last executing test programs: 10m39.45584228s ago: executing program 1 (id=5397): r0 = socket(0x840000000002, 0x3, 0xff) close_range(r0, r0, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54060080", @ANYRES16=r4, @ANYRESOCT=r3], 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0xb, 0xc}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x1, 0x2, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000a80)="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", &(0x7f00000007c0)="382ca2d2cae46787d94aeae6629698f08907d1e87f04b0f2c7d1e131cd0fa67ef273e23b7eef049264ce847188d83a9a5d325dbc5075b5c139733fd86636e40d77d15d473d963613e7e7c4a01e492ca955c4719a6735d0f68259655f3b17115a8f8db8141628dedb4dc8"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) r7 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) r8 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x201, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r9, &(0x7f00000005c0)=""/108, 0x6c, 0x1122, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r9, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/4096, 0x1000}, 0x10000) ioctl$SNDCTL_DSP_GETODELAY(r8, 0x80045017, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000900)=[r0], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x18, &(0x7f0000000840), 0x1) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="00fbf1046c2f3db2fdb8ad1bcdb128da3e422fa6d667a0335add31282246fce38a5eaaa268bea819009b3e737c6f9110a2662e621e514782aca872f2b262c363cd8ea214dae32628807c23a6cef35099259a761d6a6ce5edef6dcba1d82e21e246fca5410ae228552a0b0430549c9f0f86026324302e72ce5809e39929c042f9399d884b610d886421b31982f2ab86954499e1859ece8b700e96fdce2fbe3acc102f0dc4da999e30fbead3b0928861df62aa4719b7684d369df96c21f94fb6b73e66a22447b8388dead0f445b07d44d7d7d4c957c3ed33682fe624e6926ee4e76b6f0cd85687491471aac51630d500dd9d"], 0xf1, 0x0) 10m38.382049632s ago: executing program 1 (id=5399): socket$unix(0x1, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xe, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000540)={{}, {0xc5}, 0x22, 0x0, 0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='./cgroup\x00', &(0x7f00000003c0)="7e13750ab80320fc64480ef4917c86105d7f9f9da1c3898da30fe14c8bb33afd12d6d99a8a56c86656566c9e462487db8a2b2f0b0575988b00413191868db89272050b2c3e6b3326f6f04f54983ec54c71b54717a1d867acfdbd9ab920d5f90f20fc9b7b3882005c122998e32dd96ba21cfc135b9530313b4d03a6b59f3bda5b8916145548dc8b3d53a88311ac9fe894adddb5f761abe1a88a73c49387cfd5b9f0c5fa243cd590cb6d0dde9107857f55e00a865736db0cc603ba550f6abc", 0xbe, 0x0, &(0x7f0000000e00)={0x2, 0xec9, {0x1, 0xc, 0x4, "e96ee50e", 0xeb8, "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"}, 0xbe, "abfc4626c085430932fc353a5931af368c3dfea3dba20caf6487ec6d0157204d646c04ae6643d7674e573ddfd78749868c18240501908dc3870b1328816bd92042c35735cca5d94706445c425a635afbca6e0035da4dbf1e309b645df18670f8c42a25e2e8f335eed0e999785dec22b9e6ab98232d85a81eac34dda7ddcf6dbada3f3b38a6f0004432e64a8cb4615cb5e311dd9f4f61aeeb4546a4d4e0ba0bf157d4d06c737d8c95718b99a368677b5f5764ff55423a6839d91e082fd940"}, 0xf93}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000480)={[0x26000, 0x1, 0xffffffff], 0xffffffffffffffff, 0x2, 0x6}) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000380)=@arm64) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0x3b) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000340)={&(0x7f00000005c0)="f14d60fffdc69e1716669af2d70823325f0213672f81fffdc0697c0f382cd286cd5e2d44f8d596ba47df2943580b0cc5721f09ce144a5c80b77f6356dd85f4f0954b97024a5af4c7665359a36ae8306f3b022360e605bcfa339f1991f681", 0x5e, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000640)={r9}) sendfile(r7, r7, 0x0, 0x200000) 10m31.934659077s ago: executing program 1 (id=5416): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000002900", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}], 0x28}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x81, @loopback, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="24000000000000002900000032000000200100"/32, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x1c0}}], 0x2, 0x24000004) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) 10m30.694014234s ago: executing program 1 (id=5421): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x64940, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x808a0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000100)=0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c989, 0x0, 0xffffffdf, 0x175}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 10m21.953739532s ago: executing program 1 (id=5476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 10m21.050759021s ago: executing program 1 (id=5480): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 10m5.891083778s ago: executing program 32 (id=5480): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 15.04112898s ago: executing program 4 (id=7663): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_dev$video4linux(&(0x7f0000001000), 0x40a, 0x5b4800) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8000, 0x3, 0x4, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x644, 0x1, 0x8, 0x1}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4000000000, 0x4, 0x6143, 0x7, 0x396, 0x1}}]}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x147}], 0x1}}], 0x1, 0x20048814) 12.052746126s ago: executing program 4 (id=7663): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_dev$video4linux(&(0x7f0000001000), 0x40a, 0x5b4800) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8000, 0x3, 0x4, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x644, 0x1, 0x8, 0x1}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4000000000, 0x4, 0x6143, 0x7, 0x396, 0x1}}]}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x147}], 0x1}}], 0x1, 0x20048814) 9.808116797s ago: executing program 5 (id=7794): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_dev$video4linux(&(0x7f0000001000), 0x40a, 0x5b4800) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8000, 0x3, 0x4, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x644, 0x1, 0x8, 0x1}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4000000000, 0x4, 0x6143, 0x7, 0x396, 0x1}}]}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x147}], 0x1}}], 0x1, 0x20048814) 8.682604945s ago: executing program 5 (id=7805): socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000002, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 6.572039569s ago: executing program 0 (id=7806): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) unshare(0x26020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x2000) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d0, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0x200, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc}}) (async) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r3, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/76, 0x4c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) (async) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x8001, 0xd04, 0x4, 0x4, 0x2]}, &(0x7f0000000080)=0x54) (async) r4 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, &(0x7f0000000140)={0x14, &(0x7f0000000200)={0x40, 0x30, 0xce, {0xce, 0x0, "0905f69da1743acd7418d3ba1ddde1351c5a0ef39d7c5100c9264041ea7dffc59254a4a4ae6bd18fc686ca62fb75c99326c7d2066e4a101d8843526dbbbff36d6fa6833dd3fd2d2886547f78758e56ceb81601efd29a0c4dab12fccc2027bcf70db5892a46ec2f006bfc106091bead21af2070da7ec30d8efffe2989f3104b74e57dfad21c58f01e6ae40e802fc4c8bb9bcd11abe0f908a165cc6a9535e591e73e0fd289cf49855251ce4cdbc1bff2b16feffd528794ae8f9a644ace857b3d1611a3d95fbe5471d4ff5a9dc7"}}, &(0x7f00000003c0)={0x0, 0x3, 0x98, @string={0x98, 0x3, "7941e7dfa9578b454ab81fbb9bd0cf18b63b80c88c75d663f9240ea7403ba0dc924dd5118f01c966e2d1eb6500f1cfefdb59aed46714ea43d81f43414fcb1af3c276a4e260fd991fb2191bdd3b83e51c2c866bc38a8dd950ce2471b73e81222c657d877dddb3055f4405091e561271cec7d7fdffe1b3f1194c62a15fc658f01b23045f560fecfc3821a73d8721624168d53c72be2062"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000180)={0x20, 0x15, 0x1c, "eb1f63438b17937eb33527a4776e0bbb57193388eef09b231ff8ae24"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x7adb}, &(0x7f0000000500)={0x40, 0xa0, 0x4}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "2eec5b2118d4846bbcea24b82a1b8a4415130091a9bb2fd25b4388d2cfac60a044356d3fc7984bab8913446b5d75bd"}}) (async) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x5, '\x00', {0x8, 0x6, "db8603", 0x0, 0x3a, 0x0, @mcast2, @rand_addr=' \x01\x00', [@srh={0x62, 0x0, 0x4, 0x0, 0xc1, 0x28, 0xfff}]}}}}}}}, 0x0) 6.570943886s ago: executing program 5 (id=7807): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000240)) dup3(r1, r4, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000040)=0x1000, 0x4) 6.510802736s ago: executing program 2 (id=7808): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1, 0x0, 0x0, 0x32}, 0x0) 6.507399604s ago: executing program 3 (id=7809): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="b0", 0x1, 0x400c0d5, &(0x7f0000000080)={0xa, 0x4e23, 0x300, @loopback, 0xa2d7}, 0x1c) 6.46720721s ago: executing program 3 (id=7810): socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.411578207s ago: executing program 0 (id=7811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000240)="388f1de5feaab4918e4a78e44e6186a4eb9648181bba0692373e0702917f820160be0a117e1c87e158f33a2ba5531bf98232c468bf64072050d7913f784909d2093894f41fc487450ab96fe20950655cca7b3f868d265a8cb9bf9e5eb6dc45e84ef0102b16ab6fb198a5361b653c91dc782438074433542410468b1670dfc753ceb8a4c161579116ca5b91a4d996d3e6545cb01311e753d53536c0dd328aec6cacc97bf21a6a54881d307a2d82bd4f6f26d42026f7f35e8bf782") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) fchdir(r6) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) clock_adjtime(0x3, &(0x7f0000004dc0)={0xb, 0x400000000045, 0xffffffff80000000, 0x6, 0x80000000, 0x7cca, 0x6, 0x5, 0x2, 0x4, 0xd, 0x7, 0xf, 0x8c, 0xd01, 0x0, 0x4, 0x40000080000, 0xfffffffffffffff9, 0x8000, 0x2, 0x7, 0x1, 0x9014, 0x11, 0x8000008}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r9 = dup(r8) read(r9, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r9, &(0x7f0000008180)={0x2020}, 0xfffffdfc) 6.399653901s ago: executing program 2 (id=7812): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') lseek(r5, 0xffffff60, 0x1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0xe}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r6, 0x0, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x1c, 0x25, 0x301, 0x70bd26, 0x25dfdbf9, {0x15}, [@nested={0x8, 0x131, 0x0, 0x1, [@typed={0x4, 0x12b, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x24008002) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0xee00}, 0xc) write$sequencer(r7, &(0x7f0000000040)=[@generic={0xa}, @t={0x4, 0x0, 0x6, 0x81, @generic=0x5}, @s={0x5, @generic=0x1, 0x1f}], 0xd) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x2, "a995"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r8, 0x0, &(0x7f0000002a80)={0x1c, &(0x7f0000002540)={0x60, 0x0, 0xf, "6dfdfeeb6e47d8033db17f0b1d99cb"}, 0x0, 0x0}) 6.091395639s ago: executing program 4 (id=7663): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_dev$video4linux(&(0x7f0000001000), 0x40a, 0x5b4800) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8000, 0x3, 0x4, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x644, 0x1, 0x8, 0x1}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4000000000, 0x4, 0x6143, 0x7, 0x396, 0x1}}]}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x147}], 0x1}}], 0x1, 0x20048814) 3.657429864s ago: executing program 0 (id=7814): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x68, 0x116, 0x5, "2436a1b5c5b24765552b49ccc57d3457ef918a0664aa1247bd76d11497230db97adb78a91e872289f2b983f957346cb7d8a8160f6165966cda822ae84a1f54f16bdce5b3013767a0a584cd5df9849e3259"}, {0x98, 0x109, 0x2, "f413582941e06f6e34e65913e2ef6eb92c289fe9f801a3e63029eab3f2813d1a61556181b03a65057469ece6004e1b1e756345e955cb8dad236f2bd0d216bc6531b9f07fee6bd15f28ac664f317278d6bbf3a638a8f467d2079719ef86a96f72c4d9d99b0a92a4fbf288492e268e4e051778b0df3f0a5de02cd8b82114f30ffa85"}, {0xa0, 0x131, 0x9, "72dc60dc774e1d0a5685c0c6582193eadb5ebec5c263eb93fb4e2e054b016d04698fe22a30946da07a8988e1f3fe2ff891393b9311c276f475e96007335cb83e377ddde70d69e25436d9fc70c0cfa0388a4aa4e9690962996645a8194b8aca79ad9932bab0c7c04ecd952f0da2e806879b7e160c2a96fd0406b1c25e964106ee18c023ae1daee17a3a"}], 0x1a0}, 0x10) write$apparmor_current(0xffffffffffffffff, &(0x7f0000002340)=ANY=[@ANYBLOB="d8d0c43b8897407c02c4a6cabe21e36c7ac9ba1d9283b244fe50929abe3251e0ba68733c28810c55620d563e721c0a28171cb6582af22758aae8d567b107ba23f9fb3f0f74d204b45b8ad96e4d608e6fca0d8ccaab28a81a8c98f69c2bec4e6469bc36766e7893fa449b60caa0586dcb75c4286f2eb3b570317ec46ca4664ce388a98b00542072a39930711194606bde5d5abbfceb74", @ANYRES64, @ANYBLOB="0b961f136878661f2795354e5faf93126b7863e3ec2f43cbce4dd65fb3de51", @ANYRESHEX=r1, @ANYRES64, @ANYRES64=0x0, @ANYRES8], 0xff) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRESHEX=r0], 0x11c}, 0x1, 0x0, 0x0, 0x880}, 0x2000810) 3.656963105s ago: executing program 5 (id=7815): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff2, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbe, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="2c626c6b73697a65931f0cf1777753e174833342d866b53d3078303030"]) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b2abd7008fddbd725030000000000000008000100fd"], 0x20}}, 0x30048004) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000040), 0x12) setpriority(0x2, 0x0, 0x18000000000) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) 3.656605028s ago: executing program 2 (id=7816): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="604f6a5044e550e8ac6c140000001000dc0000000000000000000000000a14000000060a0b0400000010000000000200"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = fanotify_init(0x4, 0x1) fanotify_mark(r3, 0x1, 0x40001043, r0, 0x0) writev(r1, &(0x7f0000003280)=[{&(0x7f0000000440)="c924", 0x2}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 3.4745373s ago: executing program 0 (id=7817): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) set_mempolicy(0x4002, &(0x7f0000000000)=0x401, 0xfffffffffffffffd) r0 = userfaultfd(0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x44}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) set_mempolicy(0x1, &(0x7f0000000140)=0x400, 0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x2, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x80000000, 0x994, 0x1, 0x3}, 0x2, 0x0, 0x66a4, 0x86, 0x6, 0x10, 0x1f, 0x1e, 0x6, 0x8, {0x7, 0x6, 0x0, 0x6, 0x9, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0xb8, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x26, 0xf0, 0xff14, 0x1, 0x2, 0x103369a4, 0x137, 0x9}}, {0x16, 0x2, [0x3, 0xb945, 0xff, 0x2, 0x1, 0x4, 0x1, 0x9d1c, 0xc223]}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff, 0x2, 0xfffffff9, 0x3f, 0xfffffff6}, 0x0, 0x1, 0x5, 0xff, 0x400, 0x6, 0x1b, 0xd, 0x4, 0x8, {0x2, 0x9, 0x9, 0x6, 0x8, 0xfffffc00}}}}, @qdisc_kind_options=@q_mq={0x7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r7 = io_uring_setup(0x1919, &(0x7f00000001c0)={0x0, 0xcdf6, 0x400, 0xffffffff, 0x185, 0x0, r3}) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x12106, 0x0) close_range(r7, r7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.327386179s ago: executing program 2 (id=7818): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x11, 0xffffffffffffffff, 0x1c5ea000) (async) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$can_j1939(r1, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r3, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xf0, 0x0, 0xffffffff, 0x400a0, 0x1, 0x9369, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x7}, 0x50) 3.042240158s ago: executing program 4 (id=7663): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_dev$video4linux(&(0x7f0000001000), 0x40a, 0x5b4800) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8000, 0x3, 0x4, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x644, 0x1, 0x8, 0x1}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4000000000, 0x4, 0x6143, 0x7, 0x396, 0x1}}]}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x147}], 0x1}}], 0x1, 0x20048814) 508.510993ms ago: executing program 0 (id=7819): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newlink={0x74, 0x10, 0x701, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x53, 0x0, 0x0, 0x60181}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000804) 490.937708ms ago: executing program 5 (id=7820): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e27, @remote}}, 0x24) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x151}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 485.794078ms ago: executing program 2 (id=7821): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x6000000, 0x1, 0x0, {0x100000, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x3, 0x100, 0x67a4, 0xd613, 0x0, 0x0, 0xfffffffc, 0x2000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4}) 483.742547ms ago: executing program 3 (id=7822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0xfffffff5, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 366.011359ms ago: executing program 0 (id=7823): r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x5, 0x42, 0xffffff80, 0x3, 0x10, 0x3, 0x1, 0x6, 0xe3}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000480)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f0000000080)) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x0, 0x0, 0xa, 0x0, 0x64}}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="f0005002000000ffd42203154000010203010902240001010110d7ba9700400203010203092102008d01223301090581030002094031"], &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x4, 