1: SerialNumber: syz [ 2527.609326][ T5915] usb 4-1: config 0 descriptor?? [ 2528.201721][T11342] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2528.216544][ T5896] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2528.346935][ T5896] usb 3-1: device descriptor read/64, error -71 [ 2528.378773][T11342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2528.390113][T11342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2528.420816][T11342] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2528.450698][T11342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.469525][T11342] usb 1-1: config 0 descriptor?? [ 2528.587206][ T5896] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2528.647265][T20060] loop9: detected capacity change from 0 to 7 [ 2528.656924][T17746] Dev loop9: unable to read RDB block 7 [ 2528.662671][T17746] loop9: unable to read partition table [ 2528.669808][T17746] loop9: partition table beyond EOD, truncated [ 2528.681722][T20060] Dev loop9: unable to read RDB block 7 [ 2528.692767][T20060] loop9: unable to read partition table [ 2528.699345][T20060] loop9: partition table beyond EOD, truncated [ 2528.719714][T20060] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2528.727074][ T5896] usb 3-1: device descriptor read/64, error -71 [ 2528.836953][ T5896] usb usb3-port1: attempt power cycle [ 2528.912455][T20071] netlink: 'syz.1.8451': attribute type 1 has an invalid length. [ 2528.995183][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.001838][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.166056][T20077] gretap1: entered allmulticast mode [ 2529.188848][T20077] bond2: (slave gretap1): making interface the new active one [ 2529.201635][T20077] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 2529.237981][ T5896] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2529.257128][ T5896] usb 3-1: device descriptor read/8, error -71 [ 2529.294788][T11342] hid-led 0003:27B8:01ED.00D1: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 2529.357961][T20120] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8454'. [ 2529.371593][T20120] FAULT_INJECTION: forcing a failure. [ 2529.371593][T20120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2529.371989][T11342] hid-led 0003:27B8:01ED.00D1: ThingM blink(1) initialized [ 2529.385533][T20120] CPU: 1 UID: 0 PID: 20120 Comm: syz.4.8454 Not tainted syzkaller #0 PREEMPT(full) [ 2529.385557][T20120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2529.385567][T20120] Call Trace: [ 2529.385573][T20120] [ 2529.385579][T20120] dump_stack_lvl+0x189/0x250 [ 2529.385604][T20120] ? __pfx____ratelimit+0x10/0x10 [ 2529.385631][T20120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2529.385652][T20120] ? __pfx__printk+0x10/0x10 [ 2529.385671][T20120] ? __might_fault+0xb0/0x130 [ 2529.385700][T20120] should_fail_ex+0x414/0x560 [ 2529.385731][T20120] _copy_from_user+0x2d/0xb0 [ 2529.385755][T20120] get_compat_msghdr+0xad/0x4a0 [ 2529.385785][T20120] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2529.385822][T20120] ___sys_sendmsg+0x193/0x2a0 [ 2529.385842][T20120] ? __pfx____sys_sendmsg+0x10/0x10 [ 2529.385869][T20120] ? __lock_acquire+0xab9/0xd20 [ 2529.385919][T20120] ? __fget_files+0x2a/0x420 [ 2529.385939][T20120] ? __fget_files+0x3a0/0x420 [ 2529.385969][T20120] __sys_sendmmsg+0x28e/0x430 [ 2529.385991][T20120] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2529.386006][T20120] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2529.386048][T20120] ? ksys_write+0x22a/0x250 [ 2529.386066][T20120] ? exc_page_fault+0x82/0x100 [ 2529.386084][T20120] ? __pfx_ksys_write+0x10/0x10 [ 2529.386109][T20120] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2529.386137][T20120] __do_fast_syscall_32+0xb6/0x2b0 [ 2529.386156][T20120] ? lockdep_hardirqs_on+0x9c/0x150 [ 2529.386177][T20120] do_fast_syscall_32+0x34/0x80 [ 2529.386196][T20120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2529.386217][T20120] RIP: 0023:0xf708d539 [ 2529.386234][T20120] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2529.386249][T20120] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2529.386268][T20120] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 2529.386280][T20120] RDX: 0000000000000001 RSI: 0000000004008810 RDI: 0000000000000000 [ 2529.386291][T20120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2529.386302][T20120] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2529.386313][T20120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2529.386340][T20120] [ 2529.504442][ T5896] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2529.727255][ T5915] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 2529.759866][ T5915] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 2529.788705][ T5915] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 2529.805163][T11342] usb 1-1: USB disconnect, device number 27 [ 2529.811862][ T5915] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 2529.839877][ T5915] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2529.854345][ T5915] usb 4-1: USB disconnect, device number 60 [ 2529.886131][ T5915] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2529.933749][ T5915] keyspan 4-1:0.133: device disconnected [ 2529.967621][ T5896] usb 3-1: device descriptor read/8, error -71 [ 2530.081481][ T5896] usb usb3-port1: unable to enumerate USB device [ 2530.724999][T11342] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2530.820310][T20179] wg1: left promiscuous mode [ 2530.886656][T11342] usb 1-1: device descriptor read/64, error -71 [ 2530.887510][T20179] batadv_slave_0: left promiscuous mode [ 2530.964851][T20179] tipc: Resetting bearer [ 2530.976917][T20179] tipc: Resetting bearer [ 2531.126666][T11342] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2531.135412][T20179] syzkaller0: left promiscuous mode [ 2531.251017][T25863] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2531.287638][T25863] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2531.296666][T11342] usb 1-1: device descriptor read/64, error -71 [ 2531.297551][T25863] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2531.340032][T25863] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2531.366984][ T5896] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2531.420829][T11342] usb usb1-port1: attempt power cycle [ 2531.473904][T20208] FAULT_INJECTION: forcing a failure. [ 2531.473904][T20208] name failslab, interval 1, probability 0, space 0, times 0 [ 2531.516547][T20208] CPU: 0 UID: 0 PID: 20208 Comm: syz.1.8463 Not tainted syzkaller #0 PREEMPT(full) [ 2531.516575][T20208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2531.516588][T20208] Call Trace: [ 2531.516595][T20208] [ 2531.516605][T20208] dump_stack_lvl+0x189/0x250 [ 2531.516630][T20208] ? __pfx____ratelimit+0x10/0x10 [ 2531.516657][T20208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2531.516675][T20208] ? __pfx__printk+0x10/0x10 [ 2531.516698][T20208] ? __pfx___might_resched+0x10/0x10 [ 2531.516720][T20208] ? fs_reclaim_acquire+0x7d/0x100 [ 2531.516745][T20208] should_fail_ex+0x414/0x560 [ 2531.516772][T20208] should_failslab+0xa8/0x100 [ 2531.516796][T20208] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2531.516811][T20208] ? security_inode_alloc+0x39/0x330 [ 2531.516837][T20208] security_inode_alloc+0x39/0x330 [ 2531.516859][T20208] inode_init_always_gfp+0x9ed/0xdc0 [ 2531.516887][T20208] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2531.516908][T20208] alloc_inode+0x82/0x1b0 [ 2531.516930][T20208] __sock_create+0x12d/0x9f0 [ 2531.516962][T20208] mptcp_subflow_create_socket+0xf0/0x7d0 [ 2531.516990][T20208] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 2531.517013][T20208] ? tomoyo_check_inet_address+0x275/0x8c0 [ 2531.517038][T20208] __mptcp_nmpc_sk+0x148/0x760 [ 2531.517063][T20208] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 2531.517084][T20208] ? look_up_lock_class+0x74/0x170 [ 2531.517105][T20208] mptcp_connect+0x71/0x830 [ 2531.517122][T20208] __inet_stream_connect+0x2ae/0xe70 [ 2531.517158][T20208] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2531.517181][T20208] ? __pfx___inet_stream_connect+0x10/0x10 [ 2531.517205][T20208] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2531.517228][T20208] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2531.517262][T20208] inet_stream_connect+0x66/0xa0 [ 2531.517287][T20208] __sys_connect+0x316/0x440 [ 2531.517307][T20208] ? __fget_files+0x3a0/0x420 [ 2531.517328][T20208] ? __pfx___sys_connect+0x10/0x10 [ 2531.517369][T20208] ? __pfx_ksys_write+0x10/0x10 [ 2531.517396][T20208] __ia32_sys_connect+0x7a/0x90 [ 2531.517419][T20208] __do_fast_syscall_32+0xb6/0x2b0 [ 2531.517436][T20208] ? lockdep_hardirqs_on+0x9c/0x150 [ 2531.517456][T20208] do_fast_syscall_32+0x34/0x80 [ 2531.517473][T20208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2531.517494][T20208] RIP: 0023:0xf7f76539 [ 2531.517510][T20208] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2531.517522][T20208] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 2531.517534][T20208] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2531.517541][T20208] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2531.517547][T20208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2531.517553][T20208] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2531.517559][T20208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2531.517575][T20208] [ 2531.517629][T20208] socket: no more sockets [ 2531.705727][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2531.889707][ T5896] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 2531.906539][T11342] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2531.915005][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2531.927259][T11342] usb 1-1: device descriptor read/8, error -71 [ 2531.943906][ T5896] usb 3-1: config 0 descriptor?? [ 2532.166545][T11342] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2532.189445][T11342] usb 1-1: device descriptor read/8, error -71 [ 2532.226781][T31355] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2532.264807][T20230] syzkaller0: entered promiscuous mode [ 2532.276721][T17165] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 2532.300210][T11342] usb usb1-port1: unable to enumerate USB device [ 2532.366944][ T5896] cypress 0003:04B4:DE64.00D2: item fetching failed at offset 3/7 [ 2532.375438][ T5896] cypress 0003:04B4:DE64.00D2: parse failed [ 2532.381889][ T5896] cypress 0003:04B4:DE64.00D2: probe with driver cypress failed with error -22 [ 2532.397797][T31355] usb 2-1: Using ep0 maxpacket: 16 [ 2532.404515][T31355] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 2532.413381][T31355] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 2532.421816][T31355] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2532.432214][T31355] usb 2-1: config 0 has no interface number 0 [ 2532.438464][T31355] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 255, changing to 11 [ 2532.450838][T31355] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 59391, setting to 1024 [ 2532.462178][T31355] usb 2-1: config 0 interface 104 has no altsetting 1 [ 2532.469601][T17165] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 2532.478047][T17165] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 2532.489599][T17165] usb 4-1: config 0 has no interface number 0 [ 2532.495792][T17165] usb 4-1: config 0 interface 46 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2532.505760][T31355] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 2532.514899][T17165] usb 4-1: config 0 interface 46 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2532.528620][T31355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2532.537271][T31355] usb 2-1: Product: syz [ 2532.541431][T31355] usb 2-1: Manufacturer: syz [ 2532.546001][T31355] usb 2-1: SerialNumber: syz [ 2532.550650][T17165] usb 4-1: config 0 interface 46 has no altsetting 0 [ 2532.561895][T31355] usb 2-1: config 0 descriptor?? [ 2532.572265][T17165] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2532.578020][T20196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2532.585563][T17165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2532.592489][T20196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2532.600544][T17165] usb 4-1: Product: syz [ 2532.609921][T11342] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2532.620233][T17165] usb 4-1: Manufacturer: syz [ 2532.620923][ T5896] usb 3-1: USB disconnect, device number 43 [ 2532.624900][T17165] usb 4-1: SerialNumber: syz [ 2532.650875][T17165] usb 4-1: config 0 descriptor?? [ 2532.661264][T17165] ums-karma 4-1:0.46: USB Mass Storage device detected [ 2532.796850][T11342] usb 5-1: Using ep0 maxpacket: 16 [ 2532.804193][T11342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2532.816279][T11342] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2532.825448][T11342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2532.834626][T11342] usb 5-1: Product: syz [ 2532.839817][T11342] usb 5-1: Manufacturer: syz [ 2532.844457][T11342] usb 5-1: SerialNumber: syz [ 2532.851702][T11342] usb 5-1: config 0 descriptor?? [ 2532.861836][T11342] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2532.871603][T11342] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 2532.948731][T20266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2532.957813][T20266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2533.042830][ T5915] usb 4-1: USB disconnect, device number 61 [ 2533.126948][T11342] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2533.204682][T11342] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2533.212897][T11342] em28xx 5-1:0.0: board has no eeprom [ 2533.271023][T20232] em28xx 5-1:0.0: writing to i2c device at 0xc failed (error=-5) [ 2533.286937][T11342] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2533.295030][T11342] em28xx 5-1:0.0: dvb set to bulk mode. [ 2533.300762][T17165] em28xx 5-1:0.0: Binding DVB extension [ 2533.319696][T11342] usb 5-1: USB disconnect, device number 24 [ 2533.334377][T11342] em28xx 5-1:0.0: Disconnecting em28xx [ 2533.352783][T17165] em28xx 5-1:0.0: Registering input extension [ 2533.359549][T11342] em28xx 5-1:0.0: Closing input extension [ 2533.394104][T11342] em28xx 5-1:0.0: Freeing device [ 2533.939911][T20329] usb usb8: usbfs: process 20329 (syz.4.8476) did not claim interface 0 before use [ 2534.036631][ T5915] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2534.362191][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2534.378992][ T5915] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2534.406564][T11342] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2534.415807][ T5915] usb 1-1: can't read configurations, error -71 [ 2534.596439][T11342] usb 3-1: Using ep0 maxpacket: 8 [ 2534.632029][T11342] usb 3-1: config 2 interface 0 has no altsetting 0 [ 2534.647195][T11342] usb 3-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 2534.661705][T11342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2534.684470][T11342] usb 3-1: Product: syz [ 2534.739459][T11342] usb 3-1: Manufacturer: syz [ 2534.753882][T11342] usb 3-1: SerialNumber: syz [ 2534.991017][T31355] asix 2-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2535.026454][T11342] usb 3-1: USB disconnect, device number 44 [ 2535.050622][T31355] asix 2-1:0.104: probe with driver asix failed with error -71 [ 2535.121307][T31355] usb 2-1: USB disconnect, device number 57 [ 2535.763816][T20401] FAULT_INJECTION: forcing a failure. [ 2535.763816][T20401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2535.810534][T20401] CPU: 0 UID: 0 PID: 20401 Comm: syz.0.8485 Not tainted syzkaller #0 PREEMPT(full) [ 2535.810559][T20401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2535.810570][T20401] Call Trace: [ 2535.810578][T20401] [ 2535.810587][T20401] dump_stack_lvl+0x189/0x250 [ 2535.810612][T20401] ? __pfx____ratelimit+0x10/0x10 [ 2535.810639][T20401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2535.810665][T20401] ? __pfx__printk+0x10/0x10 [ 2535.810683][T20401] ? __might_fault+0xb0/0x130 [ 2535.810712][T20401] should_fail_ex+0x414/0x560 [ 2535.810742][T20401] _copy_from_user+0x2d/0xb0 [ 2535.810767][T20401] io_msg_copy_hdr+0x331/0x870 [ 2535.810796][T20401] ? __pfx_io_msg_copy_hdr+0x10/0x10 [ 2535.810837][T20401] io_sendmsg_setup+0x115/0x520 [ 2535.810856][T20401] ? trace_kmalloc+0x1f/0xd0 [ 2535.810871][T20401] ? __kmalloc_noprof+0x432/0x7f0 [ 2535.810887][T20401] ? io_cache_alloc_new+0x40/0x100 [ 2535.810910][T20401] ? __pfx_io_sendmsg_setup+0x10/0x10 [ 2535.810931][T20401] ? io_cache_alloc_new+0x90/0x100 [ 2535.810973][T20401] io_submit_sqes+0x935/0x1e60 [ 2535.811017][T20401] __se_sys_io_uring_enter+0x2df/0x2b20 [ 2535.811053][T20401] ? ksys_write+0x1cb/0x250 [ 2535.811076][T20401] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2535.811095][T20401] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2535.811114][T20401] ? __pfx_vfs_write+0x10/0x10 [ 2535.811135][T20401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2535.811157][T20401] ? __fget_files+0x3a0/0x420 [ 2535.811186][T20401] ? fput+0xa0/0xd0 [ 2535.811209][T20401] ? ksys_write+0x22a/0x250 [ 2535.811227][T20401] ? exc_page_fault+0x82/0x100 [ 2535.811246][T20401] ? __pfx_ksys_write+0x10/0x10 [ 2535.811269][T20401] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2535.811290][T20401] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2535.811312][T20401] __do_fast_syscall_32+0xb6/0x2b0 [ 2535.811333][T20401] ? lockdep_hardirqs_on+0x9c/0x150 [ 2535.811355][T20401] do_fast_syscall_32+0x34/0x80 [ 2535.811375][T20401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2535.811397][T20401] RIP: 0023:0xf70ed539 [ 2535.811414][T20401] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2535.811431][T20401] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2535.811451][T20401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000092 [ 2535.811465][T20401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2535.811476][T20401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2535.811487][T20401] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2535.811498][T20401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2535.811544][T20401] [ 2536.285981][T20412] tipc: Enabled bearer , priority 0 [ 2536.455972][T20412] tipc: Resetting bearer [ 2536.591770][T20411] tipc: Disabling bearer [ 2537.845138][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8494'. [ 2537.856299][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8494'. [ 2537.867822][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8494'. [ 2538.157173][ T5915] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2538.294099][T20451] netlink: 'syz.4.8497': attribute type 10 has an invalid length. [ 2538.305691][T20451] team0: Port device dummy0 added [ 2538.313768][T20451] netlink: 'syz.4.8497': attribute type 10 has an invalid length. [ 2538.353044][T20451] team0: Port device dummy0 removed [ 2538.363461][T20454] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2538.379976][T20451] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2538.395172][ T5915] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 2538.405525][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2538.415761][ T5915] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2538.448818][ T5198] Dev loop6: unable to read RDB block 1 [ 2538.454570][ T5198] loop6: unable to read partition table [ 2538.466692][ T5198] loop6: partition table beyond EOD, truncated [ 2538.482171][ T5915] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 2538.509013][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2538.527056][ T5915] usb 4-1: Product: syz [ 2538.537655][ T5915] usb 4-1: Manufacturer: syz [ 2538.545783][ T5915] usb 4-1: SerialNumber: syz [ 2538.561160][ T5915] usb 4-1: config 0 descriptor?? [ 2538.571673][T20438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2538.735127][T20465] FAULT_INJECTION: forcing a failure. [ 2538.735127][T20465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2538.766906][T20465] CPU: 0 UID: 0 PID: 20465 Comm: syz.4.8500 Not tainted syzkaller #0 PREEMPT(full) [ 2538.766932][T20465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2538.766942][T20465] Call Trace: [ 2538.766950][T20465] [ 2538.766958][T20465] dump_stack_lvl+0x189/0x250 [ 2538.766984][T20465] ? __pfx____ratelimit+0x10/0x10 [ 2538.767009][T20465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2538.767026][T20465] ? __pfx__printk+0x10/0x10 [ 2538.767043][T20465] ? __might_fault+0xb0/0x130 [ 2538.767074][T20465] should_fail_ex+0x414/0x560 [ 2538.767106][T20465] _copy_from_user+0x2d/0xb0 [ 2538.767129][T20465] kstrtouint_from_user+0xc4/0x170 [ 2538.767150][T20465] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2538.767186][T20465] proc_fail_nth_write+0x88/0x200 [ 2538.767212][T20465] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2538.767243][T20465] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2538.767270][T20465] vfs_write+0x27e/0xb30 [ 2538.767295][T20465] ? __pfx_vfs_write+0x10/0x10 [ 2538.767315][T20465] ? __fget_files+0x2a/0x420 [ 2538.767340][T20465] ? __fget_files+0x3a0/0x420 [ 2538.767360][T20465] ? __fget_files+0x2a/0x420 [ 2538.767387][T20465] ksys_write+0x145/0x250 [ 2538.767405][T20465] ? exc_page_fault+0x82/0x100 [ 2538.767423][T20465] ? __pfx_ksys_write+0x10/0x10 [ 2538.767454][T20465] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2538.767474][T20465] ? lockdep_hardirqs_on+0x9c/0x150 [ 2538.767494][T20465] __do_fast_syscall_32+0xb6/0x2b0 [ 2538.767513][T20465] ? lockdep_hardirqs_on+0x9c/0x150 [ 2538.767534][T20465] do_fast_syscall_32+0x34/0x80 [ 2538.767552][T20465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2538.767571][T20465] RIP: 0023:0xf708d539 [ 2538.767587][T20465] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2538.767602][T20465] RSP: 002b:00000000f547d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2538.767620][T20465] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d620 [ 2538.767632][T20465] RDX: 0000000000000001 RSI: 00000000f7425ff4 RDI: 0000000000000000 [ 2538.767643][T20465] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2538.767652][T20465] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2538.767663][T20465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2538.767691][T20465] [ 2539.350604][T20474] tipc: Enabled bearer , priority 0 [ 2539.362866][T20474] tipc: Resetting bearer [ 2539.368807][ T5831] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2539.432295][T20473] tipc: Disabling bearer [ 2539.747457][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 2539.755159][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2539.765382][T20483] program syz.0.8504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2539.811363][ T5831] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2539.853562][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2539.870423][ T5831] usb 2-1: Product: syz [ 2539.885950][ T5831] usb 2-1: Manufacturer: syz [ 2539.894893][ T5831] usb 2-1: SerialNumber: syz [ 2539.917596][ T5831] usb 2-1: config 0 descriptor?? [ 2539.936288][ T5831] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2539.946816][ T5831] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 2540.290452][T11342] usb 4-1: USB disconnect, device number 62 [ 2540.552929][ T5831] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2541.131580][T25886] wlan1: Trigger new scan to find an IBSS to join [ 2541.204212][ T5831] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2541.231695][ T5831] em28xx 2-1:0.0: board has no eeprom [ 2541.616505][ T5831] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2541.632844][ T5831] em28xx 2-1:0.0: dvb set to bulk mode. [ 2541.673977][T31355] em28xx 2-1:0.0: Binding DVB extension [ 2541.701861][ T5831] usb 2-1: USB disconnect, device number 58 [ 2541.721662][ T5831] em28xx 2-1:0.0: Disconnecting em28xx [ 2541.757312][T31355] em28xx 2-1:0.0: Registering input extension [ 2541.767317][ T5831] em28xx 2-1:0.0: Closing input extension [ 2541.908887][ T5831] em28xx 2-1:0.0: Freeing device [ 2541.959969][T20561] tipc: Enabled bearer , priority 0 [ 2541.966459][T31355] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2541.980834][T20561] tipc: Resetting bearer [ 2542.031861][T20560] tipc: Disabling bearer [ 2542.159173][T31355] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 2542.168803][T31355] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2542.176508][ T5925] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2542.193478][T31355] usb 5-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 2542.262379][T31355] usb 5-1: config 220 has no interface number 2 [ 2542.269400][T31355] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2542.312149][T31355] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2542.357609][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 2542.369171][T31355] usb 5-1: config 220 interface 0 has no altsetting 0 [ 2542.370958][ T5925] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2542.375974][T31355] usb 5-1: config 220 interface 76 has no altsetting 0 [ 2542.376002][T31355] usb 5-1: config 220 interface 1 has no altsetting 0 [ 2542.430161][T31355] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2542.458276][T31355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2542.469948][T31355] usb 5-1: Product: syz [ 2542.474157][T31355] usb 5-1: Manufacturer: syz [ 2542.481811][T31355] usb 5-1: SerialNumber: syz [ 2542.497495][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2542.532292][ T5925] usb 4-1: Product: syz [ 2542.545823][ T5925] usb 4-1: Manufacturer: syz [ 2542.580716][T20586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8521'. [ 2542.607849][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8522'. [ 2542.617205][ T5925] usb 4-1: SerialNumber: syz [ 2542.641802][T20586] debugfs: 'netdev:nicvf0' already exists in 'phy153' [ 2542.690197][ T5925] usb 4-1: config 0 descriptor?? [ 2542.767211][ T5925] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2543.003235][T20602] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8527'. [ 2543.981855][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8515'. [ 2544.078854][T20621] netlink: 'syz.2.8533': attribute type 3 has an invalid length. [ 2544.088182][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8533'. [ 2544.226717][ T5925] gspca_sonixj: reg_w1 err -110 [ 2544.306551][ T5925] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 2544.597469][T20627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8535'. [ 2544.916945][ T12] wlan1: Trigger new scan to find an IBSS to join [ 2544.947452][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2545.118376][ T5831] usb 4-1: USB disconnect, device number 63 [ 2545.210466][T31355] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2545.270674][T31355] uvcvideo 5-1:220.0: No valid video chain found. [ 2545.285413][T31355] usb 5-1: selecting invalid altsetting 0 [ 2545.356853][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2545.380176][T31355] usb 5-1: selecting invalid altsetting 0 [ 2545.388634][ T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 2545.418937][T31355] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 2545.469492][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2545.508767][T31355] usb 5-1: USB disconnect, device number 25 [ 2545.515582][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2545.589831][ T9] usb 3-1: Product: syz [ 2545.594039][ T9] usb 3-1: Manufacturer: syz [ 2545.625948][ T9] usb 3-1: SerialNumber: syz [ 2545.644618][ T9] usb 3-1: config 0 descriptor?? [ 2545.673502][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2545.700906][ T9] usb 3-1: setting power ON [ 2545.721535][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 2545.765955][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2545.823974][T14156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2546.027886][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2546.230031][ T9] usb 3-1: media controller created [ 2546.290387][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2546.294158][T20694] FAULT_INJECTION: forcing a failure. [ 2546.294158][T20694] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2546.340452][ T9] usb 3-1: selecting invalid altsetting 6 [ 2546.341199][T20694] CPU: 1 UID: 0 PID: 20694 Comm: syz.4.8543 Not tainted syzkaller #0 PREEMPT(full) [ 2546.341223][T20694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2546.341235][T20694] Call Trace: [ 2546.341243][T20694] [ 2546.341251][T20694] dump_stack_lvl+0x189/0x250 [ 2546.341277][T20694] ? __pfx____ratelimit+0x10/0x10 [ 2546.341304][T20694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2546.341322][T20694] ? __pfx__printk+0x10/0x10 [ 2546.341347][T20694] ? __might_fault+0xb0/0x130 [ 2546.341369][T20694] should_fail_ex+0x414/0x560 [ 2546.341400][T20694] get_futex_key+0xffc/0x1660 [ 2546.341417][T20694] ? __lock_acquire+0xab9/0xd20 [ 2546.341449][T20694] ? __pfx_get_futex_key+0x10/0x10 [ 2546.341478][T20694] futex_wake+0xf8/0x560 [ 2546.341499][T20694] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2546.341529][T20694] ? __pfx_futex_wake+0x10/0x10 [ 2546.341561][T20694] ? ksys_write+0x1cb/0x250 [ 2546.341584][T20694] do_futex+0x395/0x420 [ 2546.341603][T20694] ? __pfx_vfs_write+0x10/0x10 [ 2546.341624][T20694] ? __pfx_do_futex+0x10/0x10 [ 2546.341650][T20694] __se_sys_futex_time32+0x360/0x3e0 [ 2546.341679][T20694] ? fput+0xa0/0xd0 [ 2546.341704][T20694] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 2546.341726][T20694] ? __pfx_ksys_write+0x10/0x10 [ 2546.341747][T20694] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2546.341767][T20694] ? __ia32_sys_futex_time32+0x21/0xf0 [ 2546.341791][T20694] __do_fast_syscall_32+0xb6/0x2b0 [ 2546.341811][T20694] ? lockdep_hardirqs_on+0x9c/0x150 [ 2546.341833][T20694] do_fast_syscall_32+0x34/0x80 [ 2546.341851][T20694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2546.341871][T20694] RIP: 0023:0xf708d539 [ 2546.341887][T20694] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2546.341903][T20694] RSP: 002b:00000000f543b55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 2546.341923][T20694] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000001 [ 2546.341936][T20694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2546.341947][T20694] RBP: 00000000fffffffc R08: 0000000000000000 R09: 0000000000000000 [ 2546.341957][T20694] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2546.341968][T20694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2546.341996][T20694] [ 2546.804470][ T9] usb 3-1: digital interface selection failed (-22) [ 2546.811470][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2546.823500][ T9] usb 3-1: setting power OFF [ 2546.828379][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 2546.834405][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2546.872191][T20700] input: syz1 as /devices/virtual/input/input239 [ 2546.923342][ T9] (NULL device *): no alternate interface [ 2547.063914][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2547.938370][ T5925] usb 3-1: USB disconnect, device number 45 [ 2548.066469][ T5915] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2548.343228][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 2548.371156][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2548.379391][ T5915] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 2548.393120][ T5915] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2548.402302][ T5915] usb 5-1: can't read configurations, error -71 [ 2548.463043][T20763] program syz.2.8555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2548.703585][T20763] loop8: detected capacity change from 0 to 8 [ 2548.738322][T20763] Dev loop8: unable to read RDB block 8 [ 2548.764095][T20763] loop8: unable to read partition table [ 2548.771314][T20763] loop8: partition table beyond EOD, truncated [ 2548.778210][T20763] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 2548.879559][T20769] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8558'. [ 2548.888827][T20769] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2549.089222][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8559'. [ 2551.353340][T20815] FAULT_INJECTION: forcing a failure. [ 2551.353340][T20815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2551.426562][T20815] CPU: 0 UID: 0 PID: 20815 Comm: syz.2.8568 Not tainted syzkaller #0 PREEMPT(full) [ 2551.426587][T20815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2551.426598][T20815] Call Trace: [ 2551.426606][T20815] [ 2551.426616][T20815] dump_stack_lvl+0x189/0x250 [ 2551.426642][T20815] ? __pfx____ratelimit+0x10/0x10 [ 2551.426669][T20815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2551.426688][T20815] ? __pfx__printk+0x10/0x10 [ 2551.426719][T20815] should_fail_ex+0x414/0x560 [ 2551.426751][T20815] _copy_to_user+0x31/0xb0 [ 2551.426777][T20815] simple_read_from_buffer+0xe1/0x170 [ 2551.426804][T20815] proc_fail_nth_read+0x1b3/0x220 [ 2551.426833][T20815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2551.426862][T20815] ? rw_verify_area+0x2a6/0x4d0 [ 2551.426880][T20815] ? __lock_acquire+0xab9/0xd20 [ 2551.426900][T20815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2551.426928][T20815] vfs_read+0x200/0xa30 [ 2551.426947][T20815] ? fdget_pos+0x247/0x320 [ 2551.426970][T20815] ? __pfx___mutex_lock+0x10/0x10 [ 2551.426990][T20815] ? __pfx_vfs_read+0x10/0x10 [ 2551.427010][T20815] ? __fget_files+0x2a/0x420 [ 2551.427036][T20815] ? __fget_files+0x3a0/0x420 [ 2551.427056][T20815] ? __fget_files+0x2a/0x420 [ 2551.427085][T20815] ksys_read+0x145/0x250 [ 2551.427103][T20815] ? exc_page_fault+0x82/0x100 [ 2551.427130][T20815] ? __pfx_ksys_read+0x10/0x10 [ 2551.427156][T20815] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2551.427176][T20815] ? lockdep_hardirqs_on+0x9c/0x150 [ 2551.427199][T20815] __do_fast_syscall_32+0xb6/0x2b0 [ 2551.427219][T20815] ? lockdep_hardirqs_on+0x9c/0x150 [ 2551.427240][T20815] do_fast_syscall_32+0x34/0x80 [ 2551.427260][T20815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2551.427281][T20815] RIP: 0023:0xf7f75539 [ 2551.427298][T20815] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2551.427313][T20815] RSP: 002b:00000000f5466590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2551.427333][T20815] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5466620 [ 2551.427347][T20815] RDX: 000000000000000f RSI: 00000000f7405ff4 RDI: 0000000000000000 [ 2551.427358][T20815] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2551.427368][T20815] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2551.427380][T20815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2551.427408][T20815] [ 2551.736530][ T5915] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2551.896563][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 2552.017768][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2552.017784][ T30] audit: type=1326 audit(1760366679.788:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20821 comm="syz.2.8571" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f75539 code=0x0 [ 2552.045411][ C1] vkms_vblank_simulate: vblank timer overrun [ 2552.056144][ T5915] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 2552.169736][T20829] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 2552.176380][T20829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2552.196522][ T5925] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 2552.259305][T20829] vhci_hcd vhci_hcd.0: Device attached [ 2552.348463][ T5915] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2552.361237][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2552.381599][ T5915] usb 1-1: Product: syz [ 2552.387058][ T5915] usb 1-1: Manufacturer: syz [ 2552.393259][ T5915] usb 1-1: SerialNumber: syz [ 2552.405099][ T5915] usb 1-1: config 0 descriptor?? [ 2552.484066][ T5915] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2552.497558][ T5925] usb 5-1: device descriptor read/64, error -71 [ 2552.506719][ T5831] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 2552.506785][ T5915] usb 1-1: setting power ON [ 2552.543260][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 2552.599161][ T30] audit: type=1326 audit(1760366680.368:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.1.8573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 2552.635454][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2552.646986][ T30] audit: type=1326 audit(1760366680.368:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.1.8573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 2552.671820][ T5915] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2552.689878][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2552.713257][ T5915] usb 1-1: media controller created [ 2552.734063][ T30] audit: type=1326 audit(1760366680.368:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.1.8573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 2552.756696][ T5925] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 2552.793623][T20830] vhci_hcd: connection reset by peer [ 2552.802657][ T30] audit: type=1326 audit(1760366680.368:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.1.8573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 2552.832094][T24022] vhci_hcd: stop threads [ 2552.837131][T24022] vhci_hcd: release socket [ 2552.847303][ T30] audit: type=1326 audit(1760366680.388:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.1.8573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 2552.851231][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2552.870544][T24022] vhci_hcd: disconnect device [ 2552.883825][ T9] usb 4-1: device descriptor read/64, error -71 [ 2552.896522][ T5925] usb 5-1: device descriptor read/64, error -71 [ 2552.903664][ T30] audit: type=1326 audit(1760366680.388:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.1.8573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 2552.925842][ C1] vkms_vblank_simulate: vblank timer overrun [ 2552.933861][ T5915] usb 1-1: selecting invalid altsetting 6 [ 2552.945556][ T5915] usb 1-1: digital interface selection failed (-22) [ 2552.954303][ T5915] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2552.964351][ T30] audit: type=1326 audit(1760366680.388:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.1.8573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 2552.987341][ T30] audit: type=1326 audit(1760366680.388:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.1.8573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 2552.987491][ T5915] usb 1-1: setting power OFF [ 2553.009592][ C1] vkms_vblank_simulate: vblank timer overrun [ 2553.023413][ T5925] usb usb5-port1: attempt power cycle [ 2553.026853][T31355] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 2553.039969][ T30] audit: type=1326 audit(1760366680.388:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.1.8573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 2553.061985][ C1] vkms_vblank_simulate: vblank timer overrun [ 2553.068705][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 2553.074600][ T5915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2553.084578][ T5915] (NULL device *): no alternate interface [ 2553.159702][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2553.181547][ T5915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2553.346663][ T9] usb 4-1: device descriptor read/64, error -71 [ 2553.366898][ T5925] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 2553.388382][ T5925] usb 5-1: device descriptor read/8, error -71 [ 2553.477012][ T9] usb usb4-port1: attempt power cycle [ 2553.676542][ T5925] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 2553.698213][ T5925] usb 5-1: device descriptor read/8, error -71 [ 2553.806945][ T5925] usb usb5-port1: unable to enumerate USB device [ 2553.896455][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2553.917087][ T9] usb 4-1: device descriptor read/8, error -71 [ 2554.156571][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2554.177317][ T9] usb 4-1: device descriptor read/8, error -71 [ 2554.289222][ T9] usb usb4-port1: unable to enumerate USB device [ 2554.303486][T17165] usb 1-1: USB disconnect, device number 34 [ 2554.577380][T20898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8575'. [ 2554.916507][ T5925] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2555.046539][ T5925] usb 3-1: device descriptor read/64, error -71 [ 2555.458490][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8581'. [ 2555.557547][ T5925] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2555.709407][ T5925] usb 3-1: device descriptor read/64, error -71 [ 2555.964042][ T5925] usb usb3-port1: attempt power cycle [ 2556.296504][T31355] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2556.326568][ T5925] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2556.361961][ T5925] usb 3-1: device descriptor read/8, error -71 [ 2556.457128][T31355] usb 4-1: Using ep0 maxpacket: 32 [ 2556.465249][T31355] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2556.474250][T31355] usb 4-1: config 0 has no interface number 0 [ 2556.484458][T31355] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2556.494341][T31355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2556.503041][T31355] usb 4-1: Product: syz [ 2556.512951][T31355] usb 4-1: Manufacturer: syz [ 2556.522761][T31355] usb 4-1: SerialNumber: syz [ 2556.543750][T31355] usb 4-1: config 0 descriptor?? [ 2556.556846][T31355] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2556.627540][ T5925] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2556.649801][ T5925] usb 3-1: device descriptor read/8, error -71 [ 2556.798838][ T5925] usb usb3-port1: unable to enumerate USB device [ 2556.821464][T31355] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2556.843691][T31355] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2557.132047][T20932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2557.157176][T20932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2557.237511][ T5925] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2557.475840][T20932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2557.489245][T20932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2557.525905][ T5925] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2557.546883][ T5925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2557.562398][ T5925] usb 5-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 2557.574944][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.591020][ T5925] usb 5-1: config 0 descriptor?? [ 2557.604710][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2557.613044][T31355] usb 4-1: USB disconnect, device number 68 [ 2557.619775][ T5831] vhci_hcd: vhci_device speed not set [ 2557.629951][T31355] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2557.670394][T31355] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2557.701885][T31355] quatech2 4-1:0.51: device disconnected [ 2557.850784][ T5896] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2558.066873][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 2558.167077][ T5925] holtek_mouse 0003:04D9:A04A.00D3: hidraw0: USB HID v0.00 Device [HID 04d9:a04a] on usb-dummy_hcd.4-1/input0 [ 2558.221053][ T5896] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 2558.250010][ T5896] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2558.259309][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2558.282764][ T5896] usb 1-1: Product: syz [ 2558.298606][ T5896] usb 1-1: Manufacturer: syz [ 2558.313042][ T5896] usb 1-1: SerialNumber: syz [ 2558.344309][ T5896] usb 1-1: config 0 descriptor?? [ 2558.374841][T20998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2558.387007][T20998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2558.409515][ T5896] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2558.428108][ T5896] usb 1-1: setting power ON [ 2558.456481][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 2558.479313][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2558.536006][ T5896] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2558.600222][ T5896] usb 1-1: media controller created [ 2558.745614][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2558.826007][ T5896] usb 1-1: selecting invalid altsetting 6 [ 2558.838960][ T5896] usb 1-1: digital interface selection failed (-22) [ 2558.855080][ T5896] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2558.912492][ T5896] usb 1-1: setting power OFF [ 2558.917780][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 2558.923620][ T5896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2558.937044][ T5896] (NULL device *): no alternate interface [ 2558.988924][ T5896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2559.735895][ T5925] usb 5-1: USB disconnect, device number 32 [ 2560.405978][ T5831] usb 1-1: USB disconnect, device number 35 [ 2561.346854][T31355] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 2561.539049][T31355] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2561.547178][T31355] usb 3-1: config 0 has no interface number 0 [ 2561.558963][T31355] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2561.584100][T31355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.839067][T31355] usb 3-1: config 0 descriptor?? [ 2561.943824][T31355] usb 3-1: selecting invalid altsetting 1 [ 2561.971778][T31355] dvb_ttusb_budget: ttusb_init_controller: error [ 2561.992778][T31355] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2562.129336][T31355] DVB: Unable to find symbol cx22700_attach() [ 2562.372564][T21085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2562.383266][T31355] DVB: Unable to find symbol tda10046_attach() [ 2562.396561][T31355] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2562.613564][T21085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2562.710363][ T5896] usb 3-1: USB disconnect, device number 50 [ 2562.762001][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8609'. [ 2563.158231][T31355] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2563.326580][T31355] usb 5-1: Using ep0 maxpacket: 8 [ 2563.350448][T31355] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 2563.375635][T31355] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2563.385888][T31355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2563.394542][T31355] usb 5-1: Product: syz [ 2563.399347][T31355] usb 5-1: Manufacturer: syz [ 2563.404052][T31355] usb 5-1: SerialNumber: syz [ 2563.434677][T31355] usb 5-1: config 0 descriptor?? [ 2563.461662][T31355] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2563.484601][T31355] usb 5-1: setting power ON [ 2563.500198][T31355] dvb-usb: bulk message failed: -22 (2/0) [ 2563.530653][T31355] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2563.555124][T31355] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2563.583625][T31355] usb 5-1: media controller created [ 2563.642662][T31355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2563.759992][T21208] tap0: tun_chr_ioctl cmd 2148553947 [ 2563.871333][T31355] usb 5-1: selecting invalid altsetting 6 [ 2563.885402][T31355] usb 5-1: digital interface selection failed (-22) [ 2563.892594][T31355] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2563.905785][T31355] usb 5-1: setting power OFF [ 2563.910877][T31355] dvb-usb: bulk message failed: -22 (2/0) [ 2563.919449][T31355] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2563.942197][T31355] (NULL device *): no alternate interface [ 2564.093224][T31355] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2564.332388][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8619'. [ 2564.944226][T31355] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2565.132607][T31355] usb 1-1: Using ep0 maxpacket: 16 [ 2565.151691][T31355] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2565.169770][T31355] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2565.295503][T31355] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2565.306411][T31355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.314812][T31355] usb 1-1: Product: syz [ 2565.321018][T31355] usb 1-1: Manufacturer: syz [ 2565.325721][T31355] usb 1-1: SerialNumber: syz [ 2565.670448][ T5896] usb 5-1: USB disconnect, device number 33 [ 2565.875067][T21241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8623'. [ 2565.897153][T31355] usb 1-1: cannot find UAC_HEADER [ 2565.949406][T31355] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2566.038430][T17771] udevd[17771]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2566.101754][T21275] FAULT_INJECTION: forcing a failure. [ 2566.101754][T21275] name failslab, interval 1, probability 0, space 0, times 0 [ 2566.118168][T21275] CPU: 1 UID: 0 PID: 21275 Comm: syz.4.8626 Not tainted syzkaller #0 PREEMPT(full) [ 2566.118194][T21275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2566.118205][T21275] Call Trace: [ 2566.118213][T21275] [ 2566.118220][T21275] dump_stack_lvl+0x189/0x250 [ 2566.118237][T21275] ? __pfx____ratelimit+0x10/0x10 [ 2566.118253][T21275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2566.118264][T21275] ? __pfx__printk+0x10/0x10 [ 2566.118278][T21275] ? __pfx___might_resched+0x10/0x10 [ 2566.118291][T21275] ? fs_reclaim_acquire+0x7d/0x100 [ 2566.118306][T21275] should_fail_ex+0x414/0x560 [ 2566.118324][T21275] should_failslab+0xa8/0x100 [ 2566.118338][T21275] __kmalloc_noprof+0xcb/0x7f0 [ 2566.118349][T21275] ? sock_kmalloc+0xd6/0x160 [ 2566.118363][T21275] sock_kmalloc+0xd6/0x160 [ 2566.118374][T21275] skcipher_recvmsg+0x571/0x11d0 [ 2566.118395][T21275] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2566.118407][T21275] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2566.118419][T21275] ? security_socket_recvmsg+0x7e/0x2e0 [ 2566.118432][T21275] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2566.118442][T21275] sock_recvmsg+0x22c/0x270 [ 2566.118457][T21275] ____sys_recvmsg+0x1c9/0x460 [ 2566.118472][T21275] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2566.118481][T21275] ? get_compat_msghdr+0x37e/0x4a0 [ 2566.118507][T21275] ___sys_recvmsg+0x1b5/0x510 [ 2566.118520][T21275] ? __pfx____sys_recvmsg+0x10/0x10 [ 2566.118542][T21275] ? __fget_files+0x3a0/0x420 [ 2566.118560][T21275] do_recvmmsg+0x36a/0x770 [ 2566.118575][T21275] ? __pfx_do_recvmmsg+0x10/0x10 [ 2566.118584][T21275] ? ksys_write+0x1cb/0x250 [ 2566.118605][T21275] ? __fget_files+0x3a0/0x420 [ 2566.118620][T21275] __sys_recvmmsg+0x19d/0x280 [ 2566.118631][T21275] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2566.118641][T21275] ? __pfx_ksys_write+0x10/0x10 [ 2566.118654][T21275] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2566.118671][T21275] __do_fast_syscall_32+0xb6/0x2b0 [ 2566.118683][T21275] ? lockdep_hardirqs_on+0x9c/0x150 [ 2566.118695][T21275] do_fast_syscall_32+0x34/0x80 [ 2566.118705][T21275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2566.118718][T21275] RIP: 0023:0xf708d539 [ 2566.118728][T21275] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2566.118737][T21275] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2566.118749][T21275] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 2566.118756][T21275] RDX: 0000000000000002 RSI: 00000000400000a0 RDI: 0000000000000000 [ 2566.118762][T21275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2566.118768][T21275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2566.118774][T21275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2566.118789][T21275] [ 2566.663698][ T715] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 2566.683626][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2566.683644][ T30] audit: type=1326 audit(1760366694.448:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21279 comm="syz.2.8627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2566.712435][ T30] audit: type=1326 audit(1760366694.448:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21279 comm="syz.2.8627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2566.735562][ T30] audit: type=1326 audit(1760366694.448:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21279 comm="syz.2.8627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2566.741509][T11342] usb 1-1: USB disconnect, device number 36 [ 2566.771869][ T30] audit: type=1326 audit(1760366694.448:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21279 comm="syz.2.8627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2566.811319][ T30] audit: type=1326 audit(1760366694.448:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21279 comm="syz.2.8627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2566.854744][ T715] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 2566.866720][ T715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2566.887412][ T715] usb 2-1: Product: syz [ 2566.894474][ T30] audit: type=1326 audit(1760366694.448:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21279 comm="syz.2.8627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2566.917730][ T715] usb 2-1: Manufacturer: syz [ 2566.924760][ T715] usb 2-1: SerialNumber: syz [ 2566.937520][ T715] usb 2-1: config 0 descriptor?? [ 2566.942967][ T30] audit: type=1326 audit(1760366694.538:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21279 comm="syz.2.8627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2566.971147][ T715] usb 2-1: selecting invalid altsetting 1 [ 2566.978800][ T715] technisat-usb2: could not set alternate setting to 0 [ 2566.990081][ T30] audit: type=1326 audit(1760366694.538:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21279 comm="syz.2.8627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2567.017129][ T30] audit: type=1326 audit(1760366694.568:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21279 comm="syz.2.8627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2567.053641][ T30] audit: type=1326 audit(1760366694.568:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21279 comm="syz.2.8627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2567.101396][T21318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8631'. [ 2567.111811][T21318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8631'. [ 2567.122479][T21318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8631'. [ 2567.132486][T21318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8631'. [ 2567.227937][T17165] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2567.343295][ T715] technisat-usb2: firmware version: 0.0 [ 2567.348960][ T715] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 2567.396561][T17165] usb 5-1: Using ep0 maxpacket: 16 [ 2567.413663][T17165] usb 5-1: config index 0 descriptor too short (expected 1810, got 18) [ 2567.424851][T17165] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2567.434195][T17165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2567.454266][T17165] usb 5-1: config 0 descriptor?? [ 2567.467996][T17165] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2567.617695][T21331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2567.631617][T21331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2567.685624][T21294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2567.722030][T21294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2567.818958][T17165] usb 5-1: USB disconnect, device number 34 [ 2567.904555][ T715] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2567.964233][ T715] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 2568.554563][T21378] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 2568.573214][T21388] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 2568.906529][ T5925] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2568.924339][ T5915] usb 2-1: USB disconnect, device number 60 [ 2568.999104][ T715] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2569.094302][ T5925] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 2569.107523][ T5925] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2569.127365][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.152980][ T5925] usb 1-1: config 0 descriptor?? [ 2569.158394][ T715] usb 4-1: Using ep0 maxpacket: 8 [ 2569.175977][ T715] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 2569.202957][ T715] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2569.212560][ T715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2569.233046][ T715] usb 4-1: Product: syz [ 2569.239987][ T715] usb 4-1: Manufacturer: syz [ 2569.244892][ T715] usb 4-1: SerialNumber: syz [ 2569.278856][ T715] usb 4-1: config 0 descriptor?? [ 2569.293855][ T715] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2569.305642][ T715] usb 4-1: setting power ON [ 2569.311384][ T715] dvb-usb: bulk message failed: -22 (2/0) [ 2569.341289][ T715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2569.373446][ T715] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2569.384842][ T715] usb 4-1: media controller created [ 2569.432036][ T715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2569.713734][ T715] usb 4-1: selecting invalid altsetting 6 [ 2569.732330][ T715] usb 4-1: digital interface selection failed (-22) [ 2569.748031][ T715] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2569.765786][ T715] usb 4-1: setting power OFF [ 2569.802249][ T715] dvb-usb: bulk message failed: -22 (2/0) [ 2569.811264][ T715] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2569.840112][ T715] (NULL device *): no alternate interface [ 2569.909281][T21434] FAULT_INJECTION: forcing a failure. [ 2569.909281][T21434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2569.939092][T21434] CPU: 