last executing test programs: 13m46.054422859s ago: executing program 0 (id=2805): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) execveat$binfmt(r3, r0, 0x0, 0x0, 0x1000) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000540)={[&(0x7f0000000080)='\\th\x00\x05\x00\x00\x00\x14Z\xdc/\xb6\n\xc6p\x89\x96;\xb7V\xef\xd9,\x11uZ9T\xbfN=x\xb0n\x97\xb2\x19\x91\x83T\x84\xbf\x8f\x9e#\x80\xaeI\x9d\xd7z\x19\bs\x1eY\x01Y\x9f\xf6\xc0\xa7\x04\xe3\x1c\xd1\xde\xbb\xd4\xc6\xa6\xfc<\x80\xf8o\xf5\xa8\xdcw.ME5\xbb\xab\x98\x93\xd1~\x80\xd8o:F\xcaA']}, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x48201, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x8) 13m45.798690936s ago: executing program 0 (id=2807): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 13m45.378267925s ago: executing program 0 (id=2808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 13m45.025830623s ago: executing program 0 (id=2811): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000380)="b7", 0x1) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x79c5}, {0x0, 0x30}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"c8648d74d17bada052853ed38481e087", 0x0, r4, {0x4, 0xb0}, {0x7, 0xc}, 0x1, [0x7, 0xffffffffffffffff, 0x9, 0x9, 0x81, 0xffffffffffffffff, 0x76, 0x1, 0x6, 0x2, 0x100000001, 0x2, 0x8, 0xc, 0x2, 0xfffffffffffffffd]}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002700)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000002740)="fae4f42f0ea60dad6c1d14f99856e69b716b8fc7d964e6911946690d7080ffaf410111a99c7cef3ae0c76ec94b6efabbf125bfb9ee04d3d4a1b8e2ab17d4f90fb461f369efb33ce3a8a140a6dd980f49360028854d0df1a085c7abbc70782e9f69737de055db9ea50408e28e5cfc362d0a595712f6a2fde01cd6b154300a158968aed449641ebe0e0e205d6e") ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) (async) r7 = signalfd(r0, &(0x7f0000000080)={[0x7fffffffffffffff]}, 0x8) read$FUSE(r7, &(0x7f00000006c0)={0x2020}, 0x2020) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000002900)=[@exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000002800)=""/203, 0x0, 0x1, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fd}, &(0x7f00000029c0)}, 0x400}, @increfs_done], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, 0x0}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r8 = syz_io_uring_setup(0x48b3, &(0x7f0000002a00)={0x0, 0xf98b, 0x20, 0x8000, 0x3cb, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x50, 0x0, r8, 0x0, 0x0, 0x0, 0x2}) (async) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000180)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13m44.698540265s ago: executing program 0 (id=2813): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x49, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x6a0, 0x0, 0x1, {0x22, 0xeeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xd0, 0xf, 0x2}}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x9cc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0x40, 0x7f, 0x1, {0x22, 0x57f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x9, 0x2, 0xc, 0x10, 0x2}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x6, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "e6c1ef2d0eadaaaff71ddf8c5fb5bd78"}]}, 0x3, [{0xf4, &(0x7f0000000200)=@string={0xf4, 0x3, "b1b4ff5ce8e1c2853c52b16478c36942c29f76fdc9f19306e7b3cd081d89e272b093f6dc93b2b26130e11c0c657532ec203ae4ff6fa1adc3b261d49242d7fbcb8d97ad1c508de2219b5d64155ec096f3065a8de3151554605a54e95f54cae25d5bb3a91774159dc01702dd045309ba8f5aae975bbdf303d0b78dd1a5fd9d95360362a446fdeabefe74a9b3ac8305e0009b8d44022a3259daaa75aeb2e364042d90ffb58851a996fbc8a51d62d3f85b57161996a0390c1f2cd9814e3db3cdecd70ff573a25fd4ccbe78f5e8518f400509460c715e8c15f8118341cd7656a63db92aed20e99b776c9b496e7b19e1ebe0621e89"}}, {0x98, &(0x7f0000000300)=@string={0x98, 0x3, "293fc24e06dfba16435abf90ee5ee569fc3dc1457ee0aac9a1a9b6d9dc4b5dd2f875ef2e18974812a62cb7f217adb8fd4334afd754df285154014edf36a9ad693dc0e30a68e3b35ae1c309193324428b7b903e5e40878ae2cb41e4dc94f096bc43fd21a4d913a5a29c13b51b3567a0ca0a00a96ceeff733a818049359bb18114152928b3769a64df35782f9ff065dce52eee14461410"}}, {0xad, &(0x7f00000003c0)=@string={0xad, 0x3, "7dca09b80e5bbeaa598c2e30427750a969709cfba730cbf675168be46c43964a1c452a9c6d2138e6967fd293a03e8b6f2bc64cb95076c5b3bc10e0527a5f26d461b5a6ad9b892e9ef358bdc819bbdf808d1b6d1c709abb089420b33b091eb3d2af382b1af5897a785c7b45c2aeb64e628bebc4bd7340f51c5acf9ee261c8a42deadeffb97e6d93b5e3280d70dcd9b4c67b44598aa77567b07e09d5acfcc1f4c965127fb5fa2b149df2dc38"}}]}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) readahead(r0, 0x9, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x100000000, 0x80000000) 13m42.615661814s ago: executing program 0 (id=2817): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1e3a00, 0x0) ioctl$BLKALIGNOFF(r0, 0x40101287, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r3 = socket(0x18, 0x3, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0285628, &(0x7f0000000040)={0x403, 0x1}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'veth1_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x12, 0x4, 0x40}}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = shmget(0x2, 0x10000, 0x8, &(0x7f00006a0000/0x10000)=nil) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000100)=""/23) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendto$inet6(r3, &(0x7f0000000340)="2e7f2bd2f9ccfc1ec1bc2507dedf2ee5a8a4614818e83d9c4b4be6334635b94725ac27998a5417aef79c80ef0bb372b27dc982a5306ce8962745955203791748f65961ceea2d9648c2fdc7ad5ff71e6695d50f762bec5524f25d80daa9e42ea26c18b0850875014320a92cf98c5da0a841773379974ef207802e398de4628c57145fb10cebb42d98cdfbf89059f5a8cbcbbf96d04a20", 0x96, 0x40000, &(0x7f0000000140)={0xa, 0x4e21, 0x10000, @loopback, 0xe9}, 0x1c) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1e4}}, 0x0) write$binfmt_misc(r8, 0x0, 0x0) r9 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xd3b0, 0x0, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x6205, 0x0, 0xe, 0x0, 0x0) 13m27.443395347s ago: executing program 32 (id=2817): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1e3a00, 0x0) ioctl$BLKALIGNOFF(r0, 0x40101287, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r3 = socket(0x18, 0x3, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0285628, &(0x7f0000000040)={0x403, 0x1}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'veth1_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x12, 0x4, 0x40}}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = shmget(0x2, 0x10000, 0x8, &(0x7f00006a0000/0x10000)=nil) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000100)=""/23) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendto$inet6(r3, &(0x7f0000000340)="2e7f2bd2f9ccfc1ec1bc2507dedf2ee5a8a4614818e83d9c4b4be6334635b94725ac27998a5417aef79c80ef0bb372b27dc982a5306ce8962745955203791748f65961ceea2d9648c2fdc7ad5ff71e6695d50f762bec5524f25d80daa9e42ea26c18b0850875014320a92cf98c5da0a841773379974ef207802e398de4628c57145fb10cebb42d98cdfbf89059f5a8cbcbbf96d04a20", 0x96, 0x40000, &(0x7f0000000140)={0xa, 0x4e21, 0x10000, @loopback, 0xe9}, 0x1c) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1e4}}, 0x0) write$binfmt_misc(r8, 0x0, 0x0) r9 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xd3b0, 0x0, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x6205, 0x0, 0xe, 0x0, 0x0) 5m48.770667535s ago: executing program 2 (id=4311): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) alarm(0x1) 5m47.03850752s ago: executing program 2 (id=4318): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c702f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153c8df10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f2d3ce9c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac8326a85bc8791473d2828d1e28b5f20e286b061c4dadef878", 0xac}, {&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01e563f192537c527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa075a70123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2960bab4c5ba6", 0x6c}, {&(0x7f0000000b40)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc628359101e57e31436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ae2ff2e4ad7a3db413358c266a43f743c155d8bcbab110f73f4f12d0728bada715bf5ab80002346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a14386c73e7017cf0fe0275d2d6f9531b12f12e29b903f30c3228aa9ab3a503e951200", 0xcd}, {&(0x7f00000007c0)="4f0461e980a3df614c952ba937542c3956c268ef9da7fc364c6d5c543c3bd84159a349884fb4df8936363169ce8541c090bb5871df329e56747592fa4d29a09dcb4c416503ec1113680af76cba6417576ac2c0d3570f91a9c661f10e9bdab3c038f68844db4a19a8a613d78adb2805e27a1dea217288306169ac437c2401514510725ff144e75b83b8c67735520151c1018c3542bdfa2cae78aeb5d03bf4018be0f581f55e82cc1e851b8585d48a881144bfd5e96b52b62e62abe7ace71093fe8779d41feea0eb401dc005f2e3fe47320e7f945fb04e06c713f062ca47794f9c0b7fa88ccfacc4a51a4e816e0cb8320000000000000000ff512190d1129892fd541a0fbc9a41d70cd0d4501fed5545cd04b7800814bcbf492339bbfe784baba895beda447447a447e088a8d7cb795b3543a8cd8d8efb830dabc88b5b6466cd1d903833fca0e1049480810da129e746e2c9726a846ce85003a6bb9949e5dd140ab97a001c91323d5cb6648d4f61d40d4951ae36a1a404ba3452ae9a969c16a0918b4afe0b7b6afe4d59d8abfed8da45e7b38ce7c6c4daf306d0136c353c109f0a63c26e763dc2fcd93b7c9b7143823cd8272533aa2eb47f873da2e1aeba66332990f5033c712108f71bc055f29317d8dd9b227b524d61381ed55fdb83ee0849699dae2e0bb675bf07392f4a0303f2498c892988420f1e144e73eb89146ccde129625478ae391d7ed1d6f5fc03c603c699250ff4801890eda63df41b0b9d619b2dad24798faf47863f79ee52ee40e8550c52c28a795377d934e9b3cb2f9f0ae973055288f5ebbb6a193e5cf89d3dfff60d4e545abda64b1c55d315931540117b96e72a5c99d165d19e12176acd226a9ec38d6889c913b8c98b3a1666ec9b378655838df06b8318691cded6314ce3bcdd3d1ac172c3ecd2f82879771034f5f1ebb3d6ee5b10c77f269954680acc2495c586cf6bc33b2c8b374cf64275cfb06a0ef5485c269b152cbdd6c048ad467b1749290199e403d82e3d6d76c5a28372a45f3c79f3e45ce94ffb14bf3aa8e5f0e54d942e8440c94bf5d2f0eb05e32337b6ee0087f8047e2a820b1fe6c4db3d9969f9705d9ef5df25e8373de300f04ce07cbda2e41459024d13fa2ee32103d00b6642e6fe0ae493a9ad418329deb60f9930dcb999678f85608cfb4f5926171df3836b21d7e8d2ce161265a9a64571babc3ace2e0a36d0fc4b285d11f5ff7e57ec2a2335816a85df804d673370a6e7956dd6", 0x37e}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x40080c0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="96f5", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d31", 0xa}, {&(0x7f0000000dc0)="ca357f760c70b233e56ef5939468eba8381308e7896c23495e2d4cc40a7c904c1e230a0d364896516861c43b9fb8cfdd76450363012cbea303", 0x39}], 0x3, 0x0, 0x0, 0x900}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5ad4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 5m46.650414401s ago: executing program 2 (id=4319): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000a01010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 5m46.454577873s ago: executing program 2 (id=4321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') (async) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') socket$inet(0x2b, 0x801, 0x0) (async) r3 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x8) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="01", 0x1}], 0x1) (async) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="01", 0x1}], 0x1) select(0x40, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x1, 0x3, 0x7, 0x7, 0x8}, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x40c0) 5m46.221365694s ago: executing program 2 (id=4323): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockname(r0, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000001c0)=0xfff) r2 = signalfd(r1, &(0x7f0000000200)={[0x8]}, 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="fd554bd50fcc"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000003c0)=0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r6, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1b, 0x4a, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x20008004) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000007c0)={0x0, r2}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000800)={0x1, 0xb89, 0x8001, 0xa83, 0x2, 0x2}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r8 = syz_open_dev$rtc(&(0x7f0000000840), 0x800, 0x98000) tee(r8, r7, 0x2, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb8, 0x2, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4e04}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x80d4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) unlink(&(0x7f0000000a00)='./file0\x00') timer_create(0x2, &(0x7f0000000b40)={0x0, 0x33, 0x1, @thr={&(0x7f0000000a40)="b6356b2046534ea91894f68c42cf3d20e67f75b506ac10b481a34d8a786ce1fe684d09322582d28b32", &(0x7f0000000a80)="2530ce9dd5dbd762c1c7ef23e03b030a5d528de1455de7b4ac31c28e504fd2b93c9aa685d6b518a2c25098ee5e99a4b28341e93d35d4e3ab22b1f42182b56e9478ce319b08ebc8eb6e71f360616f923d40c030cbe69d0bfe93f477f13a7ce4b55b8bd57c0c7ca41ab5376814d08530f629950b81273d4c11aa258b11fd6d8553f038f0e96361027ae81a4f"}}, &(0x7f0000000b80)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000bc0)=0x8) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={r2, 0x58, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r10, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x800) ioctl$VIDIOC_SUBDEV_G_CROP(r9, 0xc038563b, &(0x7f0000000e40)={0x0, 0x0, {0x8001, 0x3, 0x3, 0x1}}) 5m45.092042822s ago: executing program 2 (id=4326): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x2f00, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c00028004ea01009300000014000180080001"], 0x88}}, 0x0) 5m44.445569289s ago: executing program 33 (id=4326): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x2f00, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c00028004ea01009300000014000180080001"], 0x88}}, 0x0) 9.966644263s ago: executing program 5 (id=6349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010056000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a0700024000000b000900010073797a30000000000900020073797a3200000000140000"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.774145337s ago: executing program 5 (id=6353): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xde, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x1, 0x80, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x9}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x4, 0x5, [0x2, 0xa, 0x0, 0x7, 0x9], 0xd5}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0x4, "900f42f6311c"}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x8, "50a690d96f"}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x1, 0x4, "d7f2dcf70e"}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x2, "4017aa"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x6, 0xff, "224ae6694d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x4, 0x1, 0x9, "5de91b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x8, 0x5, {0x7, 0x25, 0x1, 0x0, 0xd, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x4e, 0x1002}, @as_header={0x7, 0x24, 0x1, 0xd9, 0x0, 0x1006}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x2}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x5, 0x8, {0x7, 0x25, 0x1, 0x3, 0x6, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x8, 0xe8, 0x20, 0x7}, 0x19, &(0x7f0000000280)=ANY=[@ANYBLOB="050f1900011410040aa09fad8a115b72ebf522d30bea332bed6830c0645d73139672b369c3d52e20ea7b2def0e"], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="401600000098b0c223e9310c0000"], 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000002000000080a0000"]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000a40)={0x60000400, 0x0, 0x0, &(0x7f0000000380), {}, 0x0, 0x0, &(0x7f00000003c0)=""/111, &(0x7f0000000a00)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58) getresgid(&(0x7f0000000c40), 0x0, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004, @tid=r3}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@private2, @in6}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006dc0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x4002, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80020000004, 0x3ffffffffffd, 0x6, 0x200, 0xfffffffd, 0x1, 0x6000, 0x4000000, 0xee01, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="102500"/16], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0xc054) sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) 9.573670101s ago: executing program 4 (id=6355): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x5f, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r3, &(0x7f0000000380), 0x0, 0xc9, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000040)='}i', 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000340)={0x8, 0x0, r4, 0xe0e0e0e0}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001540)=@get={0x1, &(0x7f0000001480)=""/191, 0x368b8bd2}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000005600000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0xfe, 0x3, 0xfffffffe, 0x40, @private2, @mcast1, 0x10, 0x700, 0x1, 0x9}}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x401) syz_clone3(&(0x7f00000012c0)={0x80, &(0x7f0000000080), &(0x7f0000001440), 0x0, {0x6}, &(0x7f0000000140)=""/229, 0xe5, &(0x7f0000000280)=""/4096, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 7.03036882s ago: executing program 3 (id=6373): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') read$hiddev(r0, &(0x7f0000000040)=""/65, 0x41) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents64(r2, &(0x7f0000000340)=""/79, 0x4f) readv(r1, &(0x7f00000006c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1) r3 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create(0xbe1) r6 = dup2(r4, r3) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0xa000001d}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)={0x40000008}) r8 = fcntl$dupfd(r5, 0x0, r7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000004c0)={0x4000200c}) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r10, &(0x7f0000000880), 0x10, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) close(r10) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000380)="009db1d758d666f6274ecc549b7dd3b8863b4b788e895204f585a3d6c737ce233d46f36c26ac77a9c92e67d295992466832fa25063983e5210cf92d9cfe7d138d3ab707b92269982a8ecece63d4950e17b977bd668783c562dfc9398d03e7e27824c495ac29ab493022e84580a94e952043e5c4d9b3e8126", 0x78}, {&(0x7f0000000440)="4d245fcade85bb7b246a655c56722d2ad69138b8f36d7b7cb6eb3ebab662c93c37db28203b167fcd776668d12fe635ce2314f75cc6c19553449de85242cbd66d44466eee2bd6a00e4be32a10abc5f554cff4a64ad9a3452ff990150bd4428b6b651a29fbd78e1c108ede47368eb09a42359f1ec2bdb97c10c1da7a8113cdec04e0f79a608dd07f08544de071f196a25aed310efddc7b3d6e2afaeb34d4da6b6087e82ae374e711b9d9deaefb800900000000", 0xfffffd1e}, {&(0x7f0000000500)="1047d5b5f1d3207ce2dec6e8b17c5a9be2420bd553a78ee24fd2ee49b15588f7ca9cbb6155d6db2b51bfe6e3261f8082fbe3d2c0d4f97f7a27ae163ed424a8cbc6e9108c0011a2d5cc0763fecffbb250db30add115b2766c92f142b4901ed521c2598f621e93ed3da0cf", 0x6a}], 0x3) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f00000005c0)=""/172, 0xac}], 0x4}, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x5, 0x5, 0x0, 0x8, "ef7bd9fa140f36061b87ef238fe48ccdb0933415f017bf7b4d13b6a7e09bb931f34cd17071a045258cb77643f63b4ce91f8587a2a04ccf1f2dd1c7a2695759ee", "63e77a1d111dc014a7742d60293b6f4190def709e71d075d3160f1688d6cb41d", [0x5, 0x8]}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r1, 0x2, 0x8000000000000000, 0x1}) 6.137485622s ago: executing program 4 (id=6376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) 6.050609881s ago: executing program 3 (id=6377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000700000300000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000080000900020073797a31000000000900010073797a30000000000800054000000006300000001e0a03000000000000000000070000010900020073797a31000000000900010073797a3000000000040003802c0000000e0a01020000000000000000070000050900010073797a30000000000900020073797a30"], 0x11c}}, 0x0) 5.973576051s ago: executing program 5 (id=6378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x80, 0x20, 0xb, 0xc0, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x68, 0x0, 0xd1, 0x4, 0x0, @multicast2, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000c700000000000000950000"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x6000, 0x87, &(0x7f0000000480)=""/135}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000040c0)=[{{&(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000540)="0f9931ec6606f5115a9095dd2fe58f7e4ad7fbc2d200617d546b9b6379910a5be79fd5b5dd3e8f40c9fc969fd889be36a44d55c44ba8b0a6e23d13b95bd5f11aa822b5dd4401153883e91389344dd202a0b787b4f79e949b102cd8dc9076492088bf6f3c0091a19a50676d7cd55360f71b7600d40990fe4eec7c02b01aa27ffc1fed036785749d9b781d0914bfcd5987c478c1", 0x93}, {&(0x7f0000000440)}, {&(0x7f00000006c0)="11ff7c1ddef15fcf77808aa51f9ba9ed8fdbe2f56731f2f7ccd904682bb59dd492594e6c5465817df5c02e2768fbbf09574aeab00b93e6a01eca63f2a62abbb0d7bdbc1b93603675d5c073b03f1a1f716a5921c91ef70dcf294cc023f3a2710c5a05d24ee21894d391b91e15ab1d85c633839ac53d5bb95a82cfab9b8bab19409f3f255cee7f42814d01dae672dfa98aeb706cf52ef3bcb163a22d92c0fb3226cd44d105c3249876bee43bda6f3ee3f115df12", 0xb3}, {&(0x7f0000000780)="ca9d0866ddae0ef5de43bc39335dc810ad55f638aad0c0a9848b2705715504177133b0974cd9c53e88717bbf97cbf9737b058d8da54c15fa0d5972eb2ba39cb9f9ae2ad2d1eeb3c303abac237cab55e7364bf56803331457a277880d32617a6347601bbb7a639eeb7b6372d4aef78d259a794e14be7203d4a7305f58f633eff6e085a30e36f5a65f0c09133f859f87a1aaf0a51524f71152b19fe307aac81b3cb022509670ebfe0880", 0xa9}, {&(0x7f0000000600)="d5830b3baac03dd64eb63f1c5285951a34d17cfbccd70e2d401dcadde61ee590a89c", 0x22}, {&(0x7f0000000840)="a9cb0321881469f3d2d34943021a35b062e4cf366aa5491a1241e191bdfe7b1a71b2112c99632d547252e93c26d54582cc9145e06ec3203dcaad88ec1ffc36b963cff5cce3a41f506fd99a6819ec475a8450b90aab323efdf0268b7f035f60fe100965758b69060885071a9720893018c95a52d94dfdbbdc4a6d2b470195b7611b630816d203ec47ecbf3657ca7d5888edd2aa5fa1c7b068cf4f649ea8aa9aeb07cf58bc0c04393ce2d0efa9025884401079221d4f7151c123320f7399b3ec15ce880b94ab9341d7291228ff53f90e6522b15268ef37db05c29f602488ba7b0b28a2da3c8f86a8f510ead5", 0xeb}], 