0x1, 0x1, 0x20, 0xfe}, 0x1b, &(0x7f0000000300)=ANY=[@ANYBLOB="0598ea04020b1001048a004a08690e960b10013908365754ee2face3800c10000602090006"]}) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1, 0x1, 0x4) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="4023a04b6cc8bf40778be9bfdbd29218b301a3bcd83b97180393d40a915cad00b9bfc68596a7bc601cfc81d191607b318e2ecc966c51f32a5077bb51a7980f586629a39c64771690144f52ee781497d9aa2aa283c9b48c2e26c630046fc8fb5791433442c607295e249ba9725ed1b37f91d6acbbb119e41b63c315cef2b6c7090d2887ff62cfde5b1768c29dc9b9b8d05a83d15fdd8d132eaf7671f6975a9738e968fc5845012ea4046df1e4d94471426d6bf15227ee70144c4b71f668f165aab6"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002680)="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", 0xff57, 0x2) 354.453778ms ago: executing program 2 (id=7824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000240)="388f1de5feaab4918e4a78e44e6186a4eb9648181bba0692373e0702917f820160be0a117e1c87e158f33a2ba5531bf98232c468bf64072050d7913f784909d2093894f41fc487450ab96fe20950655cca7b3f868d265a8cb9bf9e5eb6dc45e84ef0102b16ab6fb198a5361b653c91dc782438074433542410468b1670dfc753ceb8a4c161579116ca5b91a4d996d3e6545cb01311e753d53536c0dd328aec6cacc97bf21a6a54881d307a2d82bd4f6f26d42026f7f35e8bf782") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) fchdir(r6) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) clock_adjtime(0x3, &(0x7f0000004dc0)={0xb, 0x400000000045, 0xffffffff80000000, 0x6, 0x80000000, 0x7cca, 0x6, 0x5, 0x2, 0x4, 0xd, 0x7, 0xf, 0x8c, 0xd01, 0x0, 0x4, 0x40000080000, 0xfffffffffffffff9, 0x8000, 0x2, 0x7, 0x1, 0x9014, 0x11, 0x8000008}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r9 = dup(r8) read(r9, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r9, &(0x7f0000008180)={0x2020}, 0xfffffdfc) 354.127681ms ago: executing program 3 (id=7825): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000240)) dup3(r1, r4, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000040)=0x1000, 0x4) 0s ago: executing program 4 (id=7663): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_dev$video4linux(&(0x7f0000001000), 0x40a, 0x5b4800) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8000, 0x3, 0x4, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x644, 0x1, 0x8, 0x1}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4000000000, 0x4, 0x6143, 0x7, 0x396, 0x1}}]}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x147}], 0x1}}], 0x1, 0x20048814) kernel console output (not intermixed with test programs): d descriptor of length 0, skipping remainder of the config [ 2142.219401][T25752] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2142.232080][T25752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.240273][T25752] usb 1-1: Product: syz [ 2142.247463][T25752] usb 1-1: Manufacturer: syz [ 2142.266024][T25752] usb 1-1: SerialNumber: syz [ 2142.277673][T25752] usb 1-1: config 0 descriptor?? [ 2142.302956][T25752] usb 1-1: bad CDC descriptors [ 2142.328060][T32410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7179'. [ 2142.331407][T25752] usb 1-1: unsupported MDLM descriptors [ 2142.393318][T32410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7179'. [ 2142.534847][T25752] usb 1-1: USB disconnect, device number 118 [ 2142.546363][T31213] usb 3-1: USB disconnect, device number 116 [ 2142.582591][T31213] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2142.614364][T31213] ftdi_sio 3-1:0.0: device disconnected [ 2142.751713][T32439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2143.028337][T32446] xt_hashlimit: size too large, truncated to 1048576 [ 2143.118528][T32448] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7193'. [ 2143.172665][T32450] veth0: entered promiscuous mode [ 2143.213696][T32449] veth0: left promiscuous mode [ 2143.316065][T32456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7196'. [ 2144.097172][T32467] batadv_slave_1: entered promiscuous mode [ 2144.780574][T32462] batadv_slave_1: left promiscuous mode [ 2145.552307][T32495] lo: Caught tx_queue_len zero misconfig [ 2145.894022][T32498] FAULT_INJECTION: forcing a failure. [ 2145.894022][T32498] name failslab, interval 1, probability 0, space 0, times 0 [ 2145.930172][T32498] CPU: 0 UID: 0 PID: 32498 Comm: syz.2.7212 Tainted: G L syzkaller #0 PREEMPT(full) [ 2145.930206][T32498] Tainted: [L]=SOFTLOCKUP [ 2145.930214][T32498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2145.930227][T32498] Call Trace: [ 2145.930235][T32498] [ 2145.930245][T32498] dump_stack_lvl+0xe8/0x150 [ 2145.930280][T32498] should_fail_ex+0x412/0x560 [ 2145.930319][T32498] should_failslab+0xa8/0x100 [ 2145.930344][T32498] __kmalloc_cache_noprof+0x88/0x660 [ 2145.930373][T32498] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 2145.930396][T32498] ? sctp_add_bind_addr+0x8c/0x370 [ 2145.930427][T32498] sctp_add_bind_addr+0x8c/0x370 [ 2145.930453][T32498] sctp_copy_local_addr_list+0x314/0x4f0 [ 2145.930491][T32498] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2145.930525][T32498] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2145.930560][T32498] ? sctp_v6_is_any+0x64/0x80 [ 2145.930583][T32498] ? sctp_copy_one_addr+0x93/0x360 [ 2145.930608][T32498] sctp_bind_addr_copy+0xb3/0x3c0 [ 2145.930631][T32498] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2145.930665][T32498] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2145.930696][T32498] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2145.930729][T32498] ? __local_bh_enable_ip+0xd0/0x130 [ 2145.930754][T32498] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2145.930773][T32498] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2145.930815][T32498] sctp_sendmsg+0x1528/0x2c10 [ 2145.930856][T32498] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2145.930879][T32498] ? aa_sk_perm+0x15a/0x960 [ 2145.930904][T32498] ? aa_sk_perm+0x82d/0x960 [ 2145.930925][T32498] ? __might_fault+0xaf/0x130 [ 2145.930958][T32498] ? __pfx_aa_sk_perm+0x10/0x10 [ 2145.930985][T32498] ? sock_rps_record_flow+0x19/0x400 [ 2145.931015][T32498] ? inet_sendmsg+0x2f4/0x370 [ 2145.931046][T32498] __sys_sendto+0x627/0x7a0 [ 2145.931072][T32498] ? __pfx___sys_sendto+0x10/0x10 [ 2145.931092][T32498] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2145.931132][T32498] ? __fget_files+0x3a0/0x420 [ 2145.931173][T32498] ? ksys_write+0x242/0x270 [ 2145.931205][T32498] ? __pfx_ksys_write+0x10/0x10 [ 2145.931239][T32498] __x64_sys_sendto+0xde/0x100 [ 2145.931266][T32498] do_syscall_64+0x14d/0xf80 [ 2145.931298][T32498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2145.931325][T32498] ? trace_irq_disable+0x37/0x100 [ 2145.931351][T32498] ? clear_bhb_loop+0x40/0x90 [ 2145.931378][T32498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2145.931400][T32498] RIP: 0033:0x7f98de39bf79 [ 2145.931422][T32498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2145.931440][T32498] RSP: 002b:00007f98df2cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2145.931462][T32498] RAX: ffffffffffffffda RBX: 00007f98de615fa0 RCX: 00007f98de39bf79 [ 2145.931477][T32498] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 2145.931489][T32498] RBP: 00007f98df2cd090 R08: 0000200000000080 R09: 000000000000003f [ 2145.931503][T32498] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001 [ 2145.931514][T32498] R13: 00007f98de616038 R14: 00007f98de615fa0 R15: 00007f98de73fa48 [ 2145.931548][T32498] [ 2146.493709][T32506] bond3: (slave netdevsim0): Enslaving as a backup interface with a down link [ 2146.667443][T32513] FAULT_INJECTION: forcing a failure. [ 2146.667443][T32513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2146.681208][T32513] CPU: 0 UID: 0 PID: 32513 Comm: syz.2.7217 Tainted: G L syzkaller #0 PREEMPT(full) [ 2146.681248][T32513] Tainted: [L]=SOFTLOCKUP [ 2146.681256][T32513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2146.681270][T32513] Call Trace: [ 2146.681278][T32513] [ 2146.681287][T32513] dump_stack_lvl+0xe8/0x150 [ 2146.681322][T32513] should_fail_ex+0x412/0x560 [ 2146.681352][T32513] _copy_to_user+0x31/0xb0 [ 2146.681384][T32513] simple_read_from_buffer+0xe1/0x170 [ 2146.681413][T32513] proc_fail_nth_read+0x1bb/0x230 [ 2146.681448][T32513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2146.681491][T32513] ? rw_verify_area+0x2a6/0x4d0 [ 2146.681519][T32513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2146.681553][T32513] vfs_read+0x20c/0xa70 [ 2146.681578][T32513] ? fdget_pos+0x246/0x320 [ 2146.681607][T32513] ? __pfx___mutex_lock+0x10/0x10 [ 2146.681635][T32513] ? __pfx_vfs_read+0x10/0x10 [ 2146.681665][T32513] ? __fget_files+0x2a/0x420 [ 2146.681694][T32513] ? __fget_files+0x3a0/0x420 [ 2146.681717][T32513] ? __fget_files+0x2a/0x420 [ 2146.681754][T32513] ksys_read+0x150/0x270 [ 2146.681782][T32513] ? __pfx_ksys_read+0x10/0x10 [ 2146.681821][T32513] do_syscall_64+0x14d/0xf80 [ 2146.681846][T32513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2146.681866][T32513] ? trace_irq_disable+0x37/0x100 [ 2146.681891][T32513] ? clear_bhb_loop+0x40/0x90 [ 2146.681916][T32513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2146.681935][T32513] RIP: 0033:0x7f98de35c84e [ 2146.681956][T32513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2146.681973][T32513] RSP: 002b:00007f98df2ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2146.681993][T32513] RAX: ffffffffffffffda RBX: 00007f98df2cd6c0 RCX: 00007f98de35c84e [ 2146.682007][T32513] RDX: 000000000000000f RSI: 00007f98df2cd0a0 RDI: 0000000000000006 [ 2146.682019][T32513] RBP: 00007f98df2cd090 R08: 0000000000000000 R09: 0000000000000000 [ 2146.682031][T32513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2146.682041][T32513] R13: 00007f98de616038 R14: 00007f98de615fa0 R15: 00007f98de73fa48 [ 2146.682074][T32513] [ 2146.935227][T32517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7216'. [ 2147.162789][T25752] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2147.208898][T32524] veth0: entered promiscuous mode [ 2147.256259][T32522] veth0: left promiscuous mode [ 2147.321895][T25752] usb 4-1: Using ep0 maxpacket: 32 [ 2147.334850][T25752] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2147.347609][T25752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.370002][T25752] usb 4-1: Product: syz [ 2147.395968][T25752] usb 4-1: Manufacturer: syz [ 2147.411912][T32527] netlink: 'syz.2.7222': attribute type 29 has an invalid length. [ 2147.428532][T25752] usb 4-1: SerialNumber: syz [ 2147.440572][T32527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7222'. [ 2147.452058][T25752] usb 4-1: config 0 descriptor?? [ 2147.722304][T25752] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 029 [ 2147.927915][T32495] m920x_read = error: -19 [ 2148.259985][T32547] netlink: 'syz.4.7228': attribute type 10 has an invalid length. [ 2148.301595][T32547] netlink: 'syz.4.7228': attribute type 10 has an invalid length. [ 2148.721917][ T5908] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2148.889294][ T5908] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2148.905610][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2148.940725][ T5908] usb 6-1: Product: syz [ 2148.947485][ T5908] usb 6-1: Manufacturer: syz [ 2148.956857][ T5908] usb 6-1: SerialNumber: syz [ 2148.965136][ T5908] usb 6-1: config 0 descriptor?? [ 2148.979687][ T5908] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2148.993105][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2149.015919][ T5908] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2149.035351][ T5908] usb 6-1: media controller created [ 2149.073039][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2149.195713][T32556] FAULT_INJECTION: forcing a failure. [ 2149.195713][T32556] name failslab, interval 1, probability 0, space 0, times 0 [ 2149.276973][T32556] CPU: 1 UID: 0 PID: 32556 Comm: syz.5.7232 Tainted: G L syzkaller #0 PREEMPT(full) [ 2149.277007][T32556] Tainted: [L]=SOFTLOCKUP [ 2149.277014][T32556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2149.277027][T32556] Call Trace: [ 2149.277036][T32556] [ 2149.277044][T32556] dump_stack_lvl+0xe8/0x150 [ 2149.277079][T32556] should_fail_ex+0x412/0x560 [ 2149.277107][T32556] should_failslab+0xa8/0x100 [ 2149.277129][T32556] __kmalloc_noprof+0xe8/0x760 [ 2149.277156][T32556] ? __kasan_kmalloc+0x93/0xb0 [ 2149.277183][T32556] ? usb_alloc_urb+0x46/0x150 [ 2149.277205][T32556] ? __kmalloc_cache_noprof+0x31c/0x660 [ 2149.277236][T32556] usb_alloc_urb+0x46/0x150 [ 2149.277263][T32556] usb_control_msg+0x118/0x3e0 [ 2149.277288][T32556] ? stack_depot_save_flags+0x33/0x810 [ 2149.277326][T32556] m920x_i2c_xfer+0x1fc/0x840 [ 2149.277365][T32556] __i2c_transfer+0x79a/0x1ee0 [ 2149.277395][T32556] ? __lock_acquire+0x6b5/0x2cf0 [ 2149.277424][T32556] __i2c_smbus_xfer+0xfca/0x1e40 [ 2149.277464][T32556] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 2149.277508][T32556] ? lockdep_hardirqs_on+0x7a/0x110 [ 2149.277534][T32556] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2149.277556][T32556] ? rt_mutex_lock_nested+0x15c/0x1e0 [ 2149.277590][T32556] i2c_smbus_xfer+0x1f4/0x310 [ 2149.277621][T32556] i2cdev_ioctl_smbus+0x434/0x730 [ 2149.277651][T32556] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 2149.277690][T32556] i2cdev_ioctl+0x615/0x880 [ 2149.277711][T32556] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2149.277734][T32556] ? __fget_files+0x2a/0x420 [ 2149.277756][T32556] ? __fget_files+0x3a0/0x420 [ 2149.277784][T32556] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2149.277805][T32556] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2149.277827][T32556] __se_sys_ioctl+0xfc/0x170 [ 2149.277860][T32556] do_syscall_64+0x14d/0xf80 [ 2149.277884][T32556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.277904][T32556] ? trace_irq_disable+0x37/0x100 [ 2149.277929][T32556] ? clear_bhb_loop+0x40/0x90 [ 2149.277955][T32556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.277976][T32556] RIP: 0033:0x7f535299bf79 [ 2149.277995][T32556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2149.278013][T32556] RSP: 002b:00007f5353775028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2149.278035][T32556] RAX: ffffffffffffffda RBX: 00007f5352c15fa0 RCX: 00007f535299bf79 [ 2149.278050][T32556] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000005 [ 2149.278064][T32556] RBP: 00007f5353775090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.278078][T32556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.278090][T32556] R13: 00007f5352c16038 R14: 00007f5352c15fa0 R15: 00007f5352d3fa48 [ 2149.278122][T32556] [ 2149.884189][ T5908] DVB: Unable to find symbol mt352_attach() [ 2149.978871][T25752] usb 4-1: USB disconnect, device number 29 [ 2150.012052][ T5908] DVB: Unable to find symbol nxt6000_attach() [ 2150.018194][ T5908] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2150.034439][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input231 [ 2150.075910][ T5908] dvb-usb: schedule remote query interval to 1000 msecs. [ 2150.087287][ T5908] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2150.129303][ T5908] dvb-usb: bulk message failed: -22 (7/0) [ 2150.148975][ T5908] dvb-usb: bulk message failed: -22 (7/0) [ 2150.168480][ T5908] usb 6-1: USB disconnect, device number 54 [ 2150.452613][ T5908] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2152.722257][T32615] netlink: 'syz.5.7248': attribute type 16 has an invalid length. [ 2152.972595][T25752] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2153.017201][T32620] batadv_slave_1: entered promiscuous mode [ 2153.074000][T32619] batadv_slave_1: left promiscuous mode [ 2153.172458][T25752] usb 3-1: Using ep0 maxpacket: 16 [ 2153.200329][T25752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.230499][T25752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.251414][T25752] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2153.287919][T25752] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2153.303519][T25752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.321924][ T5892] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2153.380896][T25752] usb 3-1: config 0 descriptor?? [ 2153.502554][ T5908] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2153.543257][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 2153.593921][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.609127][T32616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.680799][T32616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2153.717612][ T5908] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2153.733827][ T5892] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2153.769843][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2153.814516][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.861519][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2153.931585][ T5908] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.987596][ T5892] usb 4-1: config 0 descriptor?? [ 2154.006244][ T5908] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2154.068706][ T5908] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2154.104527][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2154.161871][ T5908] usb 5-1: Product: syz [ 2154.175507][ T5908] usb 5-1: Manufacturer: syz [ 2154.235213][ T5908] cdc_wdm 5-1:1.0: skipping garbage [ 2154.240612][ T5908] cdc_wdm 5-1:1.0: skipping garbage [ 2154.302246][ T5908] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2154.308254][ T5908] cdc_wdm 5-1:1.0: Unknown control protocol [ 2154.468020][ T5892] mcp2221 0003:04D8:00DD.0069: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 2154.849416][ T5892] usb 5-1: USB disconnect, device number 116 [ 2154.940149][T25745] usb 4-1: USB disconnect, device number 30 [ 