last executing test programs: 8.396555542s ago: executing program 0 (id=6594): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x18, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) sendto$inet6(r6, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000200"/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r7, 0x2c9ab000) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r8, 0xffffffffffffffff, 0x43) socket$unix(0x1, 0x5, 0x0) 6.604843617s ago: executing program 1 (id=6602): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x27, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x41c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x0, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x218c, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x40000409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{0x0}, {&(0x7f00000012c0)=""/41, 0x29}], 0x2) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e60, @rand_addr=0x64010100}, 'veth0_macvtap\x00'}) 6.186417548s ago: executing program 4 (id=6604): openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x103a42, 0x32) io_setup(0x7e, &(0x7f0000000080)=0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x101200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r5) syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffee61435bbb375"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) io_submit(r0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000002000000, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000340)='p', 0x300, 0xeffdffffffffffff}]) 5.256830213s ago: executing program 3 (id=6605): inotify_init() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 4.680520256s ago: executing program 4 (id=6606): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 4.442686428s ago: executing program 4 (id=6607): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b1e2a00090582020002000000552f42bea55b5500ec5ad577fa6649198ee41d17b2fcc5f2b2080185ac3b873b1d7a81b204cd60748c3969e05fe7256296c9efab5e9c388c6eb49822f156988d390b08e7e0d986816e43ce70a9ebea324566e250b583c8b2fc50a8037ac877432946806bb96c687ae6cf4fba66263181e346243a17c1b6f3c448d154141c29aec9605cedd960bfc24b8e7fde6c00cd5922be10b6c472"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000940)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="001410"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="71663c86cba5185d6fdfd7a9d9", 0xd}], 0x1, 0x0, 0x0, 0x20024054}], 0x1, 0x44095) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ptrace(0x10, r6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ptrace$setregs(0x1a, r6, 0xc, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r8, r8], &(0x7f0000000580)}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000001340)=@newchain={0x10f4, 0x64, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0x0, 0x4}, {0x4, 0xb}}, [@f_rsvp6={{0xa}, {0x10c4, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x3, 0x2}, {0x9, 0x1, 0xf82}, 0x11, 0x3}}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x200, 0x8, 0x8, {0x7, 0x1, 0x51, 0xbb6, 0x6, 0x4}, {0x7, 0x0, 0x6, 0x1, 0x5, 0x208}, 0x4, 0x9, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x7, 0x5, 0x8, 0x5, 0xfff, 0x80, 0x81, 0x9, 0x5, 0x800000, 0x3, 0x7f, 0x3, 0x9, 0x8, 0x2c, 0x733911c5, 0x4, 0x1, 0x2d, 0x8001, 0x5a8, 0xfffff001, 0x9, 0x1, 0x18, 0x0, 0x6e9f00, 0x7, 0x1, 0x6, 0x72, 0x4, 0x60000000, 0x9, 0x4, 0x2, 0x0, 0x8, 0x10, 0x5d1e9ba5, 0xff, 0x80000000, 0x8, 0x5, 0x8, 0x8, 0x9, 0xfffffffc, 0x101, 0x0, 0x300000, 0xfffffe01, 0xfff, 0xf, 0x202f, 0x10001, 0x6, 0x8, 0x2c, 0x2, 0xc4d, 0x6, 0x3, 0x9, 0x0, 0x9, 0xffff8001, 0x6, 0x1, 0x4, 0x9, 0xabb4, 0x1000, 0x0, 0x10, 0xb, 0x4, 0x17da, 0x0, 0x80000001, 0x1, 0xb6d8, 0x4, 0x6, 0x1, 0x8, 0x8, 0x3, 0x4, 0x80, 0xc, 0x6, 0x6, 0x6, 0x5, 0x7, 0x8, 0x7, 0x1, 0x6, 0x100, 0x7, 0x5, 0x80000000, 0x1, 0x3, 0x3, 0x1000000, 0x0, 0x7, 0x5, 0x2, 0x81ad, 0xffff7ffb, 0xfffffff7, 0x40, 0x7, 0x8, 0x5, 0xf3, 0x4e91, 0x7, 0x4, 0x8, 0xb, 0x6, 0x100, 0x0, 0x5, 0x6, 0x1ff, 0x6, 0xa2, 0xbb, 0x2, 0x400, 0x10, 0x0, 0x2, 0x0, 0x6, 0x101, 0xfffffffb, 0x7a99bca, 0x8, 0x5, 0x3, 0xfffffe4f, 0x5, 0x9, 0x2, 0x7, 0x8, 0x9, 0x4, 0x400, 0x8, 0x101, 0xbc7, 0x8, 0x7f, 0x10, 0x4, 0x7, 0xfffffff6, 0x8, 0x3, 0x100, 0xe, 0x430, 0xfff, 0x6, 0x7, 0x5, 0x7fffffff, 0x6, 0x10, 0x9, 0xd90, 0x3, 0x9adb, 0x6a9, 0x80000000, 0x5, 0xa2, 0x5, 0x2c40bb6d, 0x2, 0x4, 0x401, 0x9, 0xfffffff7, 0x10001, 0x3ff, 0x800, 0x35, 0xffffffff, 0x7, 0xffffffff, 0x80, 0x80000001, 0xffff, 0x1, 0x1, 0x80000001, 0xff, 0x7, 0x4, 0xaf, 0xfffffffc, 0x96, 0x401, 0xffffffff, 0xfffffffe, 0xf, 0x8, 0x5, 0x3, 0x3, 0x2, 0xfdc, 0x2, 0x1000, 0x3, 0xe, 0xda4, 0x0, 0x5, 0x2, 0x4, 0x8, 0x4, 0x10000, 0xd51, 0x4, 0x7a8, 0x7, 0x7, 0x7, 0x36de, 0x6, 0xffffc8a9, 0x8, 0x4, 0x9, 0x80000000, 0x8e1, 0x3, 0x0, 0x4, 0x81, 0x10, 0x0, 0x8]}]}, @TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2f40fd4fac8d9be6, 0x9}}, @TCA_RSVP_POLICE={0xc18, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1000, 0x4, 0x5dc, 0x7, 0x8001, 0x2, 0x5, 0x100, 0x5, 0x9, 0x2, 0x0, 0x5, 0x6, 0x4, 0xffff, 0x1, 0x2, 0xb7bb, 0x6, 0xe, 0x1, 0x5, 0x7ff, 0x3, 0xc78, 0x3, 0xad, 0x60, 0x6, 0x5, 0xf, 0xff, 0x9, 0x6, 0x8, 0xd, 0x1, 0x5, 0x7, 0xfffffffa, 0x2, 0xffff, 0x555, 0xe, 0xfc5, 0x40, 0x2cf, 0xfffffff8, 0x9, 0x8, 0x2d, 0x1, 0x6, 0x9, 0x70, 0xf8000000, 0xad, 0x2, 0x3ff, 0x9cd, 0x3, 0x2, 0x3, 0xa6c, 0x101, 0x4, 0xfffffff5, 0x3, 0x3, 0x0, 0xfffffffc, 0x4, 0xf, 0x9, 0x0, 0x0, 0xfffffff7, 0x7, 0x4, 0xb007, 0xffffffd9, 0x4, 0x8, 0x7, 0x18, 0x80000000, 0x3, 0x7fff, 0x80000001, 0xf15, 0xf, 0x7, 0x0, 0x8, 0x9c5f, 0x8, 0x9, 0x8b4, 0x0, 0xffffffff, 0x729c, 0x8000, 0x4, 0x4, 0x6, 0x9, 0xfffffff9, 0x100, 0x1, 0x8, 0xff, 0x93, 0x10000, 0x8000, 0x0, 0x7f, 0x6, 0xfffffff8, 0x2dd, 0x5, 0x3ff, 0x4f4, 0x5, 0x1, 0x6, 0x9, 0x9, 0xffffe307, 0x8, 0x4, 0x0, 0x6, 0x10001, 0x5, 0x7, 0x9a, 0x7, 0x5, 0xffffffff, 0x4, 0xfffffffb, 0x800, 0x909, 0x6, 0x3, 0x8, 0x95, 0xc7, 0x4, 0x0, 0x6, 0x5, 0x7, 0x7ff, 0x7, 0x9a, 0x5, 0x3, 0x4, 0x8, 0x5, 0x3, 0xe, 0x80000000, 0xc2a4, 0x7fff, 0x3, 0x6, 0x5, 0x4, 0x2, 0x1, 0x2, 0xfffffff8, 0x3f, 0x40, 0x6, 0x3, 0xc0000, 0xa, 0x1, 0xc8980000, 0x100, 0x9, 0x2, 0x1, 0x4, 0x1, 0x4, 0x8001, 0x0, 0x7, 0x16, 0x6, 0x1, 0x3, 0x7ff, 0x4, 0x7, 0x100, 0x3, 0x1000, 0x86d, 0x0, 0x998, 0xaa2, 0x9, 0xf7, 0x8, 0x4, 0xff, 0x0, 0x9, 0x9, 0x200, 0xffff, 0x4, 0x80, 0x400, 0x7, 0x1, 0x3, 0x5, 0x1, 0x4, 0x8, 0xffffffff, 0x2, 0xd, 0x8, 0xf7e, 0x7f, 0x6, 0xffff, 0x0, 0x3, 0x5, 0x4, 0x100, 0x20005, 0x7fffffff, 0x5, 0x5, 0x6, 0xe, 0xf0e, 0x4, 0x6, 0x5, 0x80000000, 0x171, 0x0, 0x7, 0xd784]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x359f, 0x4, 0x1, 0x38cf, 0x5, 0x0, 0x10000, 0xdb, 0x3f2, 0xffffff4e, 0x4, 0x5, 0x6, 0xeb4, 0x5, 0x7, 0x450, 0x0, 0x4, 0x401, 0x50, 0x72a8, 0xfffffffd, 0x6, 0x5, 0x6, 0x6, 0xa, 0xffffffff, 0x9, 0x2, 0x81, 0xa944, 0xffff, 0x10, 0x8, 0x3e, 0x4101, 0x97a, 0xe9, 0x2, 0x81, 0x4, 0x6, 0x1, 0xd9aa, 0x1, 0xfffffffc, 0x8, 0x2, 0x1, 0xbf, 0x1, 0x5, 0x7d8, 0x6, 0x9, 0x6, 0x2, 0x100, 0x2, 0x8f1, 0x5, 0x3, 0x7ff, 0x4, 0x5, 0x4, 0x9, 0x1, 0x8, 0x0, 0x9, 0x3, 0x800, 0x7, 0x8000, 0x3, 0x6, 0x80, 0x5, 0x8, 0x0, 0x3, 0x5, 0x4, 0xa898, 0x4, 0xd, 0x1, 0x5c909ec9, 0x7, 0x14b6c17, 0x2, 0x0, 0x6, 0x2, 0x5, 0x9, 0x8, 0x6, 0xfffffeff, 0x4, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9, 0x70617654, 0xb, 0x1ff, 0x9, 0x0, 0xb2f, 0xff, 0x0, 0x81, 0x2, 0x7fff, 0x7, 0x4, 0x10000, 0x6fef, 0x40, 0x21, 0x3, 0x4, 0x1, 0x28ab, 0x40, 0x1ff, 0x1000, 0xb9, 0xfadb, 0x8, 0x101, 0x80, 0xffff, 0x7, 0x2, 0x7f, 0x0, 0x1, 0x6, 0xffffffff, 0xfffffffb, 0x5, 0xdc9, 0x7f, 0x3, 0x40, 0x4a9c, 0x1, 0x1, 0x4, 0x1, 0x9, 0x0, 0xa01, 0x80000000, 0x2, 0x0, 0xfff, 0x5, 0x1, 0x7, 0x9, 0x9, 0xde0, 0x200, 0xd8a40000, 0x3, 0x1, 0x4, 0x8, 0x200, 0x9, 0x0, 0x40, 0xfffffffa, 0x0, 0xb721, 0xd, 0x9, 0x3, 0x0, 0x5e, 0x76, 0xfffffff8, 0x0, 0x6, 0x7, 0x5, 0x7, 0x9, 0xff, 0xfffff7ff, 0xfffffffd, 0x6, 0xd4, 0x4, 0x1, 0x7, 0x9, 0x8, 0x8, 0x4d5d, 0x9, 0x5, 0x0, 0x7, 0x5, 0x6, 0x0, 0x3, 0x3e, 0x4, 0x5, 0xfffffff9, 0x1, 0x2, 0x4, 0x5, 0xffff718a, 0x5, 0x2d42, 0x554f, 0xbed, 0x40, 0x2, 0x4, 0x3, 0x1bfabf57, 0x1000, 0x9, 0xc2, 0x4, 0x6, 0x7, 0x43f, 0x9, 0x40, 0x6db, 0x4, 0x2, 0x0, 0xe, 0x3, 0x8, 0x9, 0x828c, 0x80000000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x80000001, 0x404, 0x10, 0x7, 0x0, 0x40, 0x4, 0x5, 0x5, 0x6360, 0x1acf, 0x0, 0x51, 0x50, 0x1ff, 0x6, 0x9, 0x9, 0x7, 0x3, 0x7, 0xffffffff, 0x7, 0x200, 0x6, 0xf4, 0x101, 0x1b1, 0xfffffff9, 0x81, 0x4, 0x4, 0xb3, 0x7, 0x88, 0xe, 0x78, 0x5, 0x2, 0xbdf, 0x1359, 0x80000001, 0x5, 0xfffffff7, 0x6, 0x4, 0x4, 0x8001, 0xfffffffa, 0x9, 0x9, 0x7, 0x6, 0x6, 0x5, 0x101, 0x8, 0x2, 0x3, 0x6, 0xb, 0x5, 0x5, 0x0, 0x0, 0x3, 0x81, 0x0, 0x7, 0x3ff, 0x101, 0xfffffff7, 0x7, 0x3, 0x101, 0xfffffffc, 0x1, 0x1, 0x5, 0x2faa, 0xcd5, 0x0, 0x2, 0x1, 0xcb, 0xfffffffa, 0xfffffa17, 0x5, 0x10000, 0x5, 0x4, 0x0, 0x10000, 0x81, 0x4, 0x2, 0x5, 0x1, 0x401, 0x3, 0x8, 0x1, 0x3ff, 0x692ae797, 0x1ff, 0x6, 0x400, 0x3, 0x4, 0x8, 0x8000, 0x8, 0x40, 0x1, 0x1ff, 0x6, 0x8, 0xa, 0xfff, 0x7f, 0x6, 0x100, 0x4, 0x4, 0x4, 0x8, 0x2, 0x1, 0x9, 0x4, 0x2, 0x800, 0x9, 0x0, 0xab9, 0x400, 0x3, 0x1, 0x0, 0x5, 0x6e, 0x5, 0xff, 0xdca, 0x88b, 0x9, 0x9b16, 0x80, 0x1, 0x3ff, 0x6d5, 0x9, 0x9, 0x6, 0x6, 0x9, 0x80000001, 0x0, 0xf09, 0x2, 0x30e, 0x7, 0xc, 0x80000001, 0x5, 0x1, 0x6, 0x0, 0x7, 0x1, 0x5, 0x1, 0x0, 0x7ff, 0x8a, 0x10, 0x3, 0x80, 0x0, 0x4f6, 0xdf, 0x4, 0x2, 0x6, 0xc000000, 0xfffffff7, 0x3, 0xf, 0xf7f, 0x365, 0x8, 0x2, 0x7f, 0x2, 0x9, 0x7, 0x5, 0x2000009, 0xe, 0x5, 0xffff, 0x3, 0x8, 0x4, 0x4, 0x5, 0x56, 0x4, 0x1, 0x4, 0x4, 0x2, 0x6, 0x4, 0x0, 0x7, 0x80000000, 0x257e1bf9, 0xc56, 0x9, 0x80000000, 0x7ff, 0x8, 0xe4000000, 0x7, 0x3, 0xc, 0xfffffff9, 0xfffffff9, 0x2, 0x5, 0x5, 0x5, 0x4, 0x80000001, 0xfc, 0x6, 0x4, 0x2, 0x0, 0x100, 0x6, 0x0, 0x8, 0x6, 0x9014, 0x5, 0x8, 0x800, 0x6, 0x3, 0xff, 0xffff, 0x0, 0x7]}]}, @TCA_RSVP_DST={0x14, 0x2, @loopback}]}}]}, 0x10f4}, 0x1, 0x0, 0x0, 0x40040}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004000000000000000eb0f00008500000069000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1a, &(0x7f0000000200)=""/26, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 3.888587044s ago: executing program 1 (id=6608): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100160bb41082e0c00073be1010203010902240001a200000009046101022353830309250303ff0308400409058503"], 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000440)='Y', 0x1}], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x5d04441b506ab276, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, [], [{{0x9, 0x5, 0x8a, 0x13, 0x8, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000340)=@string={0x4, 0x3, "92b5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xb03137cc5c403bd1}}, {0x0, 0x0}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) r4 = socket(0x15, 0x5, 0x0) connect$can_j1939(r4, &(0x7f0000000040)={0xa, 0x0, 0xffffc0fe}, 0x1c) getsockname$packet(r4, 0x0, &(0x7f00000001c0)) r5 = socket(0x3, 0x2, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x882}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) 3.787639482s ago: executing program 3 (id=6610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000003380)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x1000, 0x800}, {0x0}, &(0x7f0000003300), 0x0, 0x1}}], 0x90}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20cc000000000000feb2ac7110f31d9e6b7c000008004280040008000c000900020000060000000000000080"], 0x2c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}]}], {0x14}}, 0x94}}, 0x4000000) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, &(0x7f0000000240)) listen(r4, 0x3) r6 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x9e92, 0x10100, 0x0, 0x86}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r4, 0x0}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r9, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) write$FUSE_NOTIFY_STORE(r9, &(0x7f0000000040)=ANY=[], 0x28) close(r9) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000002c0)=@arm64={0x5, 0x40, 0x1, '\x00', 0x1}) close(r0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x80489439, &(0x7f0000000100)) 3.674032347s ago: executing program 0 (id=6611): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000002c0)={@empty, @initdev}, &(0x7f0000000340)=0x8) r1 = open(&(0x7f0000000140)='./file0\x00', 0x60840, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000240)={0x9, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x30383653}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000040), 0x10) sendmsg$netlink(r4, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0x7, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x33, 0x0, 0x1, 0xffff, '\x00', 0x0, r1, 0x2, 0x1, 0x2}, 0x50) close_range(r3, r0, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x2}, &(0x7f00000001c0)=0x8) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) lseek(r7, 0xfffffffffffffffd, 0x1) readv(r7, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/97, 0x61}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x2, r0}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"6dcfee8aed912dee13aa7ad4c65c23c71143b9dc3956471a1c3d8f649da7c8d3", r8}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x84, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x4, 0xfffffffa, 0x7d}, 0x2c) 3.548979234s ago: executing program 3 (id=6613): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) (fail_nth: 4) 3.482940519s ago: executing program 0 (id=6614): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x63, 0x8b}, 0x0) mq_open(&(0x7f00000001c0)='batadv_s\x8e(\x85ZL\x7f\x89%\x85fRTZ\xbb', 0x8c2, 0x30, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_io_uring_setup(0x38ff, &(0x7f0000000080)={0x0, 0x3c9f, 0x20}, &(0x7f0000000540), &(0x7f0000000100)) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x1}}) socket$nl_generic(0x10, 0x3, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000c40)={0x2000000b}) 3.432668311s ago: executing program 2 (id=6615): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006d0001", @ANYRESDEC=r0], 0x20}}, 0x0) r1 = socket(0x28, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x73, @multicast1, 0x4e20, 0x4, 'lc\x00', 0x0, 0x2, 0x6c}, 0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r2, r2, 0x2) statx(r2, 0x0, 0x1000, 0x6000, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xa, 0x8, 0x1fe, 0x5, 0xc, 0x14e, "d97f1817054a744ec3a9"}}, 0x170) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) 3.080771197s ago: executing program 0 (id=6616): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f00000000c0)={0x38, 0x0, 0x40, 0xeffffffe, 0xc, 0x5, 0x0, 0x3fe, 0x88d, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002500)={0xe, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbeb, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) io_setup(0x800, &(0x7f0000000440)) msgsnd(0x0, &(0x7f0000000480)={0x1, "d4998204c8be3a1ea0fc7b3a06d189298d951a4bdc79cd5d691ed71674ecf277e3b72f2b7cca204485352181d4f09ff887dad08fab2ad6a24a0bfd8f2afaf746d15265777f1505f837"}, 0x51, 0x0) 3.08059247s ago: executing program 3 (id=6617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="06001200000000000600b50085017daa0a000600ffffffffffff00"], 0x48}}, 0x0) 2.962335971s ago: executing program 2 (id=6618): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000002c0)={0xffffff7f, 0x10000, 0xffff0001, 0x9, 0x19, "6c2255d4af99f0da8b84225fb6cdcde167d499"}) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x28, 0x0, 0xffffffffffff6260, {{0x0, 0x6c2, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1}) 2.958787949s ago: executing program 3 (id=6619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r3 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x8b32]}, &(0x7f0000000200)=0x54) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) 2.604603671s ago: executing program 2 (id=6620): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) mkdirat(0xffffffffffffffff, 0x0, 0x60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) syz_emit_ethernet(0x321, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "d50ff6", 0x2eb, 0x2f, 0x0, @local, @rand_addr=' \x01\x00', {[@srh={0x2c, 0x4, 0x4, 0x2, 0x80, 0x8, 0x9, [@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}]}, @routing={0x2f, 0xe, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x3a, 0x4, 0x0, 0x0, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x17}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xf5, 0x1, [0x1, 0x100], "472c14d8fed37ce2fcb992b1e35e51e0cda26e8b806e5f064f7dc836db77c7d8e2756ce4cdf64a4a5e3032b1830f194afa2c9790db363e73a26c51e6593e84d9d4fb6895bb0496456e3c68d5b97dd17f886d3c587dfaeb1436efd0dd449977795957f62cf0432ac8b81f5e49d61fdb1c0e38a8572c19b9a23f020d7648a5007f5082bc8c57f8f9dd9081269f3f1013d0f757e3006bbec2ef692b0181e25f817043a7ac48546a36c39e87cb52f2a132f51186e4eb96ceef1b8500f58663eef843578be07f10e63ff21eec5a805b05f39ca7d01581570ca1a4c8715508015792c6bb74c0e45c79483608e4d32cc1e70732653819518d"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "3fe9d8bfffe27c4d6478ffc00e93b961712e540d6fe19f23f3647a617295c50501808b66729eeff82c85bb7d95af3b53e5d994cf79391f09236afc03e8bee02033b7f5074e4241c5940577ebcc5f66e66e59dc0d0f516ec9ca0aec"}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x4, 0x1, 0x0, 0x1, 0x0, 0x68}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x1, 0xa}, 0x2, {0x5, 0x1, 0x2, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "4aeefc9b9fe9f6932391d2b896226cc1e89f76aa9b1c9ab2f6f1afe963ca2c5cef38f1c2b09c437bd484a6c42b95350b6ef88eeb0ea886be5897ca4ffbb7cae31e35af7a70d76c991efe2a3de67fb1bc44d7b0c2561bf0728675cc507d933b2304e4f24bbb2a91e08aeb44ca542c137d73d18bc0922ff4c2270b83cf56cec50935b5899c4f4d36fdd39903"}}}}}}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.981481216s ago: executing program 1 (id=6621): r0 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@gettaction={0x20, 0x5a, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x4, 0x0, 0x80, 0xfa000, 0x1a5e00}) 1.466811477s ago: executing program 1 (id=6622): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 1.34616697s ago: executing program 2 (id=6623): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x2000) ioctl$EVIOCGVERSION(r1, 0x5452, &(0x7f0000002200)=""/188) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003801000008008000300000002"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10010c00}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) (async) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r8, &(0x7f00000001c0)='1', 0x1) (async) write$char_usb(r8, &(0x7f00000001c0)='1', 0x1) syz_usb_disconnect(r7) ioctl$TIOCNXCL(r1, 0x540d) socket$unix(0x1, 0x5, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000380)) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 1.171225683s ago: executing program 1 (id=6624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x1c, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fe80000000000000000000000000003bfe8000000000000000000000000000aa0000000000000c9c0a00753b2c3b9049", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4804) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="18000008000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9}, 0x94) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r5 = dup(r4) write$cgroup_subtree(r5, &(0x7f00000005c0)=ANY=[], 0x32600) write$P9_RRENAME(r5, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) sendmsg$kcm(r5, &(0x7f0000000840)={&(0x7f00000002c0)=@nl=@kern={0x10, 0x0, 0x0, 0x808000}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000500)="d4f3274e3ae7406324959463a3f75d91a31164ea228049efe9556d9bc245d87666afb5227d4c0374cfd004bd6e9277da4d85e1c1efedfc2e9027c09b456cc6c6c23a334d26f862fc72955ab3e799e94de90169369222ac4872103f57b2be6720fd46674d7028a26437009de8ee290fc3200d398766a1828b", 0x78}, {&(0x7f00000005c0)="edfd4148d4e16cbec47ff9afd096739f9825d72765ef11c238632394d83f2a50e43abf16c5eb226330ab960b41488784454131cb18f3577fadf2b17a24b7a0ca9184fc3d08c0c155b3c372fe0c3b9f5226c5346fa7cfa230149ca965685986b17dbafa4a05a3154e30ec9292f5352e1f5bb7b8c73ad1d6b6ab4742d234113060033770002bcca7656bff7cc08d2122623a8598103d3f44fdb734d18fe9be5b9276456a9960a38bd945357a2c766d42eaaf15789e145ff05181d96ecda0a01a19fbc6", 0xc2}, {&(0x7f0000000080)="546b581a7f80a34880f5f79791f9015c9cb1fd3bde599478a75c85241453eb2dba3d3b88586d78e4160bd1c524e2", 0x2e}, {&(0x7f0000000340)="9346422ee21c04bbf82fb39d6de4f85f0b757bfcc814be62", 0x18}], 0x4, &(0x7f00000006c0)=[{0x80, 0x104, 0x0, "aa6f0fcfb76c2c1c0a176e685bca55ce893998b2295154364a4888d1a5e6e897a71bea63e3775166782f0088a79f14c2977ea7966f06c8679f813e235b113c04c9e8cc5e64d3d2d17b8c91e9d68c6ec5668107230b5fd2f40a0e38e72846835844a8a5eebff3db82a282f7"}, {0xc0, 0x1, 0x3, "66788f83931cdd5fa17151d388bf4f59bf19f99cbe867c8cc3fcd68e824e7f50c83e908ca22d7e1590dde6aa2045203b634e79d03332b645fadfb8668b3487c5c046c7990fc924846c633e5ab2fd7d9e349d4a72d54fc4ff38231ebdb90d3bc0291b71e48f3f1f275e09a15d623983a7940bfc596f7acdb5c38f3157ecd5c0b59d461448327e41cd6569f8f6a4e523c80fd389d008eef8f387d7e9671c046a839f05166af419d79eeeed0116"}, {0x30, 0x116, 0x7, "150e8bfcdf1c874cd1a0612a983c39100e40964db64f69846d47103c81edfd"}], 0x170}, 0x81) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_io_uring_complete(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000400700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff004c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c000080080003400000000210000280070002"], 0xe0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @private0, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 935.007837ms ago: executing program 4 (id=6625): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x80000001, 0x3a, '\xbb\xbb\xbb\xbb\xbb\xbb', 0x3a, '/dev/kvm\x00', 0x3a, './cgroup.cpu/cpuset.cpus'}, 0x47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c08d3fc140820004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 933.373913ms ago: executing program 2 (id=6626): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x63, 0x8b}, 0x0) mq_open(&(0x7f00000001c0)='batadv_s\x8e(\x85ZL\x7f\x89%\x85fRTZ\xbb', 0x8c2, 0x30, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_io_uring_setup(0x38ff, &(0x7f0000000080)={0x0, 0x3c9f, 0x20}, &(0x7f0000000540), &(0x7f0000000100)) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x1}}) socket$nl_generic(0x10, 0x3, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000c40)={0x2000000b}) 858.22072ms ago: executing program 0 (id=6627): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) io_setup(0x81, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f00000000c0)={0x10000000000, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 776.696577ms ago: executing program 3 (id=6628): syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000300090000000000000048010203010902120001049570810904008100ffffff02c4d46ae52242a42a0439d67b31318fff7dee778f653f773ca465a22c46d07094ca687058e35ec5a58cc60783ea7be779f0fd260eea49fe7024a470ed798b206e661d9cc51ec05314e004"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) syz_usb_connect(0x3, 0x5f, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0xe0, 0x2c, 0xd27, 0x30bd25, 0x25df9bfa, {0x0, 0x0, 0x0, r7, {0xd, 0xe}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xa8, 0x2, [@TCA_ROUTE4_ACT={0xa4, 0x6, [@m_csum={0xa0, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x8, 0x7}, 0x39}}]}, {0x55, 0x6, "65c7003a223079263fe3100fdfa989570b1dfc0a6f986b5aba508994790194d00d6e0ffaf95910329bd5bab626a288ec9e215a76a749defaf180b71c731321ed43df0f81e4846890c94b709286425f269d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{}, {0x4}, {0x6, 0x9}]}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x101, 0x5, 0x5, 0xfffb, 0x8001, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x4}}, 0x20000000, 0xf4, 0x9, 0x0, 0x4}}, &(0x7f00000001c0)=0xb0) 736.214265ms ago: executing program 4 (id=6629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="06001200000000000600b50085017daa0a000600ffffffffffff00"], 0x48}}, 0x0) 726.535045ms ago: executing program 2 (id=6630): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f00000000c0)={0x38, 0x0, 0x40, 0xeffffffe, 0xc, 0x5, 0x0, 0x3fe, 0x88d, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002500)={0xe, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbeb, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) io_setup(0x800, &(0x7f0000000440)) msgsnd(0x0, &(0x7f0000000480)={0x1, "d4998204c8be3a1ea0fc7b3a06d189298d951a4bdc79cd5d691ed71674ecf277e3b72f2b7cca204485352181d4f09ff887dad08fab2ad6a24a0bfd8f2afaf746d15265777f1505f837"}, 0x51, 0x0) 652.635373ms ago: executing program 4 (id=6631): r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r6, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6b5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4006810) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000340)=0x0, &(0x7f00000003c0)) 596.487789ms ago: executing program 0 (id=6632): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000f9904d227d651019ab592200b1f3d6d290f58b38d2ce982da1ce126ac7a3d7d06545fb7b2dc36b93ed3d11e8d9dc924cee81dab2741be093b0bd0d6d03043a883652b6963afe43f31180a55e23f5407a7ef7dc6b7f01c24b8fd7901a2a6a210677638273dbf014a1d22f5b3e5f6a91e7c2bb39be5f1d09f54a54dab5a0331a4f3913575e49a8e3f691ef0c7ce75325d5831ec7c80eca9ad2fd82d741c6eaf582d2af4ef81f87b19e694d7dcd0929b60f1c846a12de6442563c844d341b", @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf250300000005000300fe000000180001801400020073797a5f74756e0000000000000000000500020007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000a90000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="b8001000000f23d00f21f8350000000b0f23f8f30f2b270f79df670f088fcaf8103e00800000b98c020000b88e000000ba000000000f30663e0f23d4f3824211000fa55256c4e279341d22000000", 0xff24}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r6, &(0x7f00000000c0)='.\x02\x00', 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x8, r7, 0x0, &(0x7f00003de000/0x2000)=nil, 0x2000, 0x470d6335}) 0s ago: executing program 1 (id=6633): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) mkdirat(0xffffffffffffffff, 0x0, 0x60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) syz_emit_ethernet(0x321, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "d50ff6", 0x2eb, 0x2f, 0x0, @local, @rand_addr=' \x01\x00', {[@srh={0x2c, 0x4, 0x4, 0x2, 0x80, 0x8, 0x9, [@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}]}, @routing={0x2f, 0xe, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x3a, 0x4, 0x0, 0x0, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x17}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xf5, 0x1, [0x1, 0x100], "472c14d8fed37ce2fcb992b1e35e51e0cda26e8b806e5f064f7dc836db77c7d8e2756ce4cdf64a4a5e3032b1830f194afa2c9790db363e73a26c51e6593e84d9d4fb6895bb0496456e3c68d5b97dd17f886d3c587dfaeb1436efd0dd449977795957f62cf0432ac8b81f5e49d61fdb1c0e38a8572c19b9a23f020d7648a5007f5082bc8c57f8f9dd9081269f3f1013d0f757e3006bbec2ef692b0181e25f817043a7ac48546a36c39e87cb52f2a132f51186e4eb96ceef1b8500f58663eef843578be07f10e63ff21eec5a805b05f39ca7d01581570ca1a4c8715508015792c6bb74c0e45c79483608e4d32cc1e70732653819518d"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "3fe9d8bfffe27c4d6478ffc00e93b961712e540d6fe19f23f3647a617295c50501808b66729eeff82c85bb7d95af3b53e5d994cf79391f09236afc03e8bee02033b7f5074e4241c5940577ebcc5f66e66e59dc0d0f516ec9ca0aec"}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x4, 0x1, 0x0, 0x1, 0x0, 0x68}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x1, 0xa}, 0x2, {0x5, 0x1, 0x2, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "4aeefc9b9fe9f6932391d2b896226cc1e89f76aa9b1c9ab2f6f1afe963ca2c5cef38f1c2b09c437bd484a6c42b95350b6ef88eeb0ea886be5897ca4ffbb7cae31e35af7a70d76c991efe2a3de67fb1bc44d7b0c2561bf0728675cc507d933b2304e4f24bbb2a91e08aeb44ca542c137d73d18bc0922ff4c2270b83cf56cec50935b5899c4f4d36fdd39903"}}}}}}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 1316.939981][T26336] folio_alloc_mpol_noprof+0x39/0x70 [ 1316.939999][T26336] shmem_alloc_and_add_folio+0x447/0xf60 [ 1316.940016][T26336] ? filemap_get_entry+0xad/0x2f0 [ 1316.940031][T26336] ? filemap_get_entry+0xad/0x2f0 [ 1316.940045][T26336] ? filemap_get_entry+0xad/0x2f0 [ 1316.940061][T26336] ? filemap_get_entry+0x28f/0x2f0 [ 1316.940078][T26336] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1316.940095][T26336] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 1316.940112][T26336] shmem_get_folio_gfp+0x59d/0x1660 [ 1316.940132][T26336] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1316.940149][T26336] shmem_write_begin+0xf7/0x2b0 [ 1316.940167][T26336] generic_perform_write+0x2c2/0x900 [ 1316.940185][T26336] ? __pfx_generic_perform_write+0x10/0x10 [ 1316.940195][T26336] ? down_write+0x162/0x1f0 [ 1316.940213][T26336] ? file_update_time+0x2da/0x490 [ 1316.940228][T26336] shmem_file_write_iter+0xf8/0x120 [ 1316.940244][T26336] iter_file_splice_write+0x972/0x10e0 [ 1316.940275][T26336] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1316.940293][T26336] ? rcu_read_lock_any_held+0xb3/0x120 [ 1316.940312][T26336] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1316.940328][T26336] direct_splice_actor+0xfe/0x160 [ 1316.940346][T26336] splice_direct_to_actor+0x5a8/0xcc0 [ 1316.940372][T26336] ? __pfx_direct_splice_actor+0x10/0x10 [ 1316.940387][T26336] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1316.940416][T26336] do_splice_direct+0x181/0x270 [ 1316.940433][T26336] ? __pfx_do_splice_direct+0x10/0x10 [ 1316.940449][T26336] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1316.940462][T26336] ? rw_verify_area+0x255/0x4d0 [ 1316.940481][T26336] do_sendfile+0x4da/0x7e0 [ 1316.940492][T26336] ? __pfx_vfs_write+0x10/0x10 [ 1316.940509][T26336] ? __pfx_do_sendfile+0x10/0x10 [ 1316.940520][T26336] ? __fget_files+0x3a0/0x420 [ 1316.940536][T26336] __se_sys_sendfile64+0x13e/0x190 [ 1316.940547][T26336] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1316.940560][T26336] ? do_syscall_64+0xbe/0xfa0 [ 1316.940575][T26336] do_syscall_64+0xfa/0xfa0 [ 1316.940587][T26336] ? lockdep_hardirqs_on+0x9c/0x150 [ 1316.940599][T26336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.940610][T26336] ? clear_bhb_loop+0x60/0xb0 [ 1316.940622][T26336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.940632][T26336] RIP: 0033:0x7f1f6cd8eec9 [ 1316.940643][T26336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1316.940652][T26336] RSP: 002b:00007f1f6dcf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1316.940664][T26336] RAX: ffffffffffffffda RBX: 00007f1f6cfe5fa0 RCX: 00007f1f6cd8eec9 [ 1316.940672][T26336] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1316.940678][T26336] RBP: 00007f1f6dcf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.940684][T26336] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1316.940691][T26336] R13: 00007f1f6cfe6038 R14: 00007f1f6cfe5fa0 R15: 00007f1f6d10fa28 [ 1316.940708][T26336] [ 1317.234808][T26082] usb 3-1: USB disconnect, device number 6 [ 1318.078111][T26355] input: syz0 as /devices/virtual/input/input85 [ 1318.141691][T20047] Bluetooth: hci4: command tx timeout [ 1318.975185][T26371] tipc: Started in network mode [ 1318.975206][T26371] tipc: Node identity 1aabad819852, cluster identity 4711 [ 1318.975334][T26371] tipc: Enabled bearer , priority 0 [ 1318.980904][T26371] syzkaller0: entered promiscuous mode [ 1318.980927][T26371] syzkaller0: entered allmulticast mode [ 1318.994476][T26371] tipc: Resetting bearer [ 1319.534976][T26369] tipc: Resetting bearer [ 1319.578554][T26369] tipc: Disabling bearer [ 1320.092198][T26409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5823'. [ 1320.187468][T26082] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1320.217511][T20047] Bluetooth: hci4: command 0x0405 tx timeout [ 1320.253335][T26414] random: crng reseeded on system resumption [ 1320.347313][T26082] usb 1-1: Using ep0 maxpacket: 16 [ 1320.360025][T26082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1320.383029][T26082] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1320.416267][T26082] usb 1-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1320.427003][T26082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.437855][T26423] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5829'. [ 1320.449577][T26082] usb 1-1: config 0 descriptor?? [ 1320.700861][T26082] usbhid 1-1:0.0: can't add hid device: -71 [ 1320.711677][T26433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5834'. [ 1320.717717][T26082] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1320.747047][T26082] usb 1-1: USB disconnect, device number 48 [ 1322.071364][T26496] netlink: 'syz.4.5862': attribute type 1 has an invalid length. [ 1322.557455][T20047] Bluetooth: hci1: unexpected event 0x3e length: 760 > 260 [ 1322.687454][ T30] audit: type=1326 audit(1760092608.191:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1322.717502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1322.778602][ T30] audit: type=1326 audit(1760092608.191:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1322.801076][ C1] vkms_vblank_simulate: vblank timer overrun [ 1322.813762][ T30] audit: type=1326 audit(1760092608.231:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1322.837412][T26525] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1322.843953][T26525] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1322.867578][ T30] audit: type=1326 audit(1760092608.231:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1322.869425][T26525] vhci_hcd vhci_hcd.0: Device attached [ 1322.939420][T26529] vhci_hcd: connection closed [ 1322.941767][ T13] vhci_hcd: stop threads [ 1322.953265][ T13] vhci_hcd: release socket [ 1322.963252][T26541] tipc: Cannot configure node identity twice [ 1322.964891][ T13] vhci_hcd: disconnect device [ 1323.432546][T26567] vlan2: entered allmulticast mode [ 1323.438036][T26567] bond0: entered allmulticast mode [ 1323.443182][T26567] bond_slave_0: entered allmulticast mode [ 1323.449677][T26567] bond_slave_1: entered allmulticast mode [ 1323.657581][T11092] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1323.838258][T11092] usb 2-1: Using ep0 maxpacket: 16 [ 1323.858692][T11092] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.893606][T11092] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1323.936682][T11092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1323.969724][T11092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.989243][T11092] usb 2-1: Product: syz [ 1323.993495][T26584] loop7: detected capacity change from 7 to 0 [ 1323.998869][T11092] usb 2-1: Manufacturer: syz [ 1324.008680][T11092] usb 2-1: SerialNumber: syz [ 1324.028518][T26594] sctp: [Deprecated]: syz.0.5903 (pid 26594) Use of int in max_burst socket option. [ 1324.028518][T26594] Use struct sctp_assoc_value instead [ 1324.060610][T20047] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1324.075467][T20047] Bluetooth: hci3: Injecting HCI hardware error event [ 1324.086191][ T52] Bluetooth: hci3: hardware error 0x00 [ 1324.192775][T26600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5902'. [ 1324.449961][T11092] usb 2-1: cannot find UAC_HEADER [ 1324.500872][T11092] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1324.529103][T11092] usb 2-1: USB disconnect, device number 39 [ 1324.565602][ T6513] udevd[6513]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1324.667426][T26082] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1324.687006][ T30] audit: type=1326 audit(1760092610.191:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4ff8eec9 code=0x7ffc0000 [ 1324.726772][ T30] audit: type=1326 audit(1760092610.191:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4ff8eec9 code=0x7ffc0000 [ 1324.758616][ T30] audit: type=1326 audit(1760092610.221:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c4ff8eec9 code=0x7ffc0000 [ 1324.791522][ T30] audit: type=1326 audit(1760092610.221:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4ff8eec9 code=0x7ffc0000 [ 1324.821719][ T30] audit: type=1326 audit(1760092610.221:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4ff8eec9 code=0x7ffc0000 [ 1324.855316][T26082] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1324.855622][ T30] audit: type=1326 audit(1760092610.231:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f4c4ff8eec9 code=0x7ffc0000 [ 1324.885902][T26082] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1324.931039][T26082] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1324.944478][T26082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1324.952657][T26082] usb 3-1: SerialNumber: syz [ 1324.968878][T26082] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1324.976737][T26082] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1324.985229][T26082] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1325.173507][T26082] usb 3-1: USB disconnect, device number 7 [ 1325.287939][T11092] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1325.449010][T11092] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1325.465982][T11092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.474256][T25548] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1325.500035][T11092] usb 4-1: config 0 descriptor?? [ 1325.515862][T11092] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1325.649147][T25548] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1325.662025][T25548] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1325.687340][T25548] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1325.698383][T25548] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1325.714325][T25548] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1325.724312][T25548] usb 1-1: Product: syz [ 1325.729514][T25548] usb 1-1: Manufacturer: syz [ 1325.734315][T25548] usb 1-1: SerialNumber: syz [ 1325.743091][T25548] usb 1-1: config 0 descriptor?? [ 1325.765458][T25548] hub 1-1:0.0: bad descriptor, ignoring hub [ 1325.781798][T25548] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1325.821322][T20047] Bluetooth: hci4: command 0x0405 tx timeout [ 1325.825205][T25548] usb 1-1: selecting invalid altsetting 0 [ 1325.914699][T11092] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1326.123536][T11092] gspca_cpia1: usb_control_msg 01, error -32 [ 1326.135323][T11092] gspca_cpia1: usb_control_msg 01, error -71 [ 1326.145105][T11092] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1326.147457][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1326.190107][T11092] usb 4-1: USB disconnect, device number 66 [ 1326.852517][T26708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5950'. [ 1327.125742][T25548] usb 1-1: USB disconnect, device number 49 [ 1327.947923][T26082] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1328.151334][T26082] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 1328.187835][T26082] usb 1-1: config 0 has no interface number 0 [ 1328.217707][T26082] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1328.277752][T26082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.286137][T26082] usb 1-1: Product: syz [ 1328.290707][T26082] usb 1-1: Manufacturer: syz [ 1328.295295][T26082] usb 1-1: SerialNumber: syz [ 1328.349680][T26082] usb 1-1: config 0 descriptor?? [ 1328.859097][T26082] usb 1-1: Firmware version (0.0) predates our first public release. [ 1328.867229][T26082] usb 1-1: Please update to version 0.2 or newer [ 1329.090454][T26082] usb 1-1: Firmware: build Xjzî&[à [ 1329.176410][T26815] tipc: Enabled bearer , priority 0 [ 1329.190680][T26815] syzkaller0: MTU too low for tipc bearer [ 1329.196523][T26815] tipc: Disabling bearer [ 1329.317371][T26292] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1329.325352][T26082] usb 1-1: USB disconnect, device number 50 [ 1329.468187][T26292] usb 3-1: Using ep0 maxpacket: 8 [ 1329.488319][T26292] usb 3-1: config 0 has no interfaces? [ 1329.497920][T25548] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1329.519830][T26292] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1329.529339][T26292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.541317][T26292] usb 3-1: Product: syz [ 1329.545529][T26292] usb 3-1: Manufacturer: syz [ 1329.551838][T26292] usb 3-1: SerialNumber: syz [ 1329.560029][T26292] usb 3-1: config 0 descriptor?? [ 1329.679160][T25548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.690422][T25548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.700270][T25548] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1329.713388][T25548] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1329.722481][T25548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.737215][T25548] usb 5-1: config 0 descriptor?? [ 1329.747471][T26110] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1329.769008][T26082] usb 3-1: USB disconnect, device number 8 [ 1329.797537][T26088] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1329.904536][T26110] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1329.914445][T26110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.929337][T26110] usb 2-1: config 0 descriptor?? [ 1329.937159][T26110] cp210x 2-1:0.0: cp210x converter detected [ 1329.957492][T26088] usb 4-1: Using ep0 maxpacket: 32 [ 1329.965538][T26088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.976986][T26088] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1329.986436][T26088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.998849][T26088] usb 4-1: config 0 descriptor?? [ 1330.101660][T26842] tipc: Started in network mode [ 1330.106614][T26842] tipc: Node identity 4, cluster identity 4711 [ 1330.113389][T26842] tipc: Node number set to 4 [ 1330.175009][T25548] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1330.340580][T26110] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1330.360952][T26110] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1330.387490][T26110] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1330.403126][T26110] usb 2-1: USB disconnect, device number 40 [ 1330.412938][T26832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.428720][T26110] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1330.449299][T26832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.463309][T26110] cp210x 2-1:0.0: device disconnected [ 1330.481483][T26082] usb 5-1: USB disconnect, device number 50 [ 1330.718383][T26088] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 1330.735056][T26088] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 1330.744743][T26088] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 1330.755890][T26088] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 1330.764113][T26088] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 1330.786377][T26088] koneplus 0003:1E7D:2D51.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 1330.848156][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1330.848175][ T30] audit: type=1800 audit(1760092616.351:1215): pid=26872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6025" name="nullb0" dev="devtmpfs" ino=4663 res=0 errno=0 [ 1330.922276][T26088] koneplus 0003:1E7D:2D51.0030: couldn't init struct koneplus_device [ 1330.943606][T26088] koneplus 0003:1E7D:2D51.0030: couldn't install mouse [ 1330.968819][T26088] koneplus 0003:1E7D:2D51.0030: probe with driver koneplus failed with error -71 [ 1331.022823][T26088] usb 4-1: USB disconnect, device number 67 [ 1331.513897][T26895] kvm: apic: phys broadcast and lowest prio [ 1331.593560][T26897] fuse: Invalid rootmode [ 1332.448905][T26917] geneve2: entered promiscuous mode [ 1332.454308][T26917] geneve2: entered allmulticast mode [ 1332.831271][T26924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1333.357783][T25548] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1333.578305][T25548] usb 1-1: Using ep0 maxpacket: 8 [ 1333.585526][T25548] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1333.603837][T25548] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1333.614437][T25548] usb 1-1: string descriptor 0 read error: -22 [ 1333.634477][T25548] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1333.646686][T25548] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1333.734932][T25548] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1333.745218][T25548] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1333.758528][T25548] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1333.765770][T25548] usb 1-1: media controller created [ 1333.783597][T25548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1333.901537][T26936] fuse: Bad value for 'rootmode' [ 1334.037477][T26110] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1334.337882][T26110] usb 5-1: Using ep0 maxpacket: 8 [ 1334.352256][T26110] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1334.368208][T26110] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1334.391089][T26110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1334.411374][T26110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1334.445091][T26110] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1334.513701][T26110] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1334.533526][T26110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.860516][T25548] zl10353_read_register: readreg error (reg=127, ret==0) [ 1334.862372][T26110] usb 5-1: GET_CAPABILITIES returned 0 [ 1334.873669][T26110] usbtmc 5-1:16.0: can't read capabilities [ 1335.040182][T25548] usb 1-1: USB disconnect, device number 51 [ 1335.098058][T26931] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 1335.107032][T11092] usb 5-1: USB disconnect, device number 51 [ 1335.837398][T26110] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1336.007350][T26082] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1336.166537][T26110] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1336.176656][T26110] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1336.192900][T26110] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1336.204407][T26110] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1336.216224][T26110] usb 3-1: Product: syz [ 1336.221059][T26110] usb 3-1: Manufacturer: syz [ 1336.225665][T26110] usb 3-1: SerialNumber: syz [ 1336.245867][T26110] usb 3-1: config 0 descriptor?? [ 1336.309517][T26082] usb 4-1: config 0 has no interfaces? [ 1336.317116][T26082] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1336.326241][T26082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.335046][T26110] usb 3-1: selecting invalid altsetting 0 [ 1336.347750][T26082] usb 4-1: Product: syz [ 1336.375106][T26082] usb 4-1: Manufacturer: syz [ 1336.400716][T26082] usb 4-1: SerialNumber: syz [ 1336.426020][T26082] usb 4-1: config 0 descriptor?? [ 1336.596759][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6060'. [ 1336.664331][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6055'. [ 1336.690217][T26960] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1336.700161][T26110] usb 4-1: USB disconnect, device number 68 [ 1337.257505][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b175c00: rx timeout, send abort [ 1337.412112][T27002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1337.757649][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b174000: rx timeout, send abort [ 1337.765986][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b175c00: abort rx timeout. Force session deactivation [ 1337.951306][T27022] kvm: pic: level sensitive irq not supported [ 1337.952955][T27022] kvm: pic: non byte write [ 1337.972802][T27022] kvm: pic: non byte write [ 1338.265939][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b174000: abort rx timeout. Force session deactivation [ 1338.375657][T27034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6083'. [ 1338.734280][T26082] usb 3-1: USB disconnect, device number 9 [ 1338.797478][T27042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6085'. [ 1340.314451][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6096'. [ 1340.468421][T27078] netlink: 'syz.3.6097': attribute type 13 has an invalid length. [ 1340.530639][T27078] netlink: 'syz.3.6097': attribute type 17 has an invalid length. [ 1340.869280][T27078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.908455][T27078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.957513][T27078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1341.357696][T27102] kvm: pic: level sensitive irq not supported [ 1341.359914][T27102] kvm: pic: non byte write [ 1341.377152][T27102] kvm: pic: non byte write [ 1341.529581][ T30] audit: type=1326 audit(1760092627.041:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6cd8eec9 code=0x7ffc0000 [ 1341.597139][ T30] audit: type=1326 audit(1760092627.041:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6cd8eec9 code=0x7ffc0000 [ 1341.677346][ T30] audit: type=1326 audit(1760092627.061:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1f6cd8eec9 code=0x7ffc0000 [ 1341.724975][ T30] audit: type=1326 audit(1760092627.061:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6cd8eec9 code=0x7ffc0000 [ 1341.777897][ T30] audit: type=1326 audit(1760092627.061:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6cd8eec9 code=0x7ffc0000 [ 1341.818054][ T30] audit: type=1326 audit(1760092627.061:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1f6cd8eec9 code=0x7ffc0000 [ 1341.867363][ T30] audit: type=1326 audit(1760092627.061:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6cd8eec9 code=0x7ffc0000 [ 1341.915932][ T30] audit: type=1326 audit(1760092627.061:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6cd8eec9 code=0x7ffc0000 [ 1342.040265][ T30] audit: type=1326 audit(1760092627.061:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1f6cd8eec9 code=0x7ffc0000 [ 1342.109554][ T30] audit: type=1326 audit(1760092627.071:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6cd8eec9 code=0x7ffc0000 [ 1342.507451][T26085] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1342.661737][T26085] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1342.673803][T26085] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1342.712725][T26085] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1342.792136][T26085] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1342.802688][T26085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.824035][T26085] usb 2-1: Product: syz [ 1342.833964][T26085] usb 2-1: Manufacturer: syz [ 1342.848151][T26085] usb 2-1: SerialNumber: syz [ 1342.886454][T26085] hub 2-1:1.0: bad descriptor, ignoring hub [ 1342.893075][T26085] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1342.900595][T26110] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1343.059332][T26110] usb 3-1: config 0 has no interfaces? [ 1343.067758][T26110] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1343.076981][T26110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.110962][T26110] usb 3-1: Product: syz [ 1343.115202][T26110] usb 3-1: Manufacturer: syz [ 1343.138225][T26085] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1343.149162][T26110] usb 3-1: SerialNumber: syz [ 1343.158597][T26110] usb 3-1: config 0 descriptor?? [ 1343.438222][T27127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6111'. [ 1343.460499][T25548] usb 3-1: USB disconnect, device number 10 [ 1343.752312][T27120] usb 2-1: reset high-speed USB device number 41 using dummy_hcd [ 1343.815655][T27164] lo: entered allmulticast mode [ 1343.823980][T27164] lo: left allmulticast mode [ 1344.180985][T27120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.263612][T27120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.348470][T26110] usb 2-1: USB disconnect, device number 41 [ 1344.364740][T26110] usblp0: removed [ 1344.547927][T27181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6131'. [ 1345.195573][T27201] AppArmor: change_hat: Invalid input '0' [ 1345.307345][T26085] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1345.411066][T27205] lo: Caught tx_queue_len zero misconfig [ 1345.618597][T26085] usb 2-1: not running at top speed; connect to a high speed hub [ 1345.747343][T26085] usb 2-1: config 202 has an invalid interface number: 167 but max is 2 [ 1345.766510][T26085] usb 2-1: config 202 has an invalid interface number: 200 but max is 2 [ 1345.775224][T26085] usb 2-1: config 202 contains an unexpected descriptor of type 0x2, skipping [ 1345.784407][T26085] usb 2-1: config 202 has an invalid descriptor of length 16, skipping remainder of the config [ 1345.802997][T26085] usb 2-1: config 202 has no interface number 0 [ 1345.817549][T26085] usb 2-1: config 202 has no interface number 2 [ 1345.827717][T26085] usb 2-1: config 202 interface 167 altsetting 4 endpoint 0xD has invalid wMaxPacketSize 0 [ 1345.852885][T26085] usb 2-1: config 202 interface 167 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1345.877884][T26085] usb 2-1: config 202 interface 167 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1345.897503][T26085] usb 2-1: config 202 interface 167 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1345.928892][T26085] usb 2-1: config 202 interface 167 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1345.968641][T26085] usb 2-1: config 202 interface 1 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1345.982330][T26085] usb 2-1: config 202 interface 1 altsetting 3 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1346.028077][T26085] usb 2-1: config 202 interface 1 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1346.093455][T26085] usb 2-1: config 202 interface 1 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1346.137952][T26085] usb 2-1: config 202 interface 1 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1346.150700][T26085] usb 2-1: config 202 interface 1 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1346.161753][T26085] usb 2-1: config 202 interface 1 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1346.173008][T26085] usb 2-1: config 202 interface 1 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 1346.184009][T26085] usb 2-1: config 202 interface 1 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1346.195022][T26085] usb 2-1: config 202 interface 200 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1346.209225][T26085] usb 2-1: config 202 interface 167 has no altsetting 0 [ 1346.216261][T26085] usb 2-1: config 202 interface 1 has no altsetting 0 [ 1346.223525][T26085] usb 2-1: config 202 interface 200 has no altsetting 0 [ 1346.268737][T26110] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1346.279552][T26085] usb 2-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 1346.291639][T26085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.300861][T26085] usb 2-1: Product: Я [ 1346.304995][T26085] usb 2-1: Manufacturer: ä˜ë®œä¨‰ì¯¹æ¹£ì­“è淌ꪒ褷䕲蓱೪받蒬似瑱♈èéƒë°„Ἑ쯊尕＆Ⲛ褱覈䦶ï‚钜䒷얭ໞå寗â¸î­™ìµ¬ã†Œé…ἓ똨蹧栙闋Ѯ伱愨⯹ç¦ï‘¨åª¯ì™‹ï‘¤ìš•é‰€ç§•æŒ—汓æ¶ê´Œï·ªà  ä±–ܰîƒä¼Šé„ [ 1346.329077][T26085] usb 2-1: SerialNumber: ц [ 1346.428355][T26110] usb 4-1: Using ep0 maxpacket: 32 [ 1346.437181][T26110] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1346.447120][T26110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.455811][T26110] usb 4-1: Product: syz [ 1346.460677][T26110] usb 4-1: Manufacturer: syz [ 1346.465392][T26110] usb 4-1: SerialNumber: syz [ 1346.473398][T26110] usb 4-1: config 0 descriptor?? [ 1346.481761][T26110] snd-usb-6fire 4-1:0.0: too many cards registered. [ 1346.838018][T27232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.846815][T27232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.937545][T26110] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1347.087382][T26110] usb 5-1: Using ep0 maxpacket: 16 [ 1347.095208][T26110] usb 5-1: config 0 has an invalid interface number: 40 but max is 0 [ 1347.104082][T26110] usb 5-1: config 0 has no interface number 0 [ 1347.113303][T26110] usb 5-1: New USB device found, idVendor=22b8, idProduct=689d, bcdDevice=20.6b [ 1347.125266][T26110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.133651][T26110] usb 5-1: Product: syz [ 1347.138650][T26110] usb 5-1: Manufacturer: syz [ 1347.143296][T26110] usb 5-1: SerialNumber: syz [ 1347.156974][T26110] usb 5-1: config 0 descriptor?? [ 1347.611288][T27210] pim6reg: entered allmulticast mode [ 1347.649791][T27245] kvm: pic: level sensitive irq not supported [ 1347.664830][T27245] kvm: pic: non byte write [ 1347.676599][T27245] kvm: pic: non byte write [ 1348.064993][T27256] Cannot find add_set index 1 as target [ 1348.157470][T27256] syz.2.6152 (27256): drop_caches: 2 [ 1348.312549][T26085] usb-storage 2-1:202.167: USB