0x6, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}, {{&(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000a00)="188ae73e68cf40b32f82cf0a732ff5c7b3d01acb8f9065d66351ab8522587f7684c5ba856b62abafb40c4b43be7335203cd439ae7825371f3e6a181486b05b8c8b48e6704e484d2a7ab6913b327a91588ebe60efaefef757982ec8a8862b9f7d8bdcc8e8609281aef61b1161b237f735869b2cd6c9d9205b4422a7d7ad962d498be1adf22a7fbaeaaa5f556a8140b625c8e22f0425f29320db2bad7e267d7b204a4b3b8fd5c1b9a3", 0xa8}, {&(0x7f0000000ac0)="9c9f1c32824a8daab7a267baa376d38ace9e1f6f33497eab330f5db30f52ac9a40a05af9476e96ec844d8fd3553b305a5b8bb4857d46da528ed0d2c19eeb02db27e41d3ddb7b020b68e499cda5624f76808b59b5414f130c4f3dd518767f17831cd1ce32fb082493fb7eee6fc854d97375209827061a6470fdd23a5980121473fb1c93437e7e05d4aea841e6b6eb5ecd881a0d29743c8f5acfc9acf6b41a0b412742c6cd256a7266cb01f6e4ea59665f5d3f5302a5c282903439f101118c4891ad77bc9645c7a5ee09caf1507f29", 0xce}, {&(0x7f0000000bc0)="73dfd15a63da0d7fbf06fff5a0c7ef381c8e04f069c8ab5b7a169eb72163c3245f4e235b451951089e8e0b7f6736affe373129ad5e483b611b54c41903be2cd80114a79b885312b2d2398844d48e9ce520776c6cef26c9185f565e48c7b4c8fe48b72cfc34b682acbba55951adc31e2d06ea564d2daeaaa2f26f7a6b39d70aab7fa02a4214b7e4dc578e9b252aa25ff0a2a8a8269310373f5fb16fcb6295e60c286579c53ce04ea6237d4269d7bafc25c789875fe22027105df6c214fc1e3c16d55922ca", 0xc4}, {&(0x7f0000004200)="8c4e55734d38fdfb32d5fe85acd64deafe66dbe342d480d66d7e3f8a0377a483359346e81c1169897a347d527d639261468a225afbf45f3bff101263e174023ace6193bb8f50bc6f83a5e9410ceff994b505669a0791b610181fbbdd675656a3a176", 0x62}], 0x4, &(0x7f0000000d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd25}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x7c, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}]}, @end]}}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@cipso={0x86, 0x31, 0x3, [{0x1, 0x7, "20c49ec864"}, {0x6, 0xd, "1a0a822a596b76a1048c75"}, {0x2, 0x10, "9d8985a4f7253e5fb9db75e8771b"}, {0x1, 0x7, "40196db39f"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x35, [@loopback, @remote, @broadcast, @broadcast, @local, @local, @private=0xa010100, @broadcast, @empty, @empty]}, @timestamp={0x44, 0x28, 0x8e, 0x0, 0x0, [0x8001, 0xf7, 0xfffffffa, 0x4, 0x2, 0x6, 0x9, 0x100, 0xc]}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x6, 0x12, "3211f9b471fe0f12dcf1a43e44469c12"}, {0x1, 0xd, "21ade85b29659c35f7d27d"}, {0x7, 0xe, "ce3934aef8e21f95ae16d845"}, {0x2, 0x3, "dc"}, {0x7, 0xe, "9d60c18099d8aa5d7cb30fcc"}]}, @rr={0x7, 0x7, 0xd7, [@broadcast]}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0x7a, 0x3, 0x2, [{@loopback, 0x100}, {@multicast2, 0x9}, {@loopback, 0x200}, {@private=0xa010102, 0x7}, {@multicast2, 0x5}, {@rand_addr=0x64010101, 0x400}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@local, 0x5}, {@broadcast, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0x20, 0x3, 0x6, [{@remote, 0x1}, {@loopback, 0x400}]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x19, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x6}]}, @cipso={0x86, 0x6}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xb8, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1d}]}, @timestamp_addr={0x44, 0x4, 0x13, 0x1, 0x5}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x54, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x24, 0x12, 0x1, 0x6, [{@multicast2}, {@loopback, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0x58, 0x3, 0x1, [{@rand_addr=0x64010102, 0x10001}]}, @generic={0x86, 0x12, "05671bf3131e5541f838151d321bf9b5"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2163}}], 0x280}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000f80)="f76e6a13c320a169c85ed3177a44b5ab9c4dd7b46fb77d9b9d1fc4f19f9d1364570d4582ca9ee0ba6d0baabbf3e54d26da27f784d19b713049a8a1210f103dbeef824a92c9d8e007c947ee70cb9dfaf311787bfaf39c5b4a4f3e160c61e06f3f1573c8163074ee1c4d7c5f4a6383502488b8901970bef5d7e3fb2a1993f06d089e8260f1befc335699bd8206df15e03774cc683161eebede0304a594893a1c1b87fd465886746f08c4c6da83fd0a9d7dd1339dbb633a4d799712d7faca4b75e3d32508c3385245bb057044f5492b52e65b4b6b2d2739ef25400f2620b2a8fab209b7", 0xe2}, {&(0x7f0000001080)="1e68807e0f14cf72dfb421c14c520439da57abcc48f33ed6221c7807e1cd0230f606f8fbd80d479a824861bba1cce7c6d3ec671f0d9484b721da4823a79024e42dc3889a8b0063820b514f9a71f520a124bc0095e5e2dea63b2fc2d8fb0728576ced9ebdad029f916a715afb8c0cb7e4fc738c4613e9cf8e0753987814189735e5240ee5cf0b27ebaa8206a84a1da259227d968e3bbc3ea056436d9ae22fc015ff021104afbe03ad51d1c0b5a6c694d9a0881b8c2e133688b8961f6235c560c46b249042706fe613229c773e952db3b1bd1d3d3630f334fc74decce7b90766153762138f90c7b86f88bbc28e9b077904f91f9cc2a6", 0xf5}, {&(0x7f0000001180)="bea8d0b173b9c2d2c4344badb650223df13b1994a795cede37aeb100bfc773ece40f4f563e3029a5a038e27a53697702978072c15c93db36b9ea7d887f232987a4ecef8ea48369c32a5284906a39d75dbb4236177c017a94912e386a547705cb9efe656df0b2ed58b741ee1b8e9ad0e8eaa5445dff30a5dceb86da8067e6c368594c69c965a0d0", 0x87}, {&(0x7f0000001600)="3bea1a2a631343b3f0e550c9874fb380c22eaac0abc4ff0ed913eecce7413adceaa138f6b023ee7c1e959267015c872f4bbaa6d1ce13ea0fc0430039906dbaa752637a9fded483aba898dd2fb9fc20b673cf597dd1c78261b2ea07ac5e289fd96bb9957a56b74d99668478d378250b0f460eb9aa5aa9dd905944ef8cc5763750b95944ace5f467f61c9c19a51bb091a3384f534bd95c5a0dc216daff1b424d407277db43c57d8962e182f3fa9364f31acff5514d33c2787b5397c920cc2e7c74f0eecd746c55da8a473bfad1aaa3b2509294b68aec7f586e4bed103af799fc11ac477e23e9e580c0bfb1c0f4ecc8af620e370fcc70f30463ad262b02619ce2e381b28eae8046b0ba070b954c66a3c5ee84497f9ee285ee8cd6977674aeb5123b1b4d2e0e43b6164fa94b090e6d0cfe3a71d083179deb52b055199cbabf6d4926edf8bc45633885450b4d4fb81d8de046ee654c4a2de6271b24bdb074659e212f9c42da80687b49890afd08aa0580a53567a675d41bacfbba3348b338e977271c13f5cdbd58ab7b9e46000b846666fe53dce86c7b359e8a875851627a6986d421e6a8bf3a5efcf9d14b57448db0d9608a76a36a0f40395b554a9b8a5a0fcbc707aa60bc0abdbc7e3a0aee9f4324c64e183697f4abfc2bfdab3cbaf5bca36fd7fdfe49e4d9c8debb7102f382df182e47ae126c0ff10fcef5cf16fee2ea9a8d0091dc61a186cf087377240aba06381a87606c00d5b7362433a049ab8eff0f91f5497fee8357fc9dc724a45298f1093fe34aa56fc534d9e1b47bbc99fef667244eec56ff6b54ff8891970e554a4297aaf323a754df80adbc85ee0e70ed1f90a4f31c310990af5d71991701748638c3191fe35d46028644678a239df9c9f0eb3f5c8fd6a09d25f709291950c6b0b59571a773d6b9c79bd043bb3be247399cf1200e51b657874b4fb849322035811b768a3d47f03f259001e15dabbc5304a2b550b2cc440c1dc1c68dd2c1d9c26e027f1bda0d15640b16b49b4cd77ff97b65b95c1607727b43da9f64211948565f106c34130f4d5194be3522eb7d87dcf39e21656fba25edafd46e9931d65209f9764f8ea7d0872eaed5494783c70fee2a8635b58e784e3975420d11af7adb437d39a2c2e188de36796fd7540c1311b48c908a055190912493ae1959a1742d7d8deabe16875c2465ccdb4704eb3ebe3957abdf798e74d6350360c75e778dfaa4bd54c355937766b1a872354bfd6faf77e934eed5543a318c54463c5ab6336ea60837fce97ace605ab73b114aba7e32ec816f22de98956c93ff2ad45588c68931ff5729d266fdb603a1b43177d36eefd1a9e6ba97b9d98acbbf8e0c4b6a68a8c4fd09225b861a72bae0396dc148060a8dfb587aa637ee03e22163c22f3a93d78a7ee1cbb8aff2efdef679782aeb796baad0c9974156f9b80c8bf2bb2ef437d5cc69a47882f0e55d90fdef0ec9ee7b71dd6309411795523043386c91c7828db6ae314f4d83cdc50f43e4716d0bbceb35d00021a97ac0dfd1c30f414d92c50e079494a5bed1b364fca015a37d0e29b7730f672877bfa863bdc5ec9ce4bb7b104878408fc667dafa75aced3a84faffc03989a3cde6b99f1266e908a410fc6fa1c24869f274d120faaaf6c02e27f1d573cc6c9c6f5c4bd6d0cecbafb6c3a2e1c8d37d2f181916023fe94b13ade65944973777518ffb1cef970646b3ff26ca8fd4e3760a6d00d97a171f8d5104f6976f076272b5e8497feb5dba10dfd84296db98ccba4290ca221a0ea8ca7ef1a67e6b1cda10276f01da09654a76294631c25c0caeecc64654d4884739de9d8dd418dab08ad96e1ff42a4e34f27a51c37de08bc83de0e0e3241c24aab63b5aec08dd9f01873114ebab638b4040531d84d58f24044195e16c56bd8a0d316682446439104deafa33b60a2e8bd951ac75843daee57cc16c85b7b61f8f2f916c9a36e367828aff73fe764455e02834ebeefb4b3474db04b7c2468fc8417d48e058dff91c1081564fd8f3f8c662b11f3ea4d988c86603f15a575b86e3a7fb369aa7f6baafe09f022a290f92a78bd875edabda0c5de73e3bf4cb14e58f945548afb9e84a233a3e4cccabf8425414aba374d38e5eadcadead6aa9b2d2c34d4bb7724bf122fc150e854e29656e62b786a2a7f452472f44f44eda68504267d7c069eb2b5bbd05304cdd58d380de0ead1312f86da9d93e81837587e3917a7b45c1eed3b3be85c6e7955538395a8a5c0b288dd79f1d1c4271768b0512dfa45a567b1f37cd95aec1088fae115f78aeacb6431abc583d735870e519549eab38fb13e86a4e9c834e2b2956592576c7ce4b71c073cad82bfe65f5393931c24bf9121af06b195c5c06071faaab04d86cc050a713405721a671bf2a1716ebf497c4ac2b5e5235e122e8b180d9125882cf1b2e4664c023378bb136bf291743baef766ca20085622730d40b1e20c7dfc1b1cd84a1fb3f5053c9e5bac5fd87b5be20ca624fbfa163a2fa7f3420974b4ad906fda9931b1666290f9303c5e98bb566437b70a2a1d2b555dbab8bc67c6b9f6a636d32ffde071cea51254cda13c2e7c5d35a5925cda064fc63404846e3f62a702c1066d800d1ceabf655615eb45098c8037da46bb3f20cc9459b875e4b87b27514baaec0a0f2497dfe580bceb77c7558b34c37f3f022b8492d564e09fbbf877493d6862f0663bb121a64d9f4673639089ae4f3f627fccdb7e0099d677c6a4d1c6daf85535b44889d32eb2b0b613f8c712e294b5ed979c29c86df810c15124aa1ffc550857c0bc7b91ed0cd2e4246981038eeaa5ed8d05b591bf234c1be9c16b9ff445694d7ec745e736549e623d78a2551790f02eadb97304de6f53c1c4c5fa8b6e72c146ffd463d2bc3e53711f1a2a660e9a4a4cab6bd5de3be74a3c814b5c4f8eb0749178f7e90613992ca027037b34ff30287478dc00435755f8b26e06ee008286f04c94173f25b100b26f44ea0dd43ef5db190721dc0cdf36a6fe4027afd3765352b0d5be75e1075e07cac26ef03b87b916e298b1da43b048857ab0f4ff636c1fa4a06e88f62226bd7d27e83a218ef0e1c471ed9177a98e04b6f4a9f709492f7f01b83ff9bead3227b13f2827d2dc1c805007292111e4cf4f3bbba729e051fdbe08e7895d2ff10df50672669b0f6d9fad938efcba74b074afa248767bc60de84606ad1a2a9875781e86dfaef5f62b3125f4700f049d0647b84f39228aff6e6a121224341fd3ea20c100d520741f66d62128b67a4df6826dc43bf4a6a7471c18f2f0965eded490e197d9ebb0ccea43b648d08cf7ab7af646d58b392e231e981d394fec698e18ae9f03a5c12dc9e8eaa6a782ea62ce46d729031a2723e27a6daec8379c7f79b2c53d1b953fb9968bd79a807d6fec2b0c30a9c3b5ce74c905371ea7b6f7546766fc987de9c1a93d4225090e7c7ea6be5f3a36bb1bbc8a9f4cf2955e61c19ed850dcffa3e00c0e26873123762a40e8fc9e1865b81c79ba5f791e76f89a6f3bb100f7757c3ab3730cb525156cfd0b031dfff565ee84c27adde44cc602adf9cabdec1afe13f615bc06f5745d17a88679f598991f5e865d7480ccd113965ba8b898e7cbc8f87e5321f9ade1f31fffa9c05de841d2418261f9da941bcbde88e962e5dfe39f30a8505e37aac606ced07d9c047083c42da3c3bd2c6cee992f964f443d82a14ae537b8a1d08836390d67eda5ec82e70df2c57a972855575d77fe72bec6a0f3157c8439415e5888f7f914e2f85547feac8758267b05e61a880f11f657c5312fc9d673ecd1fffdf467472c2fc364aabe42913047c8973dd4abf94b0085e5d4103ae92a609688737be8606778f36ad52013a6a23023ae09fd847626ffff6eed95666d72eed8aa9af0d79ddb332105f4b14ffaf6eba862602144ba1d5b94093026b2d3067cfcac6cd53e9a849b9b32577a2fb518901cb55024e35ecfe87028a2dac0c08dbe75575cd96173ad84d9ca8da70b04a4158d124baba00c078906e05ee636e8b3e8fd093833c95f6d85a3e7a6548341892edc2435930c0d7bfaa82489f8924b0d52c9a3479e148d9f9553d143ca599a1e6a43a13ee2485b219c0d89c6a3a81ec7f5feb69f3b88762e68b0a5590ec741612ad0887a717bf88f63b1dce63996767308e365599c53688c1991c2cb77f5450f920ff0881b3db72395bddc0349b1f8625e11a171e48c2ee3bddeccbd0d1355104e4310e61244200ce6e2b630124ba8e65bd6af75a47e01e6032b0b9f87692c3be7a7ddd1a9a88e853f9a88029d3f29bca028fa97692fb128c409f33366e1de9f911c499f0223a05c2363ec1f571e1fb116c6a3e6739b1d9fb8d50e410882ed3a380dfe65d3c1fbd2d945dac1f32335b81712324761189d071a9706e5c4d4bbab3ec6d155fe36775928339002946889674535d1a892aab483e5e040cd9947189881d386746b347036482e3b9d0cb2c7ed4053e19332023804f1f9f5cba8f53a70c1c082c25b0a016f915e8088f84f7fa1cf628b5e71304c762b783260aa674a4a20254053e2bbf9b7c0471474066d3d0db1628826c11895a4c97240c3013c877309866708df5c7a9192847fcfd279978e61acab99ee1b5902f54c2aa4dc9993df5161bcca0db39ff83dd85c3b596ddd190de7a5d248e0c4be58944546453e6f71853756cf43627ac1bea9ee036e400c3f26298fb587628b194f9e391c22fdb04fd4b4d0a17ae9c20d9f17c2a3a775f5cc02e2a8ff4d61ad2ef3ef4a9c01ee2a21508982538c1b25e89b13c72d9897eb38a7db33a68498cb02e45a8b0a2259712973fa85f68bf17a9d040e931b9e59d4d71dd9305fd5eed1f50002abd2a81156ed7a62af9d333e19c11bd258dbf281a9237dcaf8b68bba77871388f4e51c39c89e8de3a81e6a7eac471e5ff22af2f564ad03c37cee68604b8f0ba19aeedd908b975162a17a6f1c4a21a24348f46b10047d61b0159281558ae35247dd7e8713eac25efa171d05d69accc4d232644b530cacb2c6bb591d763fa99a0093d420ae6d7f18fe7fb11ff0145a6c34978f084da0cd8336b93b4b625628908b66fb16b3605a82371fa209a76f61fc05ce4b67dbd41c16843a751f8ccfc538aaa74a1cd3b1ed73e0b45297cbf6dcc98be1d7cb2baaca4a5b10eb833d43e9f28e472e0f77277c44e16a35da24e4ee66d079d228321a97e027e0f991a9912372124fabae7b940ce51c4f1421d1c1ab3aead49f05edc97e0facaa00a5c045245812b81db0be3ce7fa5f10f6fcf3039fbaa39b995d95910dc45f8c3ac91f0292375f2d8b621b9de6708a47e812d8a693ad373e97a1958dcbfb4305e38ca7113c2ba81ee1e99590c64de47260ac92b52c31e2d0c5bdf6c5aa24ea58885d525cc634f732eccb859d3cd2031a9e15072e0ff0ae84aa315dac2ee1a11530d9a594edccbcf7a8bb8fb0aa43fa3f8897c603e8ad004b3964be31c1f72dd0fdbd52ba64be26aa9ae4fbab358dd35e4828bf850dad94d5f0a7f9ecbfc529b30d435c8a4f610ec237163a9d2001a11a545dfdfef283e091b57e1ba65d95c4a6e1a8553e347cafec9cdfe881ff4cc0c96be353a7204b34b5f711944796ff8e0b8c75cf00c58a7576d68d200f29f78200262bdbb8e0382f4050a59be6d4b33e05a58fc805f7fa45bdcdf2debf15084a56182c43ac1690ca7abbe536e2abbfb0ea2dc6f4dda6a65919d6b8f882f83e9ad0392196682d1e7484117392c90e9136ab0e1b1429c8a536c7ed0f8685439dcd08b30709996b262", 0x1000}, {&(0x7f0000001240)="2202290f05ee1830e609629a18b9d524abcf4fd81932b845d13d7472115a162c8b00d225a598cc0de12a966308a8ed24d5f7090cc0e4ad6d4581f7f36e08ae5edf1a85dfc392c6bbe68691f1e316906af156905be44eac2fd57a6e6840", 0x5d}, {&(0x7f00000012c0)="4c7082066baec65c6a4169f8deadbb878ee662884a566a09917c72a3a3afb4478a404a8738735e8e8b328efdae28ed2dad371bb87b3d0a3586c9bca416c5d420227ea5985087d83636fc5bb6e8f5d5fc7dd082bc61d63dfca74b67cc86427e6000d66af3ce943e7b1bd672e28e06619278943c7c80ec51bff989018917ae82fb4727692a4e89b860966bac04fd68234cfa07ab35da23d97f12eb3e47c40d01582908459932a07c", 0xa7}, {&(0x7f0000001380)="bc0ca43b284416016a32b3837046ba4f44360e0233ef7c888e0309776a82b7e5ff2ef4ff78af859864b06dcca3953934eeb4901504cc912f9a58b1486a829211e547669cd467b8b2e8a6116d73172dc7869cd92ebaa644b445ab6d375b478823573937ba1495a35615c1a9643742bda9cb3afc9144066bab06d5665931403438c7550e4d5e04013d9827bc1cf6e986db0d674a0e336ccb7834", 0x99}, {&(0x7f0000001440)="1140fd2bc0cd91393737c9f57fc0a9f5cdb716262599bf034db6b7e2aadf07d0f1c24f8b9331cb500f7ce81fcb36ff645274b68eda252eee787ad7f203355d38b4adaf05e2a9e1841754fc3ac6e14a50eb751c246f2ef802737c0b6852de15357cd5ff716be2a2a0ec2f441b58c93f93224058e203c8b34ffa7cb341bc66415560df9395b9a9c8ab6dc377ac0c78b10c0983e93ab6e7763517b2dc1581781a1dae55d7d6be42210fe5fc35", 0xab}, {&(0x7f0000001500)="283c79db1b28c448b989f9f76ae2c2ed94299e592090619e55ae526675948d5edd257d2d85fd9668944de7a095757cba5a7672196d530cd4e2e9b619fe74b7c6ba13c777c22c2c355dbdac3e1f871d5cba83d7dd7017cdf17edb7825c35cd418bc00dae7ba6c9300566ee183a74cfceb6e705238f87f1e", 0x77}, {&(0x7f0000002600)="8adb9d196bf43571d9833fc22f37e1809799bd32a703aa5ef3dda7458c894d1b1b25b2f3aa7e72676d3a776caaf96fb5a43ad3a2d217692387227277db5824cdfff04d8d24b4b552312321663ef2242100ed05af0e275e7d0f3e17cac492cf15e27211f0bd3c5292155969951fd1584aa7b5eae1d75a01696da0ef", 0x7b}], 0xa, &(0x7f0000002740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_retopts={{0x50, 0x0, 0x7, {[@noop, @cipso={0x86, 0x3c, 0x3, [{0x1, 0x6, "70a1889e"}, {0x3, 0xc, "680cfd6c38fa26ea87fd"}, {0x5, 0x5, "e6b648"}, {0x6, 0x5, "5989a7"}, {0x5, 0xc, "b4a61f3881bdd9080841"}, {0x7, 0xe, "cbbb6a0384dabc0da64fa6b3"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @empty}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002880)="d7978187e79ee761fe2984a76b6638393c33a6ec6e3052627c0d37db9d4897109b5b7184b6d3f76c2b85a71580afb4980a43339de90cd0e60e8cb0f2c6cdf2f0f2804790ba6414251a750640c45f4b3e00556f9ea3efb1c321abeddf89c55fc437b6c2168d790c65609118ca9d32acf8c0233c52ac2a5d44bf2f3ae5b27c78a1e9b87e5e8151b53b56ccd1e404ef630e8e1b0f4b157cfb7c49a3dfcb916fc96ca1c07fbfd982b97241073553", 0xac}, {&(0x7f0000001580)="9e28accee2ec2eb20ff5a589", 0xc}], 0x2, &(0x7f0000002980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x69, [@loopback, @multicast1, @remote]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @multicast1}}}, @ip_retopts={{0xac, 0x0, 0x7, {[@end, @noop, @end, @timestamp_prespec={0x44, 0x3c, 0xdf, 0x3, 0x0, [{@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0xa34}, {@local, 0xb7ff}, {@rand_addr=0x64010102, 0x9}, {@multicast1, 0x9}, {@multicast1, 0xfffffffd}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xff, 0x3, 0x3, [{@local, 0xacd}, {@multicast2, 0x8}, {@multicast2, 0xe}, {@loopback, 0x3}, {@local, 0x311}, {@broadcast, 0xffffff81}, {@broadcast, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x15}]}, @timestamp={0x44, 0x10, 0x13, 0x0, 0xb, [0x0, 0x0, 0xfffffffc]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x9b, [@rand_addr=0x64010101, @private=0xa010100, @multicast1, @loopback, @multicast1, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xea, 0x1, 0x6, [{@local, 0x9}, {@local, 0x2}, {@multicast1, 0x65}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xd466}]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x8, [@empty, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @private=0xa010100]}, @cipso={0x86, 0x2e, 0x0, [{0x1, 0x6, "d2c5c011"}, {0x1, 0xc, "1d6fba1074a4b17618f3"}, {0x5, 0xf, "13bf95830b2a0e0dbd1c2a4ea8"}, {0x1, 0x7, "dac4a83ed6"}]}, @rr={0x7, 0x7, 0x4d, [@multicast2]}, @generic={0x89, 0x8, "eb9f9c7be250"}]}}}], 0x238}}, {{&(0x7f0000002bc0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000002c00)="555684962a679429a68b99d80e8ad67767b4e7b975016b929a441aebe5337e52cf0b84c62ea72700422840f161b22a9ec00845ab6e7c6180b29fed2ba16ef26e6c2dd79eb2f637acccb29430ea9245dd09bd8a7733a01bf89f7121bf2eec6306ef91fe05614834b80af11a1a92375065a8c4a1282e4b03cf2df1b50add97dbd1afdb23a1107ce6cb409129444f83", 0x8e}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003dc0)="658fc7b32cfdb8e9faa133f4334419b0a17b13d5c4d82c879cfc6f", 0x1b}, {&(0x7f0000003e00)="244faf2b694c08bc8c3f1165309253b9", 0x10}, {0x0}, {&(0x7f0000003e80)="310e727abf1a1ce079a470b55c10b82bb0c7b20cea3490a0242fcb76f16a5aee28a5371431bc73f0887e596e9ef88062e6da6bd85cd01d00e9375d723c7207af1b0c73ef911c60cbadce78ab0a876ad5a12cfd299a100c6f6f6a1355665ee65b5e06bf638d1fe1f5e54477c02360ac5072aa863c024eb3c13a5f1d0832a6336387de5594e129b484d23e4b751d3b7a7d7ae2c67ce2278fcd32b18217df50a064927569ebd2f41e68cbf2fdca1cc8087f32cf7f455641a6ba00e5d7079a", 0xbd}], 0x6, &(0x7f0000003fc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc0}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x59, [@private=0xa010101, @multicast1, @remote, @private=0xa010100, @empty, @local, @empty, @local]}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x0, 0xb, "efbd373c2936010536"}, {0x2, 0x6, "ae8e4e00"}, {0x7, 0x2}, {0x7, 0xc, "1b1050da6a86a06771bb"}, {0x0, 0x2}, {0x6, 0x9, "32560335cfb37e"}, {0x1, 0x5, "afb42c"}]}, @lsrr={0x83, 0x17, 0xdc, [@empty, @empty, @private=0xa010101, @private=0xa010102, @private=0xa010102]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}], 0xe0}}], 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') 5.971109745s ago: executing program 3 (id=6379): syz_open_dev$tty1(0xc, 0x4, 0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f0000000080)=0x100000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') close(0x3) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESOCT=r0], 0x5c}, 0x1, 0xba01}, 0x4008000) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67) 5.414577652s ago: executing program 1 (id=6380): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r4 = syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x86f8, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e4, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xdada}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 5.140690581s ago: executing program 6 (id=6383): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x100000000000000) 5.139596868s ago: executing program 3 (id=6384): pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0xffffffff, 0x10100, 0x8000000, 0x8000000, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000580)="d5", 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, 0x0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r6, &(0x7f0000000c40)={0x8000203d}) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000000)={0x1, 0x6}, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r11, 0x4004550c, &(0x7f00000011c0)) io_uring_enter(r1, 0x7591, 0x0, 0x11, 0x0, 0x0) 5.058142071s ago: executing program 4 (id=6385): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, 0x0) 4.982570195s ago: executing program 1 (id=6386): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, 0x0) (fail_nth: 1) 4.26274729s ago: executing program 6 (id=6387): socket$netlink(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\t\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00800008000600"], 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) 4.175609512s ago: executing program 4 (id=6388): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="001410"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, &(0x7f0000001000)=ANY=[@ANYBLOB="6031730000007301047cc9902820be075df040367b03674f66de5bc0159065c4d979c4fe97e9e79f11ec831fe045e63cf64a2da6d7bf0000c7c2824ae0d3a3c8ed0cb28a13a35df8301dedf9e8f32b637a7eef5b441792b9ef06d03085f8bea261edec2f2cc75e5d4a2a4ba623aa71f4698b25cb1c649a3f99c1f27e7b03a8b14c76b986a20d8c48dce7b25ac11631d63da928b45544ee68a8476d9e1230363dece19be543d8ec2beabc23c3d7292614b40f58a46ffea9f4be4f363f735f4871ca3d46ee830c54fbddb369d2040d19f3889b196b715f133c9fb0057f77079b9bd2490110610b4779de1ebc529b7015ca9bcdb4ac006b8b9a9d76f61cb6641b07ccbbe2f474b8a814e29dd6760a985a750ac65a24bb5274fa7fb848197d15daac51fccd53bb3b2731066462d86aa4430ae65acfd7715018befd3f180a754f758a07d16b9ab0013bb16b078120fa8d8b9f06cdb3e6955c73faed905498142146977fbb2f2cd5b2f4747420a464dbe950de5c754c9fc5d259b3e39717c7d907a0b2a47d1afb154c3f3579349995abe7ccca1b14d094620a0cd7ea7872b1"], &(0x7f0000001280)=ANY=[@ANYBLOB="000304000000040309347149da145af211e7363b33c10f0b779d1ed0d73789270937b12d52b05ee6d16f29ef63128de42278680651c9db60185c87763f17fa02c4afa1c3f4feab61565660988ee540f847b0e2c5d017e40f39bb725adf1c651a605c16100e55a19c5357645e98833d291ca42a2ae87597008004009e69e4cba6ffbec6161ee5d4a2a8d162540f3f9100d55cffac571065facc6f3af0be7ddddd83db0b91399a0d5743d8494b", @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES16=r0]}, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x17, 