2154.968970][T25752] usbhid 3-1:0.0: can't add hid device: -71 [ 2155.074917][T25752] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2155.188346][T25752] usb 3-1: USB disconnect, device number 117 [ 2156.466631][T32667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7263'. [ 2157.162467][T25745] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2157.326016][T25745] usb 3-1: device descriptor read/64, error -71 [ 2157.393150][T32685] netlink: 'syz.0.7269': attribute type 6 has an invalid length. [ 2157.564968][T32693] input: syz1 as /devices/virtual/input/input232 [ 2157.582231][T32693] input: failed to attach handler leds to device input232, error: -6 [ 2157.629631][T25745] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2157.662154][T13139] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 2157.792189][T25745] usb 3-1: device descriptor read/64, error -71 [ 2157.872233][T31213] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2157.902163][T25745] usb usb3-port1: attempt power cycle [ 2158.021988][T31213] usb 4-1: Using ep0 maxpacket: 16 [ 2158.029649][T31213] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2158.039779][T31213] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2158.065622][T31213] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2158.079128][T13139] usb 5-1: no configurations [ 2158.087104][T13139] usb 5-1: can't read configurations, error -22 [ 2158.095745][T31213] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2158.107550][T31213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.119010][T31213] usb 4-1: Product: syz [ 2158.126296][T31213] usb 4-1: Manufacturer: syz [ 2158.131039][T31213] usb 4-1: SerialNumber: syz [ 2158.266279][T25745] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2158.326078][T25745] usb 3-1: device descriptor read/8, error -71 [ 2158.420652][T32706] netdevsim netdevsim5: Direct firmware load for ./file1 failed with error -2 [ 2158.453366][T32706] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file1 [ 2158.551523][T31213] usb 4-1: 0:2 : does not exist [ 2158.583017][T25745] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2158.603157][T25745] usb 3-1: device descriptor read/8, error -71 [ 2158.735402][T25745] usb usb3-port1: unable to enumerate USB device [ 2159.392845][T31213] usb 4-1: USB disconnect, device number 31 [ 2159.422542][T25745] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2159.580395][T32719] veth0: entered promiscuous mode [ 2159.592900][T32717] geneve2: entered promiscuous mode [ 2159.601699][T32719] lo: Caught tx_queue_len zero misconfig [ 2159.610482][T25745] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 2159.623033][T32718] veth0: left promiscuous mode [ 2159.631383][T25745] usb 5-1: config 0 has no interface number 0 [ 2159.648365][T25745] usb 5-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=ad.7d [ 2159.677645][T25745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.704067][T25745] usb 5-1: config 0 descriptor?? [ 2159.725415][T25745] gspca_main: spca501-2.14.0 probing 0733:0401 [ 2159.984054][T32712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.031494][T32712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.047521][T32729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7285'. [ 2160.572370][T25745] gspca_spca501: reg write: error -110 [ 2160.596253][T25745] spca501 5-1:0.255: Reg write failed for 0x00,0x02,0x01 [ 2160.629032][T25745] spca501 5-1:0.255: probe with driver spca501 failed with error -22 [ 2160.909031][T32746] binder: 32742:32746 ioctl 400c620e 200000000100 returned -22 [ 2161.115459][T32753] fuse: Unknown parameter 'user_id00000000000000000000' [ 2161.621965][T31213] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2161.782138][T31213] usb 6-1: Using ep0 maxpacket: 32 [ 2161.796591][T31213] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 2161.825662][T31213] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 2161.845537][T31213] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2161.888368][T31213] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2161.917476][T31213] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2161.939259][T31213] usb 6-1: Product: syz [ 2161.951905][T31213] usb 6-1: Manufacturer: syz [ 2161.961293][T31213] usb 6-1: SerialNumber: syz [ 2161.996609][T31213] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input233 [ 2162.244986][ T5892] usb 6-1: USB disconnect, device number 55 [ 2162.281025][ T5892] appletouch 6-1:1.0: input: appletouch disconnected [ 2162.480618][T32767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.511642][T32767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.633344][ T301] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7296'. [ 2164.517842][ T322] netlink: 'syz.2.7302': attribute type 1 has an invalid length. [ 2164.560936][ T322] bond5: entered promiscuous mode [ 2164.569571][ T322] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2164.638741][ T324] bond5: (slave bridge3): making interface the new active one [ 2164.683227][ T324] bridge3: entered promiscuous mode [ 2164.720102][ T324] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 2165.479451][ T331] binder: 317:331 ioctl c0306201 200000000300 returned -11 [ 2165.596191][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.602786][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.707624][ T325] binder: BINDER_SET_CONTEXT_MGR already set [ 2165.732344][ T325] binder: 317:325 ioctl 4018620d 2000000000c0 returned -16 [ 2165.884465][ T337] fuse: Bad value for 'fd' [ 2166.027528][ T5908] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2166.234601][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 2166.293832][ T5908] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2166.325007][ T5908] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2166.354372][ T5908] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2166.376812][ T5908] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2166.485443][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2166.530809][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.557658][ T5908] usb 4-1: Product: syz [ 2166.577998][ T5908] usb 4-1: Manufacturer: syz [ 2166.584834][ T5908] usb 4-1: SerialNumber: syz [ 2166.907348][ T349] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2167.206984][ T355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7309'. [ 2167.561453][ T363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2167.582437][ T363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2167.627733][ T363] hub 9-0:1.0: USB hub found [ 2167.638964][ T363] hub 9-0:1.0: 1 port detected [ 2168.743897][ T5908] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 2168.761717][ T5908] cdc_ncm 4-1:1.0: bind() failure [ 2168.774556][ T5908] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2168.781557][ T5908] cdc_ncm 4-1:1.1: bind() failure [ 2168.793332][ T5908] usb 4-1: USB disconnect, device number 32 [ 2168.834742][ T372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2168.869263][ T372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2168.941943][ T5892] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2169.038235][ T378] fuse: Bad value for 'fd' [ 2169.178090][ T5892] usb 3-1: device descriptor read/64, error -71 [ 2169.432886][ T5892] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2169.592468][ T5892] usb 3-1: device descriptor read/64, error -71 [ 2169.702370][ T5892] usb usb3-port1: attempt power cycle [ 2170.052074][ T5892] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2170.096014][ T5892] usb 3-1: device descriptor read/8, error -71 [ 2170.351957][ T5892] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2170.403020][ T5892] usb 3-1: device descriptor read/8, error -71 [ 2170.523994][ T5892] usb usb3-port1: unable to enumerate USB device [ 2171.401973][T31213] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2171.593270][T31213] usb 6-1: Using ep0 maxpacket: 32 [ 2171.631879][T31213] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2171.653379][T31213] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 2171.677543][T31213] usb 6-1: config 7 has no interface number 0 [ 2171.714260][T31213] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2171.752552][T31213] usb 6-1: config 7 interface 187 has no altsetting 0 [ 2171.843902][T31213] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 2171.927606][T31213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.949172][T31213] usb 6-1: Product: syz [ 2171.975761][T31213] usb 6-1: Manufacturer: syz [ 2172.012293][T31213] usb 6-1: SerialNumber: syz [ 2172.578504][T31213] usb 6-1: Cannot retrieve CPort count: -110 [ 2172.618699][T31213] usb 6-1: Cannot retrieve CPort count: -110 [ 2172.638095][T31213] es2_ap_driver 6-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 2172.754496][ T409] could not allocate digest TFM handle md5 [ 2173.568770][ T428] fuse: Bad value for 'fd' [ 2174.755163][ T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.775790][ T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.963278][ T452] IPVS: You probably need to specify IP address on multicast interface. [ 2174.983444][ T452] IPVS: Error connecting to the multicast addr [ 2175.352019][T13139] usb 6-1: USB disconnect, device number 56 [ 2175.858737][ T461] fuse: Unknown parameter '0x0000000000000005' [ 2176.112696][ T467] FAULT_INJECTION: forcing a failure. [ 2176.112696][ T467] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.141842][ T467] CPU: 1 UID: 0 PID: 467 Comm: syz.4.7346 Tainted: G L syzkaller #0 PREEMPT(full) [ 2176.141875][ T467] Tainted: [L]=SOFTLOCKUP [ 2176.141882][ T467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2176.141894][ T467] Call Trace: [ 2176.141903][ T467] [ 2176.141913][ T467] dump_stack_lvl+0xe8/0x150 [ 2176.141959][ T467] should_fail_ex+0x412/0x560 [ 2176.141989][ T467] should_failslab+0xa8/0x100 [ 2176.142010][ T467] __kmalloc_cache_noprof+0x88/0x660 [ 2176.142045][ T467] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 2176.142067][ T467] ? sctp_add_bind_addr+0x8c/0x370 [ 2176.142090][ T467] sctp_add_bind_addr+0x8c/0x370 [ 2176.142116][ T467] sctp_copy_local_addr_list+0x314/0x4f0 [ 2176.142153][ T467] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2176.142183][ T467] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2176.142213][ T467] ? sctp_association_new+0x1894/0x25e0 [ 2176.142238][ T467] ? sctp_v6_is_any+0x64/0x80 [ 2176.142260][ T467] ? sctp_copy_one_addr+0x93/0x360 [ 2176.142282][ T467] sctp_bind_addr_copy+0xb3/0x3c0 [ 2176.142301][ T467] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2176.142332][ T467] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2176.142361][ T467] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2176.142394][ T467] ? __local_bh_enable_ip+0xd0/0x130 [ 2176.142416][ T467] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2176.142435][ T467] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2176.142469][ T467] sctp_sendmsg+0x1528/0x2c10 [ 2176.142507][ T467] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2176.142529][ T467] ? aa_sk_perm+0x15a/0x960 [ 2176.142562][ T467] ? aa_sk_perm+0x82d/0x960 [ 2176.142586][ T467] ? __might_fault+0xaf/0x130 [ 2176.142618][ T467] ? __pfx_aa_sk_perm+0x10/0x10 [ 2176.142642][ T467] ? sock_rps_record_flow+0x19/0x400 [ 2176.142674][ T467] ? inet_sendmsg+0x2f4/0x370 [ 2176.142706][ T467] __sys_sendto+0x627/0x7a0 [ 2176.142732][ T467] ? __pfx___sys_sendto+0x10/0x10 [ 2176.142753][ T467] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2176.142794][ T467] ? __fget_files+0x3a0/0x420 [ 2176.142830][ T467] ? ksys_write+0x242/0x270 [ 2176.142867][ T467] ? __pfx_ksys_write+0x10/0x10 [ 2176.142901][ T467] __x64_sys_sendto+0xde/0x100 [ 2176.142928][ T467] do_syscall_64+0x14d/0xf80 [ 2176.142953][ T467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2176.142974][ T467] ? trace_irq_disable+0x37/0x100 [ 2176.142999][ T467] ? clear_bhb_loop+0x40/0x90 [ 2176.143032][ T467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2176.143052][ T467] RIP: 0033:0x7fc5b999bf79 [ 2176.143072][ T467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2176.143090][ T467] RSP: 002b:00007fc5ba826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2176.143111][ T467] RAX: ffffffffffffffda RBX: 00007fc5b9c15fa0 RCX: 00007fc5b999bf79 [ 2176.143127][ T467] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 2176.143140][ T467] RBP: 00007fc5ba826090 R08: 0000200000000080 R09: 000000000000001c [ 2176.143154][ T467] R10: 000000000400c0d5 R11: 0000000000000246 R12: 0000000000000002 [ 2176.143167][ T467] R13: 00007fc5b9c16038 R14: 00007fc5b9c15fa0 R15: 00007fc5b9d3fa48 [ 2176.143200][ T467] [ 2177.512883][ T493] xt_hashlimit: size too large, truncated to 1048576 [ 2177.605110][ T498] fuse: Unknown parameter '0x0000000000000005' [ 2178.087999][ T510] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7359'. [ 2178.510726][ T517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2178.578797][ T517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2178.895749][ T522] tipc: Enabling of bearer rejected, failed to enable media [ 2181.413502][ T548] fuse: Unknown parameter '0x0000000000000005' [ 2182.691277][ T572] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7375'. [ 2183.933943][ T587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.946952][ T587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2184.381020][ T602] fuse: Unknown parameter '0x0000000000000005' [ 2184.711061][ T609] program syz.0.7385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2185.020576][ T618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7392'. [ 2185.110782][ T627] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 2185.117361][ T627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2185.159414][ T627] vhci_hcd vhci_hcd.0: Device attached [ 2185.246971][ T628] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 2185.258618][ T3523] vhci_hcd vhci_hcd.5: stop threads [ 2185.282370][ T3523] vhci_hcd vhci_hcd.5: release socket [ 2185.304591][ T3523] vhci_hcd vhci_hcd.5: disconnect device [ 2185.351947][T13139] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2185.372805][ T636] netlink: 'syz.0.7396': attribute type 1 has an invalid length. [ 2185.410445][ T636] bond2: entered promiscuous mode [ 2185.416916][ T636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2185.731299][ T645] fuse: Unknown parameter '0x0000000000000005' [ 2185.965059][ T648] sctp: [Deprecated]: syz.2.7399 (pid 648) Use of int in max_burst socket option. [ 2185.965059][ T648] Use struct sctp_assoc_value instead [ 2186.633773][ T665] netdevsim0: mtu less than device minimum [ 2186.729840][ T30] audit: type=1326 audit(1771031600.494:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.3.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2186.756827][ T30] audit: type=1326 audit(1771031600.524:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.3.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2186.780250][ T30] audit: type=1326 audit(1771031600.524:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.3.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2186.804228][ T30] audit: type=1326 audit(1771031600.524:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.3.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2186.829437][ T30] audit: type=1326 audit(1771031600.524:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.3.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2186.852628][ T30] audit: type=1326 audit(1771031600.524:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.3.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2186.875718][ T30] audit: type=1326 audit(1771031600.524:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.3.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2186.899435][ T30] audit: type=1326 audit(1771031600.524:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.3.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2186.922850][ T30] audit: type=1326 audit(1771031600.524:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.3.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2186.948346][ T30] audit: type=1326 audit(1771031600.524:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=666 comm="syz.3.