Mass Storage device detected [ 1348.344541][T27262] fuse: Unknown parameter 'user_i00000000000000000000' [ 1348.383026][T26085] usb-storage 2-1:202.1: USB Mass Storage device detected [ 1348.457786][T26085] option 2-1:202.1: GSM modem (1-port) converter detected [ 1348.484778][T26085] usb-storage 2-1:202.200: USB Mass Storage device detected [ 1348.573869][T26085] usb 2-1: USB disconnect, device number 42 [ 1348.658676][T26085] option 2-1:202.1: device disconnected [ 1348.943381][T27291] fuse: Unknown parameter 'user_i00000000000000000000' [ 1348.994030][T27289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.001872][T27289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.013731][T25548] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1349.044430][ T10] usb 4-1: USB disconnect, device number 69 [ 1349.205314][T27289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1349.217619][T25548] usb 1-1: Using ep0 maxpacket: 8 [ 1349.231381][T25548] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1349.246183][T25548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.255739][T27289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1349.296393][T25548] usb 1-1: Product: syz [ 1349.301065][T25548] usb 1-1: Manufacturer: syz [ 1349.305693][T25548] usb 1-1: SerialNumber: syz [ 1349.328913][T25548] usb 1-1: config 0 descriptor?? [ 1349.345252][T25548] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1349.493101][T27305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1349.505843][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.520108][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.533211][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.562859][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.684977][T26110] qmi_wwan 5-1:0.40: More than one union descriptor, skipping ... [ 1349.724125][T26110] qmi_wwan 5-1:0.40: probe with driver qmi_wwan failed with error -22 [ 1349.769094][T26110] usb 5-1: USB disconnect, device number 52 [ 1349.857685][T25548] gspca_sonixj: reg_w1 err -110 [ 1349.872850][T25548] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1350.837352][T26082] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1351.040437][T26082] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.070934][T26082] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1351.082268][T26082] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1351.091661][T26082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1351.099844][T26082] usb 3-1: SerialNumber: syz [ 1351.297217][T27347] netlink: 'syz.4.6183': attribute type 5 has an invalid length. [ 1351.316941][T27346] netlink: 'syz.1.6184': attribute type 5 has an invalid length. [ 1351.511313][T26082] usb 3-1: 0:2 : does not exist [ 1351.610561][T26082] usb 3-1: USB disconnect, device number 11 [ 1352.803639][T26082] usb 1-1: USB disconnect, device number 52 [ 1352.989648][T11092] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1353.061563][T27377] netlink: 'syz.2.6194': attribute type 10 has an invalid length. [ 1353.143096][T27377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6194'. [ 1353.173473][T11092] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 1353.192674][T11092] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.242568][T11092] usb 5-1: config 0 has no interface number 0 [ 1353.245869][T27381] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6195'. [ 1353.268588][T11092] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1353.369683][T11092] usb 5-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1353.375557][T27387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6196'. [ 1353.409243][T11092] usb 5-1: config 0 interface 11 has no altsetting 0 [ 1353.420845][T11092] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1353.456316][T11092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.480324][T11092] usb 5-1: config 0 descriptor?? [ 1353.488696][T11092] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 1353.496999][T11092] keyspan 5-1:0.11: unsupported endpoint type 0 [ 1353.506505][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 7 [ 1353.516357][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 1353.524627][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 1353.532838][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 1353.541111][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 1353.549526][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 1353.558006][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 1353.571660][T11092] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1353.589438][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 1353.598795][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 1353.609059][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 1353.625361][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 1353.633686][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 1353.641646][T11092] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 1353.671679][T11092] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1353.730080][T27370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.748919][T27370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.760735][T27394] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1353.770104][T27394] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1353.868925][T27398] netlink: 'syz.2.6203': attribute type 10 has an invalid length. [ 1353.882099][T27398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6203'. [ 1354.058048][T11092] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1354.059022][T27407] fuse: Unknown parameter 'w——0x0000000000000151' [ 1354.217482][T11092] usb 4-1: Using ep0 maxpacket: 16 [ 1354.237526][T11092] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1354.308060][T11092] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1354.324521][T11092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.357001][T27415] FAULT_INJECTION: forcing a failure. [ 1354.357001][T27415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.375044][T27415] CPU: 1 UID: 0 PID: 27415 Comm: syz.1.6209 Not tainted syzkaller #0 PREEMPT(full) [ 1354.375072][T27415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1354.375084][T27415] Call Trace: [ 1354.375092][T27415] [ 1354.375101][T27415] dump_stack_lvl+0x189/0x250 [ 1354.375126][T27415] ? __pfx____ratelimit+0x10/0x10 [ 1354.375150][T27415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1354.375170][T27415] ? __pfx__printk+0x10/0x10 [ 1354.375190][T27415] ? __might_fault+0xb0/0x130 [ 1354.375225][T27415] should_fail_ex+0x414/0x560 [ 1354.375252][T27415] _copy_from_iter+0x1de/0x1790 [ 1354.375281][T27415] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1354.375297][T27415] ? policy_nodemask+0x27c/0x720 [ 1354.375313][T27415] ? __pfx__copy_from_iter+0x10/0x10 [ 1354.375331][T27415] ? set_page_refcounted+0xa0/0x1e0 [ 1354.375341][T27415] ? page_copy_sane+0x4e/0x280 [ 1354.375357][T27415] copy_page_from_iter+0xdd/0x170 [ 1354.375374][T27415] tun_get_user+0x1d7b/0x3e90 [ 1354.375395][T27415] ? tun_get_user+0x6f6/0x3e90 [ 1354.375415][T27415] ? aa_file_perm+0x44d/0x1550 [ 1354.375430][T27415] ? __pfx_tun_get_user+0x10/0x10 [ 1354.375445][T27415] ? _parse_integer_limit+0x1ae/0x1f0 [ 1354.375463][T27415] ? __lock_acquire+0xab9/0xd20 [ 1354.375476][T27415] ? ref_tracker_alloc+0x318/0x460 [ 1354.375489][T27415] ? __lock_acquire+0xab9/0xd20 [ 1354.375500][T27415] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1354.375516][T27415] ? tun_get+0x1c/0x2f0 [ 1354.375534][T27415] ? tun_get+0x1c/0x2f0 [ 1354.375549][T27415] ? tun_get+0x1c/0x2f0 [ 1354.375572][T27415] tun_chr_write_iter+0x113/0x200 [ 1354.375589][T27415] vfs_write+0x5c9/0xb30 [ 1354.375606][T27415] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1354.375631][T27415] ? __pfx_vfs_write+0x10/0x10 [ 1354.375664][T27415] ? __fget_files+0x2a/0x420 [ 1354.375689][T27415] ksys_write+0x145/0x250 [ 1354.375715][T27415] ? __pfx_ksys_write+0x10/0x10 [ 1354.375744][T27415] ? do_syscall_64+0xbe/0xfa0 [ 1354.375779][T27415] do_syscall_64+0xfa/0xfa0 [ 1354.375801][T27415] ? lockdep_hardirqs_on+0x9c/0x150 [ 1354.375822][T27415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.375842][T27415] ? clear_bhb_loop+0x60/0xb0 [ 1354.375864][T27415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.375880][T27415] RIP: 0033:0x7fa5a9b8d97f [ 1354.375891][T27415] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1354.375901][T27415] RSP: 002b:00007fa5aa9a7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1354.375914][T27415] RAX: ffffffffffffffda RBX: 00007fa5a9de5fa0 RCX: 00007fa5a9b8d97f [ 1354.375922][T27415] RDX: 000000000000004a RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1354.375929][T27415] RBP: 00007fa5aa9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.375936][T27415] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 1354.375942][T27415] R13: 00007fa5a9de6038 R14: 00007fa5a9de5fa0 R15: 00007fa5a9f0fa28 [ 1354.375959][T27415] [ 1354.390082][T11092] usb 4-1: Product: syz [ 1354.420839][T26082] usb 5-1: USB disconnect, device number 53 [ 1354.511116][T11092] usb 4-1: Manufacturer: syz [ 1354.754658][T11092] usb 4-1: SerialNumber: syz [ 1354.882626][T26082] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1354.882915][T11092] usb 4-1: config 0 descriptor?? [ 1354.915917][T11092] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1354.945737][T26082] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1354.970424][T26082] keyspan 5-1:0.11: device disconnected [ 1354.993358][T11092] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1355.051139][T27424] netlink: 'syz.1.6213': attribute type 21 has an invalid length. [ 1355.089126][T27424] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6213'. [ 1355.118661][T27426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6214'. [ 1355.128022][T27424] netlink: 'syz.1.6213': attribute type 5 has an invalid length. [ 1355.146231][T27424] netlink: 'syz.1.6213': attribute type 6 has an invalid length. [ 1355.158400][T27424] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6213'. [ 1355.407350][T26085] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1355.522676][T11092] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1355.558974][T26085] usb 2-1: device descriptor read/64, error -71 [ 1355.827514][T26085] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1355.907493][T26082] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1355.934729][T11092] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1355.945090][T11092] em28xx 4-1:0.0: board has no eeprom [ 1355.967705][T26085] usb 2-1: device descriptor read/64, error -71 [ 1356.082058][T26082] usb 3-1: config 0 has no interfaces? [ 1356.088462][T26085] usb usb2-port1: attempt power cycle [ 1356.095963][T26082] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1356.107675][T26082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.122627][T26082] usb 3-1: Product: syz [ 1356.132459][T26082] usb 3-1: Manufacturer: syz [ 1356.143522][T26082] usb 3-1: SerialNumber: syz [ 1356.165331][T26082] usb 3-1: config 0 descriptor?? [ 1356.432025][T27435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6218'. [ 1356.444145][T26085] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1356.461480][T25548] usb 3-1: USB disconnect, device number 12 [ 1356.478667][T26085] usb 2-1: device descriptor read/8, error -71 [ 1356.717524][T26085] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1356.758405][T26085] usb 2-1: device descriptor read/8, error -71 [ 1356.878093][T26085] usb usb2-port1: unable to enumerate USB device [ 1357.077349][T11092] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1357.094058][T11092] em28xx 4-1:0.0: dvb set to bulk mode. [ 1357.106664][T25548] em28xx 4-1:0.0: Binding DVB extension [ 1357.126435][T11092] usb 4-1: USB disconnect, device number 70 [ 1357.153477][T11092] em28xx 4-1:0.0: Disconnecting em28xx [ 1357.184044][T25548] em28xx 4-1:0.0: Registering input extension [ 1357.203296][T11092] em28xx 4-1:0.0: Closing input extension [ 1357.238889][T11092] em28xx 4-1:0.0: Freeing device [ 1357.635652][T27460] binder_alloc: 27459: pid 27459 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1358.547889][T27484] fuse: Unknown parameter 'user_id00000000000000000000' [ 1359.045018][T27493] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1359.054393][T27493] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1359.307405][T11092] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1359.470262][ T10] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1359.497428][T11092] usb 3-1: Using ep0 maxpacket: 16 [ 1359.504330][T11092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1359.522493][T11092] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1359.535356][T11092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.565827][T11092] usb 3-1: Product: syz [ 1359.583584][T11092] usb 3-1: Manufacturer: syz [ 1359.604929][T11092] usb 3-1: SerialNumber: syz [ 1359.626693][T11092] usb 3-1: config 0 descriptor?? [ 1359.640590][ T10] usb 2-1: config 255 has too many interfaces: 238, using maximum allowed: 32 [ 1359.655410][ T10] usb 2-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 1359.670841][T11092] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1359.680301][ T10] usb 2-1: config 255 has an invalid descriptor of length 13, skipping remainder of the config [ 1359.701429][T11092] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1359.714121][ T10] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 238 [ 1359.752168][ T10] usb 2-1: config 255 has no interface number 0 [ 1359.857524][ T10] usb 2-1: config 255 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1359.920030][ T10] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=c6.7f [ 1359.929766][ T10] usb 2-1: New USB device strings: Mfr=1, Product=238, SerialNumber=2 [ 1359.965681][ T10] usb 2-1: Product: syz [ 1359.970137][ T10] usb 2-1: Manufacturer: syz [ 1359.982901][ T10] usb 2-1: SerialNumber: syz [ 1360.257539][ T10] esd_usb 2-1:255.120: sending version message failed [ 1360.267794][ T10] esd_usb 2-1:255.120: probe with driver esd_usb failed with error -22 [ 1360.295221][T11092] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1360.310652][ T10] usb 2-1: USB disconnect, device number 47 [ 1360.470779][T27507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6240'. [ 1360.579880][T27514] kvm: pic: level sensitive irq not supported [ 1360.582325][T27514] kvm: pic: non byte write [ 1360.593666][T27514] kvm: pic: non byte write [ 1360.665696][T27521] kvm: pic: level sensitive irq not supported [ 1360.670989][T27521] kvm: pic: non byte write [ 1360.683998][T27521] kvm: pic: non byte write [ 1360.723616][T11092] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1360.742479][T11092] em28xx 3-1:0.0: board has no eeprom [ 1361.080643][T27533] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6244'. [ 1361.661514][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.670339][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.729153][T27542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6248'. [ 1361.877587][T11092] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1361.911169][T11092] em28xx 3-1:0.0: dvb set to bulk mode. [ 1361.938598][ T10] em28xx 3-1:0.0: Binding DVB extension [ 1361.963253][T11092] usb 3-1: USB disconnect, device number 13 [ 1361.985675][T11092] em28xx 3-1:0.0: Disconnecting em28xx [ 1362.060331][ T10] em28xx 3-1:0.0: Registering input extension [ 1362.073757][T11092] em28xx 3-1:0.0: Closing input extension [ 1362.095304][T11092] em28xx 3-1:0.0: Freeing device [ 1362.187791][T27547] netlink: 'syz.4.6249': attribute type 5 has an invalid length. [ 1362.717876][T27561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6255'. [ 1363.065443][T27571] program syz.3.6257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1363.212760][T27577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6259'. [ 1363.643299][T27587] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6262'. [ 1363.652950][T27587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6262'. [ 1363.937379][T26082] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1364.117367][T26082] usb 3-1: Using ep0 maxpacket: 16 [ 1364.125267][T26082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1364.140488][T26082] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1364.151383][T26082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.160197][T26082] usb 3-1: Product: syz [ 1364.164450][T26082] usb 3-1: Manufacturer: syz [ 1364.170268][T26082] usb 3-1: SerialNumber: syz [ 1364.177892][T26082] usb 3-1: config 0 descriptor?? [ 1364.185773][T26082] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1364.196860][T26082] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1364.279548][T27596] fuse: Bad value for 'fd' [ 1364.787059][T26082] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1364.995235][T27611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6270'. [ 1365.139342][T27620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6272'. [ 1365.285510][T26082] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1365.355240][T26082] em28xx 3-1:0.0: board has no eeprom [ 1365.437038][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1365.437050][ T30] audit: type=1800 audit(1760092650.941:1266): pid=27634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6274" name="nullb0" dev="devtmpfs" ino=4663 res=0 errno=0 [ 1365.624703][T27639] tls_set_device_offload_rx: netdev not found [ 1366.519110][T26082] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1366.537626][T26082] em28xx 3-1:0.0: dvb set to bulk mode. [ 1366.552762][T26088] em28xx 3-1:0.0: Binding DVB extension [ 1366.570921][T26082] usb 3-1: USB disconnect, device number 14 [ 1366.593749][T26082] em28xx 3-1:0.0: Disconnecting em28xx [ 1366.694369][T26088] em28xx 3-1:0.0: Registering input extension [ 1366.729641][T26082] em28xx 3-1:0.0: Closing input extension [ 1366.783275][T26082] em28xx 3-1:0.0: Freeing device [ 1367.302131][T27666] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20003 [ 1367.656232][T27678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6286'. [ 1368.187384][T11092] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1368.404784][T11092] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1368.426553][T11092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.514506][T11092] usb 2-1: config 0 descriptor?? [ 1368.561151][T11092] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1368.818458][T27702] netlink: 'syz.2.6291': attribute type 1 has an invalid length. [ 1370.159781][T27707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6294'. [ 1370.551343][T11092] gspca_stv06xx: I2C: Read