0 UID: 0 PID: 21434 Comm: syz.2.8642 Not tainted syzkaller #0 PREEMPT(full) [ 2569.939118][T21434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2569.939129][T21434] Call Trace: [ 2569.939136][T21434] [ 2569.939144][T21434] dump_stack_lvl+0x189/0x250 [ 2569.939160][T21434] ? __pfx____ratelimit+0x10/0x10 [ 2569.939176][T21434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2569.939187][T21434] ? __pfx__printk+0x10/0x10 [ 2569.939209][T21434] should_fail_ex+0x414/0x560 [ 2569.939245][T21434] _copy_to_user+0x31/0xb0 [ 2569.939271][T21434] simple_read_from_buffer+0xe1/0x170 [ 2569.939297][T21434] proc_fail_nth_read+0x1b3/0x220 [ 2569.939315][T21434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2569.939333][T21434] ? rw_verify_area+0x2a6/0x4d0 [ 2569.939343][T21434] ? __lock_acquire+0xab9/0xd20 [ 2569.939357][T21434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2569.939384][T21434] vfs_read+0x200/0xa30 [ 2569.939403][T21434] ? fdget_pos+0x247/0x320 [ 2569.939428][T21434] ? __pfx___mutex_lock+0x10/0x10 [ 2569.939446][T21434] ? __pfx_vfs_read+0x10/0x10 [ 2569.939458][T21434] ? __fget_files+0x2a/0x420 [ 2569.939471][T21434] ? __fget_files+0x3a0/0x420 [ 2569.939482][T21434] ? __fget_files+0x2a/0x420 [ 2569.939498][T21434] ksys_read+0x145/0x250 [ 2569.939513][T21434] ? __pfx_ksys_read+0x10/0x10 [ 2569.939536][T21434] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2569.939557][T21434] ? lockdep_hardirqs_on+0x9c/0x150 [ 2569.939586][T21434] __do_fast_syscall_32+0xb6/0x2b0 [ 2569.939601][T21434] ? lockdep_hardirqs_on+0x9c/0x150 [ 2569.939612][T21434] do_fast_syscall_32+0x34/0x80 [ 2569.939623][T21434] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2569.939635][T21434] RIP: 0023:0xf7f75539 [ 2569.939645][T21434] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2569.939654][T21434] RSP: 002b:00000000f5445590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2569.939675][T21434] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5445620 [ 2569.939688][T21434] RDX: 000000000000000f RSI: 00000000f7405ff4 RDI: 0000000000000000 [ 2569.939700][T21434] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2569.939711][T21434] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2569.939723][T21434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2569.939746][T21434] [ 2570.523472][ T715] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2570.686998][ T5910] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2570.836601][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 2570.972739][ T5910] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2570.983347][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.101126][ T5910] usb 3-1: Product: syz [ 2571.114680][ T5910] usb 3-1: Manufacturer: syz [ 2571.119565][ T5896] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2571.138424][ T5910] usb 3-1: SerialNumber: syz [ 2571.199713][ T5910] usb 3-1: config 0 descriptor?? [ 2571.234514][ T5910] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2571.291786][ T5896] usb 2-1: config 0 has no interfaces? [ 2571.305971][ T5896] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2571.315292][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.324752][ T5896] usb 2-1: Product: syz [ 2571.330146][ T5896] usb 2-1: Manufacturer: syz [ 2571.340648][ T5896] usb 2-1: SerialNumber: syz [ 2571.383912][ T5896] usb 2-1: config 0 descriptor?? [ 2571.425961][ T5910] ssu100 3-1:0.0: probe with driver ssu100 failed with error -5 [ 2571.784151][ T5925] usb 1-1: string descriptor 0 read error: -71 [ 2571.823371][ T5925] usb 1-1: USB disconnect, device number 37 [ 2571.981264][T21454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2571.991821][T21454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2572.005320][ T5831] usb 4-1: USB disconnect, device number 69 [ 2572.025702][T21454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8646'. [ 2572.035299][T21454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8646'. [ 2572.329231][T21521] netlink: 'syz.0.8649': attribute type 39 has an invalid length. [ 2572.432549][T21521] syz_tun (unregistering): left allmulticast mode [ 2572.804762][T21558] FAULT_INJECTION: forcing a failure. [ 2572.804762][T21558] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.817778][T21558] CPU: 0 UID: 0 PID: 21558 Comm: syz.0.8653 Not tainted syzkaller #0 PREEMPT(full) [ 2572.817794][T21558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2572.817801][T21558] Call Trace: [ 2572.817806][T21558] [ 2572.817812][T21558] dump_stack_lvl+0x189/0x250 [ 2572.817829][T21558] ? __pfx____ratelimit+0x10/0x10 [ 2572.817844][T21558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2572.817854][T21558] ? __pfx__printk+0x10/0x10 [ 2572.817868][T21558] ? __pfx___might_resched+0x10/0x10 [ 2572.817883][T21558] should_fail_ex+0x414/0x560 [ 2572.817902][T21558] should_failslab+0xa8/0x100 [ 2572.817916][T21558] __kmalloc_noprof+0xcb/0x7f0 [ 2572.817926][T21558] ? kfree+0x4d/0x6d0 [ 2572.817934][T21558] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2572.817949][T21558] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2572.817968][T21558] tomoyo_check_open_permission+0x1c1/0x3b0 [ 2572.817982][T21558] ? path_openat+0x107/0x3830 [ 2572.817991][T21558] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 2572.818005][T21558] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2572.818018][T21558] ? __do_fast_syscall_32+0xb6/0x2b0 [ 2572.818046][T21558] ? lockref_get+0x15/0x60 [ 2572.818063][T21558] ? tomoyo_file_open+0x165/0x220 [ 2572.818077][T21558] security_file_open+0xb1/0x270 [ 2572.818092][T21558] do_dentry_open+0x384/0x13f0 [ 2572.818109][T21558] ? vfs_open+0x31/0x340 [ 2572.818124][T21558] vfs_open+0x3b/0x340 [ 2572.818135][T21558] ? path_openat+0x2ecd/0x3830 [ 2572.818146][T21558] path_openat+0x2ee5/0x3830 [ 2572.818155][T21558] ? is_bpf_text_address+0x292/0x2b0 [ 2572.818172][T21558] ? kernel_text_address+0xa5/0xe0 [ 2572.818183][T21558] ? __kernel_text_address+0xd/0x40 [ 2572.818206][T21558] ? __pfx_path_openat+0x10/0x10 [ 2572.818216][T21558] ? css_rstat_updated+0x23a/0x4f0 [ 2572.818232][T21558] ? kasan_save_track+0x4f/0x80 [ 2572.818241][T21558] ? kasan_save_track+0x3e/0x80 [ 2572.818250][T21558] ? __kasan_slab_alloc+0x6c/0x80 [ 2572.818268][T21558] ? getname_flags+0xb8/0x540 [ 2572.818284][T21558] do_filp_open+0x1fa/0x410 [ 2572.818292][T21558] ? __lock_acquire+0xab9/0xd20 [ 2572.818306][T21558] ? __pfx_do_filp_open+0x10/0x10 [ 2572.818327][T21558] ? _raw_spin_unlock+0x28/0x50 [ 2572.818341][T21558] ? alloc_fd+0x64c/0x6c0 [ 2572.818358][T21558] io_openat2+0x3e0/0x5c0 [ 2572.818374][T21558] ? __pfx_io_openat2+0x10/0x10 [ 2572.818390][T21558] ? io_openat_prep+0x45b/0x5a0 [ 2572.818403][T21558] __io_issue_sqe+0x181/0x4b0 [ 2572.818418][T21558] ? __pfx_io_openat_prep+0x10/0x10 [ 2572.818432][T21558] io_issue_sqe+0x165/0x1060 [ 2572.818447][T21558] io_submit_sqes+0xa54/0x1e60 [ 2572.818472][T21558] __se_sys_io_uring_enter+0x2df/0x2b20 [ 2572.818493][T21558] ? ksys_write+0x1cb/0x250 [ 2572.818505][T21558] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2572.818513][T21558] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2572.818524][T21558] ? __pfx_vfs_write+0x10/0x10 [ 2572.818536][T21558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2572.818549][T21558] ? __fget_files+0x3a0/0x420 [ 2572.818564][T21558] ? fput+0xa0/0xd0 [ 2572.818577][T21558] ? ksys_write+0x22a/0x250 [ 2572.818587][T21558] ? exc_page_fault+0x82/0x100 [ 2572.818597][T21558] ? __pfx_ksys_write+0x10/0x10 [ 2572.818608][T21558] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2572.818620][T21558] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2572.818632][T21558] __do_fast_syscall_32+0xb6/0x2b0 [ 2572.818643][T21558] ? lockdep_hardirqs_on+0x9c/0x150 [ 2572.818655][T21558] do_fast_syscall_32+0x34/0x80 [ 2572.818665][T21558] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2572.818677][T21558] RIP: 0023:0xf70ed539 [ 2572.818686][T21558] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2572.818695][T21558] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2572.818707][T21558] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000003516 [ 2572.818714][T21558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2572.818721][T21558] RBP: 00000000fffffdcf R08: 0000000000000000 R09: 0000000000000000 [ 2572.818727][T21558] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2572.818733][T21558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2572.818748][T21558] [ 2572.818755][T21558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2572.982273][T21560] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8643'. [ 2573.585497][T21567] netlink: 'syz.0.8654': attribute type 16 has an invalid length. [ 2573.596055][T21567] netlink: 'syz.0.8654': attribute type 17 has an invalid length. [ 2573.874230][T21567] bridge0: port 2(bridge_slave_1) entered disabled state [ 2573.882018][T21567] bridge0: port 1(bridge_slave_0) entered disabled state [ 2574.256464][T21567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2574.320777][T21567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2574.784579][ T5674] usb 2-1: USB disconnect, device number 61 [ 2574.839751][T31355] usb 3-1: USB disconnect, device number 51 [ 2575.736776][T17295] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2575.944670][T17295] usb 2-1: Using ep0 maxpacket: 8 [ 2576.208486][T17295] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 2576.261931][T17295] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2576.277812][T17295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2576.286453][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2576.300406][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2576.346181][T17295] usb 2-1: Product: syz [ 2576.409164][T17295] usb 2-1: Manufacturer: syz [ 2576.414548][T17295] usb 2-1: SerialNumber: syz [ 2576.421874][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2576.439190][T17295] usb 2-1: config 0 descriptor?? [ 2576.453503][T17295] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2576.463310][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2576.472774][T17295] usb 2-1: setting power ON [ 2576.480896][T17295] dvb-usb: bulk message failed: -22 (2/0) [ 2576.514267][T17295] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2576.533820][T17295] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2576.544450][T17295] usb 2-1: media controller created [ 2576.620287][T17295] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2576.714624][T17295] usb 2-1: selecting invalid altsetting 6 [ 2576.730781][T17295] usb 2-1: digital interface selection failed (-22) [ 2576.945411][T17295] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2577.084969][T17295] usb 2-1: setting power OFF [ 2577.149072][T17295] dvb-usb: bulk message failed: -22 (2/0) [ 2577.161844][T17295] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2577.180248][T17295] (NULL device *): no alternate interface [ 2577.239434][T17295] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2577.364581][T17295] usb 2-1: USB disconnect, device number 62 [ 2579.196251][T21702] QAT: Stopping all acceleration devices. [ 2580.186863][T21723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8674'. [ 2580.296727][T21603] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2580.557032][T21603] usb 1-1: Using ep0 maxpacket: 16 [ 2580.559139][T21736] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 2580.714372][T21603] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2580.723802][T21603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2580.745573][T21603] usb 1-1: Product: syz [ 2580.755926][T21603] usb 1-1: Manufacturer: syz [ 2580.778362][T21603] usb 1-1: SerialNumber: syz [ 2580.813562][T21603] usb 1-1: config 0 descriptor?? [ 2580.821458][T21603] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2580.832866][T21603] usb 1-1: Detected FT232H [ 2581.066452][T21718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.087199][T21718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.349693][T21603] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2581.391615][T21603] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 2581.439991][T21603] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2581.547861][ T9] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 2581.604048][T21603] usb 1-1: USB disconnect, device number 38 [ 2581.675471][T21603] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2581.691369][T21603] ftdi_sio 1-1:0.0: device disconnected [ 2581.709120][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 2581.720154][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.764883][ T9] usb 3-1: config 0 descriptor?? [ 2581.824380][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input240 [ 2581.998738][ T5183] bcm5974 3-1:0.0: could not read from device [ 2582.013223][ T5183] bcm5974 3-1:0.0: could not read from device [ 2582.023646][ T5183] bcm5974 3-1:0.0: could not read from device [ 2582.045996][ T9] usb 3-1: USB disconnect, device number 52 [ 2582.061564][ T5183] bcm5974 3-1:0.0: could not read from device [ 2582.089288][T17771] udevd[17771]: Error opening device "/dev/input/event4": No such device [ 2582.102013][T17771] udevd[17771]: Unable to EVIOCGABS device "/dev/input/event4" [ 2582.111826][T17771] udevd[17771]: Unable to EVIOCGABS device "/dev/input/event4" [ 2582.120776][T17771] udevd[17771]: Unable to EVIOCGABS device "/dev/input/event4" [ 2582.142129][T17771] udevd[17771]: Unable to EVIOCGABS device "/dev/input/event4" [ 2582.503203][T21603] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2582.676794][T21603] usb 2-1: Using ep0 maxpacket: 8 [ 2582.685385][T21603] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2582.718187][T21603] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 2582.789597][T21603] usb 2-1: config 7 has no interface number 0 [ 2582.803240][T21603] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2582.813108][T21603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2582.821493][T21603] usb 2-1: Product: syz [ 2582.825725][T21603] usb 2-1: Manufacturer: syz [ 2582.835930][T21603] usb 2-1: SerialNumber: syz [ 2583.077883][T21786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8681'. [ 2583.336692][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2583.488842][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2583.838248][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2583.858597][ T9] usb 3-1: config 244 has an invalid interface number: 68 but max is 0 [ 2583.867636][ T9] usb 3-1: config 244 has no interface number 0 [ 2583.874115][ T9] usb 3-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 2583.912421][ T9] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 2583.942649][T21819] syzkaller1: entered promiscuous mode [ 2583.948257][T21819] syzkaller1: entered allmulticast mode [ 2583.986462][ T9] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0 [ 2584.013764][ T9] usb 3-1: config 244 interface 68 has no altsetting 0 [ 2584.030869][ T9] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 2584.041912][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.050628][ T9] usb 3-1: Product: syz [ 2584.055070][ T9] usb 3-1: Manufacturer: syz [ 2584.060200][ T9] usb 3-1: SerialNumber: syz [ 2584.077200][T21812] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2584.216586][T17295] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2584.315230][ T9] comedi comedi5: Endpoint has wrong direction [ 2584.319773][T21821] netlink: 'syz.4.8686': attribute type 13 has an invalid length. [ 2584.322316][ T9] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device. [ 2584.331060][T21821] netlink: 'syz.4.8686': attribute type 17 has an invalid length. [ 2584.347684][T17295] usb 1-1: device descriptor read/64, error -71 [ 2584.353826][ T9] usb 3-1: USB disconnect, device number 53 [ 2584.365792][T21821] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2584.416784][T17165] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2584.566505][T17165] usb 4-1: Using ep0 maxpacket: 16 [ 2584.580615][T17165] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2584.606196][T17295] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2584.606641][T17165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.655224][T17165] usb 4-1: Product: syz [ 2584.660404][T17165] usb 4-1: Manufacturer: syz [ 2584.665282][T17165] usb 4-1: SerialNumber: syz [ 2584.685279][T17165] usb 4-1: config 0 descriptor?? [ 2584.701319][T17165] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2584.757125][T17295] usb 1-1: device descriptor read/64, error -71 [ 2584.866764][T17295] usb usb1-port1: attempt power cycle [ 2584.877038][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2584.901901][T17165] ssu100 4-1:0.0: probe with driver ssu100 failed with error -5 [ 2584.998167][T21909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8693'. [ 2585.036784][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 2585.044185][ T9] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 2585.052891][ T9] usb 5-1: config 252 has no interface number 0 [ 2585.060089][ T9] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 2585.075314][ T9] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 2585.127714][ T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2585.137131][T21603] usb 2-1: USB disconnect, device number 63 [ 2585.150882][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2585.171193][ T9] usb 5-1: Product: syz [ 2585.175798][ T9] usb 5-1: Manufacturer: syz [ 2585.182054][ T9] usb 5-1: SerialNumber: syz [ 2585.226875][T17295] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2585.231255][ T9] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2585.263241][T17295] usb 1-1: device descriptor read/8, error -71 [ 2585.516532][T17295] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2585.547988][T17295] usb 1-1: device descriptor read/8, error -71 [ 2585.591644][ T12] usb 5-1: Failed to submit usb control message: -71 [ 2585.591884][T17397] usb 5-1: USB disconnect, device number 35 [ 2585.599267][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 2585.615010][ T12] usb 5-1: unable to get target info from device [ 2585.621690][ T12] usb 5-1: could not get target info (-71) [ 2585.628125][ T12] usb 5-1: could not probe fw (-71) [ 2585.656867][T17295] usb usb1-port1: unable to enumerate USB device [ 2585.987741][T21953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8698'. [ 2586.691184][T21959] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8688'. [ 2587.046183][T21983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8704'. [ 2587.108033][T21985] openvswitch: netlink: Message has 4 unknown bytes. [ 2587.116742][T21985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2587.138741][T21985] bridge_slave_1: left allmulticast mode [ 2587.144424][T21985] bridge_slave_1: left promiscuous mode [ 2587.193184][T21985] bridge0: port 2(bridge_slave_1) entered disabled state [ 2587.229899][T21985] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2587.376714][T21603] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2587.566659][T21603] usb 2-1: Using ep0 maxpacket: 8 [ 2587.595250][T21603] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2587.603599][T21603] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2587.613855][T21603] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2587.624313][T21603] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2587.670634][T21603] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2587.858411][T17397] usb 4-1: USB disconnect, device number 70 [ 2588.030215][T21603] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2588.063888][T21603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2588.469568][T21603] usb 2-1: usb_control_msg returned -32 [ 2588.485233][T21603] usbtmc 2-1:16.0: can't read capabilities [ 2588.776605][T17295] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2588.926879][T17295] usb 4-1: Using ep0 maxpacket: 16 [ 2588.934714][T17295] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 2588.944941][T17295] usb 4-1: config 252 has no interface number 0 [ 2588.952246][T17295] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 2588.963840][T17295] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 2588.979137][T17295] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2588.988793][T17295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.999960][T17295] usb 4-1: Product: syz [ 2589.005103][T17295] usb 4-1: Manufacturer: syz [ 2589.009910][T17295] usb 4-1: SerialNumber: syz [ 2589.052798][T17295] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2589.158163][T22062] program syz.0.8713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2589.243125][T22064] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 2589.277758][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8704'. [ 2589.304536][T21982] netlink: 'syz.1.8704': attribute type 5 has an invalid length. [ 2589.318605][T21982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8704'. [ 2589.341453][T21982] geneve2: entered promiscuous mode [ 2589.346900][T21982] geneve2: entered allmulticast mode [ 2589.354003][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 2589.363643][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 2589.374695][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 2589.384375][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 2589.576725][T25861] usb 4-1: Failed to submit usb control message: -71 [ 2589.576991][T17397] usb 4-1: USB disconnect, device number 71 [ 2589.603791][T25861] usb 4-1: unable to send the bmi data to the device: -71 [ 2589.615306][T25861] usb 4-1: unable to get target info from device [ 2589.622775][T25861] usb 4-1: could not get target info (-71) [ 2589.631335][T25861] usb 4-1: could not probe fw (-71) [ 2589.679244][T17295] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2589.723321][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2589.723336][ T30] audit: type=1800 audit(1760366717.488:4950): pid=22080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8716" name="file1" dev="tmpfs" ino=2650 res=0 errno=0 [ 2589.851614][T17295] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2589.862401][T17295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.872931][T17295] usb 1-1: Product: syz [ 2589.877404][T17295] usb 1-1: Manufacturer: syz [ 2589.882097][T17295] usb 1-1: SerialNumber: syz [ 2590.328757][T22072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2590.365462][T22072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2590.422958][T17397] usb 2-1: USB disconnect, device number 64 [ 2590.435626][T17295] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2590.456720][T21603] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2590.461408][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.471445][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.516656][T17295] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2590.565754][T17295] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2590.630172][T17295] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 2590.709768][T17295] usb 1-1: USB disconnect, device number 43 [ 2591.387068][T21603] usb 3-1: config 0 has no interfaces? [ 2591.405552][T21603] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2591.418605][T21603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2591.430519][T21603] usb 3-1: Product: syz [ 2591.437544][T21603] usb 3-1: Manufacturer: syz [ 2591.445088][T21603] usb 3-1: SerialNumber: syz [ 2591.456426][T21603] usb 3-1: config 0 descriptor?? [ 2591.686456][T17295] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 2591.998159][T22095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2592.009082][T17295] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 2592.017770][T17295] usb 5-1: config 0 has no interface number 0 [ 2592.028365][T17295] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 2592.037634][T17295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2592.046674][T22095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2592.060157][T22095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8720'. [ 2592.069333][T22095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8720'. [ 2592.112884][T17295] usb 5-1: Product: syz [ 2592.146454][T17295] usb 5-1: Manufacturer: syz [ 2592.155715][T17295] usb 5-1: SerialNumber: syz [ 2592.169989][T17295] usb 5-1: config 0 descriptor?? [ 2592.189969][T17295] ums-alauda 5-1:0.189: USB Mass Storage device detected [ 2592.297412][T22177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8727'. [ 2592.307252][T22173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8727'. [ 2592.400917][T22149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2592.409995][T22149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2592.422529][T21603] usb 5-1: USB disconnect, device number 36 [ 2592.726919][T17165] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 2592.878364][T17165] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2592.886878][T17165] usb 2-1: config 0 has no interface number 0 [ 2592.893116][T17165] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2592.902655][T17165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.920820][T17165] usb 2-1: config 0 descriptor?? [ 2592.934118][T17165] usb 2-1: selecting invalid altsetting 1 [ 2592.940412][T17165] dvb_ttusb_budget: ttusb_init_controller: error [ 2592.948267][T17165] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2593.035661][T17165] DVB: Unable to find symbol cx22700_attach() [ 2593.069866][T17165] DVB: Unable to find symbol tda10046_attach() [ 2593.076665][T17165] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2593.202908][T17397] usb 2-1: USB disconnect, device number 65 [ 2593.256474][T17295] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 2593.413420][T17295] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2593.421379][T17295] usb 5-1: can't read configurations, error -71 [ 2593.705890][T17397] usb 3-1: USB disconnect, device number 54 [ 2593.708213][T22223] batadv_slave_1: entered promiscuous mode [ 2593.733390][T22223] batman_adv: batadv0: Adding interface: macvlan2 [ 2593.759379][T22223] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2593.818245][T22223] batman_adv: batadv0: Interface activated: macvlan2 [ 2594.272956][T22243] syz.4.8735 (22243): drop_caches: 2 [ 2594.353815][T22251] loop2: detected capacity change from 0 to 7 [ 2594.365119][T17771] Dev loop2: unable to read RDB block 7 [ 2594.372006][T17771] loop2: unable to read partition table [ 2594.379012][T17771] loop2: partition table beyond EOD, truncated [ 2594.387275][T22251] Dev loop2: unable to read RDB block 7 [ 2594.393033][T22251] loop2: unable to read partition table [ 2594.401377][T22251] loop2: partition table beyond EOD, truncated [ 2594.413011][T22251] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2594.679348][ T5198] Dev loop2: unable to read RDB block 7 [ 2594.716716][ T5198] loop2: unable to read partition table [ 2594.722900][ T5198] loop2: partition table beyond EOD, truncated [ 2595.935618][T22288] team0: Port device bridge0 removed [ 2595.951819][T22288] bridge_slave_0: left allmulticast mode [ 2595.961676][T22288] bridge_slave_0: left promiscuous mode [ 2596.011486][T22288] bridge0: port 1(bridge_slave_0) entered disabled state [ 2596.198014][T22288] bridge_slave_1: left allmulticast mode [ 2596.203731][T22288] bridge_slave_1: left promiscuous mode [ 2596.273826][T22288] bridge0: port 2(bridge_slave_1) entered disabled state [ 2596.321233][T22288] bond0: (slave bond_slave_0): Releasing backup interface [ 2596.333987][T22288] bond0: (slave bond_slave_1): Releasing backup interface [ 2596.349034][T22288] team0: Port device team_slave_0 removed [ 2596.402975][T22288] team0: Port device team_slave_1 removed [ 2596.415079][T22288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2596.433814][T22288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2596.467069][T17295] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2596.537255][T22288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2596.712148][T17295] usb 5-1: config 0 has no interfaces? [ 2596.722926][T17295] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2596.745120][T17295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2596.753957][T17295] usb 5-1: Product: syz [ 2596.758620][T17295] usb 5-1: Manufacturer: syz [ 2596.766834][T17295] usb 5-1: SerialNumber: syz [ 2596.811386][T17295] usb 5-1: config 0 descriptor?? [ 2596.875939][T22325] binder: 22324:22325 ioctl ae01 14 returned -22 [ 2597.126076][T22285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2597.136444][T22285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2597.159307][T22285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8742'. [ 