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2187.232049][T25745] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2187.418513][ T681] fuse: Unknown parameter '0x0000000000000005' [ 2187.418969][T25745] usb 4-1: Using ep0 maxpacket: 16 [ 2187.462389][T25745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2187.492139][T25745] usb 4-1: config 255 has an invalid interface number: 190 but max is 1 [ 2187.502189][T25745] usb 4-1: config 255 has an invalid interface number: 137 but max is 1 [ 2187.510752][T25745] usb 4-1: config 255 has no interface number 0 [ 2187.592203][T25745] usb 4-1: config 255 has no interface number 1 [ 2187.599301][T25745] usb 4-1: config 255 interface 190 has no altsetting 0 [ 2187.618599][ T684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7411'. [ 2187.631295][T25745] usb 4-1: config 255 interface 137 has no altsetting 0 [ 2187.638995][ T684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7411'. [ 2187.653817][T25745] usb 4-1: string descriptor 0 read error: -22 [ 2187.660183][T25745] usb 4-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 2187.687476][T25745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.921960][T25745] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2188.131869][T25745] usb 3-1: Using ep0 maxpacket: 32 [ 2188.143553][T25745] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2188.162419][T25745] usb 3-1: config 0 has no interface number 0 [ 2188.183624][T25745] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2188.201198][T25745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2188.209777][T25745] usb 3-1: Product: syz [ 2188.214297][T25745] usb 3-1: Manufacturer: syz [ 2188.219082][T25745] usb 3-1: SerialNumber: syz [ 2188.226654][T25745] usb 3-1: config 0 descriptor?? [ 2188.235642][T25745] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2188.452975][T25745] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2188.480887][T25745] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2188.497013][ T5892] usb 4-1: USB disconnect, device number 33 [ 2188.645229][ T706] netlink: 'syz.4.7417': attribute type 1 has an invalid length. [ 2188.863581][ T686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.890114][ T686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.915391][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2188.920460][T31212] usb 3-1: USB disconnect, device number 126 [ 2188.970862][T31212] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2189.035286][T31212] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2189.072892][T31212] quatech2 3-1:0.51: device disconnected [ 2189.321682][ T709] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2189.375527][ T709] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 2189.858549][ T726] fuse: Unknown parameter 'fd0x0000000000000005' [ 2190.130857][ T731] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7424'. [ 2190.155786][ T713] bond4: (slave gretap1): making interface the new active one [ 2190.189288][ T713] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 2190.226584][ T715] macvlan2: entered promiscuous mode [ 2190.236045][ T715] macvlan2: entered allmulticast mode [ 2190.246227][ T715] bond4: entered promiscuous mode [ 2190.265329][ T715] gretap1: entered promiscuous mode [ 2190.281193][ T715] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2190.318656][ T715] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2190.346774][ T715] bond4: left promiscuous mode [ 2190.353148][ T715] gretap1: left promiscuous mode [ 2190.434538][ T743] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7427'. [ 2190.771372][ T750] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7429'. [ 2191.140229][ T763] fuse: Unknown parameter 'fd0x0000000000000005' [ 2191.143438][T31212] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2191.323688][T31212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2191.338390][T31212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2191.349316][T31212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2191.363861][T31212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2191.387872][T31212] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2191.399265][T31212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.409894][T31212] usb 6-1: Product: syz [ 2191.415861][T31212] usb 6-1: Manufacturer: syz [ 2191.422940][T31212] usb 6-1: SerialNumber: syz [ 2191.444214][T31212] usb 6-1: config 0 descriptor?? [ 2191.670718][T31212] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2191.877768][T31212] usb 6-1: USB disconnect, device number 57 [ 2191.990207][ T776] kvm: pic: non byte write [ 2192.692073][ T5892] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2192.875743][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 2192.888818][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2192.909155][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2192.931374][ T5892] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2192.952872][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.981257][ T5892] usb 4-1: config 0 descriptor?? [ 2192.999171][ T5892] hub 4-1:0.0: USB hub found [ 2193.198955][ T5892] hub 4-1:0.0: 1 port detected [ 2193.406050][ T790] netlink: 'syz.3.7444': attribute type 10 has an invalid length. [ 2193.430214][ T790] bond0: (slave wlan1): Opening slave failed [ 2193.530077][ T789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2193.560697][ T5892] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 2193.578210][ T5892] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 2193.618688][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 2193.646922][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2193.698953][ T5892] usb 4-1: USB disconnect, device number 34 [ 2194.175429][ T818] fuse: Bad value for 'fd' [ 2194.253445][ T816] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 2194.272199][ T816] bond4: option packets_per_slave: allowed values 0 - 65535 [ 2194.326766][ T816] bond4 (unregistering): Released all slaves [ 2194.901338][ T840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2194.923098][ T840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.436901][ T855] tipc: Enabling of bearer rejected, failed to enable media [ 2195.461885][T31213] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2195.621956][T31213] usb 4-1: Using ep0 maxpacket: 32 [ 2195.637127][T31213] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2195.655721][T31213] usb 4-1: config 0 has no interface number 0 [ 2195.670827][T31213] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2195.690840][T31213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.699800][T31213] usb 4-1: Product: syz [ 2195.706670][T31213] usb 4-1: Manufacturer: syz [ 2195.712594][T31213] usb 4-1: SerialNumber: syz [ 2195.720506][T31213] usb 4-1: config 0 descriptor?? [ 2195.740195][T31213] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2195.755410][ T865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7467'. [ 2196.027359][T31213] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2196.070298][T31213] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2196.345228][ T869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2196.544105][ T869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.304451][ T897] random: crng reseeded on system resumption [ 2197.337391][ T897] FAULT_INJECTION: forcing a failure. [ 2197.337391][ T897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2197.356375][ T897] CPU: 0 UID: 0 PID: 897 Comm: syz.5.7477 Tainted: G L syzkaller #0 PREEMPT(full) [ 2197.356408][ T897] Tainted: [L]=SOFTLOCKUP [ 2197.356417][ T897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2197.356431][ T897] Call Trace: [ 2197.356439][ T897] [ 2197.356449][ T897] dump_stack_lvl+0xe8/0x150 [ 2197.356484][ T897] should_fail_ex+0x412/0x560 [ 2197.356515][ T897] prepare_alloc_pages+0x22a/0x650 [ 2197.356553][ T897] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2197.356589][ T897] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2197.356625][ T897] ? __pfx_policy_nodemask+0x10/0x10 [ 2197.356653][ T897] ? rcu_is_watching+0x15/0xb0 [ 2197.356695][ T897] ? trace_contention_end+0x39/0x100 [ 2197.356725][ T897] ? __mutex_lock+0x319/0x1300 [ 2197.356757][ T897] alloc_pages_mpol+0x232/0x4a0 [ 2197.356783][ T897] alloc_pages_noprof+0xa8/0x190 [ 2197.356806][ T897] get_zeroed_page_noprof+0x1a/0x90 [ 2197.356826][ T897] get_image_page+0x36/0x330 [ 2197.356853][ T897] snapshot_write_next+0x6ea/0x14c0 [ 2197.356890][ T897] snapshot_write+0x11b/0x230 [ 2197.356920][ T897] ? __pfx_snapshot_write+0x10/0x10 [ 2197.356943][ T897] ? security_file_permission+0x75/0x260 [ 2197.356977][ T897] ? rw_verify_area+0x255/0x4d0 [ 2197.357004][ T897] ? __pfx_snapshot_write+0x10/0x10 [ 2197.357031][ T897] vfs_write+0x29a/0xb90 [ 2197.357069][ T897] ? __pfx_vfs_write+0x10/0x10 [ 2197.357099][ T897] ? __fget_files+0x2a/0x420 [ 2197.357127][ T897] ? __fget_files+0x2a/0x420 [ 2197.357150][ T897] ? __fget_files+0x3a0/0x420 [ 2197.357173][ T897] ? __fget_files+0x2a/0x420 [ 2197.357214][ T897] ksys_write+0x150/0x270 [ 2197.357247][ T897] ? __pfx_ksys_write+0x10/0x10 [ 2197.357288][ T897] do_syscall_64+0x14d/0xf80 [ 2197.357314][ T897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.357335][ T897] ? trace_irq_disable+0x37/0x100 [ 2197.357365][ T897] ? clear_bhb_loop+0x40/0x90 [ 2197.357391][ T897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.357412][ T897] RIP: 0033:0x7f535299bf79 [ 2197.357433][ T897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2197.357451][ T897] RSP: 002b:00007f5353775028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2197.357474][ T897] RAX: ffffffffffffffda RBX: 00007f5352c15fa0 RCX: 00007f535299bf79 [ 2197.357489][ T897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2197.357502][ T897] RBP: 00007f5353775090 R08: 0000000000000000 R09: 0000000000000000 [ 2197.357515][ T897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2197.357527][ T897] R13: 00007f5352c16038 R14: 00007f5352c15fa0 R15: 00007f5352d3fa48 [ 2197.357560][ T897] [ 2197.698934][ T902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.714411][ T902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2198.138169][ T917] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 2198.167239][ T917] netdevsim netdevsim5: Falling back to sysfs fallback for: ..€ [ 2198.314239][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2198.320161][T25745] usb 4-1: USB disconnect, device number 35 [ 2198.349180][T25745] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2198.386290][T25745] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2198.410953][T25745] quatech2 4-1:0.51: device disconnected [ 2198.602012][ T927] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2198.946271][ T935] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7484'. [ 2198.990244][ T935] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7484'. [ 2199.411151][ T956] FAULT_INJECTION: forcing a failure. [ 2199.411151][ T956] name failslab, interval 1, probability 0, space 0, times 0 [ 2199.466369][ T956] CPU: 1 UID: 0 PID: 956 Comm: syz.5.7488 Tainted: G L syzkaller #0 PREEMPT(full) [ 2199.466405][ T956] Tainted: [L]=SOFTLOCKUP [ 2199.466414][ T956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2199.466427][ T956] Call Trace: [ 2199.466442][ T956] [ 2199.466452][ T956] dump_stack_lvl+0xe8/0x150 [ 2199.466486][ T956] should_fail_ex+0x412/0x560 [ 2199.466515][ T956] should_failslab+0xa8/0x100 [ 2199.466538][ T956] __kmalloc_cache_noprof+0x88/0x660 [ 2199.466567][ T956] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2199.466601][ T956] ? sctp_add_bind_addr+0x8c/0x370 [ 2199.466628][ T956] sctp_add_bind_addr+0x8c/0x370 [ 2199.466654][ T956] sctp_copy_local_addr_list+0x314/0x4f0 [ 2199.466690][ T956] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2199.466723][ T956] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2199.466754][ T956] ? sctp_association_new+0x1894/0x25e0 [ 2199.466782][ T956] ? sctp_v6_is_any+0x64/0x80 [ 2199.466806][ T956] ? sctp_copy_one_addr+0x93/0x360 [ 2199.466837][ T956] sctp_bind_addr_copy+0xb3/0x3c0 [ 2199.466860][ T956] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2199.466894][ T956] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2199.466924][ T956] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2199.466958][ T956] ? __local_bh_enable_ip+0xd0/0x130 [ 2199.466980][ T956] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2199.467000][ T956] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2199.467036][ T956] sctp_sendmsg+0x1528/0x2c10 [ 2199.467076][ T956] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2199.467100][ T956] ? aa_sk_perm+0x15a/0x960 [ 2199.467124][ T956] ? aa_sk_perm+0x82d/0x960 [ 2199.467145][ T956] ? __might_fault+0xaf/0x130 [ 2199.467179][ T956] ? __pfx_aa_sk_perm+0x10/0x10 [ 2199.467205][ T956] ? sock_rps_record_flow+0x19/0x400 [ 2199.467235][ T956] ? inet_sendmsg+0x2f4/0x370 [ 2199.467266][ T956] __sys_sendto+0x627/0x7a0 [ 2199.467292][ T956] ? __pfx___sys_sendto+0x10/0x10 [ 2199.467312][ T956] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2199.467351][ T956] ? __fget_files+0x3a0/0x420 [ 2199.467387][ T956] ? ksys_write+0x242/0x270 [ 2199.467418][ T956] ? __pfx_ksys_write+0x10/0x10 [ 2199.467453][ T956] __x64_sys_sendto+0xde/0x100 [ 2199.467479][ T956] do_syscall_64+0x14d/0xf80 [ 2199.467505][ T956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.467526][ T956] ? trace_irq_disable+0x37/0x100 [ 2199.467551][ T956] ? clear_bhb_loop+0x40/0x90 [ 2199.467577][ T956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.467599][ T956] RIP: 0033:0x7f535299bf79 [ 2199.467618][ T956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2199.467636][ T956] RSP: 002b:00007f5353775028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2199.467659][ T956] RAX: ffffffffffffffda RBX: 00007f5352c15fa0 RCX: 00007f535299bf79 [ 2199.467674][ T956] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 2199.467687][ T956] RBP: 00007f5353775090 R08: 0000200000000080 R09: 000000000000001c [ 2199.467701][ T956] R10: 000000000400c0d5 R11: 0000000000000246 R12: 0000000000000002 [ 2199.467714][ T956] R13: 00007f5352c16038 R14: 00007f5352c15fa0 R15: 00007f5352d3fa48 [ 2199.467748][ T956] [ 2200.526357][ T968] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7492'. [ 2200.947869][ T980] xt_hashlimit: size too large, truncated to 1048576 [ 2201.088044][ T976] batadv_slave_1: entered promiscuous mode [ 2201.595101][ T969] batadv_slave_1: left promiscuous mode [ 2201.901255][ T993] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7499'. [ 2201.960359][ T993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7499'. [ 2202.751335][ T998] program syz.5.7501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2202.855319][ T1006] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7504'. [ 2202.868259][ T1007] netlink: 'syz.5.7506': attribute type 5 has an invalid length. [ 2202.877577][ T1007] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7506'. [ 2203.052460][ T5892] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2203.237887][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 2203.320637][ T5892] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2203.364347][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.394716][ T5892] usb 4-1: Product: syz [ 2203.415509][ T5892] usb 4-1: Manufacturer: syz [ 2203.470891][ T5892] usb 4-1: SerialNumber: syz [ 2203.555656][ T5892] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2203.582088][ T5892] r8152-cfgselector 4-1: config 0 descriptor?? [ 2204.030085][ T5892] r8152-cfgselector 4-1: USB disconnect, device number 36 [ 2204.223261][T31213] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2204.324815][ T1037] binder: BINDER_SET_CONTEXT_MGR already set [ 2204.492770][T31213] usb 3-1: Using ep0 maxpacket: 32 [ 2204.549633][T31213] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2204.611801][T31213] usb 3-1: config 0 has no interface number 0 [ 2204.702239][T31213] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2204.723568][T31213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.759749][ T1037] binder: 1019:1037 ioctl 4018620d 200000000040 returned -16 [ 2204.763061][T31213] usb 3-1: Product: syz [ 2204.862180][T31213] usb 3-1: Manufacturer: syz [ 2204.866836][T31213] usb 3-1: SerialNumber: syz [ 2204.901580][T31213] usb 3-1: config 0 descriptor?? [ 2204.929136][T31213] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2205.112317][ T1049] FAULT_INJECTION: forcing a failure. [ 2205.112317][ T1049] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.148079][ T1049] CPU: 1 UID: 0 PID: 1049 Comm: syz.3.7513 Tainted: G L syzkaller #0 PREEMPT(full) [ 2205.148118][ T1049] Tainted: [L]=SOFTLOCKUP [ 2205.148127][ T1049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2205.148243][ T1049] Call Trace: [ 2205.148253][ T1049] [ 2205.148262][ T1049] dump_stack_lvl+0xe8/0x150 [ 2205.148288][ T1049] should_fail_ex+0x412/0x560 [ 2205.148352][ T1049] should_failslab+0xa8/0x100 [ 2205.148369][ T1049] __kmalloc_cache_noprof+0x88/0x660 [ 2205.148393][ T1049] ? inet6_dump_fib+0x325/0xca0 [ 2205.148414][ T1049] inet6_dump_fib+0x325/0xca0 [ 2205.148435][ T1049] ? inet6_dump_fib+0x130/0xca0 [ 2205.148453][ T1049] ? __pfx_inet6_dump_fib+0x10/0x10 [ 2205.148469][ T1049] ? inet_dump_fib+0x133/0x900 [ 2205.148499][ T1049] ? __pfx_inet6_dump_fib+0x10/0x10 [ 2205.148521][ T1049] rtnl_dump_all+0x325/0x550 [ 2205.148545][ T1049] ? __pfx_rtnl_dump_all+0x10/0x10 [ 2205.148564][ T1049] rtnl_dumpit+0xa2/0x200 [ 2205.148585][ T1049] netlink_dump+0x722/0xe80 [ 2205.148617][ T1049] ? __pfx_netlink_dump+0x10/0x10 [ 2205.148637][ T1049] ? __netlink_lookup+0x7e4/0x8b0 [ 2205.148663][ T1049] ? netlink_lookup+0x30/0x200 [ 2205.148686][ T1049] ? netlink_lookup+0x30/0x200 [ 2205.148706][ T1049] ? netlink_lookup+0x30/0x200 [ 2205.148732][ T1049] __netlink_dump_start+0x5cb/0x7e0 [ 2205.148760][ T1049] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 2205.148776][ T1049] ? __pfx_rtnl_dump_all+0x10/0x10 [ 2205.148791][ T1049] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2205.148805][ T1049] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2205.148819][ T1049] ? __pfx_rtnl_dumpit+0x10/0x10 [ 2205.148833][ T1049] ? __pfx_rtnl_dump_all+0x10/0x10 [ 2205.148856][ T1049] netlink_rcv_skb+0x232/0x4b0 [ 2205.148880][ T1049] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2205.148896][ T1049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2205.148926][ T1049] ? netlink_deliver_tap+0x2e/0x1b0 [ 2205.148954][ T1049] netlink_unicast+0x80f/0x9b0 [ 2205.148981][ T1049] ? __pfx_netlink_unicast+0x10/0x10 [ 2205.149003][ T1049] ? netlink_sendmsg+0x650/0xb40 [ 2205.149016][ T1049] ? skb_put+0x11b/0x210 [ 2205.149035][ T1049] netlink_sendmsg+0x813/0xb40 [ 2205.149056][ T1049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2205.149073][ T1049] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2205.149091][ T1049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2205.149116][ T1049] sock_write_iter+0x503/0x550 [ 2205.149138][ T1049] ? __pfx_sock_write_iter+0x10/0x10 [ 2205.149167][ T1049] ? bpf_lsm_file_permission+0x9/0x20 [ 2205.149181][ T1049] ? security_file_permission+0x75/0x260 [ 2205.149211][ T1049] vfs_write+0x61d/0xb90 [ 2205.149238][ T1049] ? __pfx_vfs_write+0x10/0x10 [ 2205.149266][ T1049] ? __fget_files+0x2a/0x420 [ 2205.149289][ T1049] ksys_write+0x150/0x270 [ 2205.149319][ T1049] ? __pfx_ksys_write+0x10/0x10 [ 2205.149347][ T1049] do_syscall_64+0x14d/0xf80 [ 2205.149366][ T1049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2205.149380][ T1049] ? trace_irq_disable+0x37/0x100 [ 2205.149398][ T1049] ? clear_bhb_loop+0x40/0x90 [ 2205.149416][ T1049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2205.149431][ T1049] RIP: 0033:0x7f84aa19bf79 [ 2205.149446][ T1049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2205.149458][ T1049] RSP: 002b:00007f84ab010028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2205.149475][ T1049] RAX: ffffffffffffffda RBX: 00007f84aa415fa0 RCX: 00007f84aa19bf79 [ 2205.149486][ T1049] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 2205.149495][ T1049] RBP: 00007f84ab010090 R08: 0000000000000000 R09: 0000000000000000 [ 2205.149504][ T1049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2205.149513][ T1049] R13: 00007f84aa416038 R14: 00007f84aa415fa0 R15: 00007f84aa53fa48 [ 2205.149537][ T1049] [ 2206.597216][ T1058] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 2206.826690][ T1072] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7518'. [ 2206.978465][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2206.978486][ T30] audit: type=1326 audit(1771031620.744:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1077 comm="syz.5.7520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f535299bf79 code=0x0 [ 2207.055991][T31213] usb 3-1: qt2_attach - failed to power on unit: -71 [ 2207.068442][T31213] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 2207.096183][T31213] usb 3-1: USB disconnect, device number 127 [ 2207.107994][ T1080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7521'. [ 2207.491890][T31213] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2207.642013][T31213] usb 3-1: Using ep0 maxpacket: 32 [ 2207.672798][T31213] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2207.702194][T31213] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2207.725868][T31213] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2207.742076][T31213] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2207.750490][T31213] usb 3-1: Product: syz [ 2207.771845][T31213] usb 3-1: Manufacturer: syz [ 2207.796182][T31213] hub 3-1:4.0: USB hub found [ 2207.893634][ T1096] netlink: 'syz.3.7525': attribute type 1 has an invalid length. [ 2208.002168][T31213] hub 3-1:4.0: 2 ports detected [ 2208.019047][ T1096] bond2: entered promiscuous mode [ 2208.050733][ T1096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2208.317778][ T1114] binder: transaction release 853 bad handle 1, ret = -22 [ 2209.207967][T31213] hub 3-1:4.0: activate --> -90 [ 2209.414776][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 2209.432198][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 2209.448389][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 2209.457211][T31213] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 2209.464750][T31212] usb 3-1: USB disconnect, device number 2 [ 2209.766902][ T1122] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7531'. [ 2210.202282][ T5892] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2210.361876][T31212] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2210.412173][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2210.441411][ T5892] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2210.472598][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.513475][ T5892] usb 4-1: config 0 descriptor?? [ 2210.524200][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 2210.939778][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2210.948418][ T5892] pwc: recv_control_msg error -32 req 02 val 2700 [ 2210.963071][ T5892] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2210.992255][ T5892] pwc: recv_control_msg error -32 req 04 val 1000 [ 2211.006764][ T5892] pwc: recv_control_msg error -32 req 04 val 1300 [ 2211.027040][ T5892] pwc: recv_control_msg error -32 req 04 val 1400 [ 2211.046416][ T5892] pwc: recv_control_msg error -32 req 02 val 2000 [ 2211.072111][ T5892] pwc: recv_control_msg error -32 req 02 val 2100 [ 2211.088815][ T5892] pwc: recv_control_msg error -32 req 04 val 1500 [ 2211.123210][ T5892] pwc: recv_control_msg error -32 req 02 val 2500 [ 2211.158167][ T5892] pwc: recv_control_msg error -32 req 02 val 2400 [ 2211.175881][ T5892] pwc: recv_control_msg error -32 req 02 val 2600 [ 2211.191218][ T5892] pwc: recv_control_msg error -32 req 02 val 2900 [ 2211.223852][ T5892] pwc: recv_control_msg error -32 req 02 val 2800 [ 2211.337631][ T5892] pwc: recv_control_msg error -32 req 04 val 1100 [ 2211.484066][ T5892] pwc: Registered as video103. [ 2211.642052][ T1144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2211.652207][T31212] usb 6-1: Using ep0 maxpacket: 32 [ 2211.776535][ T1144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2211.870926][T31212] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2211.931072][T31212] usb 6-1: config 0 has no interface number 0 [ 2212.031906][T31212] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2212.073944][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input234 [ 2212.091973][T31212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.182275][ T5892] usb 4-1: USB disconnect, device number 37 [ 2212.222055][T31212] usb 6-1: Product: syz [ 2212.247188][T31212] usb 6-1: Manufacturer: syz [ 2212.281914][T31212] usb 6-1: SerialNumber: syz [ 2212.491192][T31212] usb 6-1: config 0 descriptor?? [ 2212.623395][ T1146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7537'. [ 2212.682345][T31212] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2213.323976][T31212] usb 6-1: qt2_attach - failed to power on unit: -71 [ 2213.334615][T31212] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 2213.358873][T31212] usb 6-1: USB disconnect, device number 59 [ 2213.600709][ T1164] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7543'. [ 2213.855528][ T1176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.889911][T31212] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 2213.901100][ T1176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.921878][ T5908] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2213.942607][ T1176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7549'. [ 2213.967723][ T1178] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7548'. [ 2214.092087][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 2214.099780][T31212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2214.112543][T31212] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2214.122423][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2214.137672][ T5908] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2214.147102][T31212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.159138][ T5908] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2214.171206][T31212] usb 4-1: config 0 descriptor?? [ 2214.185804][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.194817][ T1168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2214.211051][ T5908] usb 3-1: Product: syz [ 2214.216121][ T5908] usb 3-1: Manufacturer: syz [ 2214.220893][ T5908] usb 3-1: SerialNumber: syz [ 2214.234550][ T5908] usb 3-1: config 0 descriptor?? [ 2214.407841][ T1166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2214.431254][T31212] elan 0003:04F3:0755.006A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 2214.447095][ T1166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2214.628139][ T5892] usb 4-1: USB disconnect, device number 38 [ 2214.836491][T24869] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 2214.875581][T24869] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2215.173309][ T1194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2215.572907][ T1201] trusted_key: encrypted_key: keylen parameter is missing [ 2215.816713][ T1209] trusted_key: encrypted_key: insufficient parameters specified [ 2215.870276][ T1209] binder: 1207:1209 ioctl 5429 2000000002c0 returned -22 [ 2216.049825][ T1214] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7557'. [ 2216.963980][ T1227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7559'. [ 2216.993551][ T1194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2217.023357][ T1201] input: syz1 as /devices/virtual/input/input236 [ 2217.061277][ T5908] usb 3-1: USB disconnect, device number 3 [ 2217.412147][ T1233] xt_hashlimit: size too large, truncated to 1048576 [ 2217.761973][T31212] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2217.921911][T31212] usb 6-1: Using ep0 maxpacket: 32 [ 2217.933288][T31212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2217.947781][T31212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2217.969181][T31212] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2217.988597][T31212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2218.042474][T31212] usb 6-1: config 0 descriptor?? [ 2218.067539][T31212] hub 6-1:0.0: USB hub found [ 2218.271598][T31212] hub 6-1:0.0: 1 port detected [ 2218.425406][ T1243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7563'. [ 2218.476304][ T1229] netlink: 'syz.5.7560': attribute type 10 has an invalid length. [ 2218.590768][ T1228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2218.641517][T31212] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 2218.658207][T31212] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 2218.717423][T31212] usbhid 6-1:0.0: can't add hid device: -71 [ 2218.741924][T31212] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2218.821381][T31212] usb 6-1: USB disconnect, device number 60 [ 2219.438065][ T1259] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7568'. [ 2219.457137][ T1261] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2220.022649][ T1280] vlan0: entered promiscuous mode [ 2220.571873][T31212] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2220.741938][T31212] usb 6-1: Using ep0 maxpacket: 32 [ 2220.754289][T31212] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2220.782064][T31212] usb 6-1: config 0 has no interface number 0 [ 2220.805431][T31212] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2220.816888][T31212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.826667][T31212] usb 6-1: Product: syz [ 2220.830860][T31212] usb 6-1: Manufacturer: syz [ 2220.836114][T31212] usb 6-1: SerialNumber: syz [ 2220.843147][T31212] usb 6-1: config 0 descriptor?? [ 2220.854631][T31212] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2221.331686][ T1296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2221.395214][ T1296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2221.606225][ T1291] hsr0: entered promiscuous mode [ 2221.625631][ T1291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7577'. [ 2221.659163][ T1291] hsr_slave_0: left promiscuous mode [ 2221.679441][ T1291] hsr_slave_1: left promiscuous mode [ 2221.749614][ T1291] hsr0 (unregistering): left promiscuous mode [ 2222.102984][ T5892] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2222.383920][ T5892] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 2222.445826][ T5892] usb 4-1: config 0 has no interface number 0 [ 2222.496808][ T1310] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7582'. [ 2222.528826][ T5892] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=2c.18 [ 2222.599364][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.658092][ T5892] usb 4-1: Product: syz [ 2222.699411][ T5892] usb 4-1: Manufacturer: syz [ 2222.742530][ T5892] usb 4-1: SerialNumber: syz [ 2222.844602][ T5892] usb 4-1: config 0 descriptor?? [ 2222.969474][ T5892] usb 4-1: Expected 3 endpoints, found: 0 [ 2223.375074][ T1307] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7581'. [ 2223.726296][T31212] usb 6-1: qt2_attach - failed to power on unit: -71 [ 2223.743920][T31212] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 2223.799882][T31212] usb 6-1: USB disconnect, device number 61 [ 2224.127365][ T1333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7590'. [ 2224.305788][ T1343] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7593'. [ 2224.316383][ T1343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7593'. [ 2224.477914][ T1345] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7594'. [ 2224.720650][T13139] usb 4-1: USB disconnect, device number 39 [ 2225.191439][ T1364] vlan4: entered promiscuous mode [ 2225.214219][ T1364] dummy0: entered promiscuous mode [ 2225.301955][T31212] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2225.505751][T31212] usb 3-1: Using ep0 maxpacket: 32 [ 2225.588548][T31212] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2225.855946][T31212] usb 3-1: config 0 has no interface number 0 [ 2225.915814][T31212] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2225.958308][T31212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.010692][T31212] usb 3-1: Product: syz [ 2226.025550][T31212] usb 3-1: Manufacturer: syz [ 2226.060549][T31212] usb 3-1: SerialNumber: syz [ 2226.162834][T31212] usb 3-1: config 0 descriptor?? [ 2226.193745][T31212] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2226.318417][ T1387] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7605'. [ 2227.036827][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.046232][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.162203][ T1398] fuse: Unknown parameter '' [ 2227.402282][ T1403] input input237: cannot allocate more than FF_MAX_EFFECTS effects [ 2227.992281][T13139] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 2228.170958][ T1414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2228.190972][T13139] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 2228.235998][T13139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2228.297703][T13139] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 2228.359036][T13139] usb 4-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 2228.378731][T31212] usb 3-1: qt2_attach - failed to power on unit: -71 [ 2228.399227][T31212] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 2228.422579][T13139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.460322][T13139] usb 4-1: config 0 descriptor?? [ 2228.472112][T31212] usb 3-1: USB disconnect, device number 4 [ 2228.510437][ T1405] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2228.792826][ T1421] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7617'. [ 2228.983358][T13139] wacom 0003:056A:4004.006C: hidraw0: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.3-1/input0 [ 2229.140737][T13139] usb 4-1: USB disconnect, device number 40 [ 2229.214491][ T1426] fido_id[1426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2229.383900][ T1423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7616'. [ 2231.052593][ T1442] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7623'. [ 2231.069001][ T1444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2231.142811][ T1444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2231.245318][ T30] audit: type=1326 audit(1771031645.014:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1449 comm="syz.5.7622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535299bf79 code=0x0 [ 2231.681936][T31212] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2232.120602][T31212] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2232.192317][T31212] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2232.210938][ T30] audit: type=1326 audit(1771031645.954:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1461 comm="syz.2.7627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2232.238131][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2232.257464][T31212] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2232.290594][T31212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2232.309010][ T30] audit: type=1326 audit(1771031645.964:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1461 comm="syz.2.7627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2232.323269][T31212] usb 6-1: SerialNumber: syz [ 2232.357259][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.430722][ T30] audit: type=1326 audit(1771031646.004:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1461 comm="syz.2.7627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2232.563865][ T30] audit: type=1326 audit(1771031646.004:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1461 comm="syz.2.7627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2232.653694][ T30] audit: type=1326 audit(1771031646.004:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1461 comm="syz.2.7627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2232.764378][ T1467] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7628'. [ 2232.777949][ T30] audit: type=1326 audit(1771031646.024:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1461 comm="syz.2.7627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2232.880898][ T30] audit: type=1326 audit(1771031646.024:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1461 comm="syz.2.7627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2232.979863][ T30] audit: type=1326 audit(1771031646.024:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1461 comm="syz.2.7627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2233.068089][ T30] audit: type=1326 audit(1771031646.024:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1461 