error writing address: -71 [ 1370.578012][T11092] usb 2-1: USB disconnect, device number 48 [ 1370.627346][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1370.703103][T27715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6292'. [ 1370.797485][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1370.804387][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1370.821952][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1370.833345][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.841697][ T10] usb 5-1: Product: syz [ 1370.855563][ T10] usb 5-1: Manufacturer: syz [ 1370.869122][ T10] usb 5-1: SerialNumber: syz [ 1370.886780][ T10] usb 5-1: config 0 descriptor?? [ 1370.908287][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1370.923699][ T10] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1371.013326][T27725] fuse: Unknown parameter '0x0000000000000003' [ 1371.511213][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1371.911648][T27747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6305'. [ 1371.940967][T27748] kvm: pic: level sensitive irq not supported [ 1371.944406][T27748] kvm: pic: non byte write [ 1371.965051][T27748] kvm: pic: non byte write [ 1371.969671][ T10] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1371.980109][ T10] em28xx 5-1:0.0: board has no eeprom [ 1372.226422][T27752] netlink: 'syz.3.6307': attribute type 4 has an invalid length. [ 1372.454300][T27759] fuse: Unknown parameter '0x0000000000000003' [ 1372.551886][T27763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6312'. [ 1373.157614][ T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1373.171074][ T10] em28xx 5-1:0.0: dvb set to bulk mode. [ 1373.175342][T27786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6316'. [ 1373.186980][T11092] em28xx 5-1:0.0: Binding DVB extension [ 1373.267826][ T10] usb 5-1: USB disconnect, device number 54 [ 1373.311266][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 1373.408826][T11092] em28xx 5-1:0.0: Registering input extension [ 1373.448684][ T10] em28xx 5-1:0.0: Closing input extension [ 1373.479142][ T10] em28xx 5-1:0.0: Freeing device [ 1373.497518][T25548] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1373.604916][T27797] fuse: Unknown parameter '0x0000000000000003' [ 1373.721190][T25548] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.866812][T25548] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1373.887637][T25548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.947396][T26085] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1373.979880][T25548] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1373.999444][T25548] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1374.037156][ T6513] udevd[6513]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1374.197734][T26085] usb 3-1: device descriptor read/64, error -71 [ 1374.305062][T27812] binder: 27811:27812 ioctl 541a 200000000080 returned -22 [ 1374.437326][T26085] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1374.597373][T26085] usb 3-1: device descriptor read/64, error -71 [ 1374.737839][T26085] usb usb3-port1: attempt power cycle [ 1374.893019][T27825] fuse: Unknown parameter '0x0000000000000003' [ 1375.077542][T26085] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1375.120121][T26085] usb 3-1: device descriptor read/8, error -71 [ 1375.367378][T26085] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1375.397928][T26085] usb 3-1: device descriptor read/8, error -71 [ 1375.507964][T26085] usb usb3-port1: unable to enumerate USB device [ 1377.257445][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1377.427440][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1377.441455][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1377.477374][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.488827][ T10] usb 3-1: Product: syz [ 1377.493026][ T10] usb 3-1: Manufacturer: syz [ 1377.499133][ T10] usb 3-1: SerialNumber: syz [ 1377.512911][ T10] usb 3-1: config 0 descriptor?? [ 1377.732717][T27865] tls_set_device_offload_rx: netdev not found [ 1378.110150][T27787] delete_channel: no stack [ 1378.129550][ T10] usb 2-1: USB disconnect, device number 49 [ 1378.676440][T27888] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6355'. [ 1378.880560][T27893] netlink: 'syz.3.6358': attribute type 1 has an invalid length. [ 1378.926449][T27893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1378.966483][T27895] bond1: option lacp_rate: invalid value (108) [ 1378.975559][T27895] bond1 (unregistering): Released all slaves [ 1379.630247][ T30] audit: type=1326 audit(1760092665.131:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.1.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1379.667675][ T30] audit: type=1326 audit(1760092665.131:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.1.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1379.699653][ T30] audit: type=1326 audit(1760092665.141:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.1.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1379.757525][ T30] audit: type=1326 audit(1760092665.161:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.1.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1379.785760][ T30] audit: type=1326 audit(1760092665.161:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.1.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1379.823850][T27932] tipc: Enabling of bearer rejected, failed to enable media [ 1379.876583][T27935] tls_set_device_offload_rx: netdev not found [ 1379.927102][ T30] audit: type=1326 audit(1760092665.171:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.1.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1379.957671][ T30] audit: type=1326 audit(1760092665.171:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.1.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1379.985160][ T30] audit: type=1326 audit(1760092665.171:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.1.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1380.030209][ T30] audit: type=1326 audit(1760092665.201:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.1.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1380.058801][ T30] audit: type=1326 audit(1760092665.201:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.1.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a9b8eec9 code=0x7ffc0000 [ 1380.474270][T27937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.692203][T27944] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6374'. [ 1380.703006][T27945] netlink: 'syz.3.6373': attribute type 10 has an invalid length. [ 1380.717333][T27945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6373'. [ 1380.747319][T27945] dummy0: entered promiscuous mode [ 1380.753553][T27945] bridge0: port 3(dummy0) entered blocking state [ 1380.760861][T27945] bridge0: port 3(dummy0) entered disabled state [ 1380.767702][T27945] dummy0: entered allmulticast mode [ 1380.776426][T27945] bridge0: port 3(dummy0) entered blocking state [ 1380.782967][T27945] bridge0: port 3(dummy0) entered forwarding state [ 1380.942646][T26082] usb 3-1: USB disconnect, device number 19 [ 1381.295795][T27964] tls_set_device_offload_rx: netdev not found [ 1381.425672][T27975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6384'. [ 1382.007347][T26082] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1382.210913][T26082] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1382.222604][T26082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.255357][T26082] usb 1-1: Product: syz [ 1382.265153][T26082] usb 1-1: Manufacturer: syz [ 1382.275129][T26082] usb 1-1: SerialNumber: syz [ 1382.289882][T26082] usb 1-1: config 0 descriptor?? [ 1382.397808][T26082] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1382.407399][T11092] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1382.804030][T11092] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.827391][T11092] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1382.852169][T26082] usb 1-1: USB disconnect, device number 53 [ 1382.969584][T11092] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1383.048428][T11092] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.083350][T11092] usb 5-1: Product: syz [ 1383.099729][T11092] usb 5-1: Manufacturer: syz [ 1383.104706][T11092] usb 5-1: SerialNumber: syz [ 1383.345105][T28000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.375213][T28000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.443401][T11092] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1383.482308][T11092] usb 5-1: USB disconnect, device number 55 [ 1383.587154][T28025] FAULT_INJECTION: forcing a failure. [ 1383.587154][T28025] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.600373][T28025] CPU: 1 UID: 0 PID: 28025 Comm: syz.1.6402 Not tainted syzkaller #0 PREEMPT(full) [ 1383.600398][T28025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1383.600409][T28025] Call Trace: [ 1383.600416][T28025] [ 1383.600425][T28025] dump_stack_lvl+0x189/0x250 [ 1383.600449][T28025] ? __pfx____ratelimit+0x10/0x10 [ 1383.600471][T28025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1383.600488][T28025] ? __pfx__printk+0x10/0x10 [ 1383.600512][T28025] ? __pfx___might_resched+0x10/0x10 [ 1383.600541][T28025] ? fs_reclaim_acquire+0x7d/0x100 [ 1383.600570][T28025] should_fail_ex+0x414/0x560 [ 1383.600594][T28025] should_failslab+0xa8/0x100 [ 1383.600614][T28025] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1383.600640][T28025] ? __alloc_skb+0x112/0x2d0 [ 1383.600658][T28025] ? netlink_autobind+0xdb/0x300 [ 1383.600683][T28025] __alloc_skb+0x112/0x2d0 [ 1383.600702][T28025] netlink_sendmsg+0x5c6/0xb30 [ 1383.600730][T28025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1383.600752][T28025] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1383.600779][T28025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1383.600798][T28025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1383.600820][T28025] __sock_sendmsg+0x21c/0x270 [ 1383.600852][T28025] ____sys_sendmsg+0x505/0x830 [ 1383.600882][T28025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1383.600912][T28025] ? import_iovec+0x74/0xa0 [ 1383.600933][T28025] ___sys_sendmsg+0x21f/0x2a0 [ 1383.600958][T28025] ? __pfx____sys_sendmsg+0x10/0x10 [ 1383.601012][T28025] ? __fget_files+0x2a/0x420 [ 1383.601028][T28025] ? __fget_files+0x3a0/0x420 [ 1383.601056][T28025] __x64_sys_sendmsg+0x19b/0x260 [ 1383.601081][T28025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1383.601113][T28025] ? __pfx_ksys_write+0x10/0x10 [ 1383.601144][T28025] ? do_syscall_64+0xbe/0xfa0 [ 1383.601170][T28025] do_syscall_64+0xfa/0xfa0 [ 1383.601192][T28025] ? lockdep_hardirqs_on+0x9c/0x150 [ 1383.601215][T28025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.601234][T28025] ? clear_bhb_loop+0x60/0xb0 [ 1383.601257][T28025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.601276][T28025] RIP: 0033:0x7fa5a9b8eec9 [ 1383.601293][T28025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1383.601309][T28025] RSP: 002b:00007fa5aa9a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1383.601329][T28025] RAX: ffffffffffffffda RBX: 00007fa5a9de5fa0 RCX: 00007fa5a9b8eec9 [ 1383.601344][T28025] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000004 [ 1383.601356][T28025] RBP: 00007fa5aa9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.601366][T28025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.601378][T28025] R13: 00007fa5a9de6038 R14: 00007fa5a9de5fa0 R15: 00007fa5a9f0fa28 [ 1383.601409][T28025] [ 1383.910074][T28027] FAULT_INJECTION: forcing a failure. [ 1383.910074][T28027] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.924820][T28027] CPU: 0 UID: 0 PID: 28027 Comm: syz.2.6401 Not tainted syzkaller #0 PREEMPT(full) [ 1383.924847][T28027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1383.924860][T28027] Call Trace: [ 1383.924868][T28027] [ 1383.924876][T28027] dump_stack_lvl+0x189/0x250 [ 1383.924903][T28027] ? __pfx____ratelimit+0x10/0x10 [ 1383.924927][T28027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1383.924948][T28027] ? __pfx__printk+0x10/0x10 [ 1383.924965][T28027] ? netlink_sendmsg+0x805/0xb30 [ 1383.924988][T28027] ? __x64_sys_sendmsg+0x19b/0x260 [ 1383.925011][T28027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.925040][T28027] should_fail_ex+0x414/0x560 [ 1383.925070][T28027] should_failslab+0xa8/0x100 [ 1383.925092][T28027] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1383.925119][T28027] ? skb_clone+0x212/0x3a0 [ 1383.925148][T28027] skb_clone+0x212/0x3a0 [ 1383.925176][T28027] __netlink_deliver_tap+0x404/0x850 [ 1383.925211][T28027] ? netlink_deliver_tap+0x2e/0x1b0 [ 1383.925234][T28027] netlink_deliver_tap+0x19c/0x1b0 [ 1383.925257][T28027] netlink_sendskb+0x68/0x140 [ 1383.925288][T28027] netlink_unicast+0x397/0x9e0 [ 1383.925315][T28027] ? __asan_memcpy+0x40/0x70 [ 1383.925350][T28027] ? __pfx_netlink_unicast+0x10/0x10 [ 1383.925390][T28027] netlink_rcv_skb+0x28c/0x470 [ 1383.925408][T28027] ? __lock_acquire+0xab9/0xd20 [ 1383.925429][T28027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1383.925457][T28027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1383.925497][T28027] ? down_read+0x1ad/0x2e0 [ 1383.925527][T28027] genl_rcv+0x28/0x40 [ 1383.925550][T28027] netlink_unicast+0x82f/0x9e0 [ 1383.925590][T28027] ? __pfx_netlink_unicast+0x10/0x10 [ 1383.925619][T28027] ? netlink_sendmsg+0x642/0xb30 [ 1383.925637][T28027] ? skb_put+0x11b/0x210 [ 1383.925658][T28027] netlink_sendmsg+0x805/0xb30 [ 1383.925688][T28027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1383.925713][T28027] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1383.925749][T28027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1383.925769][T28027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1383.925791][T28027] __sock_sendmsg+0x21c/0x270 [ 1383.925824][T28027] ____sys_sendmsg+0x505/0x830 [ 1383.925853][T28027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1383.925888][T28027] ? import_iovec+0x74/0xa0 [ 1383.925912][T28027] ___sys_sendmsg+0x21f/0x2a0 [ 1383.925938][T28027] ? __pfx____sys_sendmsg+0x10/0x10 [ 1383.926001][T28027] ? __fget_files+0x2a/0x420 [ 1383.926019][T28027] ? __fget_files+0x3a0/0x420 [ 1383.926049][T28027] __x64_sys_sendmsg+0x19b/0x260 [ 1383.926076][T28027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1383.926110][T28027] ? __pfx_ksys_write+0x10/0x10 [ 1383.926141][T28027] ? do_syscall_64+0xbe/0xfa0 [ 1383.926169][T28027] do_syscall_64+0xfa/0xfa0 [ 1383.926193][T28027] ? lockdep_hardirqs_on+0x9c/0x150 [ 1383.926216][T28027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.926236][T28027] ? clear_bhb_loop+0x60/0xb0 [ 1383.926261][T28027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.926281][T28027] RIP: 0033:0x7fd3b3d8eec9 [ 1383.926300][T28027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1383.926318][T28027] RSP: 002b:00007fd3b4b99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1383.926339][T28027] RAX: ffffffffffffffda RBX: 00007fd3b3fe5fa0 RCX: 00007fd3b3d8eec9 [ 1383.926355][T28027] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1383.926369][T28027] RBP: 00007fd3b4b99090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.926382][T28027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.926394][T28027] R13: 00007fd3b3fe6038 R14: 00007fd3b3fe5fa0 R15: 00007fd3b410fa28 [ 1383.926429][T28027] [ 1384.292656][T20047] Bluetooth: hci5: command 0x0406 tx timeout [ 1384.517675][T28046] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1384.538417][T11092] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1384.703423][T28000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.719519][T28000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.649160][T28080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.833509][T28080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.841558][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1386.007377][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1386.016689][ T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1386.061656][ T10] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1386.080085][ T10] usb 1-1: config 0 has no interface number 0 [ 1386.243865][ T10] usb 1-1: string descriptor 0 read error: -71 [ 1386.315158][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1386.401099][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.443842][ T10] usb 1-1: config 0 descriptor?? [ 1386.456078][ T10] usb 1-1: can't set config #0, error -71 [ 1386.481519][ T10] usb 1-1: USB disconnect, device number 54 [ 1387.047386][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1387.180534][ T10] usb 1-1: device descriptor read/64, error -71 [ 1387.461699][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1387.598747][ T10] usb 1-1: device descriptor read/64, error -71 [ 1387.733626][ T10] usb usb1-port1: attempt power cycle [ 1388.097335][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1388.129604][ T10] usb 1-1: device descriptor read/8, error -71 [ 1388.372388][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1388.406864][ T10] usb 1-1: device descriptor read/8, error -71 [ 1388.494959][T11092] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1388.523444][ T10] usb usb1-port1: unable to enumerate USB device [ 1388.547901][T11092] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1388.555522][T11092] usb 5-1: can't read configurations, error -71 [ 1388.605956][T28096] usb usb8: usbfs: process 28096 (syz.1.6424) did not claim interface 0 before use [ 1389.118669][T28112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6429'. [ 1389.131354][T28112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6429'. [ 1389.209280][T11092] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1389.266675][T28115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6430'. [ 1389.371029][T11092] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1389.398106][T11092] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.406313][T11092] usb 5-1: Product: syz [ 1389.411163][T11092] usb 5-1: Manufacturer: syz [ 1389.415972][T11092] usb 5-1: SerialNumber: syz [ 1389.426138][T11092] usb 5-1: config 0 descriptor?? [ 1389.469671][T28119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6431'. [ 1389.874998][T11092] usb 5-1: Firmware version (0.0) predates our first public release. [ 1389.899251][T11092] usb 5-1: Please update to version 0.2 or newer [ 1389.989866][T11092] usb 5-1: USB disconnect, device number 57 [ 1390.411142][T28135] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1390.630681][T28142] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6441'. [ 1390.682190][T28148] kvm: pic: level sensitive irq not supported [ 1390.683954][T28148] kvm: pic: non byte