2597.168537][T22285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8742'. [ 2597.340926][T22338] openvswitch: netlink: Message has 4 unknown bytes. [ 2597.384607][T22338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2597.454075][T22338] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2597.556409][T22347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8749'. [ 2597.569516][T22347] netlink: 'syz.3.8749': attribute type 13 has an invalid length. [ 2597.669104][T22347] vxlan0: entered promiscuous mode [ 2597.705464][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2597.716060][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2597.757796][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2597.775981][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2597.802300][T22347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8749'. [ 2598.685568][T22375] netlink: 'syz.3.8753': attribute type 1 has an invalid length. [ 2598.693607][T22375] netlink: 'syz.3.8753': attribute type 2 has an invalid length. [ 2598.716786][ T30] audit: type=1326 audit(1760366726.468:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22372 comm="syz.3.8753" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x0 [ 2598.716796][T21603] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2598.856724][T21603] usb 3-1: device descriptor read/64, error -71 [ 2599.096491][T21603] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2599.226468][T21603] usb 3-1: device descriptor read/64, error -71 [ 2599.337400][T21603] usb usb3-port1: attempt power cycle [ 2599.576876][T17397] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2599.597639][T17295] usb 5-1: USB disconnect, device number 39 [ 2599.696759][T21603] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2599.726676][T17397] usb 1-1: Using ep0 maxpacket: 32 [ 2599.738199][T21603] usb 3-1: device descriptor read/8, error -71 [ 2599.743259][T17397] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2599.754185][T17397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2599.762728][T17397] usb 1-1: Product: syz [ 2599.767663][T17397] usb 1-1: Manufacturer: syz [ 2599.772332][T17397] usb 1-1: SerialNumber: syz [ 2599.785000][T17397] usb 1-1: config 0 descriptor?? [ 2599.804257][T17397] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2599.896824][T17165] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2599.969011][T22429] binder: 22413:22429 ioctl c0306201 0 returned -14 [ 2599.986742][T21603] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2600.044909][T21603] usb 3-1: device descriptor read/8, error -71 [ 2600.087628][T17165] usb 4-1: Using ep0 maxpacket: 16 [ 2600.094899][T17165] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 2600.103734][T17165] usb 4-1: config 252 has no interface number 0 [ 2600.110536][T17165] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 2600.177131][T21603] usb usb3-port1: unable to enumerate USB device [ 2600.189023][T17165] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 2600.231372][T17165] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2600.240995][T17165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.249893][T17165] usb 4-1: Product: syz [ 2600.254106][T17165] usb 4-1: Manufacturer: syz [ 2600.259044][T17165] usb 4-1: SerialNumber: syz [ 2600.308267][T17165] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2600.602950][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8761'. [ 2600.688177][T22445] tap0: tun_chr_ioctl cmd 1074025677 [ 2600.694267][T22445] tap0: linktype set to 785 [ 2601.307462][T21616] usb 4-1: Failed to submit usb control message: -110 [ 2601.322841][T21616] usb 4-1: unable to send the bmi data to the device: -110 [ 2601.395069][T21616] usb 4-1: unable to get target info from device [ 2601.407260][T21616] usb 4-1: could not get target info (-110) [ 2601.414488][T21616] usb 4-1: could not probe fw (-110) [ 2601.454793][T17165] usb 4-1: USB disconnect, device number 72 [ 2601.557732][T22471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8754'. [ 2601.766729][T17397] gspca_ov534_9: reg_w failed -110 [ 2602.016927][T17397] gspca_ov534_9: Unknown sensor 0000 [ 2602.017027][T17397] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 2602.157746][ T5896] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2602.326461][ T5896] usb 3-1: device descriptor read/64, error -71 [ 2602.576479][ T5896] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2602.613173][T21603] usb 1-1: USB disconnect, device number 44 [ 2602.717518][T22519] syzkaller0: entered promiscuous mode [ 2602.723037][T22519] syzkaller0: entered allmulticast mode [ 2602.736567][ T5896] usb 3-1: device descriptor read/64, error -71 [ 2602.786632][T17397] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2602.857029][ T5896] usb usb3-port1: attempt power cycle [ 2602.934279][T17165] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2603.030000][T17397] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 2603.057594][T17397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.065918][T17397] usb 5-1: Product: syz [ 2603.089716][T17165] usb 4-1: Using ep0 maxpacket: 16 [ 2603.098349][T17165] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 2603.107907][T17165] usb 4-1: config 252 has no interface number 0 [ 2603.108034][T17397] usb 5-1: Manufacturer: syz [ 2603.114206][T17165] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 2603.131510][T17397] usb 5-1: SerialNumber: syz [ 2603.140597][T17397] usb 5-1: config 0 descriptor?? [ 2603.150174][T17165] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 2603.175986][T17165] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2603.186240][T17165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.194702][T17165] usb 4-1: Product: syz [ 2603.199525][T17165] usb 4-1: Manufacturer: syz [ 2603.204157][T17165] usb 4-1: SerialNumber: syz [ 2603.223147][T17165] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2603.276620][ T5896] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2603.297878][ T5896] usb 3-1: device descriptor read/8, error -71 [ 2603.353371][T17397] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2603.364874][T17397] asix 5-1:0.0: probe with driver asix failed with error -61 [ 2603.546688][ T5896] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2603.587209][ T5896] usb 3-1: device descriptor read/8, error -71 [ 2603.700138][T17397] usb 4-1: USB disconnect, device number 73 [ 2603.701950][T21616] usb 4-1: Failed to submit usb control message: -71 [ 2603.719467][T21616] usb 4-1: unable to send the bmi data to the device: -71 [ 2603.728076][T21616] usb 4-1: unable to get target info from device [ 2603.729450][ T5896] usb usb3-port1: unable to enumerate USB device [ 2603.735199][T21616] usb 4-1: could not get target info (-71) [ 2603.747234][T21616] usb 4-1: could not probe fw (-71) [ 2604.359181][T22574] binder: 22570:22574 ioctl c0306201 0 returned -14 [ 2604.796570][T21603] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2604.886760][T22587] syz.2.8775 (22587): drop_caches: 2 [ 2604.987083][T21603] usb 1-1: device descriptor read/64, error -71 [ 2605.226671][T21603] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2605.366944][T21603] usb 1-1: device descriptor read/64, error -71 [ 2605.436426][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2605.488198][T21603] usb usb1-port1: attempt power cycle [ 2605.561396][ T5896] usb 5-1: USB disconnect, device number 40 [ 2605.636439][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 2605.660744][ T9] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 2605.689291][ T9] usb 4-1: config 252 has no interface number 0 [ 2605.717208][ T9] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 2605.828531][T21603] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2605.847960][ T9] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 2605.861177][T21603] usb 1-1: device descriptor read/8, error -71 [ 2605.872494][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2605.882135][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.892544][ T9] usb 4-1: Product: syz [ 2605.897050][ T9] usb 4-1: Manufacturer: syz [ 2605.901981][ T9] usb 4-1: SerialNumber: syz [ 2606.647926][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2606.749628][T21603] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2606.837459][T21603] usb 1-1: device descriptor read/8, error -71 [ 2606.976986][T21603] usb usb1-port1: unable to enumerate USB device [ 2607.707506][T25861] usb 4-1: Failed to submit usb control message: -110 [ 2607.722635][T25861] usb 4-1: unable to send the bmi data to the device: -110 [ 2607.740386][T22678] veth1_to_team: entered promiscuous mode [ 2607.749706][T22678] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 2607.784554][T17397] usb 4-1: USB disconnect, device number 74 [ 2607.801714][T25861] usb 4-1: unable to get target info from device [ 2607.808704][T25861] usb 4-1: could not get target info (-110) [ 2607.815335][T25861] usb 4-1: could not probe fw (-110) [ 2608.160285][T22695] binder: 22690:22695 ioctl c0306201 0 returned -14 [ 2608.310734][T22694] netlink: 'syz.0.8789': attribute type 16 has an invalid length. [ 2608.318863][T22694] netlink: 'syz.0.8789': attribute type 17 has an invalid length. [ 2609.587353][T21603] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 2609.786797][T17397] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2609.836848][T21603] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2609.846272][T21603] usb 2-1: can't read configurations, error -61 [ 2609.988742][T17397] usb 4-1: device descriptor read/64, error -71 [ 2609.996447][T21603] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 2610.169039][T21603] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2610.177121][T21603] usb 2-1: can't read configurations, error -61 [ 2610.197801][T21603] usb usb2-port1: attempt power cycle [ 2610.246593][T17397] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2610.426574][T17397] usb 4-1: device descriptor read/64, error -71 [ 2610.537908][T17397] usb usb4-port1: attempt power cycle [ 2610.606747][T21603] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2610.637609][T21603] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2610.645340][T21603] usb 2-1: can't read configurations, error -61 [ 2610.786729][T21603] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 2610.821159][T21603] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2610.830115][T21603] usb 2-1: can't read configurations, error -61 [ 2610.850736][T21603] usb usb2-port1: unable to enumerate USB device [ 2610.897592][T17397] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2610.948116][T17397] usb 4-1: device descriptor read/8, error -71 [ 2611.186687][T17397] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2611.214027][T17397] usb 4-1: device descriptor read/8, error -71 [ 2611.306498][T21603] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2611.334880][T22752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8803'. [ 2611.348122][T17397] usb usb4-port1: unable to enumerate USB device [ 2611.413429][T22753] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8803'. [ 2611.563371][T21603] usb 5-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 2611.578856][T21603] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2611.609523][T21603] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2611.631735][T21603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.652286][T21603] usb 5-1: Product: syz [ 2611.661763][T21603] usb 5-1: Manufacturer: syz [ 2611.673856][T21603] usb 5-1: SerialNumber: syz [ 2611.696021][T21603] usb 5-1: config 0 descriptor?? [ 2611.947494][T17397] usb 5-1: USB disconnect, device number 41 [ 2611.959061][ T5198] Dev loop6: unable to read RDB block 1 [ 2611.965047][ T5198] loop6: unable to read partition table [ 2611.972197][ T5198] loop6: partition table beyond EOD, truncated [ 2613.258558][T22795] FAULT_INJECTION: forcing a failure. [ 2613.258558][T22795] name failslab, interval 1, probability 0, space 0, times 0 [ 2613.560566][T22795] CPU: 1 UID: 0 PID: 22795 Comm: syz.1.8806 Not tainted syzkaller #0 PREEMPT(full) [ 2613.560593][T22795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2613.560605][T22795] Call Trace: [ 2613.560614][T22795] [ 2613.560624][T22795] dump_stack_lvl+0x189/0x250 [ 2613.560650][T22795] ? __pfx____ratelimit+0x10/0x10 [ 2613.560678][T22795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2613.560697][T22795] ? __pfx__printk+0x10/0x10 [ 2613.560719][T22795] ? __pfx___might_resched+0x10/0x10 [ 2613.560742][T22795] ? fs_reclaim_acquire+0x7d/0x100 [ 2613.560768][T22795] should_fail_ex+0x414/0x560 [ 2613.560798][T22795] should_failslab+0xa8/0x100 [ 2613.560822][T22795] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2613.560842][T22795] ? getname_flags+0xb8/0x540 [ 2613.560870][T22795] getname_flags+0xb8/0x540 [ 2613.560897][T22795] __ia32_compat_sys_execve+0x79/0xb0 [ 2613.560919][T22795] __do_fast_syscall_32+0xb6/0x2b0 [ 2613.560941][T22795] ? asm_int80_emulation+0x1a/0x20 [ 2613.560957][T22795] ? do_int80_emulation+0x1f3/0x390 [ 2613.560980][T22795] do_fast_syscall_32+0x34/0x80 [ 2613.561000][T22795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2613.561028][T22795] RIP: 0023:0xf7f76539 [ 2613.561045][T22795] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2613.561061][T22795] RSP: 002b:00000000f544555c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 2613.561081][T22795] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 2613.561094][T22795] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2613.561106][T22795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2613.561118][T22795] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2613.561129][T22795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2613.561157][T22795] [ 2614.735195][T22810] trusted_key: encrypted_key: key user:syz not found [ 2614.797338][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2615.079348][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2615.098947][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2615.156679][ T9] usb 4-1: config 0 descriptor?? [ 2615.182582][ T9] cp210x 4-1:0.0: cp210x converter detected [ 2615.797217][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2616.020968][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2616.049362][T22828] netlink: 