0xa8, "023dcd3b7f13abff5af7f44a3676f44d698c4f75266a0373212d437e57965cf6028db0277d6a76377760789cb65fd363ac8cd35aefd2d98f41633adf93050be4501759ae3629cce0dd203c2a7fd2f731f444ea38118eb9978d932bbea5c90ee4e132b44f0f5d27a336810f319362a4938ad5c159cebf3c2eab1a5dd3dd6e452aa716cb6b4bdcb57253ed0eb0c13abc9988b5973e281725d4a405b66bdfcc78d280f33615d9302243"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x22}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000440)={0x40, 0xa0, 0x1, 0x4}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "53b8f42a078badaebf51c2cdfbc0492c5f48257f7cb79117fcf8fefef700c4ab14a1ad2fb45cbc97e800c1ff73d800"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000000c0)={{r2}, {@void, @max}}) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x40, 0x21, 0xff, {0xff, 0xa, "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"}}, &(0x7f0000000840)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "4cf9d007bff62290a9fee5c2d997258f0e364c7d33690caeaa10d15e7f64737304d4cfa24013e42a31b8fcf13126c11c1f9e63a8e6f72d13436b9ef7dd21c5436c74fe94b042a39b5d8dc3a6e5f27537fc6e3e0d8d3e720388efe51ca453ba0596b2d2a7d1ee1d0276edc8218a3f6a24b7d231dc0ea22565fa58abcfac952e0a45769558c6dc56dd0b019317084ccd247d4c2f9cd00f70d504b0728064478e2eaef8e2cf65e6849b00495a17ac66beb13e9ad71bb113f7db4a4234b6124f"}}, &(0x7f0000000940)={0x0, 0xf, 0xea, {0x5, 0xf, 0xea, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xa9, "ed6d7297c9e510d82f7bc92b355e413a"}, @generic={0xd1, 0x10, 0x1, "950b5fb3f9c26506d8d157ffad9b7b07cef819e7149900580c4c095f86bf0ddaae551213442b9bf861b8251219f49050eb566ab5297b9c53f0941e8d0c2e4c41de7eae5bdac42e1b174d73350447a8a34db838dcc665065614763834371a77f654873e7f312667ad3f74d52049d07a3850905e698cad6bc5a4d0268c616459b6b66ca87b8811ff65cdb16a2ac8fe7cbfdfba3bbfceeb384358d1fb7aa6b4e83cb5f80c0c8a19a6517de5a0cb0beb58e8b63989a9bd9c50174bfad2d73a6548a3d0253e8dddd66da50de83d73a5a2"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x78, 0x2, "36df10b0", "dcb46063"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x2, 0x1, 0x1, 0x80}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000b00)={0x20, 0x3, 0xf1, "b3a7ea903340530b3200136902c66d7d8519878c117306022a22d9089ff5a4f7ae8a58eb2ede1148b9c26452471c70ea277f4f90e7f2f1199bc43155543ceaf678ee8804634dc7dad77f79118f21f25f7a4f73a2638f7dd95f818fc0cef05190715ae0395c4e4e8602ea33de5cd8de97c3c36517b94de79064d840b53efa6a3e8fa40aebf4bbbf1c5f0474f099dd4e9ae06ac83b78ab82f6c817c15115c9a09b9a8c5296166c6382438d83f7401547f28715d3ad2d73f97bc05f137ef0464c7440a1f49be7cbcac1228d2072b788225e2c93a37a66d0aebccb0d1bf53c0189a290b6413f79fa3f710635c4606d015e403c"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x8, {0x800, 0x2, [0x0]}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x20}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0xf7}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "9165"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000dc0)={0x40, 0x17, 0x6}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "f0b7"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0xfdda}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0xd8}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0xb}}) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000140)={@local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x2a, 0x0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r3}) 4.090533524s ago: executing program 1 (id=6389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'ip6_vti0\x00'}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x10d) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) syz_usb_disconnect(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x8000000) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000000c0)={[{0x3, 0x8da, 0x9, 0xfb, 0x9, 0x5, 0x4, 0x81, 0x8, 0x9, 0x77, 0x0, 0x316}, {0x81, 0x3, 0x10, 0xfe, 0x2, 0x7, 0x3, 0x9e, 0x7, 0x3b, 0xa6, 0xfe, 0x10000000}, {0x1c38, 0x9, 0x80, 0x5, 0x0, 0x6, 0x9, 0x6, 0x3, 0x8, 0x4, 0x0, 0x68d}], 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 4.045390551s ago: executing program 6 (id=6390): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={[&(0x7f0000000040)='^\x00']}, &(0x7f00000001c0)={[&(0x7f00000000c0)='!/\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\'\x00', &(0x7f0000000180)='@}],-!\x00']}) 3.763586293s ago: executing program 6 (id=6391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x4, 0x0, @val=@tcx}, 0x1c) r1 = socket(0x27, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000004002, 0x0) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006040800", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002bbd70006b52000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r3, 0x2000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400000065d700000000000000", @ANYRES32=0x0, @ANYBLOB="15460c00000000001c0012800b00010067656e65766500000c00028008000200e000000208002e"], 0x5c}, 0x1, 0xba01, 0x0, 0x8040001}, 0x40080c4) read$nci(r3, &(0x7f0000000000)=""/32, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) 3.518504184s ago: executing program 6 (id=6392): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x12, 0x2, 0x10000) write(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) r3 = getpgid(0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0xfa3, 0x2003) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000001380)='fd/4\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x28, 0x0, @scatter={0x1, 0x0, &(0x7f0000000180)=[{0x0}]}, &(0x7f00000002c0)="259374c94be319d10eef32c5a3131f6b790a6be3d20d078200"/40, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1220000035029240b007070057ba0102030109021b0001000200000904ddbd01066f0900090509101000045909"], 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) pipe(&(0x7f00000001c0)) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) 3.489831217s ago: executing program 5 (id=6393): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x12, 0x2, 0x10000) write(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) r3 = getpgid(0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0xfa3, 0x2003) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000001380)='fd/4\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x28, 0x0, @scatter={0x0, 0x0, &(0x7f0000000180)}, &(0x7f00000002c0)="259374c94be319d10eef32c5a3131f6b790a6be3d20d078200"/40, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1220000035029240b007070057ba0102030109021b0001000200000904ddbd01066f0900090509101000045909"], 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) pipe(&(0x7f00000001c0)) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) 229.003665ms ago: executing program 5 (id=6394): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x18, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}, [@nested={0x4, 0x31}]}, 0x18}}, 0x4010) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000ee0000000400000000030006000000000002000000e000000100000000000000000200010000000000000000000000000003000500000000000200000077000001000000100000000002001300030000000000000000000000c81da02eaec08c2a074d"], 0x60}}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0xffffffff}, 0x5, 0xc, 0x400001}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0xc0, 0x12, 0x905, 0x70bd2c, 0x25dfdbfd, {0xa, 0x9, 0x24, 0xff, {0x4e22, 0x4e24, [0xfffffffb, 0x924, 0x6, 0x5], [0xfffffffd, 0x5, 0x82, 0x2], 0x0, [0x10000, 0x1000]}, 0x3, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x71, 0x1, "006cae4f89d499a3616bd59b8af6f89e6a606f265654176a8f92ab5cbef5fd2defcba9327d16c91fa476ffcdb3059490fd03f4774642fb58c3219f095d3ac77216d25521e5b0c18fa8ec948f5ea0981c0a5468110511a2821640f14b9c1b66272e0ab845ffce11c46ae81f7a0c"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x22000005}, 0x800) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x419600, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) 170.571346ms ago: executing program 1 (id=6395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002", 0x4d}], 0x1) 61.886064ms ago: executing program 1 (id=6396): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='permhat 0'], 0x1d) r1 = socket(0x1e, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x0, 0x25dfdbff, {}, [@IFA_FLAGS={0x8, 0x8, 0x118}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14}]}, 0x48}}, 0x0) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0x700e}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000600000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r4, @ANYBLOB="8f78ba68002e31c8d000", @ANYRESDEC=r5, @ANYBLOB=',allow_other,appraise_type=imasig,rootcontext=sysadm_u,\x00']) socket$netlink(0x10, 0x3, 0x0) write$tcp_congestion(r6, 0x0, 0x0) dup2(r6, r2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff00000001, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xc, &(0x7f00000000c0)=0x4, 0x4) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffe, 0x33d0}, 0x10) sendmmsg(r8, 0x0, 0x0, 0x9200000000000000) recvfrom(r1, 0x0, 0x0, 0x12020, 0x0, 0x0) 0s ago: executing program 5 (id=6397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r0, &(0x7f00000004c0)="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", 0x1000, 0x0, &(0x7f00000002c0)=@file={0xc1238e0a9399a5c2, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x8, 0x8, 0x20000000, 0x3}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x200, 0x3, 0x6, 0x9, 0x8, 0xd, 0x24}, 0x0) socket$kcm(0x2d, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r3, &(0x7f0000000380), 0x0, 0xc9, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/154, 0x9a, 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r4], 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) kernel console output (not intermixed with test programs): [ 1446.486679][T25430] FAULT_INJECTION: forcing a failure. [ 1446.486679][T25430] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.533992][T25430] CPU: 0 UID: 0 PID: 25430 Comm: syz.4.5972 Not tainted syzkaller #0 PREEMPT(full) [ 1446.534020][T25430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1446.534033][T25430] Call Trace: [ 1446.534041][T25430] [ 1446.534050][T25430] dump_stack_lvl+0x189/0x250 [ 1446.534078][T25430] ? __pfx____ratelimit+0x10/0x10 [ 1446.534106][T25430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1446.534135][T25430] ? __pfx__printk+0x10/0x10 [ 1446.534168][T25430] ? __pfx___might_resched+0x10/0x10 [ 1446.534187][T25430] ? fs_reclaim_acquire+0x7d/0x100 [ 1446.534221][T25430] should_fail_ex+0x414/0x560 [ 1446.534253][T25430] should_failslab+0xa8/0x100 [ 1446.534284][T25430] __kmalloc_noprof+0xcb/0x4f0 [ 1446.534309][T25430] ? ima_write_template_field_data+0x47/0x490 [ 1446.534338][T25430] ? process_measurement+0x11eb/0x1a40 [ 1446.534366][T25430] ima_write_template_field_data+0x47/0x490 [ 1446.534395][T25430] ? ima_eventdigest_init_common+0x286/0x3a0 [ 1446.534428][T25430] ima_eventdigest_init_common+0x2a1/0x3a0 [ 1446.534468][T25430] ? ima_eventdigest_init_common+0x1a1/0x3a0 [ 1446.534499][T25430] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 1446.534557][T25430] ? rcu_is_watching+0x15/0xb0 [ 1446.534578][T25430] ? trace_kmalloc+0x1f/0xd0 [ 1446.534600][T25430] ? __kmalloc_noprof+0x29b/0x4f0 [ 1446.534624][T25430] ? ima_alloc_init_template+0x172/0x6f0 [ 1446.534650][T25430] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 1446.534679][T25430] ima_alloc_init_template+0x310/0x6f0 [ 1446.534713][T25430] ima_store_measurement+0x1b7/0x640 [ 1446.534749][T25430] ? __pfx_ima_store_measurement+0x10/0x10 [ 1446.534771][T25430] ? ima_d_path+0x189/0x250 [ 1446.534802][T25430] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1446.534830][T25430] process_measurement+0x11eb/0x1a40 [ 1446.534872][T25430] ? __pfx_process_measurement+0x10/0x10 [ 1446.534936][T25430] ? tomoyo_find_next_domain+0x173e/0x1aa0 [ 1446.534980][T25430] ima_bprm_check+0xfd/0x200 [ 1446.535008][T25430] ? __pfx_ima_bprm_check+0x10/0x10 [ 1446.535027][T25430] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1446.535053][T25430] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1446.535075][T25430] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1446.535096][T25430] ? tomoyo_bprm_check_security+0x162/0x180 [ 1446.535122][T25430] security_bprm_check+0xd9/0x270 [ 1446.535154][T25430] bprm_execve+0x8ee/0x1450 [ 1446.535196][T25430] ? __pfx_bprm_execve+0x10/0x10 [ 1446.535231][T25430] do_execveat_common+0x510/0x6a0 [ 1446.535269][T25430] __x64_sys_execve+0x94/0xb0 [ 1446.535298][T25430] do_syscall_64+0xfa/0x3b0 [ 1446.535326][T25430] ? lockdep_hardirqs_on+0x9c/0x150 [ 1446.535353][T25430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.535373][T25430] ? clear_bhb_loop+0x60/0xb0 [ 1446.535398][T25430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.535418][T25430] RIP: 0033:0x7f39c1d8ebe9 [ 1446.535443][T25430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1446.535461][T25430] RSP: 002b:00007f39c2cd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1446.535482][T25430] RAX: ffffffffffffffda RBX: 00007f39c1fb5fa0 RCX: 00007f39c1d8ebe9 [ 1446.535496][T25430] RDX: 0000000000000000 RSI: 0000200000002200 RDI: 0000200000000300 [ 1446.535509][T25430] RBP: 00007f39c2cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.535522][T25430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1446.535533][T25430] R13: 00007f39c1fb6038 R14: 00007f39c1fb5fa0 R15: 00007f39c20dfa28 [ 1446.535564][T25430] [ 1446.539364][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 1446.539381][ T30] audit: type=1804 audit(1755891705.744:1666): pid=25430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.4.5972" name="/newroot/13/file0" dev="tmpfs" ino=83 res=0 errno=0 [ 1446.971503][ T980] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1447.112100][ T980] usb 6-1: device descriptor read/64, error -71 [ 1447.220964][ T980] usb usb6-port1: attempt power cycle [ 1447.280754][ T5867] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1447.466933][ T5867] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.489142][ T5867] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1447.499850][ T5867] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1447.510998][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.523187][ T5867] usb 7-1: config 0 descriptor?? [ 1447.580874][ T980] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1447.601757][ T980] usb 6-1: device descriptor read/8, error -71 [ 1447.735350][ T5952] usb 7-1: USB disconnect, device number 21 [ 1447.842506][ T980] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1447.873024][ T980] usb 6-1: device descriptor read/8, error -71 [ 1447.900710][ T6015] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1447.991039][ T980] usb usb6-port1: unable to enumerate USB device [ 1448.054014][ T6015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1448.065626][ T6015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.084473][ T6015] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1448.100893][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.114870][ T6015] usb 5-1: config 0 descriptor?? [ 1448.135879][ T6015] hub 5-1:0.0: USB hub found [ 1448.144111][T25446] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1448.343884][ T6015] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1448.364546][ T6015] usbhid 5-1:0.0: can't add hid device: -71 [ 1448.387593][ T6015] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1448.451845][ T6015] usb 5-1: USB disconnect, device number 54 [ 1448.462539][T10517] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1448.620765][T10517] usb 4-1: Using ep0 maxpacket: 32 [ 1448.628521][T10517] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1448.652161][T10517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.677945][T10517] usb 4-1: config 0 descriptor?? [ 1448.716521][T20013] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1448.902015][T20013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.931238][T20013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.959285][T10517] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1448.969218][T20013] usb 7-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 1449.014539][T20013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.023787][T10517] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1449.052294][T20013] usb 7-1: config 0 descriptor?? [ 1449.057672][T25459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.069501][T10517] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1449.316793][T20013] usbhid 7-1:0.0: can't add hid device: -71 [ 1449.339078][T20013] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1449.372176][T20013] usb 7-1: USB disconnect, device number 22 [ 1449.591415][ T55] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1449.760788][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 1449.767523][ T55] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1449.791386][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1449.813933][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1449.836067][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1449.846948][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1449.879484][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1449.915005][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.351000][ T55] usb 5-1: GET_CAPABILITIES returned 0 [ 1450.356563][ T55] usbtmc 5-1:16.0: can't read capabilities [ 1450.420932][T20013] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1450.508494][T25466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.524809][T25466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.162674][T25489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.212836][T25489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.260801][T20013] usb 7-1: device descriptor read/64, error -71 [ 1451.512312][T20013] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1451.740072][T20013] usb 7-1: no configurations [ 1451.752665][T20013] usb 7-1: can't read configurations, error -22 [ 1451.785454][T20013] usb usb7-port1: attempt power cycle [ 1452.232214][T20013] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1452.281118][T20013] usb 7-1: no configurations [ 1452.285979][T20013] usb 7-1: can't read configurations, error -22 [ 1452.431164][T20013] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1452.543775][T20013] usb 7-1: no configurations [ 1452.580164][T20013] usb 7-1: can't read configurations, error -22 [ 1452.606904][T20013] usb usb7-port1: unable to enumerate USB device [ 1452.980886][ T5867] usb 5-1: USB disconnect, device number 55 [ 1453.353272][T25494] pim6reg: entered allmulticast mode [ 1453.501093][ T5867] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1453.770500][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 1453.788330][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1453.818495][ T5867] usb 5-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 1453.829846][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.006811][ T5867] usb 5-1: config 0 descriptor?? [ 1454.478949][ T5867] wacom 0003:056A:00BA.003E: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 1454.604930][ T5867] wacom 0003:056A:00BA.003E: hidraw0: USB HID v0.02 Device [HID 056a:00ba] on usb-dummy_hcd.4-1/input0 [ 1454.664633][ T5867] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00BA.003E/input/input74 [ 1455.161521][ T6015] usb 5-1: USB disconnect, device number 56 [ 1455.599970][T25527] tipc: Started in network mode [ 1455.672459][T25527] tipc: Node identity 16b7d6d54a77, cluster identity 4711 [ 1455.721043][T25527] tipc: Enabled bearer , priority 0 [ 1455.754898][T25531] FAULT_INJECTION: forcing a failure. [ 1455.754898][T25531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.770165][T25528] syzkaller0: entered promiscuous mode [ 1455.787242][T25531] CPU: 1 UID: 0 PID: 25531 Comm: syz.1.6001 Not tainted syzkaller #0 PREEMPT(full) [ 1455.787270][T25531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1455.787283][T25531] Call Trace: [ 1455.787291][T25531] [ 1455.787300][T25531] dump_stack_lvl+0x189/0x250 [ 1455.787329][T25531] ? __pfx____ratelimit+0x10/0x10 [ 1455.787358][T25531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1455.787383][T25531] ? __pfx__printk+0x10/0x10 [ 1455.787409][T25531] ? __might_fault+0xb0/0x130 [ 1455.787445][T25531] should_fail_ex+0x414/0x560 [ 1455.787475][T25531] _copy_from_user+0x2d/0xb0 [ 1455.787497][T25531] kstrtouint_from_user+0xc4/0x170 [ 1455.787526][T25531] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1455.787571][T25531] proc_fail_nth_write+0x88/0x200 [ 1455.787593][T25531] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1455.787621][T25531] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1455.787644][T25531] vfs_write+0x27b/0xb30 [ 1455.787680][T25531] ? __pfx_vfs_write+0x10/0x10 [ 1455.787707][T25531] ? __fget_files+0x2a/0x420 [ 1455.787741][T25531] ? __fget_files+0x3a0/0x420 [ 1455.787769][T25531] ? __fget_files+0x2a/0x420 [ 1455.787806][T25531] ksys_write+0x145/0x250 [ 1455.787834][T25531] ? __pfx_ksys_write+0x10/0x10 [ 1455.787857][T25531] ? rcu_is_watching+0x15/0xb0 [ 1455.787882][T25531] ? do_syscall_64+0xbe/0x3b0 [ 1455.787915][T25531] do_syscall_64+0xfa/0x3b0 [ 1455.787942][T25531] ? lockdep_hardirqs_on+0x9c/0x150 [ 1455.787968][T25531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.787988][T25531] ? clear_bhb_loop+0x60/0xb0 [ 1455.788012][T25531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.788032][T25531] RIP: 0033:0x7f869118d69f [ 1455.788050][T25531] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1455.788067][T25531] RSP: 002b:00007f86920dd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1455.788087][T25531] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f869118d69f [ 1455.788102][T25531] RDX: 0000000000000001 RSI: 00007f86920dd0a0 RDI: 0000000000000004 [ 1455.788115][T25531] RBP: 00007f86920dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.788127][T25531] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 1455.788139][T25531] R13: 00007f86913b6038 R14: 00007f86913b5fa0 R15: 00007f86914dfa28 [ 1455.788171][T25531] [ 1455.794335][T25528] syzkaller0: entered allmulticast mode [ 1456.339636][T25530] tipc: Resetting bearer [ 1456.408230][T25530] tipc: Disabling bearer [ 1456.461295][T25548] loop7: detected capacity change from 0 to 16381 [ 1456.831566][T20013] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1457.241532][T20013] usb 