comm="syz.2.7627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2233.760300][ T1474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7630'. [ 2234.320949][T31212] usb 6-1: 0:2 : does not exist [ 2234.496288][T31212] usb 6-1: USB disconnect, device number 62 [ 2234.578255][T24790] udevd[24790]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2234.841868][T31213] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2235.003141][ T1493] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 2235.011687][ T1493] bond4: option packets_per_slave: allowed values 0 - 65535 [ 2235.083164][T31213] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 2235.125395][T31213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.170398][T31213] usb 4-1: config 0 has no interfaces? [ 2235.216778][T31213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.253518][T31213] usb 4-1: config 0 has no interfaces? [ 2235.284760][T31213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.307025][T31213] usb 4-1: config 0 has no interfaces? [ 2235.331241][T31213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.351298][T31213] usb 4-1: config 0 has no interfaces? [ 2235.366369][T31213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.378273][T31213] usb 4-1: config 0 has no interfaces? [ 2235.395954][T31213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.407611][T31213] usb 4-1: config 0 has no interfaces? [ 2235.424287][T31213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.441656][T31213] usb 4-1: config 0 has no interfaces? [ 2235.465502][T31213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.486392][ T1493] bond4 (unregistering): Released all slaves [ 2235.509891][T31213] usb 4-1: config 0 has no interfaces? [ 2235.532536][T31213] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2235.567835][T31213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.649116][T31213] usb 4-1: config 0 descriptor?? [ 2235.741957][ T1501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.803598][ T1501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2236.712188][ T1506] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7639'. [ 2237.217366][ T1517] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7642'. [ 2237.259851][ T1517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7642'. [ 2237.314739][ T1521] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7643'. [ 2237.421834][T31213] usb 4-1: USB disconnect, device number 41 [ 2237.532125][T24869] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2237.741882][T24869] usb 6-1: Using ep0 maxpacket: 32 [ 2237.761138][T24869] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2237.770697][T24869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.810781][T24869] usb 6-1: config 0 descriptor?? [ 2237.834183][T24869] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2238.040394][ T1517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.061399][ T1517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.086932][ T1517] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2238.422016][T31213] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2238.534109][ T1541] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2238.583158][T31213] usb 4-1: Using ep0 maxpacket: 32 [ 2238.595036][ T1517] netlink: 'syz.5.7642': attribute type 1 has an invalid length. [ 2238.611515][T31213] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2238.662964][T31213] usb 4-1: config 0 has no interface number 0 [ 2238.719507][T31213] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2238.764778][T31213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.800099][T31213] usb 4-1: Product: syz [ 2238.826272][T31213] usb 4-1: Manufacturer: syz [ 2238.851316][T31213] usb 4-1: SerialNumber: syz [ 2238.929182][T31213] usb 4-1: config 0 descriptor?? [ 2238.953191][ T1547] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7652'. [ 2238.987853][T31213] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2239.014993][T24869] gspca_sunplus: reg_r err -71 [ 2239.019981][T24869] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2239.052518][T24869] usb 6-1: USB disconnect, device number 63 [ 2239.092105][T31212] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2239.275489][T31212] usb 3-1: config 0 has no interfaces? [ 2239.302892][T31212] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2239.315185][T31212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.324243][T31212] usb 3-1: Product: syz [ 2239.329626][T31212] usb 3-1: Manufacturer: syz [ 2239.335754][T31212] usb 3-1: SerialNumber: syz [ 2239.346278][T31212] usb 3-1: config 0 descriptor?? [ 2239.672487][T13139] usb 3-1: USB disconnect, device number 5 [ 2241.606833][ T1574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2241.679009][ T1574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2242.209935][T31213] usb 4-1: qt2_attach - failed to power on unit: -71 [ 2242.258044][T31213] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 2242.307739][T31213] usb 4-1: USB disconnect, device number 42 [ 2242.732453][ T1589] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7664'. [ 2242.815651][ T1594] FAULT_INJECTION: forcing a failure. [ 2242.815651][ T1594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2242.867245][ T1594] CPU: 0 UID: 0 PID: 1594 Comm: syz.5.7665 Tainted: G L syzkaller #0 PREEMPT(full) [ 2242.867281][ T1594] Tainted: [L]=SOFTLOCKUP [ 2242.867289][ T1594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2242.867303][ T1594] Call Trace: [ 2242.867311][ T1594] [ 2242.867321][ T1594] dump_stack_lvl+0xe8/0x150 [ 2242.867356][ T1594] should_fail_ex+0x412/0x560 [ 2242.867387][ T1594] _copy_from_user+0x2d/0xb0 [ 2242.867426][ T1594] kstrtouint_from_user+0xd6/0x180 [ 2242.867454][ T1594] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2242.867496][ T1594] proc_fail_nth_write+0x8e/0x210 [ 2242.867530][ T1594] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2242.867568][ T1594] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2242.867602][ T1594] vfs_write+0x29a/0xb90 [ 2242.867640][ T1594] ? __pfx_vfs_write+0x10/0x10 [ 2242.867671][ T1594] ? __fget_files+0x2a/0x420 [ 2242.867700][ T1594] ? __fget_files+0x3a0/0x420 [ 2242.867722][ T1594] ? __fget_files+0x2a/0x420 [ 2242.867756][ T1594] ksys_write+0x150/0x270 [ 2242.867787][ T1594] ? __pfx_ksys_write+0x10/0x10 [ 2242.867828][ T1594] do_syscall_64+0x14d/0xf80 [ 2242.867853][ T1594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2242.867873][ T1594] ? trace_irq_disable+0x37/0x100 [ 2242.867898][ T1594] ? clear_bhb_loop+0x40/0x90 [ 2242.867923][ T1594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2242.867944][ T1594] RIP: 0033:0x7f535295c84e [ 2242.867964][ T1594] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2242.867982][ T1594] RSP: 002b:00007f5350bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2242.868004][ T1594] RAX: ffffffffffffffda RBX: 00007f5350bf66c0 RCX: 00007f535295c84e [ 2242.868019][ T1594] RDX: 0000000000000001 RSI: 00007f5350bf60a0 RDI: 0000000000000007 [ 2242.868031][ T1594] RBP: 00007f5350bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2242.868058][ T1594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2242.868070][ T1594] R13: 00007f5352c16128 R14: 00007f5352c16090 R15: 00007f5352d3fa48 [ 2242.868104][ T1594] [ 2243.279368][ T1601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2243.293166][ T1601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2243.306880][ T1601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2243.315346][ T1601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2243.323333][ T1601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2243.477526][T32727] syz_tun (unregistering): left allmulticast mode [ 2243.539513][T32727] bond0: (slave syz_tun): Releasing backup interface [ 2243.711512][T31213] usb 5-1: USB disconnect, device number 119 [ 2243.781793][ T5908] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2243.997357][ T5908] usb 4-1: too many configurations: 170, using maximum allowed: 8 [ 2244.035476][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2244.054034][ T5908] usb 4-1: can't read configurations, error -61 [ 2244.214847][T13139] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2244.242099][ T5908] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2244.414659][T13139] usb 6-1: Using ep0 maxpacket: 32 [ 2244.463750][ T5908] usb 4-1: too many configurations: 170, using maximum allowed: 8 [ 2244.476317][T13139] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2244.487750][T13139] usb 6-1: config 0 has no interface number 0 [ 2244.513150][T13139] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2244.523064][T13139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.526194][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2244.531226][T13139] usb 6-1: Product: syz [ 2244.531251][T13139] usb 6-1: Manufacturer: syz [ 2244.531267][T13139] usb 6-1: SerialNumber: syz [ 2244.554530][T13139] usb 6-1: config 0 descriptor?? [ 2244.566535][ T5908] usb 4-1: can't read configurations, error -61 [ 2244.586492][ T5908] usb usb4-port1: attempt power cycle [ 2244.655764][T13139] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2244.952506][ T5908] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2244.983037][ T5908] usb 4-1: too many configurations: 170, using maximum allowed: 8 [ 2245.017602][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2245.028286][ T5908] usb 4-1: can't read configurations, error -61 [ 2245.171971][ T5908] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2245.194954][ T5908] usb 4-1: too many configurations: 170, using maximum allowed: 8 [ 2245.210785][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2245.230686][ T5908] usb 4-1: can't read configurations, error -61 [ 2245.239458][ T5908] usb usb4-port1: unable to enumerate USB device [ 2245.266930][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2245.279809][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2245.290860][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2245.302543][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2245.311052][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2246.199470][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2246.199510][ T30] audit: type=1326 audit(1771031659.964:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1638 comm="syz.2.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2246.247241][ T30] audit: type=1326 audit(1771031659.994:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1638 comm="syz.2.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2246.271066][ T30] audit: type=1326 audit(1771031659.994:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1638 comm="syz.2.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2246.342053][ T30] audit: type=1326 audit(1771031660.004:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1638 comm="syz.2.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2246.431923][ T30] audit: type=1326 audit(1771031660.004:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1638 comm="syz.2.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2246.526828][ T30] audit: type=1326 audit(1771031660.004:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1638 comm="syz.2.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2246.590933][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2246.604105][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2246.615601][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2246.624089][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2246.638660][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2246.681998][ T30] audit: type=1326 audit(1771031660.004:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1638 comm="syz.2.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2246.705307][ T30] audit: type=1326 audit(1771031660.004:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1638 comm="syz.2.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2246.729091][ T30] audit: type=1326 audit(1771031660.004:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1638 comm="syz.2.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2246.752032][ T30] audit: type=1326 audit(1771031660.004:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1638 comm="syz.2.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f98de39bf79 code=0x7ffc0000 [ 2247.284403][T13139] usb 6-1: qt2_attach - failed to power on unit: -71 [ 2247.300308][T13139] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 2247.362580][T13139] usb 6-1: USB disconnect, device number 64 [ 2247.711931][ T5892] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 2247.869630][ T5892] usb 3-1: not running at top speed; connect to a high speed hub [ 2247.890534][ T5892] usb 3-1: config 14 has an invalid interface number: 21 but max is 0 [ 2247.926710][ T5892] usb 3-1: config 14 has no interface number 0 [ 2247.949152][ T5892] usb 3-1: config 14 interface 21 has no altsetting 0 [ 2248.006655][ T5892] usb 3-1: string descriptor 0 read error: -22 [ 2248.017597][ T1667] tipc: Started in network mode [ 2248.022856][ T5892] usb 3-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 2248.038304][ T1667] tipc: Node identity 4675052a8d33, cluster identity 4711 [ 2248.058395][ T1667] tipc: Enabled bearer , priority 0 [ 2248.067523][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.102133][T23356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2248.123568][ T5892] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2248.138946][ T5892] usb 3-1: MIDIStreaming interface descriptor not found [ 2248.169758][T23356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2248.184903][T23356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2248.198556][T23356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2248.213980][T23356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2248.306158][ T1667] tipc: Resetting bearer [ 2248.488705][ T5908] usb 3-1: USB disconnect, device number 6 [ 2248.559092][ T1675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7688'. [ 2248.581388][ T1675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7688'. [ 2248.986927][ T1682] xt_hashlimit: size too large, truncated to 1048576 [ 2249.112120][ T5908] tipc: Node number set to 3410363690 [ 2249.241579][ T1685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7692'. [ 2250.127395][ T1691] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7695'. [ 2250.378362][T23356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2250.393246][T23356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2250.405716][T23356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2250.414158][T23356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2250.421955][ T5892] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2250.423269][T23356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2250.560968][ T1714] netlink: 'syz.5.7700': attribute type 7 has an invalid length. [ 2250.569316][ T1714] netlink: 'syz.5.7700': attribute type 8 has an invalid length. [ 2250.603746][ T5892] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 2250.617584][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2250.631301][ T5892] usb 4-1: config 0 has no interface number 0 [ 2250.638765][ T5892] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2250.650878][ T5892] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2250.664299][ T5892] usb 4-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 2250.678203][ T5892] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 2250.687642][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.717345][ T5892] usb 4-1: config 0 descriptor?? [ 2250.722749][ T5908] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2250.736470][ T5892] HFC-S_USB 4-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 2250.822175][T24869] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2250.933072][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.965500][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.987047][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.001607][ T5908] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2251.020868][T24869] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.044327][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.057672][ T5908] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2251.072891][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.084013][ T5908] usb 3-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 2251.097087][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.105313][ T5908] usb 3-1: config 220 has no interface number 2 [ 2251.114950][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.123663][ T5908] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2251.138853][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.149548][ T5908] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2251.157897][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.169640][ T5908] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2251.231863][T24869] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 2251.241260][ T5908] usb 3-1: config 220 interface 1 has no altsetting 0 [ 2251.251350][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.261182][T24869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.310200][T24869] usb 6-1: Product: syz [ 2251.313565][T31212] usb 4-1: USB disconnect, device number 47 [ 2251.328044][T24869] usb 6-1: Manufacturer: syz [ 2251.337673][ T5908] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2251.368292][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.376894][T24869] usb 6-1: SerialNumber: syz [ 2251.385039][ T5908] usb 3-1: Product: syz [ 