'syz.0.8816': attribute type 13 has an invalid length. [ 2616.057674][T22828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8816'. [ 2616.223958][T17397] usb 4-1: USB disconnect, device number 79 [ 2616.235661][T17397] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2616.289041][T17397] cp210x 4-1:0.0: device disconnected [ 2616.856487][T21603] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2617.056630][T21603] usb 5-1: Using ep0 maxpacket: 8 [ 2617.137413][T21603] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2617.163955][T21603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.189559][T21603] usb 5-1: Product: syz [ 2617.216485][T21603] usb 5-1: Manufacturer: syz [ 2617.279500][T21603] usb 5-1: SerialNumber: syz [ 2617.330604][T21603] usb 5-1: config 0 descriptor?? [ 2617.370667][T21603] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2617.577508][T22851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2617.587334][T22851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2617.988379][T21603] gspca_sonixj: reg_r err -32 [ 2617.994791][T21603] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 2618.847114][ T1782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2618.860417][ T1782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2618.877394][ T1782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2618.885796][ T1782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2618.893831][ T1782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2619.316207][T22878] chnl_net:caif_netlink_parms(): no params data found [ 2619.754637][T22878] bridge0: port 1(bridge_slave_0) entered blocking state [ 2619.763643][T22878] bridge0: port 1(bridge_slave_0) entered disabled state [ 2619.796220][T22878] bridge_slave_0: entered allmulticast mode [ 2619.806015][T22878] bridge_slave_0: entered promiscuous mode [ 2619.815063][T22878] bridge0: port 2(bridge_slave_1) entered blocking state [ 2619.822795][T22878] bridge0: port 2(bridge_slave_1) entered disabled state [ 2619.830736][T22878] bridge_slave_1: entered allmulticast mode [ 2619.840241][T22878] bridge_slave_1: entered promiscuous mode [ 2619.979933][T25863] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2619.994754][T25863] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.202515][T22878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2620.239071][T25863] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2620.250043][T25863] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.286482][T17397] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2620.319798][T22878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2620.381533][T25863] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2620.409776][T25863] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.446409][T17397] usb 1-1: Using ep0 maxpacket: 32 [ 2620.464499][T17397] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2620.477516][T17397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2620.497882][T17397] usb 1-1: Product: syz [ 2620.513913][T17397] usb 1-1: Manufacturer: syz [ 2620.538748][T17397] usb 1-1: SerialNumber: syz [ 2620.570183][T17397] usb 1-1: config 0 descriptor?? [ 2620.585416][T17397] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2620.649784][T25863] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2620.660837][T25863] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.687593][T22878] team0: Port device team_slave_0 added [ 2620.703140][T22878] team0: Port device team_slave_1 added [ 2620.945283][T21619] usb 5-1: USB disconnect, device number 42 [ 2620.987598][T18410] Bluetooth: hci5: command tx timeout [ 2621.020614][T22878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2621.072354][T22878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2621.292581][T22878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2621.335676][T22878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2621.348664][T22878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2621.401291][T22878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2621.579094][T23183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8833'. [ 2621.591605][T23059] fuse: Bad value for 'user_id' [ 2621.597222][T23059] fuse: Bad value for 'user_id' [ 2621.621685][T17397] gspca_topro: reg_w err -71 [ 2621.635933][T22878] hsr_slave_0: entered promiscuous mode [ 2621.682333][T21603] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 2621.700159][T17397] gspca_topro: Sensor soi763a [ 2621.723161][T17397] usb 1-1: USB disconnect, device number 49 [ 2621.731629][T22878] hsr_slave_1: entered promiscuous mode [ 2621.763988][T22878] debugfs: 'hsr0' already exists in 'hsr' [ 2621.776049][T22878] Cannot create hsr debugfs directory [ 2621.852632][T21603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2621.872728][T21603] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2621.918331][T21603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2621.974413][T21603] usb 5-1: config 0 descriptor?? [ 2622.201084][T25863] bridge_slave_1: left allmulticast mode [ 2622.209709][T25863] bridge_slave_1: left promiscuous mode [ 2622.219319][T25863] bridge0: port 2(bridge_slave_1) entered disabled state [ 2622.240236][T25863] bridge_slave_0: left allmulticast mode [ 2622.245950][T25863] bridge_slave_0: left promiscuous mode [ 2622.252913][T25863] bridge0: port 1(bridge_slave_0) entered disabled state [ 2623.076948][T18410] Bluetooth: hci5: command tx timeout [ 2623.302925][T25863] team0: Port device bond0 removed [ 2623.311403][T25863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2623.333584][T25863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2623.347967][T25863] bond0 (unregistering): Released all slaves [ 2623.363434][T25863] bond1 (unregistering): Released all slaves [ 2623.377724][T25863] bond2 (unregistering): Released all slaves [ 2623.546973][T25863] bond3 (unregistering): Released all slaves [ 2623.695532][T23255] delete_channel: no stack [ 2623.858316][T25863] bond4 (unregistering): (slave veth3): Releasing active interface [ 2623.869840][T25863] bond4 (unregistering): Released all slaves [ 2624.374802][T25863] : left promiscuous mode [ 2624.441003][T21603] usbhid 5-1:0.0: can't add hid device: -71 [ 2624.482449][T21603] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2624.524387][T21603] usb 5-1: USB disconnect, device number 43 [ 2624.863051][T23310] binder: 23297:23310 ioctl c0306201 0 returned -14 [ 2625.013705][T23319] trusted_key: encrypted_key: key user:syz not found [ 2625.101718][T25863] tipc: Disabling bearer [ 2625.136202][T25863] tipc: Left network mode [ 2625.146555][T18410] Bluetooth: hci5: command tx timeout [ 2625.304885][T18410] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2625.528115][T23331] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8842'. [ 2626.528500][T25863] ------------[ cut here ]------------ [ 2626.534332][T25863] Have pending ack frames! [ 2626.708035][T25863] WARNING: CPU: 0 PID: 25863 at net/mac80211/main.c:1713 ieee80211_free_ack_frame+0x4d/0x60 [ 2626.718493][T25863] Modules linked in: [ 2626.722733][T25863] CPU: 0 UID: 0 PID: 25863 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 2626.732463][T25863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2626.743924][T25863] Workqueue: netns cleanup_net [ 2626.750305][T25863] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 2626.758821][T25863] Code: 00 00 e8 b6 b7 6c fe 31 c0 5b e9 0e 3e 95 00 cc e8 58 8d 06 f7 c6 05 19 7e ce 04 01 90 48 c7 c7 e0 6f 8a 8c e8 54 aa c9 f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 2626.779141][T25863] RSP: 0018:ffffc9001c43f590 EFLAGS: 00010246 [ 2626.785238][T25863] RAX: bddb2c858f8f5a00 RBX: ffff888021323640 RCX: ffff88807bd93c80 [ 2626.793556][T25863] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2626.801873][T25863] RBP: ffffc9001c43f698 R08: 0000000000000003 R09: 0000000000000004 [ 2626.809953][T25863] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffffc9001c43f600 [ 2626.818399][T25863] R13: ffff888055210b30 R14: ffff88805bbf2ff8 R15: 0000000000000001 [ 2626.826470][T25863] FS: 0000000000000000(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 2626.835409][T25863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2626.842449][T25863] CR2: 00000000f7486250 CR3: 0000000020b50000 CR4: 00000000003526f0 [ 2626.850663][T25863] Call Trace: [ 2626.853954][T25863] [ 2626.857198][T25863] idr_for_each+0x1b5/0x290 [ 2626.861717][T25863] ? kasan_quarantine_put+0xdd/0x220 [ 2626.867167][T25863] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 2626.873269][T25863] ? __pfx_idr_for_each+0x10/0x10 [ 2626.878478][T25863] ? kfree+0x19a/0x6d0 [ 2626.882555][T25863] ieee80211_free_hw+0x44/0x3d0 [ 2626.887460][T25863] mac80211_hwsim_del_radio+0x2de/0x460 [ 2626.893026][T25863] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 2626.899426][T25863] hwsim_exit_net+0xef4/0xfb0 [ 2626.904156][T25863] ? hwsim_exit_net+0x333/0xfb0 [ 2626.909382][T25863] ? __pfx_hwsim_exit_net+0x10/0x10 [ 2626.914601][T25863] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 2626.920758][T25863] ops_undo_list+0x49a/0x990 [ 2626.925373][T25863] ? __pfx_ops_undo_list+0x10/0x10 [ 2626.930548][T25863] ? do_raw_spin_unlock+0x122/0x240 [ 2626.935753][T25863] cleanup_net+0x4d8/0x820 [ 2626.940688][T25863] ? __pfx_cleanup_net+0x10/0x10 [ 2626.945660][T25863] ? _raw_spin_unlock_irq+0x23/0x50 [ 2626.951051][T25863] ? process_scheduled_works+0x9ef/0x17b0 [ 2626.956953][T25863] ? process_scheduled_works+0x9ef/0x17b0 [ 2626.962668][T25863] process_scheduled_works+0xae1/0x17b0 [ 2626.968305][T25863] ? __pfx_process_scheduled_works+0x10/0x10 [ 2626.974287][T25863] worker_thread+0x8a0/0xda0 [ 2626.979104][T25863] kthread+0x711/0x8a0 [ 2626.983169][T25863] ? __pfx_worker_thread+0x10/0x10 [ 2626.988345][T25863] ? __pfx_kthread+0x10/0x10 [ 2626.992924][T25863] ? _raw_spin_unlock_irq+0x23/0x50 [ 2626.998278][T25863] ? lockdep_hardirqs_on+0x9c/0x150 [ 2627.003461][T25863] ? __pfx_kthread+0x10/0x10 [ 2627.008074][T25863] ret_from_fork+0x4bc/0x870 [ 2627.012665][T25863] ? __pfx_ret_from_fork+0x10/0x10 [ 2627.017942][T25863] ? __switch_to_asm+0x39/0x70 [ 2627.022692][T25863] ? __switch_to_asm+0x33/0x70 [ 2627.027485][T25863] ? __pfx_kthread+0x10/0x10 [ 2627.032061][T25863] ret_from_fork_asm+0x1a/0x30 [ 2627.037011][T25863] [ 2627.040020][T25863] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2627.047284][T25863] CPU: 0 UID: 0 PID: 25863 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 2627.056894][T25863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2627.066937][T25863] Workqueue: netns cleanup_net [ 2627.071711][T25863] Call Trace: [ 2627.074980][T25863] [ 2627.077896][T25863] dump_stack_lvl+0x99/0x250 [ 2627.082474][T25863] ? __asan_memcpy+0x40/0x70 [ 2627.087045][T25863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2627.092231][T25863] ? __pfx__printk+0x10/0x10 [ 2627.096816][T25863] vpanic+0x237/0x6d0 [ 2627.100786][T25863] ? __pfx_vpanic+0x10/0x10 [ 2627.105280][T25863] panic+0xb9/0xc0 [ 2627.108988][T25863] ? __pfx_panic+0x10/0x10 [ 2627.113395][T25863] __warn+0x31b/0x4b0 [ 2627.117357][T25863] ? ieee80211_free_ack_frame+0x4d/0x60 [ 2627.122887][T25863] ? ieee80211_free_ack_frame+0x4d/0x60 [ 2627.128418][T25863] report_bug+0x2be/0x4f0 [ 2627.132739][T25863] ? ieee80211_free_ack_frame+0x4d/0x60 [ 2627.138276][T25863] ? ieee80211_free_ack_frame+0x4d/0x60 [ 2627.143803][T25863] ? ieee80211_free_ack_frame+0x4f/0x60 [ 2627.149337][T25863] handle_bug+0x84/0x160 [ 2627.153568][T25863] exc_invalid_op+0x1a/0x50 [ 2627.158055][T25863] asm_exc_invalid_op+0x1a/0x20 [ 2627.162887][T25863] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 2627.169112][T25863] Code: 00 00 e8 b6 b7 6c fe 31 c0 5b e9 0e 3e 95 00 cc e8 58 8d 06 f7 c6 05 19 7e ce 04 01 90 48 c7 c7 e0 6f 8a 8c e8 54 aa c9 f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 2627.188702][T25863] RSP: 0018:ffffc9001c43f590 EFLAGS: 00010246 [ 2627.194754][T25863] RAX: bddb2c858f8f5a00 RBX: ffff888021323640 RCX: ffff88807bd93c80 [ 2627.202712][T25863] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2627.210671][T25863] RBP: ffffc9001c43f698 R08: 0000000000000003 R09: 0000000000000004 [ 2627.218628][T25863] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffffc9001c43f600 [ 2627.226607][T25863] R13: ffff888055210b30 R14: ffff88805bbf2ff8 R15: 0000000000000001 [ 2627.234575][T25863] idr_for_each+0x1b5/0x290 [ 2627.239068][T25863] ? kasan_quarantine_put+0xdd/0x220 [ 2627.244341][T25863] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 2627.250406][T25863] ? __pfx_idr_for_each+0x10/0x10 [ 2627.255436][T25863] ? kfree+0x19a/0x6d0 [ 2627.259493][T25863] ieee80211_free_hw+0x44/0x3d0 [ 2627.264340][T25863] mac80211_hwsim_del_radio+0x2de/0x460 [ 2627.269880][T25863] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 2627.275938][T25863] hwsim_exit_net+0xef4/0xfb0 [ 2627.280612][T25863] ? hwsim_exit_net+0x333/0xfb0 [ 2627.285452][T25863] ? __pfx_hwsim_exit_net+0x10/0x10 [ 2627.290636][T25863] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 2627.296432][T25863] ops_undo_list+0x49a/0x990 [ 2627.301026][T25863] ? __pfx_ops_undo_list+0x10/0x10 [ 2627.306119][T25863] ? do_raw_spin_unlock+0x122/0x240 [ 2627.311295][T25863] cleanup_net+0x4d8/0x820 [ 2627.315693][T25863] ? __pfx_cleanup_net+0x10/0x10 [ 2627.320612][T25863] ? _raw_spin_unlock_irq+0x23/0x50 [ 2627.325793][T25863] ? process_scheduled_works+0x9ef/0x17b0 [ 2627.331491][T25863] ? process_scheduled_works+0x9ef/0x17b0 [ 2627.337190][T25863] process_scheduled_works+0xae1/0x17b0 [ 2627.342731][T25863] ? __pfx_process_scheduled_works+0x10/0x10 [ 2627.348701][T25863] worker_thread+0x8a0/0xda0 [ 2627.353291][T25863] kthread+0x711/0x8a0 [ 2627.357343][T25863] ? __pfx_worker_thread+0x10/0x10 [ 2627.362443][T25863] ? __pfx_kthread+0x10/0x10 [ 2627.367013][T25863] ? _raw_spin_unlock_irq+0x23/0x50 [ 2627.372196][T25863] ? lockdep_hardirqs_on+0x9c/0x150 [ 2627.377371][T25863] ? __pfx_kthread+0x10/0x10 [ 2627.381942][T25863] ret_from_fork+0x4bc/0x870 [ 2627.386515][T25863] ? __pfx_ret_from_fork+0x10/0x10 [ 2627.391608][T25863] ? __switch_to_asm+0x39/0x70 [ 2627.396352][T25863] ? __switch_to_asm+0x33/0x70 [ 2627.401112][T25863] ? __pfx_kthread+0x10/0x10 [ 2627.405684][T25863] ret_from_fork_asm+0x1a/0x30 [ 2627.410436][T25863] [ 2627.413710][T25863] Kernel Offset: disabled [ 2627.418016][T25863] Rebooting in 86400 seconds..