7-1: Using ep0 maxpacket: 32 [ 1457.298150][T20013] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1457.380985][T20013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1457.439479][T20013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1457.513583][T20013] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1457.531325][ T980] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1457.592884][T20013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.649042][T20013] usb 7-1: config 0 descriptor?? [ 1457.678947][T25555] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1457.706574][T20013] hub 7-1:0.0: USB hub found [ 1457.932322][T25555] block nbd0: Attempted send on invalid socket [ 1458.004742][T25570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6012'. [ 1458.022847][T25555] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1458.094720][T20013] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1458.553353][T20013] usbhid 7-1:0.0: can't add hid device: -71 [ 1458.637241][T20013] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1458.784172][T20013] usb 7-1: USB disconnect, device number 27 [ 1459.182270][T25591] tipc: New replicast peer: 100.1.1.1 [ 1459.199941][T25591] tipc: Enabled bearer , priority 0 [ 1459.653418][ T980] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1459.820577][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 1459.829640][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.866113][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1459.894333][ T980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1459.911133][ T5870] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1459.931123][ T980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1459.977203][ T980] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1460.084593][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.135611][ T5870] usb 7-1: config 0 has no interfaces? [ 1460.155475][ T980] hub 5-1:1.0: bad descriptor, ignoring hub [ 1460.180257][ T980] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1460.205865][ T980] cdc_wdm 5-1:1.0: skipping garbage [ 1460.211308][ T980] cdc_wdm 5-1:1.0: skipping garbage [ 1460.226140][ T980] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1460.233951][ T980] cdc_wdm 5-1:1.0: Unknown control protocol [ 1460.247176][ T5870] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1460.276825][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.306179][ T5870] usb 7-1: Product: syz [ 1460.311283][T20013] tipc: Node number set to 802349722 [ 1460.328674][ T5870] usb 7-1: Manufacturer: syz [ 1460.348970][ T5870] usb 7-1: SerialNumber: syz [ 1460.389887][ T5870] usb 7-1: config 0 descriptor?? [ 1460.521292][T25604] FAULT_INJECTION: forcing a failure. [ 1460.521292][T25604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.570197][T25604] CPU: 0 UID: 0 PID: 25604 Comm: syz.1.6020 Not tainted syzkaller #0 PREEMPT(full) [ 1460.570225][T25604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1460.570234][T25604] Call Trace: [ 1460.570239][T25604] [ 1460.570245][T25604] dump_stack_lvl+0x189/0x250 [ 1460.570264][T25604] ? __pfx____ratelimit+0x10/0x10 [ 1460.570291][T25604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1460.570313][T25604] ? __pfx__printk+0x10/0x10 [ 1460.570338][T25604] ? __might_fault+0xb0/0x130 [ 1460.570376][T25604] should_fail_ex+0x414/0x560 [ 1460.570404][T25604] _copy_to_iter+0x404/0x1790 [ 1460.570425][T25604] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1460.570458][T25604] ? __pfx__copy_to_iter+0x10/0x10 [ 1460.570474][T25604] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 1460.570503][T25604] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 1460.570531][T25604] __skb_datagram_iter+0xf8/0x990 [ 1460.570554][T25604] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1460.570585][T25604] skb_copy_datagram_iter+0xc5/0x230 [ 1460.570611][T25604] netlink_recvmsg+0x2ab/0xa30 [ 1460.570648][T25604] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1460.570682][T25604] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1460.570703][T25604] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1460.570725][T25604] ? security_socket_recvmsg+0x7e/0x2e0 [ 1460.570739][T25604] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1460.570754][T25604] sock_recvmsg+0x22c/0x270 [ 1460.570771][T25604] ____sys_recvmsg+0x1c9/0x460 [ 1460.570787][T25604] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1460.570807][T25604] ? import_iovec+0x74/0xa0 [ 1460.570820][T25604] ___sys_recvmsg+0x1b5/0x510 [ 1460.570834][T25604] ? __pfx____sys_recvmsg+0x10/0x10 [ 1460.570858][T25604] ? __fget_files+0x3a0/0x420 [ 1460.570885][T25604] __x64_sys_recvmsg+0x198/0x260 [ 1460.570898][T25604] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1460.570914][T25604] ? __pfx_ksys_write+0x10/0x10 [ 1460.570931][T25604] ? do_syscall_64+0xbe/0x3b0 [ 1460.570949][T25604] do_syscall_64+0xfa/0x3b0 [ 1460.570963][T25604] ? lockdep_hardirqs_on+0x9c/0x150 [ 1460.570977][T25604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.570988][T25604] ? clear_bhb_loop+0x60/0xb0 [ 1460.571000][T25604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.571010][T25604] RIP: 0033:0x7f869118ebe9 [ 1460.571021][T25604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1460.571030][T25604] RSP: 002b:00007f86920dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1460.571043][T25604] RAX: ffffffffffffffda RBX: 00007f86913b5fa0 RCX: 00007f869118ebe9 [ 1460.571051][T25604] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1460.571058][T25604] RBP: 00007f86920dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.571065][T25604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.571072][T25604] R13: 00007f86913b6038 R14: 00007f86913b5fa0 R15: 00007f86914dfa28 [ 1460.571088][T25604] [ 1461.123571][T25600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.134084][T25600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.419907][T25595] usb 5-1: reset high-speed USB device number 57 using dummy_hcd [ 1461.847841][T17099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1461.861780][T17099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1461.870273][T17099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1461.879786][T17099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1461.888795][T17099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1462.544126][T25595] usb 5-1: reset high-speed USB device number 57 using dummy_hcd [ 1462.773895][T25595] usb 5-1: device firmware changed [ 1462.787804][T20013] usb 5-1: USB disconnect, device number 57 [ 1462.796792][T25595] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1462.931422][T20013] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1462.984040][T25620] chnl_net:caif_netlink_parms(): no params data found [ 1463.111096][T20013] usb 5-1: Using ep0 maxpacket: 8 [ 1463.142688][T20013] usb 5-1: device descriptor read/all, error -71 [ 1463.232459][T25641] FAULT_INJECTION: forcing a failure. [ 1463.232459][T25641] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.319162][T25641] CPU: 0 UID: 0 PID: 25641 Comm: syz.4.6027 Not tainted syzkaller #0 PREEMPT(full) [ 1463.319180][T25641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1463.319187][T25641] Call Trace: [ 1463.319192][T25641] [ 1463.319197][T25641] dump_stack_lvl+0x189/0x250 [ 1463.319214][T25641] ? __pfx____ratelimit+0x10/0x10 [ 1463.319230][T25641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1463.319242][T25641] ? __pfx__printk+0x10/0x10 [ 1463.319255][T25641] ? netlink_unicast+0x82f/0x9e0 [ 1463.319270][T25641] ? ___sys_sendmsg+0x21f/0x2a0 [ 1463.319280][T25641] ? do_syscall_64+0xfa/0x3b0 [ 1463.319301][T25641] should_fail_ex+0x414/0x560 [ 1463.319319][T25641] should_failslab+0xa8/0x100 [ 1463.319346][T25641] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1463.319362][T25641] ? skb_clone+0x212/0x3a0 [ 1463.319376][T25641] skb_clone+0x212/0x3a0 [ 1463.319390][T25641] __netlink_deliver_tap+0x404/0x850 [ 1463.319412][T25641] ? netlink_deliver_tap+0x2e/0x1b0 [ 1463.319430][T25641] netlink_deliver_tap+0x19c/0x1b0 [ 1463.319446][T25641] netlink_sendskb+0x68/0x140 [ 1463.319461][T25641] netlink_unicast+0x397/0x9e0 [ 1463.319473][T25641] ? __asan_memcpy+0x40/0x70 [ 1463.319490][T25641] ? __pfx_netlink_unicast+0x10/0x10 [ 1463.319508][T25641] nfnetlink_rcv+0x2290/0x2520 [ 1463.319539][T25641] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1463.319561][T25641] ? ref_tracker_free+0x63a/0x7d0 [ 1463.319595][T25641] ? __netlink_deliver_tap+0x807/0x850 [ 1463.319610][T25641] ? netlink_deliver_tap+0x2e/0x1b0 [ 1463.319634][T25641] netlink_unicast+0x82f/0x9e0 [ 1463.319652][T25641] ? __pfx_netlink_unicast+0x10/0x10 [ 1463.319667][T25641] ? netlink_sendmsg+0x642/0xb30 [ 1463.319681][T25641] ? skb_put+0x11b/0x210 [ 1463.319693][T25641] netlink_sendmsg+0x805/0xb30 [ 1463.319717][T25641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.319734][T25641] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1463.319745][T25641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1463.319757][T25641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.319772][T25641] __sock_sendmsg+0x21c/0x270 [ 1463.319788][T25641] ____sys_sendmsg+0x505/0x830 [ 1463.319802][T25641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1463.319817][T25641] ? import_iovec+0x74/0xa0 [ 1463.319832][T25641] ___sys_sendmsg+0x21f/0x2a0 [ 1463.319844][T25641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1463.319874][T25641] ? __fget_files+0x2a/0x420 [ 1463.319889][T25641] ? __fget_files+0x3a0/0x420 [ 1463.319909][T25641] __x64_sys_sendmsg+0x19b/0x260 [ 1463.319922][T25641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1463.319938][T25641] ? __pfx_ksys_write+0x10/0x10 [ 1463.319951][T25641] ? rcu_is_watching+0x15/0xb0 [ 1463.319965][T25641] ? do_syscall_64+0xbe/0x3b0 [ 1463.319982][T25641] do_syscall_64+0xfa/0x3b0 [ 1463.319996][T25641] ? lockdep_hardirqs_on+0x9c/0x150 [ 1463.320010][T25641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.320020][T25641] ? clear_bhb_loop+0x60/0xb0 [ 1463.320033][T25641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.320043][T25641] RIP: 0033:0x7f39c1d8ebe9 [ 1463.320054][T25641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1463.320063][T25641] RSP: 002b:00007f39c2cd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1463.320075][T25641] RAX: ffffffffffffffda RBX: 00007f39c1fb5fa0 RCX: 00007f39c1d8ebe9 [ 1463.320083][T25641] RDX: 0000000000000100 RSI: 0000200000000100 RDI: 0000000000000003 [ 1463.320090][T25641] RBP: 00007f39c2cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.320097][T25641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1463.320104][T25641] R13: 00007f39c1fb6038 R14: 00007f39c1fb5fa0 R15: 00007f39c20dfa28 [ 1463.320120][T25641] [ 1463.672052][ C0] vkms_vblank_simulate: vblank timer overrun [ 1463.764502][ T5867] usb 7-1: USB disconnect, device number 28 [ 1463.951959][ T5878] Bluetooth: hci2: command tx timeout [ 1464.225105][T25652] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1464.248872][T25620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.265980][T25620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.288098][T25620] bridge_slave_0: entered allmulticast mode [ 1464.302847][T25620] bridge_slave_0: entered promiscuous mode [ 1464.329204][T25620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.336540][ T30] audit: type=1326 audit(1755891723.534:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25655 comm="syz.4.6033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c1d8ebe9 code=0x0 [ 1464.359826][T25620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.370215][T25620] bridge_slave_1: entered allmulticast mode [ 1464.377821][T25620] bridge_slave_1: entered promiscuous mode [ 1464.493694][T25620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.526075][T25620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.618364][T25620] team0: Port device team_slave_0 added [ 1464.639138][T25620] team0: Port device team_slave_1 added [ 1464.796414][T25620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.810289][T25620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.841776][T25620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.869074][T25620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.877507][T25620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.921857][T25666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.933905][T25666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.936945][T25620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.014769][T25668] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 1465.088487][T25620] hsr_slave_0: entered promiscuous mode [ 1465.100295][T25620] hsr_slave_1: entered promiscuous mode [ 1465.107914][T25620] debugfs: 'hsr0' already exists in 'hsr' [ 1465.118456][T25620] Cannot create hsr debugfs directory [ 1465.121131][ T55] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1465.281640][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 1465.290093][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1465.313414][ T55] usb 7-1: New USB device found, idVendor=1178, idProduct=0813, bcdDevice=f4.95 [ 1465.330927][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.349471][ T55] usb 7-1: Product: syz [ 1465.354476][ T55] usb 7-1: Manufacturer: syz [ 1465.359157][ T55] usb 7-1: SerialNumber: syz [ 1465.371552][ T55] usb 7-1: config 0 descriptor?? [ 1465.462210][ T6015] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1465.533422][T25620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.590199][ T55] usb 7-1: USB disconnect, device number 29 [ 1465.651340][ T6015] usb 6-1: Using ep0 maxpacket: 16 [ 1465.673180][ T6015] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1465.713110][T25620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.723563][ T6015] usb 6-1: config 0 has no interface number 0 [ 1465.723617][ T6015] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 1465.723647][ T6015] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 1465.733047][ T6015] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1465.772718][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1465.785063][ T6015] usb 6-1: Product: syz [ 1465.789302][ T6015] usb 6-1: SerialNumber: syz [ 1465.799947][ T6015] usb 6-1: config 0 descriptor?? [ 1465.825275][ T6015] cm109 6-1:0.8: invalid payload size 1024, expected 4 [ 1465.910791][ T6015] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input77 [ 1465.993316][T25620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.034136][ T5878] Bluetooth: hci2: command tx timeout [ 1466.161056][ T55] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1466.208182][T25620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.387085][ T55] usb 5-1: config 0 has no interfaces? [ 1466.408210][ T55] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1466.438733][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.467282][ T55] usb 5-1: Product: syz [ 1466.473078][ T55] usb 5-1: Manufacturer: syz [ 1466.491104][ T5952] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1466.504043][ T55] usb 5-1: SerialNumber: syz [ 1466.556323][ T55] usb 5-1: config 0 descriptor?? [ 1466.681267][ T5952] usb 7-1: Using ep0 maxpacket: 8 [ 1466.702654][ T5952] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.726847][ T5952] usb 7-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 1466.752617][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.773409][ T5952] usb 7-1: Product: syz [ 1466.789282][ T5952] usb 7-1: Manufacturer: syz [ 1466.802391][ T5952] usb 7-1: SerialNumber: syz [ 1466.826506][ T5952] usb 7-1: config 0 descriptor?? [ 1466.846120][T25689] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1466.881988][ T5952] gspca_main: t613-2.14.0 probing 17a1:0128 [ 1466.915975][T25678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.934319][T25620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1466.946138][T25678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.970898][T25620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1466.983176][T25620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1466.998493][T25620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1467.125930][ T5952] gspca_t613: unknown sensor 0000 [ 1467.143915][ T5952] t613 7-1:0.0: probe with driver t613 failed with error -22 [ 1467.212390][T25620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.234948][T25620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.294464][ T5952] usb 7-1: USB disconnect, device number 30 [ 1467.307319][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.314513][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.442819][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.450006][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.476874][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1467.484839][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1467.492422][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1467.499573][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1467.506739][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1467.513867][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1467.521049][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1467.529370][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1467.536621][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1467.543834][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1467.551009][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1467.571685][T15760] usb 6-1: USB disconnect, device number 83 [ 1467.577620][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1467.616967][T15760] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1468.111321][ T5878] Bluetooth: hci2: command tx timeout [ 1469.299290][T25709] netlink: 'syz.5.6044': attribute type 1 has an invalid length. [ 1469.444127][T25711] netlink: 'syz.5.6046': attribute type 49 has an invalid length. [ 1469.787399][T25721] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1469.807880][T25717] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6045'. [ 1470.026621][T25620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.059721][T25620] veth0_vlan: entered promiscuous mode [ 1470.072543][T25620] veth1_vlan: entered promiscuous mode [ 1470.095764][T25620] veth0_macvtap: entered promiscuous mode [ 1470.105590][T25620] veth1_macvtap: entered promiscuous mode [ 1470.179302][T25620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.192349][ T5878] Bluetooth: hci2: command tx timeout [ 1470.214171][T25620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.231880][T15760] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1470.246363][ T1104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.432882][T15760] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1470.450498][T15760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.463564][T15760] usb 7-1: config 0 descriptor?? [ 1470.475833][ T1104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.507504][ T1104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.544348][ T1104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.744104][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.767383][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.869703][T17020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.880266][T17020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.063934][T25737] openvswitch: netlink: IP tunnel TTL not specified. [ 1471.263129][T25743] FAULT_INJECTION: forcing a failure. [ 1471.263129][T25743] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.282385][T25743] CPU: 1 UID: 0 PID: 25743 Comm: syz.1.6055 Not tainted syzkaller #0 PREEMPT(full) [ 1471.282414][T25743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1471.282429][T25743] Call Trace: [ 1471.282437][T25743] [ 1471.282447][T25743] dump_stack_lvl+0x189/0x250 [ 1471.282477][T25743] ? __pfx____ratelimit+0x10/0x10 [ 1471.282506][T25743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1471.282528][T25743] ? __pfx__printk+0x10/0x10 [ 1471.282568][T25743] ? __pfx___might_resched+0x10/0x10 [ 1471.282593][T25743] should_fail_ex+0x414/0x560 [ 1471.282625][T25743] should_failslab+0xa8/0x100 [ 1471.282655][T25743] __kmalloc_cache_noprof+0x70/0x3d0 [ 1471.282683][T25743] ? alloc_bprm+0x7d/0x5c0 [ 1471.282712][T25743] alloc_bprm+0x7d/0x5c0 [ 1471.282741][T25743] do_execveat_common+0x1b3/0x6a0 [ 1471.282780][T25743] __x64_sys_execve+0x94/0xb0 [ 1471.282807][T25743] do_syscall_64+0xfa/0x3b0 [ 1471.282837][T25743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.282857][T25743] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1471.282878][T25743] ? clear_bhb_loop+0x60/0xb0 [ 1471.282902][T25743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.282922][T25743] RIP: 0033:0x7fceeef8ebe9 [ 1471.282940][T25743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1471.282958][T25743] RSP: 002b:00007fceefe83038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1471.282979][T25743] RAX: ffffffffffffffda RBX: 00007fceef1b5fa0 RCX: 00007fceeef8ebe9 [ 1471.282995][T25743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 1471.283007][T25743] RBP: 00007fceefe83090 R08: 0000000000000000 R09: 0000000000000000 [ 1471.283020][T25743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1471.283033][T25743] R13: 00007fceef1b6038 R14: 00007fceef1b5fa0 R15: 00007fceef2dfa28 [ 1471.283064][T25743] [ 1471.679416][ T5867] usb 5-1: USB disconnect, device number 60 [ 1472.541705][T25762] : renamed from bridge_slave_0 (while UP) [ 1472.946185][T25764] netlink: 'syz.6.6051': attribute type 5 has an invalid length. [ 1474.811319][T25785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6067'. [ 1475.843225][T15760] usb 7-1: Cannot set autoneg [ 1475.848127][T15760] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1475.863205][T15760] usb 7-1: USB disconnect, device number 31 [ 1476.180951][T20013] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1476.336050][T20013] usb 5-1: config 0 has no interfaces? [ 1476.375468][T20013] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1476.386549][T20013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.396555][T20013] usb 