write [ 1390.730355][T28148] kvm: pic: non byte write [ 1391.171531][T20047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1391.201723][T20047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1391.211192][T20047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1391.219339][T20047] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1391.228894][T20047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1391.687562][T25548] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1391.827212][T28158] chnl_net:caif_netlink_parms(): no params data found [ 1391.879294][T25548] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.912704][T25548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1391.945651][T25548] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1392.007331][T25548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.048198][T25548] usb 2-1: config 0 descriptor?? [ 1392.080637][T25548] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1392.097584][T25548] dvb-usb: bulk message failed: -22 (3/0) [ 1392.125878][T25548] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1392.158415][T25548] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1392.182948][T25548] usb 2-1: media controller created [ 1392.198692][T26085] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1392.210771][T25548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1392.248983][T25548] dvb-usb: bulk message failed: -22 (6/0) [ 1392.295844][T25548] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1392.369717][T25548] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input90 [ 1392.398617][T26085] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1392.426924][T26085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.450511][T26085] usb 4-1: Product: syz [ 1392.467420][T26085] usb 4-1: Manufacturer: syz [ 1392.478682][T26085] usb 4-1: SerialNumber: syz [ 1392.499864][T26085] usb 4-1: config 0 descriptor?? [ 1392.539745][T28180] tipc: Enabled bearer , priority 0 [ 1392.611453][T28181] netlink: 'syz.4.6444': attribute type 12 has an invalid length. [ 1392.621949][T25548] dvb-usb: schedule remote query interval to 150 msecs. [ 1392.690033][T25548] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1392.747818][T28175] syzkaller0: entered promiscuous mode [ 1392.753604][T28175] syzkaller0: entered allmulticast mode [ 1392.866790][T25548] dvb-usb: bulk message failed: -22 (1/0) [ 1392.976693][T28165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.988704][T26085] usb 4-1: Firmware version (0.0) predates our first public release. [ 1393.007765][T26085] usb 4-1: Please update to version 0.2 or newer [ 1393.034467][T25548] dvb-usb: error while querying for an remote control event. [ 1393.062849][T28165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.265540][ T52] Bluetooth: hci0: command tx timeout [ 1393.287359][T25548] dvb-usb: bulk message failed: -22 (1/0) [ 1393.293210][T25548] dvb-usb: error while querying for an remote control event. [ 1393.457387][T25548] dvb-usb: bulk message failed: -22 (1/0) [ 1393.463162][T25548] dvb-usb: error while querying for an remote control event. [ 1393.629847][T25548] dvb-usb: bulk message failed: -22 (1/0) [ 1393.635632][T25548] dvb-usb: error while querying for an remote control event. [ 1393.657985][T11092] tipc: Node number set to 1419752443 [ 1393.672815][ T3019] bond2 (unregistering): (slave bridge0): Releasing active interface [ 1393.862759][T25548] dvb-usb: bulk message failed: -22 (1/0) [ 1393.869243][T25548] dvb-usb: error while querying for an remote control event. [ 1393.932351][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.941312][ T3019] bond_slave_0: left promiscuous mode [ 1393.948938][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.958655][ T3019] bond_slave_1: left promiscuous mode [ 1393.965126][ T3019] bond0 (unregistering): Released all slaves [ 1393.980327][ T3019] bond1 (unregistering): Released all slaves [ 1393.994266][ T3019] bond2 (unregistering): Released all slaves [ 1394.029434][T25548] dvb-usb: bulk message failed: -22 (1/0) [ 1394.049997][T28168] tipc: Resetting bearer [ 1394.059904][T25548] dvb-usb: error while querying for an remote control event. [ 1394.145900][T28168] tipc: Disabling bearer [ 1394.207769][T26085] usb 4-1: USB disconnect, device number 71 [ 1394.275487][T25548] dvb-usb: bulk message failed: -22 (1/0) [ 1394.319467][T25548] dvb-usb: error while querying for an remote control event. [ 1394.350623][T26082] usb 2-1: USB disconnect, device number 50 [ 1394.429816][T26082] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1394.482805][T28206] cifs: Unknown parameter 'fd' [ 1394.542776][ T3019] tipc: Left network mode [ 1394.640732][T28158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.676878][T28158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.701862][T28158] bridge_slave_0: entered allmulticast mode [ 1394.712004][T28158] bridge_slave_0: entered promiscuous mode [ 1394.749802][T28158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.766697][T28158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.784307][T28158] bridge_slave_1: entered allmulticast mode [ 1394.817918][T28158] bridge_slave_1: entered promiscuous mode [ 1394.882086][T28221] binder: 28219:28221 ioctl c018620c 200000000380 returned -22 [ 1395.065333][T28221] bridge0: port 4(macvlan2) entered blocking state [ 1395.072318][T28221] bridge0: port 4(macvlan2) entered disabled state [ 1395.080052][T28221] macvlan2: entered allmulticast mode [ 1395.085881][T28221] bridge0: entered allmulticast mode [ 1395.093836][T28221] macvlan2: left allmulticast mode [ 1395.101035][T28221] bridge0: left allmulticast mode [ 1395.217610][T26085] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1395.303624][T28158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.337546][ T52] Bluetooth: hci0: command tx timeout [ 1395.362942][T28158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.463826][T28158] team0: Port device team_slave_0 added [ 1395.474707][T28158] team0: Port device team_slave_1 added [ 1395.499731][T26085] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1395.543058][T26085] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1395.554188][T25548] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 1395.598099][T26085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.606138][T26085] usb 4-1: Product: syz [ 1395.615696][T26085] usb 4-1: Manufacturer: syz [ 1395.621928][T26085] usb 4-1: SerialNumber: syz [ 1395.630377][T26085] usb 4-1: config 0 descriptor?? [ 1395.745996][T28158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.760659][T25548] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1395.777405][T28158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.804246][T25548] usb 2-1: config 0 has no interface number 0 [ 1395.833087][T25548] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1395.872456][T25548] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1395.904062][T28158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.914949][T25548] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1395.939794][T25548] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1395.957101][T25548] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1395.973975][T25548] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1395.988018][T28158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.005353][T28158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.041361][T25548] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1396.060985][T25548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.088718][T25548] usb 2-1: config 0 descriptor?? [ 1396.093833][T28158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.111688][T28231] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1396.175199][T28231] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1396.273644][T25548] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1396.342118][ T3019] hsr0: left allmulticast mode [ 1396.379910][ T3019] veth1_vlan: left promiscuous mode [ 1396.391538][ T3019] veth0_vlan: left promiscuous mode [ 1396.483734][T28242] netlink: 'syz.2.6469': attribute type 8 has an invalid length. [ 1396.532024][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1396.532042][ T30] audit: type=1326 audit(1760092682.041:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.2.6469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b3d8eec9 code=0x7ffc0000 [ 1396.593123][T28231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.660343][ T30] audit: type=1326 audit(1760092682.041:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.2.6469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b3d8eec9 code=0x7ffc0000 [ 1396.694487][T28231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.728385][T11092] usb 2-1: USB disconnect, device number 51 [ 1396.736634][T11092] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1396.879740][ T30] audit: type=1326 audit(1760092682.041:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.2.6469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3b3d8eec9 code=0x7ffc0000 [ 1396.903735][ T30] audit: type=1326 audit(1760092682.041:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.2.6469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b3d8eec9 code=0x7ffc0000 [ 1396.930102][ T30] audit: type=1326 audit(1760092682.041:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.2.6469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b3d8eec9 code=0x7ffc0000 [ 1396.956079][T25548] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1397.028097][ T30] audit: type=1326 audit(1760092682.041:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.2.6469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd3b3d8eec9 code=0x7ffc0000 [ 1397.056776][ T30] audit: type=1326 audit(1760092682.041:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.2.6469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b3d8eec9 code=0x7ffc0000 [ 1397.105134][ T30] audit: type=1326 audit(1760092682.041:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.2.6469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b3d8eec9 code=0x7ffc0000 [ 1397.204902][ T30] audit: type=1326 audit(1760092682.071:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.2.6469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd3b3d8eec9 code=0x7ffc0000 [ 1397.290044][ T30] audit: type=1326 audit(1760092682.071:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.2.6469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b3d8eec9 code=0x7ffc0000 [ 1397.417756][ T52] Bluetooth: hci0: command tx timeout [ 1397.450801][T25548] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1397.461760][T25548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.490303][T25548] usb 3-1: config 0 descriptor?? [ 1397.898538][T25548] kaweth 3-1:0.0: Firmware present in device. [ 1398.071397][T25548] kaweth 3-1:0.0: Statistics collection: 0 [ 1398.079106][T25548] kaweth 3-1:0.0: Multicast filter limit: 0 [ 1398.085107][T25548] kaweth 3-1:0.0: MTU: 0 [ 1398.126249][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1398.174658][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1398.255358][T28260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6475'. [ 1398.267531][T25548] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1398.302008][T28260] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6475'. [ 1398.661652][T26082] usb 4-1: USB disconnect, device number 72 [ 1399.168834][T28274] kvm: pic: level sensitive irq not supported [ 1399.174083][T28274] kvm: pic: non byte write [ 1399.196548][T28274] kvm: pic: non byte write [ 1399.480682][T28158] hsr_slave_0: entered promiscuous mode [ 1399.490386][T28158] hsr_slave_1: entered promiscuous mode [ 1399.497498][ T52] Bluetooth: hci0: command tx timeout [ 1399.506625][T28158] debugfs: 'hsr0' already exists in 'hsr' [ 1399.515038][T28158] Cannot create hsr debugfs directory [ 1399.695275][T25548] kaweth 3-1:0.0: Error setting SOFS wait [ 1399.734778][T25548] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 1399.800103][T25548] usb 3-1: USB disconnect, device number 20 [ 1400.102040][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6490'. [ 1400.112176][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6490'. [ 1400.273735][T28302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.299841][T28302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.315778][T28302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1400.668537][T28158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.796141][T28158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.886372][T28158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.967368][T25548] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1401.141008][T25548] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1401.160272][T25548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.175077][T25548] usb 2-1: Product: syz [ 1401.180943][T25548] usb 2-1: Manufacturer: syz [ 1401.186850][T25548] usb 2-1: SerialNumber: syz [ 1401.210087][T25548] usb 2-1: config 0 descriptor?? [ 1401.482169][T14280] bridge_slave_1: left allmulticast mode [ 1401.530178][T14280] bridge_slave_1: left promiscuous mode [ 1401.552230][T14280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.592754][T14280] bridge_slave_0: left allmulticast mode [ 1401.600172][T14280] bridge_slave_0: left promiscuous mode [ 1401.616155][T14280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.709290][T25548] usb 2-1: Firmware version (0.0) predates our first public release. [ 1401.730349][T25548] usb 2-1: Please update to version 0.2 or newer [ 1402.514328][T14280] bond2 (unregistering): (slave bridge1): Releasing active interface [ 1402.963322][T14280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.972756][T14280] bond_slave_0: left promiscuous mode [ 1402.980162][T14280] bond_slave_0: left allmulticast mode [ 1402.991553][T14280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.019561][T14280] bond_slave_1: left promiscuous mode [ 1403.036446][T14280] bond_slave_1: left allmulticast mode [ 1403.055516][T14280] bond0 (unregistering): Released all slaves [ 1403.087152][T14280] bond1 (unregistering): Released all slaves [ 1403.108523][T14280] bond2 (unregistering): Released all slaves [ 1403.448908][T14280] bond3 (unregistering): Released all slaves [ 1403.641614][T25548] usb 2-1: USB disconnect, device number 52 [ 1403.761923][T14280] tipc: Left network mode [ 1403.799023][T28158] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1403.876064][T28158] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1403.898189][T28374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1403.948520][T28158] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1403.967361][T26085] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1403.982795][T28158] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1404.131292][T26085] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1404.140671][T26085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.157434][T26085] usb 5-1: Product: syz [ 1404.161640][T26085] usb 5-1: Manufacturer: syz [ 1404.167832][T26085] usb 5-1: SerialNumber: syz [ 1404.197415][T26085] usb 5-1: config 0 descriptor?? [ 1404.605490][T28158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.641795][T26085] usb 5-1: Firmware version (0.0) predates our first public release. [ 1404.687313][T26085] usb 5-1: Please update to version 0.2 or newer [ 1404.739205][T28158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.897032][T14281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.904206][T14281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.914669][T26085] usb 5-1: USB disconnect, device number 58 [ 1405.059672][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.066768][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.357979][T28394] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1405.368164][T14280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1405.375568][T14280] batadv0: mtu less than device minimum [ 1405.394332][T14280] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1405.407523][T14280] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1405.419586][T14280] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1405.431678][T14280] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1405.443783][T14280] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1405.455713][T14280] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1405.467768][T14280] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1405.479866][T14280] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1405.491980][T14280] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1405.518705][T14280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1405.531932][T14280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1405.590680][T14280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.600740][T14280] batman_adv: batadv0: Interface deactivated: dummy0 [ 1405.607588][T14280] batman_adv: batadv0: Removing interface: dummy0 [ 1405.630031][T14280] hsr0: left allmulticast mode [ 1405.646920][T14280] veth1_macvtap: left promiscuous mode [ 1405.663266][T14280] veth0_macvtap: left promiscuous mode [ 1405.674796][T14280] veth1_vlan: left promiscuous mode [ 1405.681009][T14280] veth0_vlan: left promiscuous mode [ 1406.320307][T28417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1406.801454][T14280] team0 (unregistering): Port device team_slave_1 removed [ 1406.850599][T14280] team0 (unregistering): Port device team_slave_0 removed [ 1407.559063][T28158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.726470][T28158] veth0_vlan: entered promiscuous mode [ 1407.861213][T28158] veth1_vlan: entered promiscuous mode [ 1408.022090][T28158] veth0_macvtap: entered promiscuous mode [ 1408.068968][T28158] veth1_macvtap: entered promiscuous mode [ 1408.120537][T14280] IPVS: stop unused estimator thread 0... [ 1408.127397][T26088] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1408.167403][T26085] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1408.208068][T28158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1408.262395][T28158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.309718][T14275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.321239][T14275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.338164][T26088] usb 2-1: Using ep0 maxpacket: 16 [ 1408.343474][T26085] usb 3-1: Using ep0 maxpacket: 16 [ 1408.352702][T26085] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1408.376529][T14275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.383365][T26085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.408928][T14275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.416594][T26085] usb 