2251.389473][ T5908] usb 3-1: Manufacturer: syz [ 2251.394789][ T5908] usb 3-1: SerialNumber: syz [ 2251.460173][T24869] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 2251.875631][T24869] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2251.889267][T24869] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 2251.901573][T24869] usb 6-1: media controller created [ 2251.932210][T24869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2252.071917][T24869] usb 6-1: USB disconnect, device number 65 [ 2252.396741][ T1729] xt_NFQUEUE: number of total queues is 0 [ 2252.454858][T23356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2252.468232][T23356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2252.479926][T23356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2252.488778][T23356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2252.499475][T23356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2252.552198][T31212] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2252.721841][T31212] usb 4-1: Using ep0 maxpacket: 8 [ 2252.735363][T31212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2252.748278][T31212] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 2252.760529][T31212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2252.772196][T31212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 2252.784188][T31212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2252.796041][T31212] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2252.816950][T31212] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 2252.832029][ T1741] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7707'. [ 2252.837259][T31212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.880268][T31212] usb 4-1: Product: syz [ 2252.894130][T31212] usb 4-1: Manufacturer: syz [ 2252.898825][T31212] usb 4-1: SerialNumber: syz [ 2252.922221][T31212] usb 4-1: config 0 descriptor?? [ 2252.935108][ T1721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2253.367063][ T1742] geneve2: entered allmulticast mode [ 2253.678543][ T5908] usb 3-1: selecting invalid altsetting 0 [ 2253.690240][ T5908] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2253.697692][ T5908] uvcvideo 3-1:220.0: No valid video chain found. [ 2253.719779][ T5908] usb 3-1: selecting invalid altsetting 0 [ 2253.726761][ T5908] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 2253.739629][ T5908] usb 3-1: USB disconnect, device number 7 [ 2254.319722][ T1758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7710'. [ 2254.341827][T31212] rc_core: IR keymap rc-snapstream-firefly not found [ 2254.348580][T31212] Registered IR keymap rc-empty [ 2254.366105][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 2254.366124][ T30] audit: type=1326 audit(1771031668.134:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.3.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2254.398392][T31212] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2254.426889][ T30] audit: type=1326 audit(1771031668.164:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.3.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2254.451288][T31212] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input241 [ 2254.476461][ T30] audit: type=1326 audit(1771031668.164:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.3.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2254.518337][ T30] audit: type=1326 audit(1771031668.164:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.3.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2254.553555][ T30] audit: type=1326 audit(1771031668.164:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.3.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2254.583225][T31212] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input242 [ 2254.601638][ T30] audit: type=1326 audit(1771031668.174:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.3.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2254.661070][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2254.668409][ T30] audit: type=1326 audit(1771031668.174:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.3.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2254.668469][ T30] audit: type=1326 audit(1771031668.174:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.3.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2254.668517][ T30] audit: type=1326 audit(1771031668.174:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.3.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2254.668560][ T30] audit: type=1326 audit(1771031668.174:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.3.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa19bf79 code=0x7ffc0000 [ 2254.771426][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2254.782233][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2254.798929][T31212] usb 4-1: USB disconnect, device number 48 [ 2254.798994][ C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 2254.817829][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2254.852141][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2254.891530][ T1770] binder: BINDER_SET_CONTEXT_MGR already set [ 2254.898010][ T1770] binder: 1764:1770 ioctl 4018620d 200000000140 returned -16 [ 2255.134026][ T1601] Bluetooth: hci6: unexpected event for opcode 0x0402 [ 2257.102808][ T1792] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 2257.328327][T23356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2257.340493][T23356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2257.354108][T23356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2257.363644][T23356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2257.372567][T23356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2257.512261][ T5892] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 2257.712288][ T5892] usb 4-1: config index 0 descriptor too short (expected 57636, got 36) [ 2257.720734][ T5892] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 2257.741804][ T5892] usb 4-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 2257.763365][ T5892] usb 4-1: config 0 has no interface number 0 [ 2257.771811][ T5892] usb 4-1: config 0 interface 11 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2257.785489][ T5892] usb 4-1: config 0 interface 11 has no altsetting 0 [ 2257.792342][ T5892] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2257.801542][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.813050][ T5892] usb 4-1: config 0 descriptor?? [ 2257.832187][ T5892] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 2257.840005][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 87 [ 2257.851316][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 7 [ 2257.864538][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 2257.873466][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 2257.881422][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 2257.890196][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 2257.898280][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 2257.906558][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 2257.932625][ T5892] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2257.955907][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 2257.965493][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 2257.983568][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 2258.007786][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 2258.019402][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 2258.029928][ T5892] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 2258.113911][ T5892] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2258.136378][ T5892] usb 4-1: USB disconnect, device number 49 [ 2258.161423][ T5892] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2258.199627][ T5892] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2258.213282][ T5892] keyspan 4-1:0.11: device disconnected [ 2258.947448][ T1814] fuse: Unknown parameter 'allow_‘ther' [ 2259.025473][ T1817] Cannot find del_set index 0 as target [ 2259.149510][T23356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2259.168725][T23356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2259.181359][T23356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2259.201948][T23356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2259.211613][T23356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2259.515186][ T1836] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7733'. [ 2260.762296][ T1845] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 2260.784433][ T1845] syz_tun: left allmulticast mode [ 2260.808781][ T1845] netlink: 'syz.5.7735': attribute type 10 has an invalid length. [ 2260.827259][ T1845] batman_adv: batadv0: Adding interface: netdevsim0 [ 2260.852049][ T1845] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2260.936179][ T1845] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2260.961161][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2260.972138][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2260.980798][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2260.989105][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2260.997127][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2261.352064][ T5892] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2261.431839][T24869] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2261.546544][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 2261.587182][ T5892] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2261.615060][T24869] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 2261.654622][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.666685][T24869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2261.691702][T24869] usb 3-1: config 0 has no interfaces? [ 2261.696907][ T5892] usb 6-1: config 0 descriptor?? [ 2261.720687][T24869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2261.783508][T24869] usb 3-1: config 0 has no interfaces? [ 2261.819879][T24869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2261.907163][T24869] usb 3-1: config 0 has no interfaces? [ 2261.953093][T24869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.013314][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2262.049542][T24869] usb 3-1: config 0 has no interfaces? [ 2262.083250][T24869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.109219][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2262.157925][T24869] usb 3-1: config 0 has no interfaces? [ 2262.222409][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2262.237785][T24869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.262433][ T5892] usb 6-1: media controller created [ 2262.271856][T24869] usb 3-1: config 0 has no interfaces? [ 2262.295271][T24869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.313127][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2262.328950][T24869] usb 3-1: config 0 has no interfaces? [ 2262.398211][T24869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.419378][T24869] usb 3-1: config 0 has no interfaces? [ 2262.427002][T24869] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2262.437125][T24869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.449183][T24869] usb 3-1: config 0 descriptor?? [ 2262.796138][ T1861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7741'. [ 2262.819924][ T1861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7741'. [ 2263.262067][ T5892] stb0899_attach: Driver disabled by Kconfig [ 2263.271030][ T5892] az6027: no front-end attached [ 2263.271030][ T5892] [ 2263.311965][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2263.331579][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input243 [ 2263.360538][ T5892] dvb-usb: schedule remote query interval to 400 msecs. [ 2263.381801][ T5892] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2263.538904][ T5892] usb 6-1: USB disconnect, device number 66 [ 2263.656291][ T5892] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2264.102201][T24869] usb 3-1: USB disconnect, device number 8 [ 2264.144204][ T5892] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2264.287691][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2264.303813][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2264.312325][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 2264.320713][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2264.332934][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2264.342033][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2264.344811][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2264.422161][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2264.429234][ T1885] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20004 [ 2264.474449][ T5892] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 2264.516438][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.553387][ T5892] usb 4-1: config 0 descriptor?? [ 2265.508427][ T1904] netdevsim netdevsim2: Direct firmware load for / [ 2265.508427][ T1904] failed with error -2 [ 2265.527755][ T1904] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 2265.527755][ T1904] [ 2266.650072][ T1903] Cannot find add_set index 0 as target [ 2266.841971][ T5892] usb 4-1: string descriptor 0 read error: -71 [ 2266.862160][ T5892] uclogic 0003:256C:006E.006D: failed retrieving string descriptor #200: -71 [ 2266.883491][ T5892] uclogic 0003:256C:006E.006D: failed retrieving pen parameters: -71 [ 2266.918485][ T5892] uclogic 0003:256C:006E.006D: failed probing pen v2 parameters: -71 [ 2266.930732][ T5892] uclogic 0003:256C:006E.006D: failed probing parameters: -71 [ 2266.940395][ T5892] uclogic 0003:256C:006E.006D: probe with driver uclogic failed with error -71 [ 2266.964970][ T5892] usb 4-1: USB disconnect, device number 50 [ 2267.401523][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2267.412447][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2267.425404][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2267.437830][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2267.449232][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2268.101908][ T5892] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2268.284384][ T5892] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2268.312276][ T5892] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2268.338871][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2268.356729][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2268.377979][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2268.406161][ T5892] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2268.423041][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2268.442985][ T5892] usb 4-1: Product: syz [ 2268.450316][ T5892] usb 4-1: Manufacturer: syz [ 2268.466511][ T5892] cdc_wdm 4-1:1.0: skipping garbage [ 2268.475825][ T5892] cdc_wdm 4-1:1.0: skipping garbage [ 2268.485088][ T5892] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2268.497713][ T5892] cdc_wdm 4-1:1.0: Unknown control protocol [ 2268.795608][ T5908] usb 4-1: USB disconnect, device number 51 [ 2269.626438][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2269.634611][ T1944] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2269.644559][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2269.653757][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2269.664601][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2269.680372][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2269.709966][ T1949] random: crng reseeded on system resumption [ 2269.749156][ T1953] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2270.011951][ T5908] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2270.221813][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 2270.229891][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2270.255217][ T5908] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2270.281800][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.345942][ T5908] usb 4-1: config 0 descriptor?? [ 2270.377434][ T5908] hub 4-1:0.0: bad descriptor, ignoring hub [ 2270.392358][ T5908] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2270.405825][ T5908] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2272.036846][T23356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2272.054976][T23356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2272.068867][T23356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2272.083899][T23356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2272.097780][T23356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2272.226847][ T1989] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2272.542501][ T5892] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2272.674062][ T1999] binder: 1996:1999 ioctl c0306201 200000000640 returned -22 [ 2272.735378][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.770243][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.830286][ T5892] usb 6-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 2272.901452][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.978046][ T5892] usb 6-1: config 0 descriptor?? [ 2273.523366][T24869] usb 4-1: USB disconnect, device number 52 [ 2273.681898][ T5892] usbhid 6-1:0.0: can't add hid device: -71 [ 2273.705874][ T5892] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2273.746975][ T5892] usb 6-1: USB disconnect, device number 67 [ 2275.767838][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2275.791002][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2275.816122][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2275.837997][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2275.852773][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2276.341855][ T5892] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2276.352049][ T2037] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7783'. [ 2276.533880][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2276.554921][ T5892] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2276.571764][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.579872][ T5892] usb 4-1: Product: syz [ 2276.591780][ T5892] usb 4-1: Manufacturer: syz [ 2276.596441][ T5892] usb 4-1: SerialNumber: syz [ 2277.629483][ T5892] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2277.638562][ T5892] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 2277.648049][ T5892] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 2277.830852][ T5892] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 2277.849152][ T5892] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2278.037649][ T2025] program syz.3.7779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2278.059860][ T5908] usb 4-1: USB disconnect, device number 53 [ 2278.075970][ T5908] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 2278.269521][ T2045] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7784'. [ 2278.301101][ T2045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7784'. [ 2278.386679][ T2051] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2278.434637][ T2053] bond_slave_0: entered promiscuous mode [ 2278.441085][ T2053] bond_slave_1: entered promiscuous mode [ 2278.483723][ T2053] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2278.533555][ T2053] bond6: (slave macvlan2): Enslaving as an active interface with a down link [ 2278.575950][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2278.601284][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2278.617140][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2278.628510][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2278.644251][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2281.592803][ T2100] FAULT_INJECTION: forcing a failure. [ 2281.592803][ T2100] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.651791][ T2100] CPU: 0 UID: 0 PID: 2100 Comm: syz.3.7796 Tainted: G L syzkaller #0 PREEMPT(full) [ 2281.651827][ T2100] Tainted: [L]=SOFTLOCKUP [ 2281.651835][ T2100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2281.651848][ T2100] Call Trace: [ 2281.651858][ T2100] [ 2281.651867][ T2100] dump_stack_lvl+0xe8/0x150 [ 2281.651902][ T2100] should_fail_ex+0x412/0x560 [ 2281.651932][ T2100] should_failslab+0xa8/0x100 [ 2281.651952][ T2100] ? anon_vma_clone+0x412/0xa00 [ 2281.651981][ T2100] kmem_cache_alloc_noprof+0x87/0x650 [ 2281.652018][ T2100] anon_vma_clone+0x412/0xa00 [ 2281.652065][ T2100] __split_vma+0x38a/0xa40 [ 2281.652102][ T2100] ? __pfx___split_vma+0x10/0x10 [ 2281.652124][ T2100] ? process_measurement+0x7ce/0x1c80 [ 2281.652168][ T2100] ? process_measurement+0x195e/0x1c80 [ 2281.652201][ T2100] vms_gather_munmap_vmas+0x32d/0x1370 [ 2281.652238][ T2100] ? tomoyo_check_open_permission+0x38e/0x470 [ 2281.652264][ T2100] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 2281.652286][ T2100] ? __lock_acquire+0x6b5/0x2cf0 [ 2281.652317][ T2100] ? __lock_acquire+0x6b5/0x2cf0 [ 2281.652349][ T2100] do_vmi_align_munmap+0x2b4/0x4b0 [ 2281.652390][ T2100] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 2281.652445][ T2100] do_vmi_munmap+0x252/0x2d0 [ 2281.652474][ T2100] do_munmap+0xf9/0x170 [ 2281.652503][ T2100] ? __pfx_do_munmap+0x10/0x10 [ 2281.652549][ T2100] mremap_to+0x34d/0x850 [ 2281.652580][ T2100] ? __pfx_mremap_to+0x10/0x10 [ 2281.652606][ T2100] ? check_prep_vma+0x723/0xb00 [ 2281.652640][ T2100] __se_sys_mremap+0xd37/0xfc0 [ 2281.652672][ T2100] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2281.652708][ T2100] ? __pfx___se_sys_mremap+0x10/0x10 [ 2281.652731][ T2100] ? fput+0xa0/0xd0 [ 2281.652751][ T2100] ? ksys_write+0x242/0x270 [ 2281.652777][ T2100] ? __pfx_ksys_write+0x10/0x10 [ 2281.652807][ T2100] ? __x64_sys_mremap+0x20/0xc0 [ 2281.652826][ T2100] do_syscall_64+0x14d/0xf80 [ 2281.652846][ T2100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.652864][ T2100] ? trace_irq_disable+0x37/0x100 [ 2281.652886][ T2100] ? clear_bhb_loop+0x40/0x90 [ 2281.652907][ T2100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.652925][ T2100] RIP: 0033:0x7f84aa19bf79 [ 2281.652944][ T2100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2281.652962][ T2100] RSP: 002b:00007f84ab010028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2281.652984][ T2100] RAX: ffffffffffffffda RBX: 00007f84aa415fa0 RCX: 00007f84aa19bf79 [ 2281.652999][ T2100] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 2281.653012][ T2100] RBP: 00007f84ab010090 R08: 0000200000a00000 R09: 0000000000000000 [ 2281.653026][ T2100] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2281.653038][ T2100] R13: 00007f84aa416038 R14: 00007f84aa415fa0 R15: 00007f84aa53fa48 [ 2281.653077][ T2100] [ 2281.997876][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2282.009813][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2282.018791][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2282.072995][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2282.080770][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2282.166458][ T2112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7799'. [ 2283.254286][ T2131] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20004 [ 2284.869552][ T2145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7810'. [ 2284.956014][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2284.966482][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2284.976123][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2284.984228][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2284.992222][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2285.571852][ T5892] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2285.758980][ T5892] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2285.768788][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2285.781045][ T5892] usb 4-1: config 0 descriptor?? [ 2285.799444][ T5892] cp210x 4-1:0.0: cp210x converter detected [ 2286.218435][ T5892] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2286.514949][ T5892] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2287.740956][ T2170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2287.874266][ T1601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2287.889814][ T2172] fuse: Bad value for 'group_id' [ 2287.898155][ T1601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2287.917627][ T1601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2287.932804][ T1601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2287.943623][ T2172] fuse: Bad value for 'group_id' [ 2287.955871][ T1601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2288.481279][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.490351][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.760290][T25745] usb 4-1: USB disconnect, device number 54 [ 2288.769472][T25745] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2288.806769][T25745] cp210x 4-1:0.0: device disconnected [ 2291.060955][T23356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2291.074380][T23356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2291.084029][T23356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2291.096494][T23356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2291.104664][T23356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2293.614590][ T49] ================================================================== [ 2293.622715][ T49] BUG: KASAN: slab-use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 2293.630742][ T49] Read of size 8 at addr ffff88802b194108 by task kworker/u8:3/49 [ 2293.639155][ T49] [ 2293.641489][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 2293.641510][ T49] Tainted: [L]=SOFTLOCKUP [ 2293.641516][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2293.641526][ T49] Workqueue: netns cleanup_net [ 2293.641545][ T49] Call Trace: [ 2293.641552][ T49] [ 2293.641560][ T49] dump_stack_lvl+0xe8/0x150 [ 2293.641582][ T49] print_report+0xba/0x230 [ 2293.641598][ T49] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2293.641613][ T49] kasan_report+0x117/0x150 [ 2293.641637][ T49] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2293.641655][ T49] nf_hook_entry_head+0x1f1/0x2c0 [ 2293.641671][ T49] __nf_unregister_net_hook+0x74/0x6f0 [ 2293.641716][ T49] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 2293.641737][ T49] nf_tables_pre_exit_net+0x64a/0x900 [ 2293.641765][ T49] ops_undo_list+0x187/0x940 [ 2293.641787][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 2293.641814][ T49] ? idr_destroy+0x218/0x290 [ 2293.641830][ T49] ? do_raw_spin_unlock+0xf5/0x210 [ 2293.641856][ T49] cleanup_net+0x56b/0x800 [ 2293.641871][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 2293.641888][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 2293.641905][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 2293.641922][ T49] process_scheduled_works+0xaec/0x17a0 [ 2293.641949][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 2293.641968][ T49] ? assign_work+0x3d5/0x5e0 [ 2293.641985][ T49] worker_thread+0xa50/0xfc0 [ 2293.642012][ T49] kthread+0x388/0x470 [ 2293.642032][ T49] ? __pfx_worker_thread+0x10/0x10 [ 2293.642048][ T49] ? __pfx_kthread+0x10/0x10 [ 2293.642069][ T49] ret_from_fork+0x51e/0xb90 [ 2293.642086][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 2293.642108][ T49] ? __switch_to+0xc7d/0x1400 [ 2293.642124][ T49] ? __pfx_kthread+0x10/0x10 [ 2293.642144][ T49] ret_from_fork_asm+0x1a/0x30 [ 2293.642171][ T49] [ 2293.642177][ T49] [ 2293.829530][ T49] Allocated by task 5188: [ 2293.833865][ T49] kasan_save_track+0x3e/0x80 [ 2293.838582][ T49] __kasan_slab_alloc+0x6c/0x80 [ 2293.843446][ T49] kmem_cache_alloc_node_noprof+0x384/0x690 [ 2293.849350][ T49] __alloc_skb+0x27d/0x7d0 [ 2293.853798][ T49] napi_alloc_skb+0x7a/0xaf0 [ 2293.858510][ T49] page_to_skb+0x2ce/0x870 [ 2293.862936][ T49] receive_buf+0x546/0x1900 [ 2293.867532][ T49] virtnet_poll+0x21f0/0x2fe0 [ 2293.872216][ T49] __napi_poll+0xae/0x340 [ 2293.876589][ T49] net_rx_action+0x627/0xf70 [ 2293.881192][ T49] handle_softirqs+0x22a/0x7c0 [ 2293.885970][ T49] __irq_exit_rcu+0x5f/0x150 [ 2293.890578][ T49] irq_exit_rcu+0x9/0x30 [ 2293.894833][ T49] common_interrupt+0xbb/0xe0 [ 2293.899619][ T49] asm_common_interrupt+0x26/0x40 [ 2293.904744][ T49] [ 2293.907143][ T49] Freed by task 5188: [ 2293.911126][ T49] kasan_save_track+0x3e/0x80 [ 2293.915836][ T49] kasan_save_free_info+0x46/0x50 [ 2293.920922][ T49] __kasan_slab_free+0x5c/0x80 [ 2293.925790][ T49] kmem_cache_free+0x180/0x610 [ 2293.930567][ T49] skb_release_data+0x6c3/0x940 [ 2293.935429][ T49] __kfree_skb+0x5d/0x210 [ 2293.939815][ T49] tcp_data_queue+0x1b7/0x5e50 [ 2293.944697][ T49] tcp_rcv_established+0x1270/0x2670 [ 2293.950008][ T49] tcp_v4_do_rcv+0xa90/0x1430 [ 2293.954778][ T49] tcp_v4_rcv+0x2825/0x31f0 [ 2293.959314][ T49] ip_protocol_deliver_rcu+0x221/0x440 [ 2293.964781][ T49] ip_local_deliver_finish+0x3bb/0x6f0 [ 2293.970255][ T49] NF_HOOK+0x336/0x3c0 [ 2293.974354][ T49] ip_sublist_rcv_finish+0x221/0x2a0 [ 2293.979647][ T49] ip_sublist_rcv+0x761/0xa70 [ 2293.984375][ T49] ip_list_rcv+0x3f1/0x450 [ 2293.988800][ T49] __netif_receive_skb_list_core+0x7e5/0x810 [ 2293.994790][ T49] netif_receive_skb_list_internal+0x995/0xcf0 [ 2294.000953][ T49] napi_complete_done+0x299/0x730 [ 2294.005986][ T49] virtnet_poll+0x259e/0x2fe0 [ 2294.010783][ T49] __napi_poll+0xae/0x340 [ 2294.015137][ T49] net_rx_action+0x627/0xf70 [ 2294.019769][ T49] handle_softirqs+0x22a/0x7c0 [ 2294.024568][ T49] __irq_exit_rcu+0x5f/0x150 [ 2294.029201][ T49] irq_exit_rcu+0x9/0x30 [ 2294.033497][ T49] common_interrupt+0xbb/0xe0 [ 2294.038214][ T49] asm_common_interrupt+0x26/0x40 [ 2294.043266][ T49] [ 2294.045616][ T49] The buggy address belongs to the object at ffff88802b194000 [ 2294.045616][ T49] which belongs to the cache skbuff_small_head of size 704 [ 2294.060232][ T49] The buggy address is located 264 bytes inside of [ 2294.060232][ T49] freed 704-byte region [ffff88802b194000, ffff88802b1942c0) [ 2294.074072][ T49] [ 2294.076426][ T49] The buggy address belongs to the physical page: [ 2294.082883][ T49] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b194 [ 2294.091785][ T49] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2294.100518][ T49] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2294.108210][ T49] page_type: f5(slab) [ 2294.112400][ T49] raw: 00fff00000000040 ffff88801f2e8a00 dead000000000100 dead000000000122 [ 2294.121470][ T49] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 2294.131233][ T49] head: 00fff00000000040 ffff88801f2e8a00 dead000000000100 dead000000000122 [ 2294.143080][ T49] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 2294.154414][ T49] head: 00fff00000000002 ffffea0000ac6501 00000000ffffffff 00000000ffffffff [ 2294.165829][ T49] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 2294.179336][ T49] page dumped because: kasan: bad access detected [ 2294.189882][ T49] page_owner tracks the page as allocated [ 2294.197124][ T49] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 1875227170468, free_ts 1832961237139 [ 2294.225438][ T49] post_alloc_hook+0x231/0x280 [ 2294.231888][ T49] get_page_from_freelist+0x24dc/0x2580 [ 2294.239327][ T49] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2294.247644][ T49] allocate_slab+0x77/0x660 [ 2294.255142][ T49] refill_objects+0x331/0x3c0 [ 2294.262001][ T49] __pcs_replace_empty_main+0x2b9/0x620 [ 2294.268208][ T49] kmem_cache_alloc_node_noprof+0x441/0x690 [ 2294.276118][ T49] __alloc_skb+0x27d/0x7d0 [ 2294.281537][ T49] inet6_ifmcaddr_notify+0xfa/0x1e0 [ 2294.288691][ T49] __ipv6_dev_mc_dec+0x2dc/0x330 [ 2294.295956][ T49] __ipv6_ifa_notify+0x77c/0xc60 [ 2294.303298][ T49] addrconf_ifdown+0xea6/0x1a40 [ 2294.308450][ T49] addrconf_notify+0x1bc/0x1050 [ 2294.316475][ T49] notifier_call_chain+0x19d/0x3a0 [ 2294.323463][ T49] netif_close_many+0x2ae/0x420 [ 2294.331369][ T49] unregister_netdevice_many_notify+0xb47/0x2370 [ 2294.340186][ T49] page last free pid 28106 tgid 28106 stack trace: [ 2294.348762][ T49] __free_frozen_pages+0xc01/0xd80 [ 2294.359341][ T49] vhost_dev_cleanup+0x358/0xa00 [ 2294.366401][ T49] vhost_vsock_dev_release+0x3d2/0x6d0 [ 2294.374811][ T49] __fput+0x44f/0xa70 [ 2294.382093][ T49] task_work_run+0x1d9/0x270 [ 2294.390756][ T49] exit_to_user_mode_loop+0xed/0x480 [ 2294.400816][ T49] do_syscall_64+0x32d/0xf80 [ 2294.407842][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2294.416976][ T49] [ 2294.420300][ T49] Memory state around the buggy address: [ 2294.426862][ T49] ffff88802b194000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2294.441411][ T49] ffff88802b194080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2294.451353][ T49] >ffff88802b194100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2294.464048][ T49] ^ SYZFAIL: failed to send rpc fd=3 want=6320 sent=0 n=-1 (errno 32: Broken pipe) [ 2294.468945][ T49] ffff88802b194180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2294.480357][ T49] ffff88802b194200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2294.491627][ T49] ================================================================== [ 2294.540582][ T49] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2294.549279][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 2294.565976][ T49] Tainted: [L]=SOFTLOCKUP [ 2294.573075][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2294.585296][ T49] Workqueue: netns cleanup_net [ 2294.591720][ T49] Call Trace: [ 2294.597822][ T49] [ 2294.601514][ T49] vpanic+0x56c/0xa60 [ 2294.607583][ T49] ? __pfx_vpanic+0x10/0x10 [ 2294.614626][ T49] ? __pfx___schedule+0x10/0x10 [ 2294.621828][ T49] panic+0xc5/0xd0 [ 2294.626568][ T49] ? __pfx_panic+0x10/0x10 [ 2294.634466][ T49] ? preempt_schedule_thunk+0x16/0x30 [ 2294.643933][ T49] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2294.652477][ T49] check_panic_on_warn+0x89/0xb0 [ 2294.661691][ T49] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2294.668528][ T49] end_report+0x6f/0x140 [ 2294.676848][ T49] kasan_report+0x128/0x150 [ 2294.681858][ T49] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2294.689287][ T49] nf_hook_entry_head+0x1f1/0x2c0 [ 2294.695659][ T49] __nf_unregister_net_hook+0x74/0x6f0 [ 2294.702661][ T49] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 2294.711775][ T49] nf_tables_pre_exit_net+0x64a/0x900 [ 2294.720199][ T49] ops_undo_list+0x187/0x940 [ 2294.725727][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 2294.733173][ T49] ? idr_destroy+0x218/0x290 [ 2294.738701][ T49] ? do_raw_spin_unlock+0xf5/0x210 [ 2294.746778][ T49] cleanup_net+0x56b/0x800 [ 2294.753314][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 2294.759345][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 2294.767578][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 2294.777157][ T49] process_scheduled_works+0xaec/0x17a0 [ 2294.784911][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 2294.794849][ T49] ? assign_work+0x3d5/0x5e0 [ 2294.800452][ T49] worker_thread+0xa50/0xfc0 [ 2294.806604][ T49] kthread+0x388/0x470 [ 2294.812494][ T49] ? __pfx_worker_thread+0x10/0x10 [ 2294.821876][ T49] ? __pfx_kthread+0x10/0x10 [ 2294.828291][ T49] ret_from_fork+0x51e/0xb90 [ 2294.835472][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 2294.843450][ T49] ? __switch_to+0xc7d/0x1400 [ 2294.849888][ T49] ? __pfx_kthread+0x10/0x10 [ 2294.856947][ T49] ret_from_fork_asm+0x1a/0x30 [ 2294.862630][ T49] [ 2294.867262][ T49] Kernel Offset: disabled [ 2294.873568][ T49] Rebooting in 86400 seconds..