5-1: Product: syz [ 1476.401963][T20013] usb 5-1: Manufacturer: syz [ 1476.406953][T20013] usb 5-1: SerialNumber: syz [ 1476.469680][T20013] usb 5-1: config 0 descriptor?? [ 1476.480603][ T980] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1476.652366][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.716925][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.727362][ T980] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 1476.736724][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.749741][ T980] usb 6-1: config 0 descriptor?? [ 1476.908355][T25802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.960740][T25802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.133705][ T980] usbhid 6-1:0.0: can't add hid device: -71 [ 1477.217874][ T980] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1477.338332][ T980] usb 6-1: USB disconnect, device number 84 [ 1477.817429][T25827] FAULT_INJECTION: forcing a failure. [ 1477.817429][T25827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1477.898797][T25827] CPU: 0 UID: 0 PID: 25827 Comm: syz.6.6077 Not tainted syzkaller #0 PREEMPT(full) [ 1477.898824][T25827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1477.898835][T25827] Call Trace: [ 1477.898844][T25827] [ 1477.898852][T25827] dump_stack_lvl+0x189/0x250 [ 1477.898881][T25827] ? __pfx____ratelimit+0x10/0x10 [ 1477.898907][T25827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1477.898929][T25827] ? __pfx__printk+0x10/0x10 [ 1477.898952][T25827] ? fs_reclaim_acquire+0x7d/0x100 [ 1477.898973][T25827] should_fail_ex+0x414/0x560 [ 1477.898990][T25827] prepare_alloc_pages+0x213/0x610 [ 1477.899005][T25827] __alloc_frozen_pages_noprof+0x123/0x370 [ 1477.899018][T25827] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1477.899034][T25827] ? policy_nodemask+0x27c/0x720 [ 1477.899051][T25827] alloc_pages_mpol+0x232/0x4a0 [ 1477.899069][T25827] vma_alloc_folio_noprof+0xe4/0x200 [ 1477.899085][T25827] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1477.899106][T25827] folio_prealloc+0x30/0x180 [ 1477.899122][T25827] do_wp_page+0x1231/0x5800 [ 1477.899147][T25827] ? __pfx_do_wp_page+0x10/0x10 [ 1477.899159][T25827] ? do_raw_spin_lock+0x121/0x290 [ 1477.899180][T25827] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1477.899198][T25827] __handle_mm_fault+0x1033/0x5440 [ 1477.899220][T25827] ? __pfx___handle_mm_fault+0x10/0x10 [ 1477.899244][T25827] ? find_vma+0xe7/0x160 [ 1477.899257][T25827] ? __pfx_find_vma+0x10/0x10 [ 1477.899271][T25827] handle_mm_fault+0x40a/0x8e0 [ 1477.899290][T25827] do_user_addr_fault+0x764/0x1390 [ 1477.899316][T25827] exc_page_fault+0x76/0xf0 [ 1477.899332][T25827] asm_exc_page_fault+0x26/0x30 [ 1477.899343][T25827] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1477.899356][T25827] Code: 09 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1477.899365][T25827] RSP: 0018:ffffc9000405f638 EFLAGS: 00050202 [ 1477.899376][T25827] RAX: ffffffff84c59801 RBX: ffff888031616000 RCX: 000000000000055c [ 1477.899385][T25827] RDX: 0000000000000000 RSI: ffff888031616900 RDI: 0000200000004000 [ 1477.899392][T25827] RBP: ffffc9000405f7b0 R08: ffff888031616e5b R09: 1ffff110062c2dcb [ 1477.899400][T25827] R10: dffffc0000000000 R11: ffffed10062c2dcc R12: dffffc0000000000 [ 1477.899408][T25827] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e5c [ 1477.899419][T25827] ? _copy_to_iter+0x441/0x1790 [ 1477.899436][T25827] _copy_to_iter+0x493/0x1790 [ 1477.899454][T25827] ? __pfx__copy_to_iter+0x10/0x10 [ 1477.899463][T25827] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 1477.899479][T25827] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 1477.899495][T25827] __skb_datagram_iter+0xf8/0x990 [ 1477.899508][T25827] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1477.899525][T25827] skb_copy_datagram_iter+0xc5/0x230 [ 1477.899540][T25827] netlink_recvmsg+0x2ab/0xa30 [ 1477.899561][T25827] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1477.899579][T25827] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1477.899590][T25827] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1477.899601][T25827] ? security_socket_recvmsg+0x7e/0x2e0 [ 1477.899613][T25827] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1477.899629][T25827] sock_recvmsg+0x22c/0x270 [ 1477.899645][T25827] ____sys_recvmsg+0x1c9/0x460 [ 1477.899662][T25827] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1477.899681][T25827] ? import_iovec+0x74/0xa0 [ 1477.899695][T25827] ___sys_recvmsg+0x1b5/0x510 [ 1477.899710][T25827] ? __pfx____sys_recvmsg+0x10/0x10 [ 1477.899735][T25827] ? __fget_files+0x3a0/0x420 [ 1477.899757][T25827] __x64_sys_recvmsg+0x198/0x260 [ 1477.899770][T25827] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1477.899786][T25827] ? __pfx_ksys_write+0x10/0x10 [ 1477.899803][T25827] ? do_syscall_64+0xbe/0x3b0 [ 1477.899823][T25827] do_syscall_64+0xfa/0x3b0 [ 1477.899837][T25827] ? lockdep_hardirqs_on+0x9c/0x150 [ 1477.899851][T25827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.899861][T25827] ? clear_bhb_loop+0x60/0xb0 [ 1477.899873][T25827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.899883][T25827] RIP: 0033:0x7f88f158ebe9 [ 1477.899893][T25827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1477.899901][T25827] RSP: 002b:00007f88ef7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1477.899912][T25827] RAX: ffffffffffffffda RBX: 00007f88f17b6090 RCX: 00007f88f158ebe9 [ 1477.899922][T25827] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1477.899929][T25827] RBP: 00007f88ef7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.899935][T25827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.899942][T25827] R13: 00007f88f17b6128 R14: 00007f88f17b6090 R15: 00007f88f18dfa28 [ 1477.899958][T25827] [ 1478.354143][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.661023][ T5870] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1478.820758][ T5870] usb 6-1: Using ep0 maxpacket: 8 [ 1478.827782][ T5870] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1478.839286][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.850793][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1478.861135][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1478.874510][ T5870] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1478.883966][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.918313][ T5870] usb 6-1: config 0 descriptor?? [ 1479.259937][ T980] usb 5-1: USB disconnect, device number 61 [ 1479.435956][ T5870] redragon 0003:0C45:760B.003F: Fixing Redragon ASURA report descriptor. [ 1479.445490][ T5870] redragon 0003:0C45:760B.003F: unknown main item tag 0x6 [ 1479.453306][ T5870] redragon 0003:0C45:760B.003F: item fetching failed at offset 7/133 [ 1479.464131][ T5870] redragon 0003:0C45:760B.003F: probe with driver redragon failed with error -22 [ 1479.673202][ T55] usb 6-1: USB disconnect, device number 85 [ 1479.889944][T25841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6083'. [ 1479.917943][T25841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6083'. [ 1480.610977][ T5952] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1480.771012][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 1480.812580][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1480.825899][ T5952] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.848297][ T5952] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1480.871240][ T5952] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.900042][ T5952] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1480.953163][ T5952] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1480.978200][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.987010][ T5952] usb 6-1: Product: syz [ 1480.991838][ T5952] usb 6-1: Manufacturer: syz [ 1480.996429][ T5952] usb 6-1: SerialNumber: syz [ 1481.012845][T25849] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1481.237593][ T5952] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input78 [ 1481.565597][T25857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.593815][T25857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.759855][T25857] delete_channel: no stack [ 1481.765925][ T5222] bcm5974 6-1:1.0: could not read from device [ 1481.824720][ T5222] bcm5974 6-1:1.0: could not read from device [ 1481.847345][ T5952] usb 6-1: USB disconnect, device number 86 [ 1481.875225][ T5222] bcm5974 6-1:1.0: could not read from device [ 1481.932456][T22642] bcm5974 6-1:1.0: could not read from device [ 1482.341059][ T980] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1482.521008][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 1482.533818][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1482.618268][ T980] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1482.664963][ T980] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 1482.690212][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.816056][ T980] usb 5-1: Product: syz [ 1482.831267][ T980] usb 5-1: Manufacturer: syz [ 1482.837883][ T980] usb 5-1: SerialNumber: syz [ 1483.339672][T25879] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6092'. [ 1484.338624][T25880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.607317][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.613789][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.925167][T25885] fuse: Bad value for 'fd' [ 1485.101163][ T55] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 1485.283464][ T55] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1485.313902][ T55] usb 6-1: config 0 has no interface number 0 [ 1485.346124][ T55] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1485.416330][ T55] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1485.499872][ T55] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1485.576432][ T55] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1485.609498][ T55] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1485.652191][ T55] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1485.665893][ T55] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1485.691350][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.741525][ T55] usb 6-1: config 0 descriptor?? [ 1485.758373][T25884] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1485.776195][T25884] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1485.809638][ T55] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1485.927251][T25888] netlink: 'syz.3.6095': attribute type 10 has an invalid length. [ 1486.060162][T25888] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1486.102036][T25888] team0: Failed to send options change via netlink (err -105) [ 1486.299149][T25888] team0: Port device netdevsim0 added [ 1486.483818][ T5867] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1486.701356][ T980] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input79 [ 1486.821171][ T5867] usb 7-1: no configurations [ 1486.833383][ T5222] bcm5974 5-1:1.0: could not read from device [ 1486.847335][ T5867] usb 7-1: can't read configurations, error -22 [ 1486.876799][T25900] netlink: 'syz.1.6099': attribute type 2 has an invalid length. [ 1486.904559][ T5222] bcm5974 5-1:1.0: could not read from device [ 1486.922722][ T980] usb 5-1: USB disconnect, device number 62 [ 1486.932393][T25899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6098'. [ 1486.947339][T25899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6098'. [ 1486.956898][T25899] netlink: 'syz.3.6098': attribute type 18 has an invalid length. [ 1487.030642][ T5867] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1487.281241][ T5867] usb 7-1: no configurations [ 1487.286421][ T5867] usb 7-1: can't read configurations, error -22 [ 1487.306602][ T5867] usb usb7-port1: attempt power cycle [ 1487.337657][T22642] udevd[22642]: Error opening device "/dev/input/event4": No such device [ 1487.364981][T22642] udevd[22642]: Unable to EVIOCGABS device "/dev/input/event4" [ 1487.384353][T22642] udevd[22642]: Unable to EVIOCGABS device "/dev/input/event4" [ 1487.403658][T22642] udevd[22642]: Unable to EVIOCGABS device "/dev/input/event4" [ 1487.421649][T22642] udevd[22642]: Unable to EVIOCGABS device "/dev/input/event4" [ 1487.440319][T22642] udevd[22642]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1487.488468][ T5237] udevd[5237]: worker [22642] terminated by signal 6 (Aborted) [ 1487.506327][ T5237] udevd[5237]: worker [22642] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input79/event4' [ 1487.705117][ T5867] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1487.811931][ T5867] usb 7-1: no configurations [ 1487.824078][ T5867] usb 7-1: can't read configurations, error -22 [ 1487.999549][ T55] usb 6-1: USB disconnect, device number 87 [ 1488.022363][ T55] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1488.030829][ T5867] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1488.101435][ T5867] usb 7-1: no configurations [ 1488.106047][ T5867] usb 7-1: can't read configurations, error -22 [ 1488.168032][ T5867] usb usb7-port1: unable to enumerate USB device [ 1488.657197][ T55] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1488.676600][ T55] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1488.793322][T25916] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1489.146581][T25919] fido_id[25919]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1489.426304][T25930] fuse: Bad value for 'fd' [ 1490.175751][T25944] fuse: Unknown parameter 'roomode' [ 1490.973607][ T30] audit: type=1326 audit(1755891750.184:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25957 comm="syz.3.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3878ebe9 code=0x7ffc0000 [ 1491.099248][ T6015] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1491.122827][ T30] audit: type=1326 audit(1755891750.184:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25957 comm="syz.3.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3878ebe9 code=0x7ffc0000 [ 1491.207163][ T30] audit: type=1326 audit(1755891750.204:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25957 comm="syz.3.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6e3878ebe9 code=0x7ffc0000 [ 1491.330641][ T6015] usb 7-1: Using ep0 maxpacket: 32 [ 1491.342194][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1491.370025][ T30] audit: type=1326 audit(1755891750.204:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25957 comm="syz.3.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3878ebe9 code=0x7ffc0000 [ 1491.454320][ T6015] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1491.480964][ T6015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.567117][ T6015] usb 7-1: Product: syz [ 1491.583694][ T6015] usb 7-1: Manufacturer: syz [ 1491.607702][ T30] audit: type=1326 audit(1755891750.204:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25957 comm="syz.3.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3878ebe9 code=0x7ffc0000 [ 1491.610440][ T6015] usb 7-1: SerialNumber: syz [ 1491.731222][ T30] audit: type=1326 audit(1755891750.494:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25957 comm="syz.3.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e3878d550 code=0x7ffc0000 [ 1491.811274][ T6015] usb 7-1: config 0 descriptor?? [ 1491.926352][ T30] audit: type=1326 audit(1755891750.494:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25957 comm="syz.3.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3878ebe9 code=0x7ffc0000 [ 1492.026621][ T30] audit: type=1326 audit(1755891750.494:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25957 comm="syz.3.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3878ebe9 code=0x7ffc0000 [ 1492.146059][ T30] audit: type=1326 audit(1755891750.514:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25957 comm="syz.3.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e3878ebe9 code=0x7ffc0000 [ 1492.180134][T25974] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6119'. [ 1492.202581][T25974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6119'. [ 1492.295849][T25974] input: syz1 as /devices/virtual/input/input80 [ 1492.308291][ T30] audit: type=1326 audit(1755891750.514:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25957 comm="syz.3.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3878ebe9 code=0x7ffc0000 [ 1492.830681][ T6015] gs_usb 7-1:0.0: Couldn't send data format (err=-110) [ 1492.895234][ T6015] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 1493.428566][ T6015] usb 7-1: USB disconnect, device number 36 [ 1493.772619][T25987] input: syz1 as /devices/virtual/input/input81 [ 1494.551322][ T55] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1494.675426][T26000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6126'. [ 1494.754573][ T55] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1494.775252][T25998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6125'. [ 1494.781087][ T55] usb 7-1: config 0 has no interface number 0 [ 1494.802104][ T55] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1494.870005][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.932173][ T55] usb 7-1: config 0 descriptor?? [ 1494.954576][ T55] usb 7-1: selecting invalid altsetting 1 [ 1494.982394][ T55] dvb_ttusb_budget: ttusb_init_controller: error [ 1495.000129][ T55] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1495.024700][T26004] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1495.130582][ T6015] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 1495.210329][ T55] DVB: Unable to find symbol cx22700_attach() [ 1495.312471][T26012] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6129'. [ 1495.351000][ T6015] usb 5-1: Invalid ep0 maxpacket: 64 [ 1495.359285][ T55] DVB: Unable to find symbol tda10046_attach() [ 1495.397243][ T55] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1495.449562][ T55] usb 7-1: USB disconnect, device number 37 [ 1495.501495][ T6015] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 1495.701182][ T6015] usb 5-1: Invalid ep0 maxpacket: 64 [ 1495.724208][ T6015] usb usb5-port1: attempt power cycle [ 1495.904817][T26017] batadv_slave_1: entered promiscuous mode [ 1495.964520][T26016] batadv_slave_1: left promiscuous mode [ 1496.072708][T26019] Invalid logical block size (-1) [ 1496.100566][ T6015] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 1496.207777][ T6015] usb 5-1: Invalid ep0 maxpacket: 64 [ 1496.390976][ T6015] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 1496.421545][ T6015] usb 5-1: Invalid ep0 maxpacket: 64 [ 1496.501325][ T6015] usb usb5-port1: unable to enumerate USB device [ 1497.001679][ T6015] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 1497.173203][ T6015] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1497.205221][ T6015] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1497.255018][ T6015] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1497.298256][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1497.299000][T26027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.324558][ T6015] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1497.347593][ T6015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.385119][ T6015] usb 7-1: config 0 descriptor?? [ 1497.401724][T26025] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1497.923955][ T6015] uclogic 0003:28BD:0094.0041: interface is invalid, ignoring [ 1498.081073][ T5870] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1498.096641][T15760] usb 7-1: USB disconnect, device number 38 [ 1498.262852][ T5870] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.317463][ T5870] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1498.345740][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.364110][ T5870] usb 6-1: Product: syz [ 1498.374067][ T5870] usb 6-1: Manufacturer: syz [ 1498.385441][ T5870] usb 6-1: SerialNumber: syz [ 1498.756863][T26046] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1499.021093][ T55] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1499.188595][T26055] IPv6: NLM_F_CREATE should be specified when creating new route [ 1499.198744][T26055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1499.206039][T26055] IPv6: NLM_F_CREATE should be set when creating new route [ 1499.216192][ T55] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1499.226035][ T55] usb 5-1: config 0 has no interface number 0 [ 1499.240979][ T55] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1499.281084][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.378795][ T55] usb 5-1: config 0 descriptor?? [ 1499.399050][ T55] usb 5-1: selecting invalid altsetting 1 [ 1499.441443][T26038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.443065][ T55] dvb_ttusb_budget: ttusb_init_controller: error [ 1499.455682][T26038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.473254][ T55] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1499.552211][ T5870] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1499.588157][ T5870] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1499.626004][ T5870] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 1499.668001][ T55] DVB: Unable to find symbol cx22700_attach() [ 1499.833109][ T5870] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1499.876018][ T5867] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1499.964951][ T55] DVB: Unable to find symbol tda10046_attach() [ 1499.978045][ T5870] usb 6-1: USB disconnect, device number 88 [ 1499.993977][ T55] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1500.016878][ T5870] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 1500.032806][ T5867] usb 7-1: no configurations [ 1500.045826][ T5867] usb 7-1: can't read configurations, error -22 [ 1500.058231][ T55] usb 5-1: USB disconnect, device number 67 [ 1500.240742][ T5867] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1500.462481][ T5867] usb 7-1: no configurations [ 1500.475139][ T5867] usb 7-1: can't read configurations, error -22 [ 1500.497369][ T5867] usb usb7-port1: attempt power cycle [ 1500.892598][ T5867] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1500.964022][ T5867] usb 7-1: no configurations [ 1500.990462][ T5867] usb 7-1: can't read configurations, error -22 [ 1501.042705][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6149'. [ 1501.191934][ T5867] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1501.222022][T26081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1501.264506][ T5867] usb 7-1: no configurations [ 1501.269126][ T5867] usb 7-1: can't read configurations, error -22 [ 1501.341853][ T6015] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1501.405246][ T5867] usb usb7-port1: unable to enumerate USB device [ 1501.593726][ T6015] usb 6-1: Using ep0 maxpacket: 16 [ 1501.775652][ T6015] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1501.801811][ T6015] usb 6-1: can't read configurations, error -61 [ 1501.960608][ T6015] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1502.210514][ T6015] usb 6-1: Using ep0 maxpacket: 16 [ 1502.261377][ T6015] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1502.290444][ T6015] usb 6-1: can't read configurations, error -61 [ 1502.327211][ T6015] usb usb6-port1: attempt power cycle [ 1502.744347][ T6015] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1502.821457][ T6015] usb 6-1: Using ep0 maxpacket: 16 [ 1502.836539][ T6015] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1502.866890][ T6015] usb 6-1: can't read configurations, error -61 [ 1503.101041][ T6015] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1503.195549][ T6015] usb 6-1: Using ep0 maxpacket: 16 [ 1503.249127][ T6015] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1503.261829][ T6015] usb 6-1: can't read configurations, error -61 [ 1503.285098][ T6015] usb usb6-port1: unable to enumerate USB device [ 1503.850965][ T980] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1504.022724][ T980] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1504.044907][ T980] usb 7-1: config 0 has no interface number 0 [ 1504.059105][ T980] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1504.076119][ T980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.137269][ T980] usb 7-1: config 0 descriptor?? [ 1504.158018][ T980] usb 7-1: selecting invalid altsetting 1 [ 1504.183043][ T980] dvb_ttusb_budget: ttusb_init_controller: error [ 1504.199823][ T980] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1504.328207][ T980] DVB: Unable to find symbol cx22700_attach() [ 1504.385683][T26145] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6163'. [ 1504.396704][T26145] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1504.538287][ T980] DVB: Unable to find symbol tda10046_attach() [ 1504.586542][ T980] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1504.921532][ T980] usb 7-1: USB disconnect, device number 43 [ 1505.280556][T15760] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1505.447393][T15760] usb 6-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1505.447414][T15760] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1505.447439][T15760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.453487][T15760] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1505.453522][T15760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.453545][T15760] usb 6-1: Product: syz [ 1505.453562][T15760] usb 6-1: Manufacturer: syz [ 1505.453579][T15760] usb 6-1: SerialNumber: syz [ 1505.466731][T15760] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1505.466761][T15760] cdc_ncm 6-1:1.0: bind() failure [ 1505.801127][T20013] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1505.973615][T26167] FAULT_INJECTION: forcing a failure. [ 1505.973615][T26167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.017347][T26167] CPU: 1 UID: 0 PID: 26167 Comm: syz.4.6169 Not tainted syzkaller #0 PREEMPT(full) [ 1506.017376][T26167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1506.017389][T26167] Call Trace: [ 1506.017398][T26167] [ 1506.017407][T26167] dump_stack_lvl+0x189/0x250 [ 1506.017436][T26167] ? __pfx____ratelimit+0x10/0x10 [ 1506.017465][T26167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1506.017489][T26167] ? __pfx__printk+0x10/0x10 [ 1506.017517][T26167] ? __might_fault+0xb0/0x130 [ 1506.017557][T26167] should_fail_ex+0x414/0x560 [ 1506.017590][T26167] _copy_from_user+0x2d/0xb0 [ 1506.017614][T26167] input_event_from_user+0xb2/0x280 [ 1506.017636][T26167] ? __pfx_input_event_from_user+0x10/0x10 [ 1506.017662][T26167] ? input_inject_event+0xb6/0x340 [ 1506.017689][T26167] evdev_write+0x2a6/0x480 [ 1506.017724][T26167] ? __pfx_evdev_write+0x10/0x10 [ 1506.017755][T26167] ? bpf_lsm_file_permission+0x9/0x20 [ 1506.017778][T26167] ? security_file_permission+0x75/0x290 [ 1506.017806][T26167] ? rw_verify_area+0x255/0x4d0 [ 1506.017831][T26167] ? __lock_acquire+0xab9/0xd20 [ 1506.017857][T26167] ? __pfx_evdev_write+0x10/0x10 [ 1506.017888][T26167] vfs_write+0x27b/0xb30 [ 1506.017923][T26167] ? __pfx_vfs_write+0x10/0x10 [ 1506.017951][T26167] ? __fget_files+0x2a/0x420 [ 1506.017983][T26167] ? __fget_files+0x2a/0x420 [ 1506.018010][T26167] ? __fget_files+0x3a0/0x420 [ 1506.018038][T26167] ? __fget_files+0x2a/0x420 [ 1506.018076][T26167] ksys_write+0x145/0x250 [ 1506.018105][T26167] ? __pfx_ksys_write+0x10/0x10 [ 1506.018128][T26167] ? rcu_is_watching+0x15/0xb0 [ 1506.018154][T26167] ? do_syscall_64+0xbe/0x3b0 [ 1506.018187][T26167] do_syscall_64+0xfa/0x3b0 [ 1506.018221][T26167] ? lockdep_hardirqs_on+0x9c/0x150 [ 1506.018249][T26167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.018269][T26167] ? clear_bhb_loop+0x60/0xb0 [ 1506.018294][T26167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.018314][T26167] RIP: 0033:0x7f39c1d8ebe9 [ 1506.018332][T26167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1506.018349][T26167] RSP: 002b:00007f39c2cd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1506.018371][T26167] RAX: ffffffffffffffda RBX: 00007f39c1fb5fa0 RCX: 00007f39c1d8ebe9 [ 1506.018387][T26167] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 1506.018400][T26167] RBP: 00007f39c2cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.018413][T26167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1506.018425][T26167] R13: 00007f39c1fb6038 R14: 00007f39c1fb5fa0 R15: 00007f39c20dfa28 [ 1506.018458][T26167] [ 1506.287225][T20013] usb 7-1: no configurations [ 1506.540271][T20013] usb 7-1: can't read configurations, error -22 [ 1506.731159][T20013] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1506.803822][T26182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6173'. [ 1506.896014][T20013] usb 7-1: no configurations [ 1506.921013][T20013] usb 7-1: can't read configurations, error -22 [ 1506.952006][T26187] FAULT_INJECTION: forcing a failure. [ 1506.952006][T26187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.974555][T20013] usb usb7-port1: attempt power cycle [ 1507.000101][T26187] CPU: 1 UID: 0 PID: 26187 Comm: syz.1.6174 Not tainted syzkaller #0 PREEMPT(full) [ 1507.000128][T26187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1507.000148][T26187] Call Trace: [ 1507.000156][T26187] [ 1507.000164][T26187] dump_stack_lvl+0x189/0x250 [ 1507.000191][T26187] ? __pfx____ratelimit+0x10/0x10 [ 1507.000217][T26187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1507.000238][T26187] ? __pfx__printk+0x10/0x10 [ 1507.000263][T26187] ? __might_fault+0xb0/0x130 [ 1507.000302][T26187] should_fail_ex+0x414/0x560 [ 1507.000334][T26187] _copy_from_user+0x2d/0xb0 [ 1507.000361][T26187] ___sys_sendmsg+0x158/0x2a0 [ 1507.000383][T26187] ? __pfx____sys_sendmsg+0x10/0x10 [ 1507.000436][T26187] ? __fget_files+0x2a/0x420 [ 1507.000466][T26187] ? __fget_files+0x3a0/0x420 [ 1507.000506][T26187] __x64_sys_sendmsg+0x19b/0x260 [ 1507.000530][T26187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1507.000562][T26187] ? __pfx_ksys_write+0x10/0x10 [ 1507.000586][T26187] ? rcu_is_watching+0x15/0xb0 [ 1507.000612][T26187] ? do_syscall_64+0xbe/0x3b0 [ 1507.000646][T26187] do_syscall_64+0xfa/0x3b0 [ 1507.000673][T26187] ? lockdep_hardirqs_on+0x9c/0x150 [ 1507.000701][T26187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.000721][T26187] ? clear_bhb_loop+0x60/0xb0 [ 1507.000746][T26187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.000767][T26187] RIP: 0033:0x7fceeef8ebe9 [ 1507.000786][T26187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1507.000804][T26187] RSP: 002b:00007fceefe62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1507.000827][T26187] RAX: ffffffffffffffda RBX: 00007fceef1b6090 RCX: 00007fceeef8ebe9 [ 1507.000843][T26187] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1507.000857][T26187] RBP: 00007fceefe62090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.000870][T26187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.000882][T26187] R13: 00007fceef1b6128 R14: 00007fceef1b6090 R15: 00007fceef2dfa28 [ 1507.000913][T26187] [ 1507.273393][ T5870] usb 6-1: USB disconnect, device number 93 [ 1507.606849][T26186] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1507.616607][T20013] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1507.654210][T26186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1507.676407][T26186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1507.706568][T20013] usb 7-1: no configurations [ 1507.712094][T20013] usb 7-1: can't read configurations, error -22 [ 1507.861050][T20013] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1507.871775][ T5870] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 1507.906647][T20013] usb 7-1: no configurations [ 1507.919547][T20013] usb 7-1: can't read configurations, error -22 [ 1507.941331][T20013] usb usb7-port1: unable to enumerate USB device [ 1508.039043][ T5870] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1508.066067][ T5870] usb 6-1: config 0 has no interface number 0 [ 1508.121202][ T5870] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1508.206341][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.282658][ T5870] usb 6-1: config 0 descriptor?? [ 1508.365173][ T5870] usb 6-1: selecting invalid altsetting 1 [ 1508.402786][ T5870] dvb_ttusb_budget: ttusb_init_controller: error [ 1508.427066][ T5870] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1508.837415][ T5870] DVB: Unable to find symbol cx22700_attach() [ 1509.172584][ T5870] DVB: Unable to find symbol tda10046_attach() [ 1509.262993][ T5870] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1509.453455][T26225] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6185'. [ 1509.461676][ T5870] usb 6-1: USB disconnect, device number 94 [ 1509.651008][T26223] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1509.811826][T26233] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6187'. [ 1510.194827][T10517] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1510.240829][T10517] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1510.260523][T10517] usb 4-1: USB disconnect, device number 66 [ 1510.599547][T26243] mmap: syz.4.6191 (26243): VmData 37593088 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 1510.694778][T26247] sctp: [Deprecated]: syz.1.6192 (pid 26247) Use of int in maxseg socket option. [ 1510.694778][T26247] Use struct sctp_assoc_value instead [ 1511.471365][T15760] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1511.698823][T15760] usb 5-1: no configurations [ 1511.708484][T15760] usb 5-1: can't read configurations, error -22 [ 1511.881725][T15760] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1512.171065][T15760] usb 5-1: no configurations [ 1512.241338][T15760] usb 5-1: can't read configurations, error -22 [ 1512.297582][T15760] usb usb5-port1: attempt power cycle [ 1512.720699][T15760] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1512.825848][T15760] usb 5-1: no configurations [ 1512.856523][T15760] usb 5-1: can't read configurations, error -22 [ 1513.040481][T15760] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1513.216806][T15760] usb 5-1: no configurations [ 1513.224570][T15760] usb 5-1: can't read configurations, error -22 [ 1513.268762][T15760] usb usb5-port1: unable to enumerate USB device [ 1513.410998][T20013] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 1513.898721][T20013] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1513.951672][T20013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.993424][T20013] usb 4-1: config 0 descriptor?? [ 1515.277742][T26319] netlink: 'syz.5.6213': attribute type 1 has an invalid length. [ 1515.500965][T26319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6213'. [ 1516.090663][T15760] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1516.240487][T15760] usb 6-1: device descriptor read/64, error -71 [ 1516.490564][T15760] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1516.710803][T15760] usb 6-1: device descriptor read/64, error -71 [ 1516.821036][T15760] usb usb6-port1: attempt power cycle [ 1516.949580][T20013] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1516.984665][T20013] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1517.026901][T20013] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1517.052944][T20013] usb 4-1: USB disconnect, device number 67 [ 1517.180882][T15760] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1517.235195][T15760] usb 6-1: device descriptor read/8, error -71 [ 1517.520721][T15760] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1517.541409][T15760] usb 6-1: device descriptor read/8, error -71 [ 1517.569702][T26332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6218'. [ 1517.603200][T26332] geneve0: entered promiscuous mode [ 1517.608864][T26332] geneve0: entered allmulticast mode [ 1517.638555][T26332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6218'. [ 1517.661616][T15760] usb usb6-port1: unable to enumerate USB device [ 1518.486412][T26345] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6223'. [ 1518.498100][T26345] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6223'. [ 1518.540638][ T980] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1518.715745][ T980] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1518.726646][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.734886][ T980] usb 7-1: Product: syz [ 1518.739239][ T980] usb 7-1: Manufacturer: syz [ 1518.743936][ T980] usb 7-1: SerialNumber: syz [ 1518.757107][ T980] usb 7-1: config 0 descriptor?? [ 1518.924498][T26360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1518.943635][T26360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1518.996686][T20013] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1519.195066][T20013] usb 4-1: config 252 has an invalid interface number: 254 but max is 0 [ 1519.226518][T20013] usb 4-1: config 252 has no interface number 0 [ 1519.312722][T20013] usb 4-1: config 252 interface 254 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1519.342238][T20013] usb 4-1: config 252 interface 254 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 1519.404029][T20013] usb 4-1: config 252 interface 254 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1519.440912][T15760] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1519.464389][T20013] usb 4-1: config 252 interface 254 has no altsetting 0 [ 1519.508162][T20013] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1519.551602][T20013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.589588][T20013] usb 4-1: Product: syz [ 1519.609438][T20013] usb 4-1: Manufacturer: syz [ 1519.623428][T15760] usb 5-1: config 0 has no interfaces? [ 1519.633397][T20013] usb 4-1: SerialNumber: syz [ 1519.672799][T20013] bfusb 4-1:252.254: probe with driver bfusb failed with error -5 [ 1519.693389][T15760] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1519.789845][T15760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.856828][T15760] usb 5-1: config 0 descriptor?? [ 1519.869296][ T980] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1519.885308][ T5870] usb 4-1: USB disconnect, device number 68 [ 1520.081429][T26342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.119380][ T5952] usb 5-1: USB disconnect, device number 73 [ 1520.137228][T26342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.197898][ T980] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1520.315934][ T980] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1520.380114][ T980] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1520.536728][ T980] usb 7-1: USB disconnect, device number 48 [ 1521.252465][T17099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1521.263753][T17099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1521.277854][T17099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1521.291412][T17099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1521.299804][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1521.299821][ T30] audit: type=1326 audit(1755891780.444:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26377 comm="syz.6.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f158ebe9 code=0x7ffc0000 [ 1521.328551][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.332947][T17099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1521.336179][ T30] audit: type=1326 audit(1755891780.444:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26377 comm="syz.6.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f88f158ebe9 code=0x7ffc0000 [ 1521.366148][ T30] audit: type=1326 audit(1755891780.444:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26377 comm="syz.6.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f158ebe9 code=0x7ffc0000 [ 1521.434093][ T30] audit: type=1326 audit(1755891780.444:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26377 comm="syz.6.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f88f158ebe9 code=0x7ffc0000 [ 1521.615568][ T30] audit: type=1326 audit(1755891780.454:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26377 comm="syz.6.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f158ebe9 code=0x7ffc0000 [ 1521.678060][ T30] audit: type=1326 audit(1755891780.454:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26377 comm="syz.6.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f88f158ebe9 code=0x7ffc0000 [ 1521.771383][ T30] audit: type=1326 audit(1755891780.454:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26377 comm="syz.6.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f158ebe9 code=0x7ffc0000 [ 1521.798080][T26386] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6235'. [ 1521.866452][T26386] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6235'. [ 1521.978064][ T30] audit: type=1326 audit(1755891780.454:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26377 comm="syz.6.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88f158ebe9 code=0x7ffc0000 [ 1522.173099][ T30] audit: type=1326 audit(1755891780.454:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26377 comm="syz.6.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f158ebe9 code=0x7ffc0000 [ 1522.214079][T26384] chnl_net:caif_netlink_parms(): no params data found [ 1522.336672][ T30] audit: type=1326 audit(1755891780.454:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26377 comm="syz.6.