3-1: Product: syz [ 1408.424696][T26085] usb 3-1: Manufacturer: syz [ 1408.442899][T26085] usb 3-1: SerialNumber: syz [ 1408.474823][T26085] usb 3-1: config 0 descriptor?? [ 1408.495167][T26085] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1408.522822][T26085] usb 3-1: Detected FT-X [ 1408.722127][T26085] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1408.736887][T26085] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1408.738010][T14275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.768902][T26085] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1408.782169][T14275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.836043][T14280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.852039][T14280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.880202][T26085] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1408.894136][T26085] usb 3-1: USB disconnect, device number 21 [ 1408.905279][T26085] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1408.916728][T26085] ftdi_sio 3-1:0.0: device disconnected [ 1409.440053][T28449] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6528'. [ 1409.743151][T28439] vxcan0: entered allmulticast mode [ 1410.387420][T11092] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1410.520534][T11092] usb 4-1: device descriptor read/64, error -71 [ 1410.757370][T11092] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1410.884750][T26088] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1410.898240][T11092] usb 4-1: device descriptor read/64, error -71 [ 1410.915534][T26088] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1410.945026][T26088] usb 2-1: can't read configurations, error -71 [ 1411.018768][T11092] usb usb4-port1: attempt power cycle [ 1411.377536][T11092] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1411.407987][T11092] usb 4-1: device descriptor read/8, error -71 [ 1411.520283][T28483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6537'. [ 1411.667508][T11092] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1411.706408][T11092] usb 4-1: device descriptor read/8, error -71 [ 1411.800704][T28493] fuse: Unknown parameter 'group_i00000000000000000000' [ 1411.817865][T11092] usb usb4-port1: unable to enumerate USB device [ 1411.851100][T28497] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6539'. [ 1412.050959][T28503] x_tables: duplicate underflow at hook 2 [ 1412.838781][T28512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6549'. [ 1413.193040][T28527] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6555'. [ 1413.262123][T28531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6557'. [ 1413.287335][T28531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1413.317959][T28531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1413.325210][T28531] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1413.336507][T28531] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 1413.363822][T28533] macvlan2: entered promiscuous mode [ 1413.369359][T28533] macvlan2: entered allmulticast mode [ 1413.428162][T26085] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1413.487373][T26088] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1413.591111][T26085] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1413.600676][T26085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.608816][T26085] usb 3-1: Product: syz [ 1413.612991][T26085] usb 3-1: Manufacturer: syz [ 1413.617741][T26085] usb 3-1: SerialNumber: syz [ 1413.628284][T26085] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1413.639174][T26088] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1413.652273][T26088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1413.665777][T26088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1413.679874][T26088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1413.688647][T26088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1413.697907][T26088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1413.710233][T26111] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1413.723387][T26088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1413.731312][T26088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1413.740363][T26088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1413.751368][T26088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1413.759639][T26088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1413.768726][T26088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1413.779686][T26088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1413.787785][T26088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1413.796759][T26088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1413.808015][T26088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1413.815833][T26088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1413.825508][T26088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1413.836531][T26088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1413.844274][T26088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1413.853429][T26088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1413.864581][T26088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1413.872553][T26088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1413.882051][T26088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1413.893047][T26088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1413.902028][T26088] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1413.911264][T26088] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1413.920183][T26088] usb 1-1: Product: syz [ 1413.924424][T26088] usb 1-1: Manufacturer: syz [ 1413.929221][T26088] usb 1-1: SerialNumber: syz [ 1413.938408][T26088] usb 1-1: config 0 descriptor?? [ 1413.954291][T26088] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1414.117162][T28539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6560'. [ 1414.135377][T11092] usb 3-1: USB disconnect, device number 22 [ 1414.329168][T26088] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1414.342051][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1414.342068][ T30] audit: type=1326 audit(1760092699.851:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28540 comm="syz.3.6561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f6cd8eec9 code=0x0 [ 1414.373470][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 1414.382814][T26110] usb 1-1: USB disconnect, device number 59 [ 1414.385228][T28544] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 1414.391010][T26110] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1414.487551][T26088] usb 5-1: Using ep0 maxpacket: 8 [ 1414.494848][T26088] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1414.503764][T26088] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1414.515667][T26088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1414.526910][T26088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1414.537096][T26088] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1414.547145][T26085] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1414.554775][T26088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1414.577659][T26088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1414.597325][T26088] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1414.617144][T26088] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1414.635896][T26088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.645760][T26088] usb 5-1: Product: syz [ 1414.650133][T26088] usb 5-1: Manufacturer: syz [ 1414.654743][T26088] usb 5-1: SerialNumber: syz [ 1414.678137][T26088] usb 5-1: config 0 descriptor?? [ 1414.684148][T28535] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1414.695936][T26088] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1414.722683][T26085] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1414.732662][T26085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.741979][T26085] usb 2-1: Product: syz [ 1414.759516][T26085] usb 2-1: Manufacturer: syz [ 1414.765434][T26085] usb 2-1: SerialNumber: syz [ 1414.770845][T20523] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1414.781956][T26111] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1414.796176][T26111] ath9k_htc: Failed to initialize the device [ 1414.803571][T26085] usb 2-1: config 0 descriptor?? [ 1414.810121][T11092] usb 3-1: ath9k_htc: USB layer deinitialized [ 1414.818218][T26088] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1414.844530][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1414.910799][T26088] usb 5-1: USB disconnect, device number 59 [ 1414.937498][T20523] usb 4-1: Using ep0 maxpacket: 16 [ 1414.944756][T20523] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1414.953787][T20523] usb 4-1: config 6 has an invalid interface number: 46 but max is 0 [ 1414.963599][T20523] usb 4-1: config 6 has an invalid interface association descriptor of length 5, skipping [ 1414.973600][T20523] usb 4-1: config 6 has an invalid descriptor of length 13, skipping remainder of the config [ 1414.983857][T20523] usb 4-1: config 6 has no interface number 0 [ 1414.990056][T20523] usb 4-1: config 6 interface 46 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1415.003629][T20523] usb 4-1: config 6 interface 46 has no altsetting 0 [ 1415.012697][T20523] usb 4-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=e0.c5 [ 1415.022023][T20523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.030258][T20523] usb 4-1: Product: syz [ 1415.034776][T20523] usb 4-1: Manufacturer: syz [ 1415.039767][T20523] usb 4-1: SerialNumber: syz [ 1415.101986][T26085] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1415.113042][T26085] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1415.123069][T26085] usb 2-1: USB disconnect, device number 55 [ 1415.137564][T11092] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1415.252346][T28545] program syz.3.6561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1415.287401][T11092] usb 3-1: Using ep0 maxpacket: 32 [ 1415.311489][T11092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.323082][T11092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.343300][T11092] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1415.357684][T11092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.380268][T11092] usb 3-1: config 0 descriptor?? [ 1415.389251][T11092] hub 3-1:0.0: USB hub found [ 1415.607588][ T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1415.620869][T11092] hub 3-1:0.0: 1 port detected [ 1415.645783][T28560] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6567'. [ 1415.819887][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1415.870697][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1415.963917][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.050103][ T10] usb 1-1: Product: syz [ 1416.087158][ T10] usb 1-1: Manufacturer: syz [ 1416.101272][ T10] usb 1-1: SerialNumber: syz [ 1416.131970][ T10] usb 1-1: config 0 descriptor?? [ 1416.215903][T11092] hub 3-1:0.0: activate --> -90 [ 1416.227360][T25548] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1416.495597][T25548] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.658562][T25548] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1416.684496][T25548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.717799][T26085] usb 3-1: USB disconnect, device number 23 [ 1416.918011][T26111] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1417.082964][T26111] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1417.110018][T26111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.143920][T26111] usb 2-1: Product: syz [ 1417.161634][T25548] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1417.200107][T26111] usb 2-1: Manufacturer: syz [ 1417.248458][T26111] usb 2-1: SerialNumber: syz [ 1417.308661][T26111] usb 2-1: config 0 descriptor?? [ 1417.335851][T20523] usb 4-1: USB disconnect, device number 77 [ 1417.636100][T25548] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1417.708560][T25548] usb 5-1: USB disconnect, device number 60 [ 1417.750984][T28567] delete_channel: no stack [ 1417.779053][T26111] hso 2-1:0.0: Failed to find BULK IN ep [ 1417.944709][T26111] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1418.333764][T28597] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6578'. [ 1418.543452][T26111] usb 1-1: USB disconnect, device number 60 [ 1419.073725][T14281] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1419.186783][T14281] bond0 (unregistering): Released all slaves [ 1419.246184][T14281] bond1 (unregistering): Released all slaves [ 1419.747605][T14281] bond2 (unregistering): Released all slaves [ 1419.851956][T14281] tipc: Left network mode [ 1419.867353][T25548] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1419.924260][T26085] usb 2-1: USB disconnect, device number 56 [ 1420.086477][T25548] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 1420.126316][T25548] usb 5-1: config 0 has no interface number 0 [ 1420.184413][T25548] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1420.269820][T25548] usb 5-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1420.317563][T25548] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1420.349551][T25548] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1420.373052][T25548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.396867][T25548] usb 5-1: Product: syz [ 1420.422723][T25548] usb 5-1: Manufacturer: syz [ 1420.465204][T25548] usb 5-1: SerialNumber: syz [ 1420.526310][T25548] usb 5-1: config 0 descriptor?? [ 1420.579463][T28613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1420.617759][T28613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1420.869887][T28613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1420.883086][T28613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1420.914590][T25548] qmi_wwan 5-1:0.197: probe with driver qmi_wwan failed with error -22 [ 1420.938882][T25204] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1421.122545][T25204] usb 1-1: Using ep0 maxpacket: 8 [ 1421.133241][T25204] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1421.163847][T25204] usb 1-1: config 179 has no interface number 0 [ 1421.183234][T25204] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1421.242692][T25204] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1421.271970][T25204] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1421.306554][T25204] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1421.319002][T25204] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1421.332969][T25204] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1421.342542][T25204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.360335][T28646] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1421.381868][T28653] FAULT_INJECTION: forcing a failure. [ 1421.381868][T28653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.415933][T28653] CPU: 1 UID: 0 PID: 28653 Comm: syz.3.6597 Not tainted syzkaller #0 PREEMPT(full) [ 1421.415960][T28653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1421.415973][T28653] Call Trace: [ 1421.415982][T28653] [ 1421.415992][T28653] dump_stack_lvl+0x189/0x250 [ 1421.416018][T28653] ? __pfx____ratelimit+0x10/0x10 [ 1421.416042][T28653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1421.416062][T28653] ? __pfx__printk+0x10/0x10 [ 1421.416091][T28653] should_fail_ex+0x414/0x560 [ 1421.416117][T28653] _copy_to_user+0x31/0xb0 [ 1421.416140][T28653] simple_read_from_buffer+0xe1/0x170 [ 1421.416173][T28653] proc_fail_nth_read+0x1b3/0x220 [ 1421.416199][T28653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1421.416226][T28653] ? rw_verify_area+0x2a6/0x4d0 [ 1421.416252][T28653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1421.416274][T28653] vfs_read+0x1fd/0xa30 [ 1421.416302][T28653] ? lockdep_hardirqs_on+0x9c/0x150 [ 1421.416329][T28653] ? __pfx_vfs_read+0x10/0x10 [ 1421.416354][T28653] ? do_sys_openat2+0x154/0x1c0 [ 1421.416374][T28653] ? kmem_cache_free+0x19b/0x690 [ 1421.416408][T28653] ? do_sys_openat2+0x154/0x1c0 [ 1421.416438][T28653] ksys_read+0x145/0x250 [ 1421.416465][T28653] ? __pfx_ksys_read+0x10/0x10 [ 1421.416493][T28653] ? do_syscall_64+0xbe/0xfa0 [ 1421.416521][T28653] do_syscall_64+0xfa/0xfa0 [ 1421.416544][T28653] ? lockdep_hardirqs_on+0x9c/0x150 [ 1421.416567][T28653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.416586][T28653] ? clear_bhb_loop+0x60/0xb0 [ 1421.416608][T28653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.416625][T28653] RIP: 0033:0x7f1f6cd8d8dc [ 1421.416649][T28653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1421.416666][T28653] RSP: 002b:00007f1f6dcf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1421.416686][T28653] RAX: ffffffffffffffda RBX: 00007f1f6cfe5fa0 RCX: 00007f1f6cd8d8dc [ 1421.416700][T28653] RDX: 000000000000000f RSI: 00007f1f6dcf60a0 RDI: 0000000000000003 [ 1421.416713][T28653] RBP: 00007f1f6dcf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1421.416726][T28653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1421.416738][T28653] R13: 00007f1f6cfe6038 R14: 00007f1f6cfe5fa0 R15: 00007f1f6d10fa28 [ 1421.416767][T28653] [ 1421.838222][T25204] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input91 [ 1422.396054][T28668] input: syz1 as /devices/virtual/input/input92 [ 1422.642840][T26111] usb 5-1: USB disconnect, device number 61 [ 1423.122282][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.128688][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.914632][T26085] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1425.067339][T26085] usb 5-1: Using ep0 maxpacket: 32 [ 1425.085224][T26085] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1425.144342][T26085] usb 5-1: config 0 has no interface number 0 [ 1425.188009][T26085] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1425.225005][T26085] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1425.251802][T26085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.262215][T26085] usb 5-1: Product: syz [ 1425.266521][T26085] usb 5-1: Manufacturer: syz [ 1425.280709][T26085] usb 5-1: SerialNumber: syz [ 1425.289573][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1425.298107][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1425.305891][T28692] bridge1: entered promiscuous mode [ 1425.306609][T25204] usb 1-1: USB disconnect, device number 61 [ 1425.343655][T26085] usb 5-1: config 0 descriptor?? [ 1425.379204][T26085] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1425.397045][T28695] nfs: Unknown parameter '' [ 1425.414979][T26085] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1425.438444][T28695] IPVS: set_ctl: invalid protocol: 25647 47.105.110.102:26990 [ 1425.477498][T25548] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1425.545782][T28699] FAULT_INJECTION: forcing a failure. [ 1425.545782][T28699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.566512][T28699] CPU: 0 UID: 0 PID: 28699 Comm: syz.3.6613 Not tainted syzkaller #0 PREEMPT(full) [ 1425.566546][T28699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1425.566558][T28699] Call Trace: [ 1425.566565][T28699] [ 1425.566573][T28699] dump_stack_lvl+0x189/0x250 [ 1425.566598][T28699] ? __pfx____ratelimit+0x10/0x10 [ 1425.566619][T28699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1425.566637][T28699] ? __pfx__printk+0x10/0x10 [ 1425.566654][T28699] ? __might_fault+0xb0/0x130 [ 1425.566687][T28699] should_fail_ex+0x414/0x560 [ 1425.566712][T28699] _copy_from_iter+0x1de/0x1790 [ 1425.566743][T28699] ? rcu_is_watching+0x15/0xb0 [ 1425.566767][T28699] ? kmalloc_reserve+0xbd/0x290 [ 1425.566786][T28699] ? __pfx__copy_from_iter+0x10/0x10 [ 1425.566812][T28699] ? __build_skb_around+0x262/0x3f0 [ 1425.566833][T28699] ? netlink_sendmsg+0x642/0xb30 [ 1425.566850][T28699] ? skb_put+0x11b/0x210 [ 1425.566871][T28699] netlink_sendmsg+0x6b2/0xb30 [ 1425.566898][T28699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1425.566919][T28699] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1425.566945][T28699] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1425.566961][T28699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1425.566981][T28699] __sock_sendmsg+0x21c/0x270 [ 1425.567008][T28699] ____sys_sendmsg+0x505/0x830 [ 1425.567034][T28699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1425.567063][T28699] ? import_iovec+0x74/0xa0 [ 1425.567084][T28699] ___sys_sendmsg+0x21f/0x2a0 [ 1425.567107][T28699] ? __pfx____sys_sendmsg+0x10/0x10 [ 1425.567162][T28699] ? __fget_files+0x2a/0x420 [ 1425.567177][T28699] ? __fget_files+0x3a0/0x420 [ 1425.567203][T28699] __x64_sys_sendmsg+0x19b/0x260 [ 1425.567227][T28699] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1425.567262][T28699] ? __pfx_ksys_write+0x10/0x10 [ 1425.567289][T28699] ? do_syscall_64+0xbe/0xfa0 [ 1425.567314][T28699] do_syscall_64+0xfa/0xfa0 [ 1425.567333][T28699] ? lockdep_hardirqs_on+0x9c/0x150 [ 1425.567354][T28699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.567371][T28699] ? clear_bhb_loop+0x60/0xb0 [ 1425.567393][T28699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.567409][T28699] RIP: 0033:0x7f1f6cd8eec9 [ 1425.567426][T28699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1425.567442][T28699] RSP: 002b:00007f1f6dcf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1425.567462][T28699] RAX: ffffffffffffffda RBX: 00007f1f6cfe5fa0 RCX: 00007f1f6cd8eec9 [ 1425.567476][T28699] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1425.567488][T28699] RBP: 00007f1f6dcf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.567499][T28699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.567510][T28699] R13: 00007f1f6cfe6038 R14: 00007f1f6cfe5fa0 R15: 00007f1f6d10fa28 [ 1425.567546][T28699] [ 1425.877325][T25548] usb 2-1: Using ep0 maxpacket: 8 [ 1425.886376][T25548] usb 2-1: config 162 has an invalid interface number: 97 but max is 0 [ 1425.894905][T25548] usb 2-1: config 162 has no interface number 0 [ 1425.901471][T25548] usb 2-1: config 162 interface 97 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1425.912686][T25548] usb 2-1: config 162 interface 97 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1425.922733][T25548] usb 2-1: config 162 interface 97 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1425.935862][T25548] usb 2-1: config 162 interface 97 has no altsetting 0 [ 1425.937909][T14281] IPVS: stop unused estimator thread 0... [ 1425.963128][T25548] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1425.972400][T25548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.980645][T25548] usb 2-1: Product: syz [ 1425.984825][T25548] usb 2-1: Manufacturer: syz [ 1425.988130][T28707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6617'. [ 1425.989488][T25548] usb 2-1: SerialNumber: syz [ 1426.139946][T28714] fuse: Bad value for 'user_id' [ 1426.153946][T28714] fuse: Bad value for 'user_id' [ 1426.226990][T28688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.261527][T28688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.271739][T26085] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1426.327777][T28688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.360065][T28688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.384677][T28688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.413268][T28688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.437474][T26111] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1426.607147][T26111] usb 4-1: config 0 has no interfaces? [ 1426.616978][T26111] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1426.658251][T26111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.739937][T26111] usb 4-1: config 0 descriptor?? [ 1427.007039][T25548] metro_usb 2-1:162.97: interrupt-out endpoint missing [ 1427.055914][T25548] usb 2-1: USB disconnect, device number 57 [ 1427.228029][T28728] netlink: 'syz.1.6621': attribute type 2 has an invalid length. [ 1427.247422][T26085] em28xx 5-1:0.89: write to i2c device at 0xa0 failed with unknown error (status=1) [ 1427.305058][T26085] em28xx 5-1:0.89: failed to read eeprom (err=-5) [ 1427.327413][T26085] em28xx 5-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1427.562682][T25548] usb 4-1: USB disconnect, device number 78 [ 1427.786841][T28735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6623'. [ 1427.823685][T28735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6623'. [ 1428.018473][T28740] kvm: pic: level sensitive irq not supported [ 1428.021456][T28740] kvm: pic: non byte write [ 1428.042992][T28740] kvm: pic: non byte write [ 1428.300872][T28751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6629'. [ 1428.437415][T26085] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1428.444958][T26085] em28xx 5-1:0.89: analog set to bulk mode. [ 1428.451719][T20523] em28xx 5-1:0.89: Registering V4L2 extension [ 1428.507373][T26111] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1428.539520][T20523] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1428.559214][T20523] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1428.602263][T20523] em28xx 5-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1428.625295][T20523] em28xx 5-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1428.703763][T26085] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1428.716664][T20523] em28xx 5-1:0.89: Config register raw data: 0xfffffffb [ 1428.723763][T26111] usb 4-1: device descriptor read/64, error -71 [ 1428.735775][T20523] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1428.744702][T20523] em28xx 5-1:0.89: No AC97 audio processor [ 1428.757555][T28763] trusted_key: encrypted_key: key user:syz not found [ 1428.799320][T20523] usb 5-1: Decoder not found [ 1428.888101][T20523] em28xx 5-1:0.89: failed to create media graph [ 1428.946522][T26085] usb 1-1: Using ep0 maxpacket: 32 [ 1428.963491][T20523] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1429.053896][T26111] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1429.076970][T20523] em28xx 5-1:0.89: Registering snapshot button... [ 1429.080918][T28766] ================================================================== [ 1429.092821][T28766] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1429.100273][T28766] Read of size 8 at addr ffff88805ee8c740 by task v4l_id/28766 [ 1429.107828][T28766] [ 1429.110201][T28766] CPU: 0 UID: 0 PID: 28766 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1429.110228][T28766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1429.110242][T28766] Call Trace: [ 1429.110253][T28766] [ 1429.110263][T28766] dump_stack_lvl+0x189/0x250 [ 1429.110287][T28766] ? __virt_addr_valid+0x1c8/0x5c0 [ 1429.110306][T28766] ? rcu_is_watching+0x15/0xb0 [ 1429.110318][T28766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1429.110329][T28766] ? rcu_is_watching+0x15/0xb0 [ 1429.110339][T28766] ? lock_release+0x4b/0x3e0 [ 1429.110349][T28766] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1429.110371][T28766] ? __virt_addr_valid+0x1c8/0x5c0 [ 1429.110397][T28766] ? __virt_addr_valid+0x4a5/0x5c0 [ 1429.110423][T28766] print_report+0xca/0x240 [ 1429.110446][T28766] ? v4l2_fh_open+0xac/0x420 [ 1429.110459][T28766] kasan_report+0x118/0x150 [ 1429.110469][T28766] ? v4l2_fh_open+0xac/0x420 [ 1429.110482][T28766] v4l2_fh_open+0xac/0x420 [ 1429.110498][T28766] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1429.110522][T28766] em28xx_v4l2_open+0x157/0x9a0 [ 1429.110549][T28766] v4l2_open+0x1bf/0x3a0 [ 1429.110574][T28766] chrdev_open+0x4c9/0x5e0 [ 1429.110594][T28766] ? __pfx_chrdev_open+0x10/0x10 [ 1429.110605][T28766] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1429.110617][T28766] ? __pfx_chrdev_open+0x10/0x10 [ 1429.110625][T28766] do_dentry_open+0x950/0x13f0 [ 1429.110640][T28766] vfs_open+0x3b/0x340 [ 1429.110650][T28766] ? path_openat+0x2ecd/0x3830 [ 1429.110673][T28766] path_openat+0x2ee5/0x3830 [ 1429.110712][T28766] ? __pfx_path_openat+0x10/0x10 [ 1429.110743][T28766] do_filp_open+0x1fa/0x410 [ 1429.110757][T28766] ? __lock_acquire+0xab9/0xd20 [ 1429.110767][T28766] ? __pfx_do_filp_open+0x10/0x10 [ 1429.110783][T28766] ? _raw_spin_unlock+0x28/0x50 [ 1429.110793][T28766] ? alloc_fd+0x64c/0x6c0 [ 1429.110821][T28766] do_sys_openat2+0x121/0x1c0 [ 1429.110843][T28766] ? __pfx_do_sys_openat2+0x10/0x10 [ 1429.110912][T28766] ? exc_page_fault+0x82/0x100 [ 1429.110925][T28766] ? do_user_addr_fault+0xc85/0x1380 [ 1429.110936][T28766] __x64_sys_openat+0x138/0x170 [ 1429.110949][T28766] do_syscall_64+0xfa/0xfa0 [ 1429.110972][T28766] ? lockdep_hardirqs_on+0x9c/0x150 [ 1429.110995][T28766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.111015][T28766] ? clear_bhb_loop+0x60/0xb0 [ 1429.111037][T28766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.111052][T28766] RIP: 0033:0x7efce9ca7407 [ 1429.111063][T28766] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1429.111073][T28766] RSP: 002b:00007ffe8311aef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1429.111086][T28766] RAX: ffffffffffffffda RBX: 00007efcea4b5880 RCX: 00007efce9ca7407 [ 1429.111094][T28766] RDX: 0000000000000000 RSI: 00007ffe8311cf1b RDI: ffffffffffffff9c [ 1429.111104][T28766] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1429.111115][T28766] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1429.111126][T28766] R13: 00007ffe8311b140 R14: 00007efcea61c000 R15: 000055ee210cd4d8 [ 1429.111149][T28766] [ 1429.111156][T28766] [ 1429.414874][T28766] Allocated by task 20523: [ 1429.419284][T28766] kasan_save_track+0x3e/0x80 [ 1429.423964][T28766] __kasan_kmalloc+0x93/0xb0 [ 1429.428547][T28766] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1429.433920][T28766] em28xx_v4l2_init+0x10b/0x2e70 [ 1429.438841][T28766] em28xx_init_extension+0x120/0x1c0 [ 1429.444215][T28766] process_scheduled_works+0xae1/0x17b0 [ 1429.449756][T28766] worker_thread+0x8a0/0xda0 [ 1429.454328][T28766] kthread+0x711/0x8a0 [ 1429.458380][T28766] ret_from_fork+0x4bc/0x870 [ 1429.462951][T28766] ret_from_fork_asm+0x1a/0x30 [ 1429.467693][T28766] [ 1429.470003][T28766] Freed by task 20523: [ 1429.474055][T28766] kasan_save_track+0x3e/0x80 [ 1429.478721][T28766] __kasan_save_free_info+0x46/0x50 [ 1429.483919][T28766] __kasan_slab_free+0x5c/0x80 [ 1429.488672][T28766] kfree+0x19a/0x6d0 [ 1429.492546][T28766] em28xx_v4l2_init+0x1683/0x2e70 [ 1429.497553][T28766] em28xx_init_extension+0x120/0x1c0 [ 1429.502828][T28766] process_scheduled_works+0xae1/0x17b0 [ 1429.508368][T28766] worker_thread+0x8a0/0xda0 [ 1429.512967][T28766] kthread+0x711/0x8a0 [ 1429.517044][T28766] ret_from_fork+0x4bc/0x870 [ 1429.521621][T28766] ret_from_fork_asm+0x1a/0x30 [ 1429.526380][T28766] [ 1429.528696][T28766] The buggy address belongs to the object at ffff88805ee8c000 [ 1429.528696][T28766] which belongs to the cache kmalloc-8k of size 8192 [ 1429.542758][T28766] The buggy address is located 1856 bytes inside of [ 1429.542758][T28766] freed 8192-byte region [ffff88805ee8c000, ffff88805ee8e000) [ 1429.556740][T28766] [ 1429.559058][T28766] The buggy address belongs to the physical page: [ 1429.565457][T28766] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ee88 [ 1429.574208][T28766] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1429.582707][T28766] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1429.590681][T28766] page_type: f5(slab) [ 1429.594659][T28766] raw: 00fff00000000040 ffff88813ffa7280 ffffea000155f600 0000000000000005 [ 1429.603240][T28766] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1429.611818][T28766] head: 00fff00000000040 ffff88813ffa7280 ffffea000155f600 0000000000000005 [ 1429.620471][T28766] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1429.629146][T28766] head: 00fff00000000003 ffffea00017ba201 00000000ffffffff 00000000ffffffff [ 1429.637804][T28766] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1429.646470][T28766] page dumped because: kasan: bad access detected [ 1429.652859][T28766] page_owner tracks the page as allocated [ 1429.658576][T28766] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27654, tgid 27653 (syz.1.6281), ts 1366963125415, free_ts 1365978031699 [ 1429.680096][T28766] post_alloc_hook+0x240/0x2a0 [ 1429.684849][T28766] get_page_from_freelist+0x2365/0x2440 [ 1429.690378][T28766] __alloc_frozen_pages_noprof+0x181/0x370 [ 1429.696184][T28766] alloc_pages_mpol+0x232/0x4a0 [ 1429.701038][T28766] allocate_slab+0x96/0x3a0 [ 1429.705533][T28766] ___slab_alloc+0xe94/0x18a0 [ 1429.710194][T28766] __slab_alloc+0x65/0x100 [ 1429.714603][T28766] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 1429.721019][T28766] kmalloc_reserve+0x136/0x290 [ 1429.725765][T28766] __alloc_skb+0x142/0x2d0 [ 1429.730160][T28766] netlink_dump+0x167/0xe90 [ 1429.734651][T28766] netlink_recvmsg+0x676/0xa30 [ 1429.739397][T28766] sock_recvmsg_nosec+0x183/0x1c0 [ 1429.744412][T28766] ____sys_recvmsg+0x3aa/0x460 [ 1429.749187][T28766] ___sys_recvmsg+0x1b5/0x510 [ 1429.753873][T28766] do_recvmmsg+0x307/0x770 [ 1429.758291][T28766] page last free pid 14280 tgid 14280 stack trace: [ 1429.764792][T28766] __free_frozen_pages+0xbc4/0xd30 [ 1429.769906][T28766] skb_release_data+0x62d/0x7c0 [ 1429.774749][T28766] consume_skb+0x9e/0xf0 [ 1429.778994][T28766] batadv_forw_packet_free+0x65/0x1f0 [ 1429.784367][T28766] process_scheduled_works+0xae1/0x17b0 [ 1429.789901][T28766] worker_thread+0x8a0/0xda0 [ 1429.794489][T28766] kthread+0x711/0x8a0 [ 1429.798576][T28766] ret_from_fork+0x4bc/0x870 [ 1429.803167][T28766] ret_from_fork_asm+0x1a/0x30 [ 1429.807929][T28766] [ 1429.810237][T28766] Memory state around the buggy address: [ 1429.815861][T28766] ffff88805ee8c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1429.824001][T28766] ffff88805ee8c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1429.832053][T28766] >ffff88805ee8c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1429.840111][T28766] ^ [ 1429.846260][T28766] ffff88805ee8c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1429.854309][T28766] ffff88805ee8c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1429.862344][T28766] ================================================================== [ 1429.948431][T28766] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1429.955647][T28766] CPU: 0 UID: 0 PID: 28766 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1429.964649][T28766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1429.974681][T28766] Call Trace: [ 1429.977940][T28766] [ 1429.980849][T28766] dump_stack_lvl+0x99/0x250 [ 1429.985415][T28766] ? __asan_memcpy+0x40/0x70 [ 1429.989997][T28766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1429.995183][T28766] ? __pfx__printk+0x10/0x10 [ 1429.999773][T28766] vpanic+0x237/0x6d0 [ 1430.003773][T28766] ? __pfx_vpanic+0x10/0x10 [ 1430.008274][T28766] ? preempt_schedule+0xae/0xc0 [ 1430.013110][T28766] ? __pfx_preempt_schedule+0x10/0x10 [ 1430.018581][T28766] panic+0xb9/0xc0 [ 1430.022290][T28766] ? __pfx_panic+0x10/0x10 [ 1430.026692][T28766] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1430.032567][T28766] ? is_module_address+0x17/0xf0 [ 1430.037492][T28766] ? v4l2_fh_open+0xac/0x420 [ 1430.042069][T28766] check_panic_on_warn+0x89/0xb0 [ 1430.046991][T28766] ? v4l2_fh_open+0xac/0x420 [ 1430.051584][T28766] end_report+0x78/0x160 [ 1430.055838][T28766] kasan_report+0x129/0x150 [ 1430.060339][T28766] ? v4l2_fh_open+0xac/0x420 [ 1430.064936][T28766] v4l2_fh_open+0xac/0x420 [ 1430.069510][T28766] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1430.075500][T28766] em28xx_v4l2_open+0x157/0x9a0 [ 1430.080354][T28766] v4l2_open+0x1bf/0x3a0 [ 1430.084612][T28766] chrdev_open+0x4c9/0x5e0 [ 1430.089016][T28766] ? __pfx_chrdev_open+0x10/0x10 [ 1430.093947][T28766] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1430.100284][T28766] ? __pfx_chrdev_open+0x10/0x10 [ 1430.105207][T28766] do_dentry_open+0x950/0x13f0 [ 1430.109981][T28766] vfs_open+0x3b/0x340 [ 1430.114052][T28766] ? path_openat+0x2ecd/0x3830 [ 1430.118812][T28766] path_openat+0x2ee5/0x3830 [ 1430.123426][T28766] ? __pfx_path_openat+0x10/0x10 [ 1430.128390][T28766] do_filp_open+0x1fa/0x410 [ 1430.132877][T28766] ? __lock_acquire+0xab9/0xd20 [ 1430.137724][T28766] ? __pfx_do_filp_open+0x10/0x10 [ 1430.142750][T28766] ? _raw_spin_unlock+0x28/0x50 [ 1430.147588][T28766] ? alloc_fd+0x64c/0x6c0 [ 1430.151914][T28766] do_sys_openat2+0x121/0x1c0 [ 1430.156679][T28766] ? __pfx_do_sys_openat2+0x10/0x10 [ 1430.161889][T28766] ? exc_page_fault+0x82/0x100 [ 1430.166659][T28766] ? do_user_addr_fault+0xc85/0x1380 [ 1430.171938][T28766] __x64_sys_openat+0x138/0x170 [ 1430.176875][T28766] do_syscall_64+0xfa/0xfa0 [ 1430.181398][T28766] ? lockdep_hardirqs_on+0x9c/0x150 [ 1430.186614][T28766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.192702][T28766] ? clear_bhb_loop+0x60/0xb0 [ 1430.197401][T28766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.203295][T28766] RIP: 0033:0x7efce9ca7407 [ 1430.207737][T28766] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1430.227340][T28766] RSP: 002b:00007ffe8311aef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1430.235853][T28766] RAX: ffffffffffffffda RBX: 00007efcea4b5880 RCX: 00007efce9ca7407 [ 1430.243816][T28766] RDX: 0000000000000000 RSI: 00007ffe8311cf1b RDI: ffffffffffffff9c [ 1430.251786][T28766] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1430.259758][T28766] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1430.267737][T28766] R13: 00007ffe8311b140 R14: 00007efcea61c000 R15: 000055ee210cd4d8 [ 1430.275721][T28766] [ 1430.279038][T28766] Kernel Offset: disabled [ 1430.283349][T28766] Rebooting in 86400 seconds..