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f88f158ebe9 code=0x7ffc0000 [ 1522.371799][T26396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6238'. [ 1522.390083][T26396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6238'. [ 1522.413725][T26396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6238'. [ 1522.582451][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6238'. [ 1522.596109][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6238'. [ 1523.401097][T17099] Bluetooth: hci3: command tx timeout [ 1523.409396][T15878] syz_tun (unregistering): left promiscuous mode [ 1523.451129][ T5952] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1523.518543][T26384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.526593][T26384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.540292][T26384] bridge_slave_0: entered allmulticast mode [ 1523.558868][T26384] bridge_slave_0: entered promiscuous mode [ 1523.574063][T26384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.582154][T26384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.589500][T26384] bridge_slave_1: entered allmulticast mode [ 1523.632965][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 1523.647559][ T5952] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice= c.bb [ 1523.671241][T26384] bridge_slave_1: entered promiscuous mode [ 1523.680201][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.723455][ T5952] usb 5-1: config 0 descriptor?? [ 1523.735925][ T5952] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1523.848796][T26384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.894764][T26384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.926811][T26429] ksmbd: Unknown IPC event: 3, ignore. [ 1524.339119][T26434] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6248'. [ 1524.393065][T26434] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6248'. [ 1524.473651][T26434] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6248'. [ 1524.847712][T26384] team0: Port device team_slave_0 added [ 1524.955382][T26384] team0: Port device team_slave_1 added [ 1525.142401][T26384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.167014][ T5952] gspca_ov534_9: reg_r err -32 [ 1525.219490][T26384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.245627][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.422141][T26384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.437543][T26384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.445367][T26384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.473147][T26384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.484176][T17099] Bluetooth: hci3: command tx timeout [ 1525.530916][ T5952] gspca_ov534_9: Unknown sensor 0000 [ 1525.530979][ T5952] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1525.548059][T26384] hsr_slave_0: entered promiscuous mode [ 1525.565338][T26384] hsr_slave_1: entered promiscuous mode [ 1525.574135][T26384] debugfs: 'hsr0' already exists in 'hsr' [ 1525.580089][T26384] Cannot create hsr debugfs directory [ 1525.922113][T26384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1525.937653][T26384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.060145][T26437] delete_channel: no stack [ 1526.195225][T26384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1526.207859][T26384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.452150][T26384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1526.486843][T26384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.726248][T26384] team0: Port device netdevsim0 removed [ 1526.758295][T26384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1526.787481][ T6015] usb 5-1: USB disconnect, device number 74 [ 1526.839138][T26384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.912977][T15760] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1527.104365][T15760] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 1527.133510][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1527.133528][ T30] audit: type=1326 audit(1755891786.344:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceeef8ebe9 code=0x7ffc0000 [ 1527.139842][T15760] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.162076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.208368][T15760] usb 7-1: config 0 has no interface number 0 [ 1527.245430][ T30] audit: type=1326 audit(1755891786.344:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceeef8ebe9 code=0x7ffc0000 [ 1527.288269][T15760] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1527.337305][T15760] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1527.375025][ T30] audit: type=1326 audit(1755891786.344:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fceeef8ebe9 code=0x7ffc0000 [ 1527.402917][T15760] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1527.494791][T26384] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1527.494949][T15760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.514239][ T30] audit: type=1326 audit(1755891786.344:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceeef8ebe9 code=0x7ffc0000 [ 1527.566251][T15760] usb 7-1: Product: syz [ 1527.571662][T15760] usb 7-1: Manufacturer: syz [ 1527.586964][T15760] usb 7-1: SerialNumber: syz [ 1527.587264][T17099] Bluetooth: hci3: command tx timeout [ 1527.605904][ T30] audit: type=1326 audit(1755891786.344:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceeef8ebe9 code=0x7ffc0000 [ 1527.628332][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.642344][ T30] audit: type=1326 audit(1755891786.344:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fceeef8ebe9 code=0x7ffc0000 [ 1527.665558][ T30] audit: type=1326 audit(1755891786.344:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceeef8ebe9 code=0x7ffc0000 [ 1527.688694][ T30] audit: type=1326 audit(1755891786.344:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceeef8ebe9 code=0x7ffc0000 [ 1527.711129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.718643][ T30] audit: type=1326 audit(1755891786.344:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fceeef8ebe9 code=0x7ffc0000 [ 1527.741094][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.759166][ T30] audit: type=1326 audit(1755891786.344:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceeef8ebe9 code=0x7ffc0000 [ 1527.761042][T26384] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1527.805898][T15760] usb 7-1: config 0 descriptor?? [ 1527.966610][T26384] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1527.999974][T26384] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1528.427045][T26384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.485389][T26484] lo: entered allmulticast mode [ 1528.497295][T26484] tunl0: entered allmulticast mode [ 1528.505126][T26484] gre0: entered allmulticast mode [ 1528.533311][T26484] gretap0: entered allmulticast mode [ 1528.534388][T26449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.550027][T26449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.559029][T26484] erspan0: entered allmulticast mode [ 1528.587821][T26484] ip_vti0: entered allmulticast mode [ 1528.608106][T26484] ip6_vti0: entered allmulticast mode [ 1528.627258][T26484] sit0: entered allmulticast mode [ 1528.652688][T26484] ip6tnl0: entered allmulticast mode [ 1528.662961][T26484] ip6gre0: entered allmulticast mode [ 1528.683126][T26484] syz_tun: entered allmulticast mode [ 1528.712412][T26484] ip6gretap0: entered allmulticast mode [ 1528.743102][T26484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.750914][T26484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.776680][T26484] bridge0: entered allmulticast mode [ 1528.809012][T26484] vcan0: entered allmulticast mode [ 1528.840127][T26484] bond0: entered allmulticast mode [ 1528.855408][T26484] bond_slave_0: entered allmulticast mode [ 1528.880733][T26484] bond_slave_1: entered allmulticast mode [ 1528.896973][T26491] netlink: 'syz.5.6263': attribute type 1 has an invalid length. [ 1528.934522][T26484] team0: entered allmulticast mode [ 1528.955471][T26484] team_slave_0: entered allmulticast mode [ 1528.974542][T26484] team_slave_1: entered allmulticast mode [ 1528.987257][T26494] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1529.005927][T26484] dummy0: entered allmulticast mode [ 1529.016901][T10517] usb 7-1: USB disconnect, device number 49 [ 1529.031907][T26484] nlmon0: entered allmulticast mode [ 1529.043773][T26484] caif0: entered allmulticast mode [ 1529.063687][T26484] batadv0: entered allmulticast mode [ 1529.075395][T26484] vxcan0: entered allmulticast mode [ 1529.083204][T26484] vxcan1: entered allmulticast mode [ 1529.094379][T26484] veth0: entered allmulticast mode [ 1529.115821][T26484] veth1: entered allmulticast mode [ 1529.124852][T26484] wg0: entered allmulticast mode [ 1529.133827][T26484] wg1: entered allmulticast mode [ 1529.145409][T26484] wg2: entered allmulticast mode [ 1529.153559][T26484] veth0_to_bridge: entered allmulticast mode [ 1529.171179][T26484] veth1_to_bridge: entered allmulticast mode [ 1529.186141][T26484] veth0_to_bond: entered allmulticast mode [ 1529.198404][T26484] veth1_to_bond: entered allmulticast mode [ 1529.222357][T26484] veth0_to_team: entered allmulticast mode [ 1529.241798][T26484] veth1_to_team: entered allmulticast mode [ 1529.258195][T26484] veth0_to_batadv: entered allmulticast mode [ 1529.269819][T26484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1529.278927][T26484] batadv_slave_0: entered allmulticast mode [ 1529.310286][T26484] veth1_to_batadv: entered allmulticast mode [ 1529.335857][T26484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.358756][T26484] batadv_slave_1: entered allmulticast mode [ 1529.383469][T26502] __nla_validate_parse: 61 callbacks suppressed [ 1529.383490][T26502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6265'. [ 1529.398470][T26484] xfrm0: entered allmulticast mode [ 1529.411362][T26484] veth0_to_hsr: entered allmulticast mode [ 1529.445377][T26484] hsr_slave_0: entered allmulticast mode [ 1529.473525][T26484] veth1_to_hsr: entered allmulticast mode [ 1529.501745][T26484] hsr_slave_1: entered allmulticast mode [ 1529.519302][T26484] hsr0: entered allmulticast mode [ 1529.533220][T26484] veth1_virt_wifi: entered allmulticast mode [ 1529.547794][T26484] veth0_virt_wifi: entered allmulticast mode [ 1529.583924][T26484] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1529.611806][T26484] veth1_vlan: entered allmulticast mode [ 1529.622048][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6266'. [ 1529.630813][T17099] Bluetooth: hci3: command tx timeout [ 1529.636305][T26484] veth0_vlan: entered allmulticast mode [ 1529.646153][T26507] netlink: 'syz.5.6266': attribute type 30 has an invalid length. [ 1529.701115][T26484] vlan0: entered allmulticast mode [ 1529.714150][T26484] vlan1: entered allmulticast mode [ 1529.735881][T26484] macvlan0: entered allmulticast mode [ 1529.773169][T26484] macvlan1: entered allmulticast mode [ 1529.799847][T26484] ipvlan0: entered allmulticast mode [ 1529.819490][T26484] ipvlan1: entered allmulticast mode [ 1529.848352][T26484] veth1_macvtap: entered allmulticast mode [ 1529.874885][T10517] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1529.883166][T26484] veth0_macvtap: entered allmulticast mode [ 1529.923885][T26484] macvtap0: entered allmulticast mode [ 1529.947995][T26484] macsec0: entered allmulticast mode [ 1529.972910][T26484] geneve0: entered allmulticast mode [ 1529.998397][T26484] geneve1: entered allmulticast mode [ 1530.022896][T26484] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1530.037403][T10517] usb 5-1: Using ep0 maxpacket: 32 [ 1530.044911][T26484] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1530.055207][T10517] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1530.073203][T10517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.098219][T10517] usb 5-1: Product: syz [ 1530.103650][T26484] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1530.112102][T10517] usb 5-1: Manufacturer: syz [ 1530.121904][T10517] usb 5-1: SerialNumber: syz [ 1530.135603][T26484] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1530.143977][T10517] usb 5-1: config 0 descriptor?? [ 1530.155888][T26484] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 1530.171767][T10517] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1530.182611][T26484] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 1530.297789][ T1104] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.319536][ T1104] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.375772][T26384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.493135][ T1104] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.508889][T26521] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6270'. [ 1530.550187][ T1104] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.592219][T12528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.599369][T12528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.694294][ T1104] netdevsim netdevsim5 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1530.714107][T26525] netlink: 'syz.1.6271': attribute type 1 has an invalid length. [ 1530.761770][ T1104] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1530.838718][T12528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.845953][T12528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1530.997376][ T1104] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1531.013385][ T1104] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1531.218904][T26384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1531.230672][T26534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1531.252497][T26384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1531.419348][T26384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1531.532787][T10517] gspca_ov534_9: reg_w failed -110 [ 1531.683367][T26384] veth0_vlan: entered promiscuous mode [ 1531.698887][T26384] veth1_vlan: entered promiscuous mode [ 1531.762888][T26384] veth0_macvtap: entered promiscuous mode [ 1531.783686][T26384] veth1_macvtap: entered promiscuous mode [ 1531.844737][T26384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.852453][T10517] gspca_ov534_9: Unknown sensor 0000 [ 1531.852524][T10517] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1531.993292][T26384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1532.053031][T12528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.064885][T12528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.125595][ T3467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.221940][ T3467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.576728][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.615771][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.709818][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.745874][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.855166][T26540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6232'. [ 1533.349967][T26553] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6281'. [ 1533.641165][ T5952] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1533.821838][ T5952] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1533.849773][ T5952] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1533.868047][ T5952] usb 7-1: can't read configurations, error -71 [ 1534.401225][T26570] FAULT_INJECTION: forcing a failure. [ 1534.401225][T26570] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.460775][T26570] CPU: 1 UID: 0 PID: 26570 Comm: syz.3.6286 Not tainted syzkaller #0 PREEMPT(full) [ 1534.460827][T26570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1534.460852][T26570] Call Trace: [ 1534.460861][T26570] [ 1534.460871][T26570] dump_stack_lvl+0x189/0x250 [ 1534.460900][T26570] ? __pfx____ratelimit+0x10/0x10 [ 1534.460926][T26570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1534.460949][T26570] ? __pfx__printk+0x10/0x10 [ 1534.460978][T26570] ? __pfx___might_resched+0x10/0x10 [ 1534.460998][T26570] ? fs_reclaim_acquire+0x7d/0x100 [ 1534.461032][T26570] should_fail_ex+0x414/0x560 [ 1534.461064][T26570] should_failslab+0xa8/0x100 [ 1534.461094][T26570] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1534.461121][T26570] ? alloc_vfsmnt+0xeb/0x430 [ 1534.461151][T26570] kstrdup+0x42/0x100 [ 1534.461174][T26570] alloc_vfsmnt+0xeb/0x430 [ 1534.461201][T26570] clone_mnt+0x67/0xae0 [ 1534.461224][T26570] ? do_raw_spin_unlock+0x122/0x240 [ 1534.461254][T26570] copy_tree+0x3d4/0x930 [ 1534.461296][T26570] copy_mnt_ns+0x179/0x880 [ 1534.461320][T26570] ? rcu_is_watching+0x15/0xb0 [ 1534.461343][T26570] ? create_new_namespaces+0x31/0x720 [ 1534.461372][T26570] create_new_namespaces+0xd1/0x720 [ 1534.461404][T26570] ? bpf_lsm_capable+0x9/0x20 [ 1534.461429][T26570] ? security_capable+0x7e/0x2e0 [ 1534.461472][T26570] unshare_nsproxy_namespaces+0x11c/0x170 [ 1534.461495][T26570] ksys_unshare+0x4c8/0x8c0 [ 1534.461527][T26570] ? __pfx_ksys_unshare+0x10/0x10 [ 1534.461551][T26570] ? __pfx_ksys_write+0x10/0x10 [ 1534.461587][T26570] __x64_sys_unshare+0x38/0x50 [ 1534.461611][T26570] do_syscall_64+0xfa/0x3b0 [ 1534.461635][T26570] ? lockdep_hardirqs_on+0x9c/0x150 [ 1534.461662][T26570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.461682][T26570] ? clear_bhb_loop+0x60/0xb0 [ 1534.461705][T26570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.461723][T26570] RIP: 0033:0x7fe2b578ebe9 [ 1534.461742][T26570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1534.461758][T26570] RSP: 002b:00007fe2b6569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1534.461779][T26570] RAX: ffffffffffffffda RBX: 00007fe2b59b5fa0 RCX: 00007fe2b578ebe9 [ 1534.461794][T26570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020680 [ 1534.461807][T26570] RBP: 00007fe2b6569090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.461819][T26570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.461831][T26570] R13: 00007fe2b59b6038 R14: 00007fe2b59b5fa0 R15: 00007fe2b5adfa28 [ 1534.461859][T26570] [ 1534.477140][ T5870] usb 5-1: USB disconnect, device number 75 [ 1534.742252][T20013] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1535.046798][T20013] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1535.062379][T20013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1535.084160][T20013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1535.111882][T20013] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1535.152436][T20013] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1535.182576][T20013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.221584][T20013] usb 6-1: config 0 descriptor?? [ 1535.705210][T20013] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1535.763364][T20013] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1535.874860][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.883189][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.096881][ T6015] IPVS: starting estimator thread 0... [ 1536.160158][T26580] delete_channel: no stack [ 1536.192618][ T6015] usb 6-1: USB disconnect, device number 99 [ 1536.212688][T26590] IPVS: using max 48 ests per chain, 115200 per kthread [ 1536.581056][ T980] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1536.740631][ T980] usb 5-1: device descriptor read/64, error -71 [ 1536.800930][T15760] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1536.974500][T15760] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1536.984513][ T980] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1536.993253][T15760] usb 7-1: config 0 has no interface number 0 [ 1536.999953][T15760] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1537.033153][T15760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.054209][T15760] usb 7-1: config 0 descriptor?? [ 1537.079838][T15760] usb 7-1: selecting invalid altsetting 1 [ 1537.106747][T15760] dvb_ttusb_budget: ttusb_init_controller: error [ 1537.121041][T15760] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1537.130583][ T980] usb 5-1: device descriptor read/64, error -71 [ 1537.210654][T15760] DVB: Unable to find symbol cx22700_attach() [ 1537.240995][ T980] usb usb5-port1: attempt power cycle [ 1537.304002][T15760] DVB: Unable to find symbol tda10046_attach() [ 1537.311252][T15760] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1537.327069][T15760] usb 7-1: USB disconnect, device number 52 [ 1537.600539][ T980] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1537.621323][ T980] usb 5-1: device descriptor read/8, error -71 [ 1537.750940][T20013] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1537.864071][ T980] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1537.913480][ T980] usb 5-1: device descriptor read/8, error -71 [ 1537.927973][T20013] usb 4-1: config 0 has no interfaces? [ 1537.940120][T20013] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1537.959498][T20013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.986187][T20013] usb 4-1: config 0 descriptor?? [ 1538.055264][ T980] usb usb5-port1: unable to enumerate USB device [ 1538.262351][ T5867] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1538.422419][T26633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.527581][T26633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.643402][ T5867] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1538.740437][ T5867] usb 6-1: can't read configurations, error -61 [ 1538.900736][ T5867] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1539.076608][ T5867] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1539.136931][ T5867] usb 6-1: can't read configurations, error -61 [ 1539.158536][T26640] block nbd0: Attempted send on invalid socket [ 1539.165113][T26640] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1539.190772][ T5867] usb usb6-port1: attempt power cycle [ 1539.560538][ T5867] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1539.641751][ T5867] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1539.668142][ T5867] usb 6-1: can't read configurations, error -61 [ 1539.851056][ T5867] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1539.964760][ T5867] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1540.007614][ T5867] usb 6-1: can't read configurations, error -61 [ 1540.039522][ T5867] usb usb6-port1: unable to enumerate USB device [ 1540.557475][ T5870] usb 4-1: USB disconnect, device number 69 [ 1540.581161][T20013] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1540.753026][T20013] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1540.806590][T20013] usb 7-1: config 0 has no interface number 0 [ 1540.849530][T20013] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1540.926796][T20013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.286260][T26662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1541.307521][T20013] usb 7-1: config 0 descriptor?? [ 1541.339850][T26662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1541.365027][T20013] usb 7-1: selecting invalid altsetting 1 [ 1541.389268][T20013] dvb_ttusb_budget: ttusb_init_controller: error [ 1541.403125][T20013] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1541.737074][T20013] DVB: Unable to find symbol cx22700_attach() [ 1542.079861][T20013] DVB: Unable to find symbol tda10046_attach() [ 1542.091983][T20013] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1542.123403][T20013] usb 7-1: USB disconnect, device number 53 [ 1543.231065][T20013] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1543.405805][T26708] netlink: 'syz.5.6332': attribute type 29 has an invalid length. [ 1543.445625][T20013] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1543.476115][T20013] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1543.488387][T20013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1543.506324][T20013] usb 7-1: Product: syz [ 1543.521664][T20013] usb 7-1: Manufacturer: syz [ 1543.526282][T20013] usb 7-1: SerialNumber: syz [ 1543.774840][T20013] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1544.113337][T20013] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1544.293591][T20013] usb 4-1: Using ep0 maxpacket: 16 [ 1544.304953][T20013] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1544.315995][T20013] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1544.324771][T20013] usb 4-1: Product: syz [ 1544.329769][T20013] usb 4-1: Manufacturer: syz [ 1544.334744][T20013] usb 4-1: SerialNumber: syz [ 1544.343013][T20013] usb 4-1: config 0 descriptor?? [ 1544.618081][T26716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6334'. [ 1544.978859][T26730] syzkaller0: entered promiscuous mode [ 1544.994718][T26730] syzkaller0: entered allmulticast mode [ 1545.009190][T26734] tipc: Enabled bearer , priority 0 [ 1545.087286][T26729] tipc: Resetting bearer [ 1545.225034][T26738] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6341'. [ 1546.036335][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.043054][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.089871][T20013] tipc: Node number set to 1556141781 [ 1546.222125][T20013] usb 7-1: USB disconnect, device number 54 [ 1546.231263][T20013] usblp0: removed [ 1546.778953][T25837] usb 4-1: USB disconnect, device number 70 [ 1547.338801][ T5867] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1547.501729][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 1547.509119][ T5867] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice= c.bb [ 1547.543665][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.578921][ T5867] usb 4-1: config 0 descriptor?? [ 1547.613902][ T5867] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1549.044340][ T5867] gspca_ov534_9: reg_r err -32 [ 1549.330637][ T5867] gspca_ov534_9: Unknown sensor 0000 [ 1549.330740][ T5867] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1549.784371][T26729] tipc: Disabling bearer [ 1549.917264][T26762] netlink: 'syz.5.6349': attribute type 2 has an invalid length. [ 1550.068646][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6352'. [ 1550.090775][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6352'. [ 1550.306231][T26778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6352'. [ 1550.380962][ T5870] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1550.562588][ T5870] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1550.565054][ T5867] usb 4-1: USB disconnect, device number 71 [ 1550.615582][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.637171][ T5870] usb 6-1: config 0 descriptor?? [ 1550.731164][T26793] netlink: 'syz.3.6359': attribute type 1 has an invalid length. [ 1550.876696][ T5870] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1551.184037][ T5870] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1551.230155][ T5870] [drm] Initialized udl on minor 2 [ 1551.283163][T26770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.313663][T26770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.370104][ T5870] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1551.415579][ T5870] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1551.424769][T20013] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1551.605273][T20013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 56, changing to 9 [ 1551.650673][T26810] program syz.5.6353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1551.662242][T20013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8703, setting to 1024 [ 1551.693755][T20013] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1551.723524][T20013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.764611][T20013] usb 4-1: config 0 descriptor?? [ 1552.001121][T20013] ath6kl: Failed to submit usb control message: -71 [ 1552.021009][T20013] ath6kl: unable to send the bmi data to the device: -71 [ 1552.034241][T20013] ath6kl: Unable to send get target info: -71 [ 1552.072252][T20013] ath6kl: Failed to init ath6kl core: -71 [ 1552.079650][T20013] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1552.151342][T20013] usb 4-1: USB disconnect, device number 72 [ 1553.009901][ T5952] usb 6-1: USB disconnect, device number 104 [ 1553.016173][T25837] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1553.028226][T25837] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1553.230641][ T5878] Bluetooth: hci4: command 0x0406 tx timeout [ 1554.835397][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1554.835410][ T30] audit: type=1326 audit(1755891814.044:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c1d8ebe9 code=0x7ffc0000 [ 1554.873443][ T30] audit: type=1326 audit(1755891814.044:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c1d8ebe9 code=0x7ffc0000 [ 1554.901113][ T30] audit: type=1326 audit(1755891814.074:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f39c1d8ebe9 code=0x7ffc0000 [ 1554.950449][ T30] audit: type=1326 audit(1755891814.074:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c1d8ebe9 code=0x7ffc0000 [ 1554.988200][T26870] FAULT_INJECTION: forcing a failure. [ 1554.988200][T26870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.024886][T26870] CPU: 1 UID: 0 PID: 26870 Comm: syz.1.6386 Not tainted syzkaller #0 PREEMPT(full) [ 1555.024904][T26870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1555.024911][T26870] Call Trace: [ 1555.024916][T26870] [ 1555.024922][T26870] dump_stack_lvl+0x189/0x250 [ 1555.024940][T26870] ? __pfx____ratelimit+0x10/0x10 [ 1555.024955][T26870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1555.024968][T26870] ? __pfx__printk+0x10/0x10 [ 1555.024989][T26870] should_fail_ex+0x414/0x560 [ 1555.025006][T26870] _copy_to_user+0x31/0xb0 [ 1555.025020][T26870] simple_read_from_buffer+0xe1/0x170 [ 1555.025038][T26870] proc_fail_nth_read+0x1b3/0x220 [ 1555.025052][T26870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1555.025065][T26870] ? rw_verify_area+0x2a6/0x4d0 [ 1555.025078][T26870] ? __lock_acquire+0xab9/0xd20 [ 1555.025093][T26870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1555.025105][T26870] vfs_read+0x200/0xa30 [ 1555.025118][T26870] ? fdget_pos+0x247/0x320 [ 1555.025129][T26870] ? __pfx___mutex_lock+0x10/0x10 [ 1555.025145][T26870] ? __pfx_vfs_read+0x10/0x10 [ 1555.025159][T26870] ? __fget_files+0x2a/0x420 [ 1555.025176][T26870] ? __fget_files+0x3a0/0x420 [ 1555.025190][T26870] ? __fget_files+0x2a/0x420 [ 1555.025210][T26870] ksys_read+0x145/0x250 [ 1555.025225][T26870] ? __pfx_ksys_read+0x10/0x10 [ 1555.025236][T26870] ? rcu_is_watching+0x15/0xb0 [ 1555.025250][T26870] ? do_syscall_64+0xbe/0x3b0 [ 1555.025267][T26870] do_syscall_64+0xfa/0x3b0 [ 1555.025281][T26870] ? lockdep_hardirqs_on+0x9c/0x150 [ 1555.025295][T26870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.025306][T26870] ? clear_bhb_loop+0x60/0xb0 [ 1555.025318][T26870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.025329][T26870] RIP: 0033:0x7fceeef8d5fc [ 1555.025340][T26870] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1555.025349][T26870] RSP: 002b:00007fceefe62030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1555.025361][T26870] RAX: ffffffffffffffda RBX: 00007fceef1b6090 RCX: 00007fceeef8d5fc [ 1555.025369][T26870] RDX: 000000000000000f RSI: 00007fceefe620a0 RDI: 0000000000000005 [ 1555.025376][T26870] RBP: 00007fceefe62090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.025382][T26870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.025389][T26870] R13: 00007fceef1b6128 R14: 00007fceef1b6090 R15: 00007fceef2dfa28 [ 1555.025405][T26870] [ 1555.262657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.281694][ T30] audit: type=1326 audit(1755891814.074:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c1d8ebe9 code=0x7ffc0000 [ 1555.304465][ T30] audit: type=1326 audit(1755891814.074:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f39c1d8ebe9 code=0x7ffc0000 [ 1555.327013][ T30] audit: type=1326 audit(1755891814.074:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c1d8ebe9 code=0x7ffc0000 [ 1555.349419][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.355507][ T30] audit: type=1326 audit(1755891814.074:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c1d8ebe9 code=0x7ffc0000 [ 1555.378005][ T30] audit: type=1326 audit(1755891814.074:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f39c1d8ebe9 code=0x7ffc0000 [ 1555.400422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.407154][ T30] audit: type=1326 audit(1755891814.074:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c1d8ebe9 code=0x7ffc0000 [ 1555.981848][ T5867] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1556.169792][T26884] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6391'. [ 1556.422393][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 1556.439982][ T5867] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1556.448227][ T5867] usb 5-1: config 0 has no interface number 0 [ 1556.464396][ T5867] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1556.689135][ T5867] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1556.847930][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.906798][ T5867] usb 5-1: Product: syz [ 1556.937042][ T5867] usb 5-1: Manufacturer: syz [ 1557.000594][ T6015] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1557.030900][ T5867] usb 5-1: SerialNumber: syz [ 1557.050852][ T5867] usb 5-1: config 0 descriptor?? [ 1557.060525][T15760] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1557.102629][ T5867] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1557.193121][ T5867] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1557.746177][ T5867] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1558.385220][ T5867] em28xx 5-1:0.89: board has no eeprom [ 1558.880972][ T5867] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1558.906199][ T5867] em28xx 5-1:0.89: analog set to bulk mode. [ 1558.927214][T15760] usb 6-1: config 0 has no interfaces? [ 1558.971619][ T980] em28xx 5-1:0.89: Registering V4L2 extension [ 1559.001483][T26875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6388'. [ 1559.068409][T15760] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1559.119116][T15760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.268821][T15760] usb 6-1: Product: syz [ 1559.275930][T15760] usb 6-1: Manufacturer: syz [ 1559.302920][T15760] usb 6-1: SerialNumber: syz [ 1559.321670][T15760] usb 6-1: config 0 descriptor?? [ 1559.588177][T25837] usb 6-1: USB disconnect, device number 105 [ 1559.702700][ T980] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1559.702983][ T5952] usb 5-1: USB disconnect, device number 80 [ 1559.731345][ T980] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 1559.734807][ T5952] em28xx 5-1:0.89: Disconnecting em28xx [ 1559.739628][ T980] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1559.787304][ T980] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1559.805825][ T980] em28xx 5-1:0.89: No AC97 audio processor [ 1559.845213][T26908] AppArmor: change_hat: Invalid input '0' [ 1559.871537][ T980] usb 5-1: Decoder not found [ 1559.930544][ T980] em28xx 5-1:0.89: failed to create media graph [ 1559.936922][ T980] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1559.984093][ T980] em28xx 5-1:0.89: Registering snapshot button... [ 1559.991082][T26909] ================================================================== [ 1559.997394][ T980] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input83 [ 1559.999169][T26909] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 1560.017016][T26909] Read of size 8 at addr ffff888061000740 by task v4l_id/26909 [ 1560.024571][T26909] [ 1560.026906][T26909] CPU: 0 UID: 0 PID: 26909 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1560.026930][T26909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1560.026942][T26909] Call Trace: [ 1560.026951][T26909] [ 1560.026961][T26909] dump_stack_lvl+0x189/0x250 [ 1560.026987][T26909] ? rcu_is_watching+0x15/0xb0 [ 1560.027007][T26909] ? __kasan_check_byte+0x12/0x40 [ 1560.027035][T26909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1560.027055][T26909] ? rcu_is_watching+0x15/0xb0 [ 1560.027074][T26909] ? lock_release+0x4b/0x3e0 [ 1560.027104][T26909] ? __virt_addr_valid+0x1c8/0x5c0 [ 1560.027129][T26909] ? __virt_addr_valid+0x4a5/0x5c0 [ 1560.027153][T26909] print_report+0xca/0x240 [ 1560.027173][T26909] ? v4l2_fh_open+0xc7/0x430 [ 1560.027199][T26909] kasan_report+0x118/0x150 [ 1560.027227][T26909] ? v4l2_fh_open+0xc7/0x430 [ 1560.027257][T26909] v4l2_fh_open+0xc7/0x430 [ 1560.027288][T26909] em28xx_v4l2_open+0x157/0x9a0 [ 1560.027325][T26909] v4l2_open+0x20c/0x360 [ 1560.027344][T26909] chrdev_open+0x4cc/0x5e0 [ 1560.027375][T26909] ? __pfx_chrdev_open+0x10/0x10 [ 1560.027403][T26909] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1560.027436][T26909] ? __pfx_chrdev_open+0x10/0x10 [ 1560.027462][T26909] do_dentry_open+0x953/0x13f0 [ 1560.027489][T26909] vfs_open+0x3b/0x340 [ 1560.027507][T26909] ? path_openat+0x2ecd/0x3830 [ 1560.027531][T26909] path_openat+0x2ee5/0x3830 [ 1560.027553][T26909] ? arch_stack_walk+0xfc/0x150 [ 1560.027583][T26909] ? stack_depot_save_flags+0x40/0x860 [ 1560.027616][T26909] ? __pfx_path_openat+0x10/0x10 [ 1560.027637][T26909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.027666][T26909] do_filp_open+0x1fa/0x410 [ 1560.027688][T26909] ? __lock_acquire+0xab9/0xd20 [ 1560.027715][T26909] ? __pfx_do_filp_open+0x10/0x10 [ 1560.027748][T26909] ? _raw_spin_unlock+0x28/0x50 [ 1560.027772][T26909] ? alloc_fd+0x64c/0x6c0 [ 1560.027803][T26909] do_sys_openat2+0x121/0x1c0 [ 1560.027825][T26909] ? __pfx_do_sys_openat2+0x10/0x10 [ 1560.027844][T26909] ? exc_page_fault+0x76/0xf0 [ 1560.027871][T26909] ? do_user_addr_fault+0xc8a/0x1390 [ 1560.027902][T26909] __x64_sys_openat+0x138/0x170 [ 1560.027926][T26909] do_syscall_64+0xfa/0x3b0 [ 1560.027953][T26909] ? lockdep_hardirqs_on+0x9c/0x150 [ 1560.027979][T26909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.027998][T26909] ? clear_bhb_loop+0x60/0xb0 [ 1560.028020][T26909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.028039][T26909] RIP: 0033:0x7fccff2a7407 [ 1560.028057][T26909] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1560.028075][T26909] RSP: 002b:00007ffec687e450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1560.028097][T26909] RAX: ffffffffffffffda RBX: 00007fccffa0d880 RCX: 00007fccff2a7407 [ 1560.028113][T26909] RDX: 0000000000000000 RSI: 00007ffec687ef1b RDI: ffffffffffffff9c [ 1560.028127][T26909] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1560.028140][T26909] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1560.028153][T26909] R13: 00007ffec687e6a0 R14: 00007fccffb74000 R15: 0000559e761b24d8 [ 1560.028175][T26909] [ 1560.028182][T26909] [ 1560.035119][ T980] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1560.037196][T26909] Allocated by task 980: [ 1560.037209][T26909] kasan_save_track+0x3e/0x80 [ 1560.353073][T26909] __kasan_kmalloc+0x93/0xb0 [ 1560.357685][T26909] __kmalloc_cache_noprof+0x230/0x3d0 [ 1560.363072][T26909] em28xx_v4l2_init+0x10b/0x2e70 [ 1560.368024][T26909] em28xx_init_extension+0x11d/0x1c0 [ 1560.373317][T26909] process_scheduled_works+0xae1/0x17b0 [ 1560.378869][T26909] worker_thread+0x8a0/0xda0 [ 1560.383471][T26909] kthread+0x70e/0x8a0 [ 1560.387549][T26909] ret_from_fork+0x3f9/0x770 [ 1560.392147][T26909] ret_from_fork_asm+0x1a/0x30 [ 1560.396928][T26909] [ 1560.399252][T26909] Freed by task 980: [ 1560.403148][T26909] kasan_save_track+0x3e/0x80 [ 1560.407836][T26909] kasan_save_free_info+0x46/0x50 [ 1560.412869][T26909] __kasan_slab_free+0x5b/0x80 [ 1560.417647][T26909] kfree+0x18e/0x440 [ 1560.421551][T26909] em28xx_v4l2_init+0x1683/0x2e70 [ 1560.426584][T26909] em28xx_init_extension+0x11d/0x1c0 [ 1560.431879][T26909] process_scheduled_works+0xae1/0x17b0 [ 1560.437434][T26909] worker_thread+0x8a0/0xda0 [ 1560.442035][T26909] kthread+0x70e/0x8a0 [ 1560.446120][T26909] ret_from_fork+0x3f9/0x770 [ 1560.450717][T26909] ret_from_fork_asm+0x1a/0x30 [ 1560.455494][T26909] [ 1560.457818][T26909] The buggy address belongs to the object at ffff888061000000 [ 1560.457818][T26909] which belongs to the cache kmalloc-8k of size 8192 [ 1560.471879][T26909] The buggy address is located 1856 bytes inside of [ 1560.471879][T26909] freed 8192-byte region [ffff888061000000, ffff888061002000) [ 1560.485866][T26909] [ 1560.488200][T26909] The buggy address belongs to the physical page: [ 1560.494618][T26909] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61000 [ 1560.503411][T26909] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1560.511914][T26909] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1560.519898][T26909] page_type: f5(slab) [ 1560.523880][T26909] raw: 00fff00000000040 ffff88801a442280 0000000000000000 0000000000000001 [ 1560.532478][T26909] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1560.541061][T26909] head: 00fff00000000040 ffff88801a442280 0000000000000000 0000000000000001 [ 1560.549735][T26909] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1560.558398][T26909] head: 00fff00000000003 ffffea0001840001 00000000ffffffff 00000000ffffffff [ 1560.567070][T26909] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1560.575744][T26909] page dumped because: kasan: bad access detected [ 1560.582176][T26909] page_owner tracks the page as allocated [ 1560.587885][T26909] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 26513, tgid 26511 (syz.6.6267), ts 1530066189123, free_ts 1530011066215 [ 1560.591245][ T980] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1560.609608][T26909] post_alloc_hook+0x240/0x2a0 [ 1560.609641][T26909] get_page_from_freelist+0x21e4/0x22c0 [ 1560.609656][T26909] __alloc_frozen_pages_noprof+0x181/0x370 [ 1560.609671][T26909] alloc_pages_mpol+0x232/0x4a0 [ 1560.609692][T26909] allocate_slab+0x8a/0x370 [ 1560.609707][T26909] ___slab_alloc+0xbeb/0x1410 [ 1560.609732][T26909] __kmalloc_cache_noprof+0x296/0x3d0 [ 1560.652745][T26909] audit_log_d_path+0xb5/0x190 [ 1560.657524][T26909] audit_log_d_path_exe+0x42/0x70 [ 1560.662556][T26909] audit_log_task+0x2b3/0x3c0 [ 1560.667234][T26909] audit_seccomp+0x86/0x190 [ 1560.671742][T26909] __seccomp_filter+0x9aa/0x1a40 [ 1560.676672][T26909] syscall_trace_enter+0xaa/0x160 [ 1560.681711][T26909] do_syscall_64+0xd3/0x3b0 [ 1560.686226][T26909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.692119][T26909] page last free pid 26513 tgid 26511 stack trace: [ 1560.698736][T26909] __free_frozen_pages+0xbc4/0xd30 [ 1560.703861][T26909] __put_partials+0x156/0x1a0 [ 1560.708544][T26909] put_cpu_partial+0x17c/0x250 [ 1560.713292][T26909] __slab_free+0x2d5/0x3c0 [ 1560.717709][T26909] qlist_free_all+0x97/0x140 [ 1560.722309][T26909] kasan_quarantine_reduce+0x148/0x160 [ 1560.727785][T26909] __kasan_slab_alloc+0x22/0x80 [ 1560.732643][T26909] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1560.738105][T26909] audit_log_start+0x126/0x870 [ 1560.742874][T26909] audit_seccomp+0x64/0x190 [ 1560.747388][T26909] __seccomp_filter+0x9aa/0x1a40 [ 1560.752316][T26909] syscall_trace_enter+0xaa/0x160 [ 1560.757355][T26909] do_syscall_64+0xd3/0x3b0 [ 1560.761868][T26909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.767762][T26909] [ 1560.770084][T26909] Memory state around the buggy address: [ 1560.775714][T26909] ffff888061000600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1560.783772][T26909] ffff888061000680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1560.791845][T26909] >ffff888061000700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1560.799907][T26909] ^ [ 1560.806065][T26909] ffff888061000780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1560.814133][T26909] ffff888061000800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1560.822194][T26909] ================================================================== [ 1560.852475][ T5952] em28xx 5-1:0.89: Closing input extension [ 1560.858407][ T5952] em28xx 5-1:0.89: Deregistering snapshot button [ 1561.016673][T26909] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1561.023916][T26909] CPU: 1 UID: 0 PID: 26909 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1561.032949][T26909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1561.043012][T26909] Call Trace: [ 1561.046301][T26909] [ 1561.049235][T26909] dump_stack_lvl+0x99/0x250 [ 1561.053847][T26909] ? __asan_memcpy+0x40/0x70 [ 1561.058451][T26909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1561.063661][T26909] ? __pfx__printk+0x10/0x10 [ 1561.068251][T26909] vpanic+0x281/0x750 [ 1561.072220][T26909] ? rcu_is_watching+0x15/0xb0 [ 1561.076970][T26909] ? __pfx_vpanic+0x10/0x10 [ 1561.081455][T26909] ? preempt_schedule_irq+0xde/0x150 [ 1561.086776][T26909] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1561.092520][T26909] ? preempt_schedule+0xae/0xc0 [ 1561.097362][T26909] ? __pfx_preempt_schedule+0x10/0x10 [ 1561.102721][T26909] panic+0xb9/0xc0 [ 1561.106429][T26909] ? __pfx_panic+0x10/0x10 [ 1561.110839][T26909] ? __pfx_panic+0x10/0x10 [ 1561.115257][T26909] ? v4l2_fh_open+0xc7/0x430 [ 1561.119838][T26909] check_panic_on_warn+0x89/0xb0 [ 1561.124772][T26909] ? v4l2_fh_open+0xc7/0x430 [ 1561.129351][T26909] end_report+0x78/0x160 [ 1561.133592][T26909] kasan_report+0x129/0x150 [ 1561.138086][T26909] ? v4l2_fh_open+0xc7/0x430 [ 1561.142667][T26909] v4l2_fh_open+0xc7/0x430 [ 1561.147072][T26909] em28xx_v4l2_open+0x157/0x9a0 [ 1561.151914][T26909] v4l2_open+0x20c/0x360 [ 1561.156139][T26909] chrdev_open+0x4cc/0x5e0 [ 1561.160547][T26909] ? __pfx_chrdev_open+0x10/0x10 [ 1561.165493][T26909] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1561.171811][T26909] ? __pfx_chrdev_open+0x10/0x10 [ 1561.176741][T26909] do_dentry_open+0x953/0x13f0 [ 1561.181494][T26909] vfs_open+0x3b/0x340 [ 1561.185549][T26909] ? path_openat+0x2ecd/0x3830 [ 1561.190323][T26909] path_openat+0x2ee5/0x3830 [ 1561.194903][T26909] ? arch_stack_walk+0xfc/0x150 [ 1561.199746][T26909] ? stack_depot_save_flags+0x40/0x860 [ 1561.205196][T26909] ? __pfx_path_openat+0x10/0x10 [ 1561.210119][T26909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.216179][T26909] do_filp_open+0x1fa/0x410 [ 1561.220681][T26909] ? __lock_acquire+0xab9/0xd20 [ 1561.225544][T26909] ? __pfx_do_filp_open+0x10/0x10 [ 1561.230573][T26909] ? _raw_spin_unlock+0x28/0x50 [ 1561.235431][T26909] ? alloc_fd+0x64c/0x6c0 [ 1561.239753][T26909] do_sys_openat2+0x121/0x1c0 [ 1561.244418][T26909] ? __pfx_do_sys_openat2+0x10/0x10 [ 1561.249604][T26909] ? exc_page_fault+0x76/0xf0 [ 1561.254373][T26909] ? do_user_addr_fault+0xc8a/0x1390 [ 1561.259664][T26909] __x64_sys_openat+0x138/0x170 [ 1561.264570][T26909] do_syscall_64+0xfa/0x3b0 [ 1561.269069][T26909] ? lockdep_hardirqs_on+0x9c/0x150 [ 1561.274257][T26909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.280308][T26909] ? clear_bhb_loop+0x60/0xb0 [ 1561.284975][T26909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.290859][T26909] RIP: 0033:0x7fccff2a7407 [ 1561.295362][T26909] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1561.314966][T26909] RSP: 002b:00007ffec687e450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1561.323381][T26909] RAX: ffffffffffffffda RBX: 00007fccffa0d880 RCX: 00007fccff2a7407 [ 1561.331359][T26909] RDX: 0000000000000000 RSI: 00007ffec687ef1b RDI: ffffffffffffff9c [ 1561.339319][T26909] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1561.347280][T26909] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1561.355242][T26909] R13: 00007ffec687e6a0 R14: 00007fccffb74000 R15: 0000559e761b24d8 [ 1561.363222][T26909] [ 1561.366558][T26909] Kernel Offset: disabled [ 1561.370873][T26909] Rebooting in 86400 seconds..